Edit tour

Windows Analysis Report
https://us-west-2.protection.sophos.com?d=twitter.com&u=aHR0cHM6Ly90d2l0dGVyLmNvbS9FUkFBcmNo&p=m&i=NjEwOTVlYjc5YTE3ZjcwZjdmZDdjMjU2&t=NXp0TTVJaUZtQUsyZndFeEw3MFY4dnhWMTBtZTZCQkd0ajNraCtkNUdQYz0=&h=942eeff6a0064f1492b8b88f777bcb3d&s=AVNPUEhUT0NFTkNSWVBUSVYL2B6tcXz27KFdHcDyynWtGxJpFZyrpb1WNisNsOUWGw

Overview

General Information

Sample URL:	https://us-west-2.protection.sophos.com?d=twitter.com&u=aHR0cHM6Ly90d2l0dGVyLmNvbS9FUkFBcmNo&p=m&i=NjEwOTVlYjc5YTE3ZjcwZjdmZDdjMjU2&t=NXp0TTVJaUZtQUsyZndFeEw3MFY4dnhWMTBtZTZCQkd0ajNraCtkNUdQYz0=&h=942
Analysis ID:	1524543
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

HTTP GET or POST without a user agent

Classification

Process Tree

System is w7x64

chrome.exe (PID: 2708 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 2408 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1460 --field-trial-handle=1208,i,12980824063073552744,13610246602359282083,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 2076 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5456 --field-trial-handle=1208,i,12980824063073552744,13610246602359282083,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 1180 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com?d=twitter.com&u=aHR0cHM6Ly90d2l0dGVyLmNvbS9FUkFBcmNo&p=m&i=NjEwOTVlYjc5YTE3ZjcwZjdmZDdjMjU2&t=NXp0TTVJaUZtQUsyZndFeEw3MFY4dnhWMTBtZTZCQkd0ajNraCtkNUdQYz0=&h=942eeff6a0064f1492b8b88f777bcb3d&s=AVNPUEhUT0NFTkNSWVBUSVYL2B6tcXz27KFdHcDyynWtGxJpFZyrpb1WNisNsOUWGw" MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

cleanup

HTTP traffic detected: POST /x/migrate HTTP/1.1Host: x.comConnection: keep-aliveContent-Length: 436Cache-Control: max-age=0sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://twitter.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172790639349045389; guest_id_ads=v1%3A172790639349045389; personalization_id="v1_1QlunajyQqiXV89SWMafzw=="; guest_id=v1%3A172790639349045389

Source: https://x.com/ERAArch	HTTP Parser: Number of links: 0
Source: https://x.com/i/flow/signup	HTTP Parser: Number of links: 0
Source: https://x.com/	HTTP Parser: Number of links: 0

Source: https://x.com/ERAArch	HTTP Parser: Title: Sign In - Google Accounts does not match URL
Source: https://x.com/i/flow/signup	HTTP Parser: Title: Sign In - Google Accounts does not match URL
Source: https://x.com/	HTTP Parser: Title: Sign In - Google Accounts does not match URL

Source: https://x.com/ERAArch	HTTP Parser: No favicon
Source: https://x.com/i/flow/signup	HTTP Parser: No favicon
Source: https://x.com/	HTTP Parser: No favicon

Source: https://x.com/ERAArch	HTTP Parser: No <meta name="author".. found
Source: https://x.com/i/flow/signup	HTTP Parser: No <meta name="author".. found
Source: https://x.com/	HTTP Parser: No <meta name="author".. found

Source: https://x.com/ERAArch	HTTP Parser: No <meta name="copyright".. found
Source: https://x.com/i/flow/signup	HTTP Parser: No <meta name="copyright".. found
Source: https://x.com/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\GoogleUpdater	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_2708_1319845460	Jump to behavior

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: us-west-2.protection.sophos.com to https://twitter.com/eraarch
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: twitter.com to https://x.com/eraarch

Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/callback.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/account/personalization/sync_optout_settings.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2

Source: global traffic	DNS traffic detected: DNS query: us-west-2.protection.sophos.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: x.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: abs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.twitter.com
Source: global traffic	DNS traffic detected: DNS query: api.x.com
Source: global traffic	DNS traffic detected: DNS query: pbs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: video.twimg.com
Source: global traffic	DNS traffic detected: DNS query: abs-0.twimg.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: help.x.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cms-twdigitalassets.com
Source: global traffic	DNS traffic detected: DNS query: platform.twitter.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Wed, 02 Oct 2024 22:00:27 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: baadfc050c7f3420x-rate-limit-limit: 500x-rate-limit-reset: 1727907327x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 9x-connection-hash: 92d663ecfc8b606fbf1e808b69cc056d4cc1e45c2bc2ca3425ef768172b58836connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Wed, 02 Oct 2024 22:00:29 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: ad31b6c7fed6a0fax-rate-limit-limit: 100x-rate-limit-reset: 1727907329x-rate-limit-remaining: 99strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 9x-connection-hash: 1acef51572d64ff7bba91d3e8cf5a70fe0e5be17a1930e12042f88b289f7c698connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Wed, 02 Oct 2024 22:00:29 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: da4216f13f645d66x-rate-limit-limit: 500x-rate-limit-reset: 1727907329x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 15x-connection-hash: 6b9b6bc37ca1e15f25f48d852b94e4ae7d3d99d94b48e52c00744bf73a9278b2connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenperf: 7402827104cache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 2301642c65931306access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 3x-connection-hash: c6638b9c3b929aa043df6eca23f408eae7a4c1c72da20c42fa160c58767b8e48date: Wed, 02 Oct 2024 22:00:29 GMTserver: tsa_bconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Wed, 02 Oct 2024 22:00:31 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 505b5ca72602997cx-rate-limit-limit: 500x-rate-limit-reset: 1727907331x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 8x-connection-hash: 661f0afd2e358d22ee97f4d47f137b37285ddc8ad28d576b044ee5af51226862connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Wed, 02 Oct 2024 22:00:35 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 8e08bbfb94bfb7fex-rate-limit-limit: 500x-rate-limit-reset: 1727907331x-rate-limit-remaining: 498strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 23x-connection-hash: 05cbe02aa1b61ad2bab09036f56ede90352ee6a62edc29be6982178002521476connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Wed, 02 Oct 2024 22:00:54 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: e3c40744ed28d4f7x-rate-limit-limit: 100x-rate-limit-reset: 1727907329x-rate-limit-remaining: 98strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 9x-connection-hash: 5d062bbe9c7d7f0f5396002769622352c62564c1bdfb4e07cebc4b8dc8a5af14connection: close

Source: chromecache_498.1.dr, chromecache_450.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_326.1.dr, chromecache_477.1.dr	String found in binary or memory: http://git.io/TrdQbw
Source: chromecache_326.1.dr, chromecache_477.1.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/100ThievesEmoji2024/100ThievesEmoji2024.png
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11381_MWLORG_Hashmoji_June2024_V2_/BF-11381_MWLORG_Hashmoji_June2
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11479_Zenless_Zone_Zero_Launch2024_Nicole_Livestream/BF-11479_Zen
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11480_Zenless_Zone_Zero_Launch_2024_Golden_Bangboo/BF-11480_Zenle
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11588_Loreal_Lancome_JP_Hashmoji2024/BF-11588_Loreal_Lancome_JP_H
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11611_MOC_Q324_Hashmoji/BF-11611_MOC_Q324_Hashmoji.png
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11618_SportsBoulevard_Q324_Hashmoji/BF-11618_SportsBoulevard_Q324
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11686_NetflixJP_Hashmoji_20240803-20241103_Jimenshi/BF-11686_Netf
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11687_NetflixJP_Gokuaku_Hashmoji2024/BF-11687_NetflixJP_Gokuaku_H
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11709_GenshinPaimon_Hashmoji2024/BF-11709_GenshinPaimon_Hashmoji2
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11710_GenshinKachina_Hashmoji2024/BF-11710_GenshinKachina_Hashmoj
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11711_GenshinKinich_Hashmoji2024/BF-11711_GenshinKinich_Hashmoji2
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11713_Genshin_NatlanSunSign_Hashmoji2024/BF-11713_Genshin_NatlanS
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11770_RacingMaster_JPLaunch_Hashmoji2024/BF-11770_RacingMaster_JP
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11790_COLOPL_Hashmoji/BF-11790_COLOPL_Hashmoji.png
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11804_NetEase_RacingMaster_2024Hashmoji2/BF-11804_NetEase_RacingM
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11821_lake_official__Custom_Like_after/BF-11821_lake_official__Cu
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11868_Schick_Hashmoji2024_V2/BF-11868_Schick_Hashmoji2024_V2.png
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11871_FANCLNew_calolimit_Hashmoji2024/BF-11871_FANCLNew_calolimit
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11901_AlatTechIce_Hashmoji2024/BF-11901_AlatTechIce_Hashmoji2024.
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11949_GlicoThailandPockyBox_Hashmoji2024_/BF-11949_GlicoThailandP
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11950_Riyadhseason_Hashmoji2024_/BF-11950_Riyadhseason_Hashmoji20
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11952_drama_wowow_GoldenKamuyDrama_Hashmoji2024/BF-11952_drama_wo
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12013_SportsBlvdSA_SND24_HashmojiAfter/BF-12013_SportsBlvdSA_SND2
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12041_ATLUS_stud_zero_launch_Hashmoji2024_V2/BF-12041_ATLUS_stud_
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF_11905_Hashmoji_Only_After_Aeromexico_90anos/BF_11905_Hashmoji_Onl
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF_11915_Sabic_Homeland_Hashmoji_24_/BF_11915_Sabic_Homeland_Hashmoj
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF_12012_KFSHRC_National_Day_Hashmoji_2024_/BF_12012_KFSHRC_National
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF_12060_MOC_2024_SND_Hashmoji/BF_12060_MOC_2024_SND_Hashmoji.png
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF_12081_Matarat_ksa_Hashmoji_2024_/BF_12081_Matarat_ksa_Hashmoji_20
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/EWCWorldCupEmojiV2/EWCWorldCupEmojiV2.png
Source: chromecache_588.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/FureruMovie/FureruMovie.png

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js	0%	URL Reputation	safe
http://underscorejs.org	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11588_Loreal_Lancome_JP_Hashmoji2024/BF-11588_Loreal_Lancome_JP_H	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/heavenburnsred_July2024_BF-11558_after_v2/heavenburnsred_July2024_BF	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11686_NetflixJP_Hashmoji_20240803-20241103_Jimenshi/BF-11686_Netf	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/i18n/emoji-en.3afd1e4a.js	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11711_GenshinKinich_Hashmoji2024/BF-11711_GenshinKinich_Hashmoji2	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/EWCWorldCupEmojiV2/EWCWorldCupEmojiV2.png	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu.4fd68dca.js	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/ParamountPlusJA_TLR_June2024/ParamountPlusJA_TLR_June2024.png	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11710_GenshinKachina_Hashmoji2024/BF-11710_GenshinKachina_Hashmoj	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Twitte.862ae2fa.js	0%	URL Reputation	safe

Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1460 --field-trial-handle=1208,i,12980824063073552744,13610246602359282083,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com?d=twitter.com&u=aHR0cHM6Ly90d2l0dGVyLmNvbS9FUkFBcmNo&p=m&i=NjEwOTVlYjc5YTE3ZjcwZjdmZDdjMjU2&t=NXp0TTVJaUZtQUsyZndFeEw3MFY4dnhWMTBtZTZCQkd0ajNraCtkNUdQYz0=&h=942eeff6a0064f1492b8b88f777bcb3d&s=AVNPUEhUT0NFTkNSWVBUSVYL2B6tcXz27KFdHcDyynWtGxJpFZyrpb1WNisNsOUWGw"
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5456 --field-trial-handle=1208,i,12980824063073552744,13610246602359282083,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com?d=twitter.com&u=aHR0cHM6Ly90d2l0dGVyLmNvbS9FUkFBcmNo&p=m&i=NjEwOTVlYjc5YTE3ZjcwZjdmZDdjMjU2&t=NXp0TTVJaUZtQUsyZndFeEw3MFY4dnhWMTBtZTZCQkd0ajNraCtkNUdQYz0=&h=942eeff6a0064f1492b8b88f777bcb3d&s=AVNPUEhUT0NFTkNSWVBUSVYL2B6tcXz27KFdHcDyynWtGxJpFZyrpb1WNisNsOUWGw"	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1460 --field-trial-handle=1208,i,12980824063073552744,13610246602359282083,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5456 --field-trial-handle=1208,i,12980824063073552744,13610246602359282083,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Name	IP	Active	Malicious	Reputation
twitter.com	104.244.42.65	true	false	unknown
google.com	142.250.184.206	true	false	unknown
dualstack.video.twitter.map.fastly.net	151.101.120.158	true	false	unknown
tpop-api.x.com	104.244.42.2	true	false	unknown
platform.twitter.map.fastly.net	146.75.120.157	true	false	unknown
tpop-api.twitter.com	104.244.42.66	true	false	unknown
t.co	162.159.140.229	true	false	unknown
d2t07dpvw9bt1v.cloudfront.net	18.66.147.74	true	false	unknown
twimg.twitter.map.fastly.net	146.75.120.159	true	false	unknown
play.google.com	172.217.16.206	true	false	unknown
dualstack.twimg.twitter.map.fastly.net	146.75.120.159	true	false	unknown
abs-zero.twimg.com	104.244.43.131	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
x.com	104.244.42.1	true	false	unknown
help.x.com	unknown	unknown	false	unknown
us-west-2.protection.sophos.com	unknown	unknown	false	unknown
abs.twimg.com	unknown	unknown	false	unknown
api.x.com	unknown	unknown	false	unknown
pbs.twimg.com	unknown	unknown	false	unknown
abs-0.twimg.com	unknown	unknown	false	unknown
api.twitter.com	unknown	unknown	false	unknown
cdn.cms-twdigitalassets.com	unknown	unknown	false	unknown
video.twimg.com	unknown	unknown	false	unknown
platform.twitter.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js	false	URL Reputation: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Compose~bundle.Conversation~bundle.DMRichTextCompose~bund.2433e2ba.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande.df33716a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.ef7a569a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.NewTweetsPill.1180970a.js	false		unknown
https://api.x.com/1.1/jot/client_event.json	false		unknown
https://twitter.com/x/migrate?tok=7b2265223a222f45524141726368222c2274223a313732373930363339337de33f255e4fc2dff385e66b2ce23fac29	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.Audi.c2ff71da.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.ShareJob~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.b879451a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.04f22a1a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.WorkHistory~bundle.D.9c79c25a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.SignupModule.b618bbba.js	false		unknown
https://pbs.twimg.com/profile_banners/590317317/1490902544/600x200	false		unknown
https://abs.twimg.com/responsive-web/client-web/ondemand.ProfileSidebar.2b5e5e2a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~bundle.Ocf~bundle.RichTextCompose.e5c7ed2a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.LiveEvent~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle..5b89ca6a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.WideLayout~loader.ProfileClusterFollow.d0bbc1ea.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.SideNav~bundle.JobSearch.47c4804a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.DirectMessages~bundl.5455e27a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.ExtendedUserProfile~bundle.UserProfile.7c0c4f4a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird.333c30ea.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~ondemand.SettingsInternals~bundle.UserLists~loader.EventSummaryHandler~loader.topicHa.bbc1529a.js	false		unknown
https://abs.twimg.com/fonts/v1/chirp-extended-heavy-web.woff2	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun.437b691a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome.66aa7aaa.js	false		unknown
https://x.com/x/migrate	false		unknown
https://x.com/login	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePee.8a7edc7a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsInternals~bundle.SettingsRevamp~bundle.SettingsTransparency.481520ea.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE.d4c05fca.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.B.8d67843a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.335f05da.js	false		unknown
https://abs-0.twimg.com/emoji/v2/svg/26a0.svg	false		unknown
https://pbs.twimg.com/profile_images/847532649472184320/wU9LyxJR_200x200.jpg	false		unknown
https://api.x.com/1.1/onboarding/callback.json	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsInternals~bundle.OAuth.493303ca.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi.20a474da.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/i18n/emoji-en.3afd1e4a.js	false	URL Reputation: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlaye.6162375a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer.8137c55a.js	false		unknown
https://api.x.com/graphql/Yka-W8dz7RaEuQNkroPkYw/UserByScreenName?variables=%7B%22screen_name%22%3A%22eraarch%22%2C%22withSafetyModeUserFields%22%3Afalse%7D&features=%7B%22hidden_profile_subscriptions_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22subscriptions_verification_info_is_identity_verified_enabled%22%3Atrue%2C%22subscriptions_verification_info_verified_since_enabled%22%3Atrue%2C%22highlights_tweets_tab_ui_enabled%22%3Atrue%2C%22responsive_web_twitter_article_notes_tab_enabled%22%3Atrue%2C%22subscriptions_feature_can_gift_premium%22%3Atrue%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22withAuxiliaryUserLabels%22%3Afalse%7D	false		unknown
https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.1004095a.js	false		unknown
https://api.x.com/graphql/E3opETHurmVJflFsUBVuUQ/UserTweets?variables=%7B%22userId%22%3A%22590317317%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D	false		unknown
https://x.com/i/flow/login	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~loader.HWCard~loader.Tim.ca64512a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundl.2e3488fa.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.UserProfile.39a7701a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.Birdwatch~bundle..1585834a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.DMDrawer~bundle.Grok~bundle.Account~bundle.AccountAnalytics~bu.0bfa6c2a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/bundle.LoggedOutHome.076c73fa.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu.4fd68dca.js	false	URL Reputation: safe	unknown
https://x.com/	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.AudioSp.3b86bcfa.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/bundle.UserProfile.b4bd559a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfile~bundle.UserProfile.6ba4be2a.js	false		unknown
https://api.x.com/1.1/jot/ces/p2	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Twitte.862ae2fa.js	false	URL Reputation: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Communities~bundle.TwitterArticles~bundle.ComposeMedia~bundle.SettingsProfile~bundle.Ocf~bundle.11a1ed1a.js	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.inlineTomb	chromecache_527.1.dr, chromecache_462.1.dr	false		unknown
http://underscorejs.org	chromecache_326.1.dr, chromecache_477.1.dr	false	URL Reputation: safe	unknown
https://support.x.com/articles/14016	chromecache_482.1.dr, chromecache_488.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.UserProfile.b4bd5	chromecache_385.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TimelineRenderer.	chromecache_515.1.dr, chromecache_517.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.Sensitiv	chromecache_595.1.dr, chromecache_378.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.AccountAna	chromecache_323.1.dr, chromecache_438.1.dr, chromecache_621.1.dr, chromecache_390.1.dr, chromecache_574.1.dr, chromecache_308.1.dr, chromecache_493.1.dr, chromecache_395.1.dr, chromecache_418.1.dr, chromecache_316.1.dr, chromecache_484.1.dr, chromecache_589.1.dr, chromecache_384.1.dr, chromecache_359.1.dr, chromecache_519.1.dr, chromecache_467.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/main.b323d6ca.js.map	chromecache_617.1.dr, chromecache_360.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.DMDrawer~b	chromecache_446.1.dr, chromecache_459.1.dr, chromecache_612.1.dr, chromecache_581.1.dr, chromecache_578.1.dr, chromecache_436.1.dr, chromecache_411.1.dr, chromecache_550.1.dr, chromecache_535.1.dr, chromecache_456.1.dr, chromecache_634.1.dr, chromecache_387.1.dr, chromecache_412.1.dr, chromecache_422.1.dr, chromecache_587.1.dr, chromecache_514.1.dr, chromecache_303.1.dr, chromecache_628.1.dr, chromecache_348.1.dr, chromecache_533.1.dr, chromecache_351.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SignupModule.b618	chromecache_557.1.dr, chromecache_603.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.WideLayout.6d8a09	chromecache_402.1.dr, chromecache_624.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF_12081_Matarat_ksa_Hashmoji_2024_/BF_12081_Matarat_ksa_Hashmoji_20	chromecache_588.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	chromecache_588.1.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11588_Loreal_Lancome_JP_Hashmoji2024/BF-11588_Loreal_Lancome_JP_H	chromecache_588.1.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/heavenburnsred_July2024_BF-11558_after_v2/heavenburnsred_July2024_BF	chromecache_588.1.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11949_GlicoThailandPockyBox_Hashmoji2024_/BF-11949_GlicoThailandP	chromecache_588.1.dr	false		unknown
https://github.com/emn178/js-md5	chromecache_617.1.dr, chromecache_360.1.dr	false		unknown
https://abs.twimg.com/hashflags/FureruMovie/FureruMovie.png	chromecache_588.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Ocf.da47f7da.js.m	chromecache_369.1.dr, chromecache_508.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	chromecache_588.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.ProfileSidebar.	chromecache_365.1.dr, chromecache_495.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11686_NetflixJP_Hashmoji_20240803-20241103_Jimenshi/BF-11686_Netf	chromecache_588.1.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	chromecache_588.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AudioDock~	chromecache_428.1.dr, chromecache_455.1.dr, chromecache_605.1.dr, chromecache_594.1.dr, chromecache_341.1.dr, chromecache_324.1.dr, chromecache_593.1.dr, chromecache_544.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina	chromecache_588.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11711_GenshinKinich_Hashmoji2024/BF-11711_GenshinKinich_Hashmoji2	chromecache_588.1.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-12041_ATLUS_stud_zero_launch_Hashmoji2024_V2/BF-12041_ATLUS_stud_	chromecache_588.1.dr	false		unknown
https://support.x.com/articles/20172060	chromecache_482.1.dr, chromecache_488.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	chromecache_588.1.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF_11915_Sabic_Homeland_Hashmoji_24_/BF_11915_Sabic_Homeland_Hashmoj	chromecache_588.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.audio.2a5bb19a.j	chromecache_619.1.dr, chromecache_400.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.ReaderMode	chromecache_349.1.dr, chromecache_325.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.ComposeS	chromecache_399.1.dr, chromecache_485.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11950_Riyadhseason_Hashmoji2024_/BF-11950_Riyadhseason_Hashmoji20	chromecache_588.1.dr	false		unknown
https://abs.twimg.com/hashflags/EWCWorldCupEmojiV2/EWCWorldCupEmojiV2.png	chromecache_588.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.LoggedOutHome.076	chromecache_354.1.dr, chromecache_322.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	chromecache_310.1.dr, chromecache_392.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.DividerHandler.f6	chromecache_566.1.dr, chromecache_500.1.dr	false		unknown
https://abs.twimg.com/hashflags/ParamountPlusJA_TLR_June2024/ParamountPlusJA_TLR_June2024.png	chromecache_588.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AudioDock.af72bcb	chromecache_637.1.dr, chromecache_545.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11710_GenshinKachina_Hashmoji2024/BF-11710_GenshinKachina_Hashmoj	chromecache_588.1.dr	false	URL Reputation: safe	unknown
https://x.com/en/privacy	chromecache_407.1.dr, chromecache_524.1.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
104.244.42.66	tpop-api.twitter.com	United States	13414	TWITTERUS	false
104.244.42.65	twitter.com	United States	13414	TWITTERUS	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	false
104.244.42.1	x.com	United States	13414	TWITTERUS	false
104.244.42.129	unknown	United States	13414	TWITTERUS	false
104.244.42.2	tpop-api.x.com	United States	13414	TWITTERUS	false
18.66.147.74	d2t07dpvw9bt1v.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
146.75.120.159	twimg.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
172.217.16.206	play.google.com	United States	15169	GOOGLEUS	false
104.244.42.193	unknown	United States	13414	TWITTERUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
104.244.43.131	abs-zero.twimg.com	United States	54113	FASTLYUS	false
151.101.120.158	dualstack.video.twitter.map.fastly.net	United States	54113	FASTLYUS	false
199.232.188.159	unknown	United States	54113	FASTLYUS	false
142.250.184.206	google.com	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1524543
Start date and time:	2024-10-02 23:58:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://us-west-2.protection.sophos.com?d=twitter.com&u=aHR0cHM6Ly90d2l0dGVyLmNvbS9FUkFBcmNo&p=m&i=NjEwOTVlYjc5YTE3ZjcwZjdmZDdjMjU2&t=NXp0TTVJaUZtQUsyZndFeEw3MFY4dnhWMTBtZTZCQkd0ajNraCtkNUdQYz0=&h=942eeff6a0064f1492b8b88f777bcb3d&s=AVNPUEhUT0NFTkNSWVBUSVYL2B6tcXz27KFdHcDyynWtGxJpFZyrpb1WNisNsOUWGw
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	4
Number of new started drivers analysed:	2
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@46/521@94/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://x.com/login Browse: https://x.com/i/flow/signup Browse: https://x.com/settings Browse: https://x.com/

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18529)
Category:	dropped
Size (bytes):	18719
Entropy (8bit):	5.396024238506273
Encrypted:	false
SSDEEP:	384:GbqhvWde6j0n7fvEuTB9MhNEn5i2HtjlqxvmVEFyC9sv/:GbqhvWQ6QD7t9UE5i2Hexe2gksv/
MD5:	4772F50994B9C5EE9E54B2001A7FB0DC
SHA1:	4C63F3383DED24B25282D188E3A403305F856016
SHA-256:	3CA99EECA15811820D8802BCE891164E0D9E495EE5A4C9C4E3602CDEBB51F561
SHA-512:	1AC367F4277C2C7EFAC7798D27259ECE910826316B7197EEAD430B03975B603F6BE91D78F0CB3688EF236B689E91393F46F548F4C64E7C8E6253D26830DF261C
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Ocf~bundle.Payments~ondemand.Insights~bundle.TV~bundle.Account"],{839515:(t,r,e)=>{var n=e(638761)(e(137772),"DataView");t.exports=n},989612:(t,r,e)=>{var n=e(752118),o=e(196909),a=e(198138),u=e(704174),i=e(507942);function s(t){var r=-1,e=null==t?0:t.length;for(this.clear();++r<e;){var n=t[r];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=o,s.prototype.get=a,s.prototype.has=u,s.prototype.set=i,t.exports=s},180235:(t,r,e)=>{var n=e(103945),o=e(221846),a=e(988028),u=e(572344),i=e(594769);function s(t){var r=-1,e=null==t?0:t.length;for(this.clear();++r<e;){var n=t[r];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=o,s.prototype.get=a,s.prototype.has=u,s.prototype.set=i,t.exports=s},510326:(t,r,e)=>{var n=e(638761)(e(137772),"Map");t.exports=n},896738:(t,r,e)=>{var n=e(792411),o=e(436417),a=e(586928),u=e(479493),i=e(724150);function s(t){var r=-1,e=null==t

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 2, 2024 23:59:50.395252943 CEST	192.168.2.22	8.8.8.8	0x1f8d	Standard query (0)	us-west-2.protection.sophos.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:50.401045084 CEST	192.168.2.22	8.8.8.8	0xe0a5	Standard query (0)	us-west-2.protection.sophos.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:52.000885010 CEST	192.168.2.22	8.8.8.8	0x926a	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:52.000885010 CEST	192.168.2.22	8.8.8.8	0x92e0	Standard query (0)	twitter.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:52.837240934 CEST	192.168.2.22	8.8.8.8	0xe3fe	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:52.837440968 CEST	192.168.2.22	8.8.8.8	0x9dd3	Standard query (0)	x.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:53.451235056 CEST	192.168.2.22	8.8.8.8	0x313d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:53.454227924 CEST	192.168.2.22	8.8.8.8	0xa28	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:54.920248032 CEST	192.168.2.22	8.8.8.8	0x2a3a	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.920439005 CEST	192.168.2.22	8.8.8.8	0xb8b8	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:54.921768904 CEST	192.168.2.22	8.8.8.8	0x2e75	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.921988964 CEST	192.168.2.22	8.8.8.8	0x3d62	Standard query (0)	api.twitter.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:54.931091070 CEST	192.168.2.22	8.8.8.8	0xf44d	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.931288958 CEST	192.168.2.22	8.8.8.8	0xe115	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:54.950612068 CEST	192.168.2.22	8.8.8.8	0x4f00	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.950701952 CEST	192.168.2.22	8.8.8.8	0xfa57	Standard query (0)	api.twitter.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:54.952332020 CEST	192.168.2.22	8.8.8.8	0x727c	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.952425957 CEST	192.168.2.22	8.8.8.8	0xf7fc	Standard query (0)	api.x.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:54.952686071 CEST	192.168.2.22	8.8.8.8	0x88e3	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.952800989 CEST	192.168.2.22	8.8.8.8	0x5926	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:54.964328051 CEST	192.168.2.22	8.8.8.8	0xe6b7	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.964585066 CEST	192.168.2.22	8.8.8.8	0x90bd	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 2, 2024 23:59:54.965358973 CEST	192.168.2.22	8.8.8.8	0xcaf0	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.965534925 CEST	192.168.2.22	8.8.8.8	0x36bb	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 2, 2024 23:59:54.965893984 CEST	192.168.2.22	8.8.8.8	0x3402	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.966057062 CEST	192.168.2.22	8.8.8.8	0x477b	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:54.971858025 CEST	192.168.2.22	8.8.8.8	0x73f0	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.974836111 CEST	192.168.2.22	8.8.8.8	0x8471	Standard query (0)	api.x.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:57.856923103 CEST	192.168.2.22	8.8.8.8	0x6b21	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:57.858058929 CEST	192.168.2.22	8.8.8.8	0xc5c4	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:57.868360043 CEST	192.168.2.22	8.8.8.8	0x5e6d	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:57.868488073 CEST	192.168.2.22	8.8.8.8	0x31e6	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:57.919168949 CEST	192.168.2.22	8.8.8.8	0x8cee	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:57.919353008 CEST	192.168.2.22	8.8.8.8	0x369c	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Oct 2, 2024 23:59:58.639409065 CEST	192.168.2.22	8.8.8.8	0xa429	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:58.642548084 CEST	192.168.2.22	8.8.8.8	0xda95	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:00.172400951 CEST	192.168.2.22	8.8.8.8	0xbb	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:00.215780020 CEST	192.168.2.22	8.8.8.8	0xfbe1	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:03.972377062 CEST	192.168.2.22	8.8.8.8	0x9d37	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:03.972773075 CEST	192.168.2.22	8.8.8.8	0x7eb9	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:04.466479063 CEST	192.168.2.22	8.8.8.8	0xb012	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:04.466612101 CEST	192.168.2.22	8.8.8.8	0xec27	Standard query (0)	api.x.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:04.929136992 CEST	192.168.2.22	8.8.8.8	0x3747	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:04.929426908 CEST	192.168.2.22	8.8.8.8	0xdfb4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:26.760132074 CEST	192.168.2.22	8.8.8.8	0xb597	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:26.760322094 CEST	192.168.2.22	8.8.8.8	0x1517	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:28.511888027 CEST	192.168.2.22	8.8.8.8	0x2155	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:28.512094021 CEST	192.168.2.22	8.8.8.8	0x53cf	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:28.514484882 CEST	192.168.2.22	8.8.8.8	0x8e42	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:28.514811039 CEST	192.168.2.22	8.8.8.8	0x2655	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:29.481086016 CEST	192.168.2.22	8.8.8.8	0xd17	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:29.481838942 CEST	192.168.2.22	8.8.8.8	0xd453	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:29.484823942 CEST	192.168.2.22	8.8.8.8	0x3087	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:29.486125946 CEST	192.168.2.22	8.8.8.8	0xfda4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:32.493057013 CEST	192.168.2.22	8.8.8.8	0x4e06	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:32.493175983 CEST	192.168.2.22	8.8.8.8	0x7d6c	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:33.379569054 CEST	192.168.2.22	8.8.8.8	0xe34a	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:33.514245033 CEST	192.168.2.22	8.8.8.8	0x44b4	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:33.834949970 CEST	192.168.2.22	8.8.8.8	0x8d0a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:33.834949970 CEST	192.168.2.22	8.8.8.8	0xef85	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:40.587604046 CEST	192.168.2.22	8.8.8.8	0x7111	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:40.589972019 CEST	192.168.2.22	8.8.8.8	0x5cc9	Standard query (0)	twitter.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:41.764333010 CEST	192.168.2.22	8.8.8.8	0xc07c	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:41.765475035 CEST	192.168.2.22	8.8.8.8	0x44ad	Standard query (0)	twitter.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:50.486722946 CEST	192.168.2.22	8.8.8.8	0x781e	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:50.487533092 CEST	192.168.2.22	8.8.8.8	0xf760	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:50.488538980 CEST	192.168.2.22	8.8.8.8	0x946d	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:50.488696098 CEST	192.168.2.22	8.8.8.8	0x5165	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:51.607897997 CEST	192.168.2.22	8.8.8.8	0x1c06	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:51.608031034 CEST	192.168.2.22	8.8.8.8	0xbecf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:51.611790895 CEST	192.168.2.22	8.8.8.8	0x5126	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:51.611941099 CEST	192.168.2.22	8.8.8.8	0xccb8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:55.029587984 CEST	192.168.2.22	8.8.8.8	0x332b	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:55.029721022 CEST	192.168.2.22	8.8.8.8	0x3f83	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:55.220890045 CEST	192.168.2.22	8.8.8.8	0xea62	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:55.225028992 CEST	192.168.2.22	8.8.8.8	0x325	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:55.233417988 CEST	192.168.2.22	8.8.8.8	0x15f2	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:55.233760118 CEST	192.168.2.22	8.8.8.8	0x3d16	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:55.235658884 CEST	192.168.2.22	8.8.8.8	0xfe1c	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:55.235874891 CEST	192.168.2.22	8.8.8.8	0x1e5f	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:56.346951008 CEST	192.168.2.22	8.8.8.8	0x985	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:56.347042084 CEST	192.168.2.22	8.8.8.8	0x2a4d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:56.350296974 CEST	192.168.2.22	8.8.8.8	0x65e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:56.350739002 CEST	192.168.2.22	8.8.8.8	0x46dc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 00:00:56.351663113 CEST	192.168.2.22	8.8.8.8	0x74d8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:56.352175951 CEST	192.168.2.22	8.8.8.8	0xe364	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 00:01:10.878753901 CEST	192.168.2.22	8.8.8.8	0xa054	Standard query (0)	help.x.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:01:10.878972054 CEST	192.168.2.22	8.8.8.8	0x363e	Standard query (0)	help.x.com	65	IN (0x0001)	false
Oct 3, 2024 00:01:11.813703060 CEST	192.168.2.22	8.8.8.8	0xd176	Standard query (0)	cdn.cms-twdigitalassets.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:01:11.813901901 CEST	192.168.2.22	8.8.8.8	0xba3b	Standard query (0)	cdn.cms-twdigitalassets.com	65	IN (0x0001)	false
Oct 3, 2024 00:01:11.979734898 CEST	192.168.2.22	8.8.8.8	0x430	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:01:11.979950905 CEST	192.168.2.22	8.8.8.8	0x1dd6	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Oct 3, 2024 00:01:12.607249975 CEST	192.168.2.22	8.8.8.8	0xd9c5	Standard query (0)	help.x.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:01:12.607355118 CEST	192.168.2.22	8.8.8.8	0x604f	Standard query (0)	help.x.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 2, 2024 23:59:50.586064100 CEST	8.8.8.8	192.168.2.22	0x1f8d	No error (0)	us-west-2.protection.sophos.com	d2t07dpvw9bt1v.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:50.586064100 CEST	8.8.8.8	192.168.2.22	0x1f8d	No error (0)	d2t07dpvw9bt1v.cloudfront.net		18.66.147.74	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:50.586064100 CEST	8.8.8.8	192.168.2.22	0x1f8d	No error (0)	d2t07dpvw9bt1v.cloudfront.net		18.66.147.111	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:50.586064100 CEST	8.8.8.8	192.168.2.22	0x1f8d	No error (0)	d2t07dpvw9bt1v.cloudfront.net		18.66.147.96	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:50.586064100 CEST	8.8.8.8	192.168.2.22	0x1f8d	No error (0)	d2t07dpvw9bt1v.cloudfront.net		18.66.147.57	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:50.615297079 CEST	8.8.8.8	192.168.2.22	0xe0a5	No error (0)	us-west-2.protection.sophos.com	d2t07dpvw9bt1v.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:52.019268036 CEST	8.8.8.8	192.168.2.22	0x926a	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:52.845999956 CEST	8.8.8.8	192.168.2.22	0xe3fe	No error (0)	x.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:53.457823038 CEST	8.8.8.8	192.168.2.22	0x313d	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:53.460570097 CEST	8.8.8.8	192.168.2.22	0xa28	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 23:59:54.926565886 CEST	8.8.8.8	192.168.2.22	0x2a3a	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.926565886 CEST	8.8.8.8	192.168.2.22	0x2a3a	No error (0)	twimg.twitter.map.fastly.net		146.75.120.159	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.926811934 CEST	8.8.8.8	192.168.2.22	0xb8b8	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.930588961 CEST	8.8.8.8	192.168.2.22	0x3d62	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.930628061 CEST	8.8.8.8	192.168.2.22	0x2e75	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.930628061 CEST	8.8.8.8	192.168.2.22	0x2e75	No error (0)	tpop-api.twitter.com		104.244.42.66	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.930628061 CEST	8.8.8.8	192.168.2.22	0x2e75	No error (0)	tpop-api.twitter.com		104.244.42.194	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.930628061 CEST	8.8.8.8	192.168.2.22	0x2e75	No error (0)	tpop-api.twitter.com		104.244.42.130	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.930628061 CEST	8.8.8.8	192.168.2.22	0x2e75	No error (0)	tpop-api.twitter.com		104.244.42.2	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.937226057 CEST	8.8.8.8	192.168.2.22	0xf44d	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.937226057 CEST	8.8.8.8	192.168.2.22	0xf44d	No error (0)	twimg.twitter.map.fastly.net		199.232.188.159	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.937578917 CEST	8.8.8.8	192.168.2.22	0xe115	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.957637072 CEST	8.8.8.8	192.168.2.22	0xfa57	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.959176064 CEST	8.8.8.8	192.168.2.22	0x5926	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.959225893 CEST	8.8.8.8	192.168.2.22	0x88e3	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.959225893 CEST	8.8.8.8	192.168.2.22	0x88e3	No error (0)	dualstack.twimg.twitter.map.fastly.net		146.75.120.159	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.960045099 CEST	8.8.8.8	192.168.2.22	0x4f00	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.960045099 CEST	8.8.8.8	192.168.2.22	0x4f00	No error (0)	tpop-api.twitter.com		104.244.42.194	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.960045099 CEST	8.8.8.8	192.168.2.22	0x4f00	No error (0)	tpop-api.twitter.com		104.244.42.2	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.960045099 CEST	8.8.8.8	192.168.2.22	0x4f00	No error (0)	tpop-api.twitter.com		104.244.42.130	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.960045099 CEST	8.8.8.8	192.168.2.22	0x4f00	No error (0)	tpop-api.twitter.com		104.244.42.66	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.960414886 CEST	8.8.8.8	192.168.2.22	0xf7fc	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.961088896 CEST	8.8.8.8	192.168.2.22	0x727c	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.961088896 CEST	8.8.8.8	192.168.2.22	0x727c	No error (0)	tpop-api.x.com		104.244.42.2	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.970624924 CEST	8.8.8.8	192.168.2.22	0xe6b7	No error (0)	t.co		162.159.140.229	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.970624924 CEST	8.8.8.8	192.168.2.22	0xe6b7	No error (0)	t.co		172.66.0.227	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.971769094 CEST	8.8.8.8	192.168.2.22	0xcaf0	No error (0)	t.co		162.159.140.229	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.972114086 CEST	8.8.8.8	192.168.2.22	0x3402	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.972114086 CEST	8.8.8.8	192.168.2.22	0x3402	No error (0)	dualstack.twimg.twitter.map.fastly.net		199.232.188.159	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.972415924 CEST	8.8.8.8	192.168.2.22	0x477b	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.978729963 CEST	8.8.8.8	192.168.2.22	0x73f0	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:54.978729963 CEST	8.8.8.8	192.168.2.22	0x73f0	No error (0)	tpop-api.x.com		104.244.42.2	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:54.983932972 CEST	8.8.8.8	192.168.2.22	0x8471	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:57.864655972 CEST	8.8.8.8	192.168.2.22	0x6b21	No error (0)	video.twimg.com	dualstack.video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:57.864655972 CEST	8.8.8.8	192.168.2.22	0x6b21	No error (0)	dualstack.video.twitter.map.fastly.net		151.101.120.158	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:57.868788958 CEST	8.8.8.8	192.168.2.22	0xc5c4	No error (0)	video.twimg.com	dualstack.video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:57.874968052 CEST	8.8.8.8	192.168.2.22	0x5e6d	No error (0)	video.twimg.com	dualstack.video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:57.874968052 CEST	8.8.8.8	192.168.2.22	0x5e6d	No error (0)	dualstack.video.twitter.map.fastly.net		151.101.120.158	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:57.875020981 CEST	8.8.8.8	192.168.2.22	0x31e6	No error (0)	video.twimg.com	dualstack.video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:57.925973892 CEST	8.8.8.8	192.168.2.22	0x369c	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:57.926007986 CEST	8.8.8.8	192.168.2.22	0x8cee	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:57.926007986 CEST	8.8.8.8	192.168.2.22	0x8cee	No error (0)	abs-zero.twimg.com		104.244.43.131	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:58.645998001 CEST	8.8.8.8	192.168.2.22	0xa429	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 23:59:58.645998001 CEST	8.8.8.8	192.168.2.22	0xa429	No error (0)	abs-zero.twimg.com		104.244.43.131	A (IP address)	IN (0x0001)	false
Oct 2, 2024 23:59:58.648967028 CEST	8.8.8.8	192.168.2.22	0xda95	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:00:00.178822994 CEST	8.8.8.8	192.168.2.22	0xbb	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:00:00.178822994 CEST	8.8.8.8	192.168.2.22	0xbb	No error (0)	twimg.twitter.map.fastly.net		146.75.120.159	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:00.222944975 CEST	8.8.8.8	192.168.2.22	0xfbe1	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:00:03.979610920 CEST	8.8.8.8	192.168.2.22	0x9d37	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:03.979898930 CEST	8.8.8.8	192.168.2.22	0x7eb9	No error (0)	google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:04.473299026 CEST	8.8.8.8	192.168.2.22	0xb012	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:00:04.473299026 CEST	8.8.8.8	192.168.2.22	0xb012	No error (0)	tpop-api.x.com		104.244.42.2	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:04.475898981 CEST	8.8.8.8	192.168.2.22	0xec27	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:00:04.935575962 CEST	8.8.8.8	192.168.2.22	0xdfb4	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:04.936089993 CEST	8.8.8.8	192.168.2.22	0x3747	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:26.766722918 CEST	8.8.8.8	192.168.2.22	0xb597	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:00:26.766722918 CEST	8.8.8.8	192.168.2.22	0xb597	No error (0)	dualstack.twimg.twitter.map.fastly.net		199.232.188.159	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:26.770643950 CEST	8.8.8.8	192.168.2.22	0x1517	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:00:28.519776106 CEST	8.8.8.8	192.168.2.22	0x53cf	No error (0)	google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:28.521848917 CEST	8.8.8.8	192.168.2.22	0x2155	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:28.522775888 CEST	8.8.8.8	192.168.2.22	0x2655	No error (0)	google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:28.523617029 CEST	8.8.8.8	192.168.2.22	0x8e42	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:29.488368988 CEST	8.8.8.8	192.168.2.22	0xd17	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:29.488451004 CEST	8.8.8.8	192.168.2.22	0xd453	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:29.491784096 CEST	8.8.8.8	192.168.2.22	0x3087	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:29.492702007 CEST	8.8.8.8	192.168.2.22	0xfda4	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:32.500045061 CEST	8.8.8.8	192.168.2.22	0x4e06	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:32.500555992 CEST	8.8.8.8	192.168.2.22	0x7d6c	No error (0)	google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:33.387764931 CEST	8.8.8.8	192.168.2.22	0xe34a	No error (0)	play.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:33.841869116 CEST	8.8.8.8	192.168.2.22	0x8d0a	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:33.843940973 CEST	8.8.8.8	192.168.2.22	0xef85	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:40.597687960 CEST	8.8.8.8	192.168.2.22	0x7111	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:41.772526026 CEST	8.8.8.8	192.168.2.22	0xc07c	No error (0)	twitter.com		104.244.42.129	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:41.772526026 CEST	8.8.8.8	192.168.2.22	0xc07c	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:41.772526026 CEST	8.8.8.8	192.168.2.22	0xc07c	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:41.772526026 CEST	8.8.8.8	192.168.2.22	0xc07c	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:50.493843079 CEST	8.8.8.8	192.168.2.22	0x781e	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:50.494555950 CEST	8.8.8.8	192.168.2.22	0xf760	No error (0)	google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:50.495040894 CEST	8.8.8.8	192.168.2.22	0x5165	No error (0)	google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:50.497572899 CEST	8.8.8.8	192.168.2.22	0x946d	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:51.614597082 CEST	8.8.8.8	192.168.2.22	0x1c06	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:51.614701986 CEST	8.8.8.8	192.168.2.22	0xbecf	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:51.618144035 CEST	8.8.8.8	192.168.2.22	0x5126	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:51.619811058 CEST	8.8.8.8	192.168.2.22	0xccb8	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:55.035957098 CEST	8.8.8.8	192.168.2.22	0x332b	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:00:55.035957098 CEST	8.8.8.8	192.168.2.22	0x332b	No error (0)	twimg.twitter.map.fastly.net		199.232.188.159	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:55.036448956 CEST	8.8.8.8	192.168.2.22	0x3f83	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:00:55.229850054 CEST	8.8.8.8	192.168.2.22	0xea62	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:55.232316971 CEST	8.8.8.8	192.168.2.22	0x325	No error (0)	google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:55.242167950 CEST	8.8.8.8	192.168.2.22	0x15f2	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:55.242417097 CEST	8.8.8.8	192.168.2.22	0xfe1c	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:55.242970943 CEST	8.8.8.8	192.168.2.22	0x1e5f	No error (0)	google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:55.243415117 CEST	8.8.8.8	192.168.2.22	0x3d16	No error (0)	google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:56.353492975 CEST	8.8.8.8	192.168.2.22	0x985	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:56.353508949 CEST	8.8.8.8	192.168.2.22	0x2a4d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:56.357017994 CEST	8.8.8.8	192.168.2.22	0x46dc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:56.357254982 CEST	8.8.8.8	192.168.2.22	0x65e	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:00:56.359180927 CEST	8.8.8.8	192.168.2.22	0xe364	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 00:00:56.359251022 CEST	8.8.8.8	192.168.2.22	0x74d8	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:01:10.887180090 CEST	8.8.8.8	192.168.2.22	0x363e	No error (0)	help.x.com	help.x.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:01:10.890160084 CEST	8.8.8.8	192.168.2.22	0xa054	No error (0)	help.x.com	help.x.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:01:11.821149111 CEST	8.8.8.8	192.168.2.22	0xd176	No error (0)	cdn.cms-twdigitalassets.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:01:11.821149111 CEST	8.8.8.8	192.168.2.22	0xd176	No error (0)	platform.twitter.map.fastly.net		146.75.120.157	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:01:11.821175098 CEST	8.8.8.8	192.168.2.22	0xba3b	No error (0)	cdn.cms-twdigitalassets.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:01:11.987056971 CEST	8.8.8.8	192.168.2.22	0x1dd6	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:01:11.988321066 CEST	8.8.8.8	192.168.2.22	0x430	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:01:11.988321066 CEST	8.8.8.8	192.168.2.22	0x430	No error (0)	platform.twitter.map.fastly.net		146.75.120.157	A (IP address)	IN (0x0001)	false
Oct 3, 2024 00:01:12.614270926 CEST	8.8.8.8	192.168.2.22	0x604f	No error (0)	help.x.com	help.x.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 00:01:12.616513968 CEST	8.8.8.8	192.168.2.22	0xd9c5	No error (0)	help.x.com	help.x.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-02 21:59:51 UTC	934	OUT	GET /?d=twitter.com&u=aHR0cHM6Ly90d2l0dGVyLmNvbS9FUkFBcmNo&p=m&i=NjEwOTVlYjc5YTE3ZjcwZjdmZDdjMjU2&t=NXp0TTVJaUZtQUsyZndFeEw3MFY4dnhWMTBtZTZCQkd0ajNraCtkNUdQYz0=&h=942eeff6a0064f1492b8b88f777bcb3d&s=AVNPUEhUT0NFTkNSWVBUSVYL2B6tcXz27KFdHcDyynWtGxJpFZyrpb1WNisNsOUWGw HTTP/1.1 Host: us-west-2.protection.sophos.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 21:59:51 UTC	625	IN	HTTP/1.1 302 Found Content-Type: text/html Content-Length: 0 Connection: close Date: Wed, 02 Oct 2024 21:59:51 GMT X-Amzn-Trace-Id: Root=1-66fdc257-6a53946168d9a2437e2f867a;Parent=1977d0350eba0039;Sampled=0;Lineage=1:b506645d:0 x-amzn-RequestId: 68fca3e0-7820-4cf5-a111-ea7513d2f5e4 Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow x-amz-apigw-id: fCtNwEGOvHcEFyA= Location: https://twitter.com/ERAArch X-Cache: Miss from cloudfront Via: 1.1 70d755f7200c02162c7545e4ce74649a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: uidLqmpLUYkp1mT-Y-55R76ZcOei5j57iR2yoNqHM4irnmoZ7r8AYw==

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Chrome Cache Entry: 325

Chrome Cache Entry: 326

Timestamp	Bytes transferred	Direction	Data
2024-10-02 21:59:52 UTC	662	OUT	GET /ERAArch HTTP/1.1 Host: twitter.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 21:59:52 UTC	6372	IN	HTTP/1.1 302 Found date: Wed, 02 Oct 2024 21:59:52 GMT perf: 7402827104 vary: Accept expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b location: https://x.com/ERAArch set-cookie: guest_id_marketing=v1%3A172790639275879069; Max-Age=63072000; Expires=Fri, 02 Oct 2026 21:59:52 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A172790639275879069; Max-Age=63072000; Expires=Fri, 02 Oct 2026 21:59:52 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: personalization_id="v1_Rwb0uXH7/YvPZ6nzwPoxFQ=="; Max-Age=63072000; Expires=Fri, 02 Oct 2026 21:59:52 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A172790639275879069; Max-Age=63072000; Expires=Fri, 02 Oct 2026 21:59:52 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: ct0=; Max-Age=-1727906391; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=Lax content-type: text/html; charset=utf-8 x-powered-by: Express cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 02 Oct 2024 21:59:52 GMT content-length: 86 x-frame-options: DENY x-transaction-id: 4428203e3e3a758a x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 12 x-connection-hash: 2baa4c4385c8703089a4604f902c948837a1e42b8599cce52182726e2064cfee connection: close
2024-10-02 21:59:52 UTC	86	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 63 6f 6d 2f 45 52 41 41 72 63 68 22 3e 68 74 74 70 73 3a 2f 2f 78 2e 63 6f 6d 2f 45 52 41 41 72 63 68 3c 2f 61 3e 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to <a href="https://x.com/ERAArch">https://x.com/ERAArch</a></p>

Timestamp	Bytes transferred	Direction	Data
2024-10-02 21:59:53 UTC	656	OUT	GET /ERAArch HTTP/1.1 Host: x.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 21:59:53 UTC	6257	IN	HTTP/1.1 200 OK date: Wed, 02 Oct 2024 21:59:53 GMT perf: 7402827104 expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b set-cookie: guest_id_marketing=v1%3A172790639349045389; Max-Age=63072000; Expires=Fri, 02 Oct 2026 21:59:53 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A172790639349045389; Max-Age=63072000; Expires=Fri, 02 Oct 2026 21:59:53 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: personalization_id="v1_1QlunajyQqiXV89SWMafzw=="; Max-Age=63072000; Expires=Fri, 02 Oct 2026 21:59:53 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: guest_id=v1%3A172790639349045389; Max-Age=63072000; Expires=Fri, 02 Oct 2026 21:59:53 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: ct0=; Max-Age=-1727906392; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=Lax content-type: text/html; charset=utf-8 x-powered-by: Express cache-control: no-store, max-age=0 last-modified: Wed, 02 Oct 2024 21:59:53 GMT x-frame-options: DENY x-transaction-id: b89abe9111c45008 x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 13 x-connection-hash: 3d8f68a6305c982b668949194fa80ecbdf6839dfd665bfcb7bd239ac0cd8ea88 connection: close transfer-encoding: chunked
2024-10-02 21:59:53 UTC	2650	IN	Data Raw: 61 34 65 0d 0a 0a 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 78 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 20 3d 20 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 78 2f 6d 69 67 72 61 74 65 3f 74 6f 6b 3d 37 62 32 32 36 35 32 32 33 61 32 32 32 66 34 35 35 32 34 31 34 31 37 32 36 33 36 38 32 32 32 63 32 32 37 34 32 32 33 61 33 31 33 37 33 32 33 37 33 39 33 30 33 36 33 33 33 39 33 33 37 64 65 33 33 66 32 35 35 65 34 66 63 32 64 66 66 33 38 35 65 36 36 62 32 63 65 32 33 66 61 63 32 39 22 20 2f 3e 0a 20 20 20 20 20 20 3c Data Ascii: a4e <!DOCTYPE html> <head> <title>x.com</title> <meta http-equiv="refresh" content="0; url = https://twitter.com/x/migrate?tok=7b2265223a222f45524141726368222c2274223a313732373930363339337de33f255e4fc2dff385e66b2ce23fac29" /> <

Timestamp	Bytes transferred	Direction	Data
2024-10-02 21:59:55 UTC	689	OUT	GET /manifest.json HTTP/1.1 Host: x.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://x.com/ERAArch Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A172790639349045389; guest_id_ads=v1%3A172790639349045389; personalization_id="v1_1QlunajyQqiXV89SWMafzw=="; guest_id=v1%3A172790639349045389
2024-10-02 21:59:55 UTC	5727	IN	HTTP/1.1 200 OK date: Wed, 02 Oct 2024 21:59:55 GMT etag: W/"b70-fZ39zidqFVL2AulQ1ofHQ4LLo+w" perf: 7402827104 expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b set-cookie: ct0=; Max-Age=-1727906394; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=Lax content-type: application/manifest+json; charset=utf-8 x-powered-by: Express cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 02 Oct 2024 21:59:55 GMT content-length: 2928 x-frame-options: DENY x-transaction-id: d03ec0df0dc26028 x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 19 x-connection-hash: d7825d88a9ce5970b5bee609ce06061b36560521f8650de9c6b5ee59480c4be4 connection: close
2024-10-02 21:59:55 UTC	2928	IN	Data Raw: 7b 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 73 6f 63 69 61 6c 22 2c 22 6e 65 77 73 22 2c 22 6d 61 67 61 7a 69 6e 65 73 22 5d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 65 74 20 62 72 65 61 6b 69 6e 67 20 6e 65 77 73 2c 20 70 6f 6c 69 74 69 63 73 2c 20 74 72 65 6e 64 69 6e 67 20 6d 75 73 69 63 2c 20 77 6f 72 6c 64 20 65 76 65 6e 74 73 2c 20 73 70 6f 72 74 73 20 73 63 6f 72 65 73 2c 20 61 6e 64 20 74 68 65 20 6c 61 74 65 73 74 20 67 6c 6f 62 61 6c 20 6e 65 77 73 20 73 74 6f 72 69 65 73 20 61 73 20 74 68 65 79 20 75 6e 66 6f 6c 64 20 2d 20 61 6c 6c 20 77 69 74 68 20 6c 65 73 73 20 64 61 74 61 2e 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e Data Ascii: {"background_color":"#ffffff","categories":["social","news","magazines"],"description":"Get breaking news, politics, trending music, world events, sports scores, and the latest global news stories as they unfold - all with less data.","display":"standalon

Timestamp	Bytes transferred	Direction	Data
2024-10-02 21:59:55 UTC	514	OUT	GET /opensearch.xml HTTP/1.1 Host: x.com Connection: keep-alive Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A172790639349045389; guest_id_ads=v1%3A172790639349045389; personalization_id="v1_1QlunajyQqiXV89SWMafzw=="; guest_id=v1%3A172790639349045389
2024-10-02 21:59:55 UTC	5739	IN	HTTP/1.1 200 OK date: Wed, 02 Oct 2024 21:59:55 GMT etag: W/"1f0-85TM3Ka795qemUQHTCT2QcJH0RQ" perf: 7402827104 expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b set-cookie: ct0=; Max-Age=-1727906394; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=Lax content-type: application/opensearchdescription+xml; charset=utf-8 x-powered-by: Express cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 02 Oct 2024 21:59:55 GMT content-length: 496 x-frame-options: DENY x-transaction-id: 661019863c3209f9 x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 287 x-connection-hash: b5425bf837f964afe59e7fd72e6eb3c40507467086a44b3a7395f4099d8788a4 connection: close
2024-10-02 21:59:55 UTC	496	IN	Data Raw: 3c 4f 70 65 6e 53 65 61 72 63 68 44 65 73 63 72 69 70 74 69 6f 6e 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 6d 6f 7a 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 32 30 30 36 2f 62 72 6f 77 73 65 72 2f 73 65 61 72 63 68 2f 22 3e 0a 3c 53 68 6f 72 74 4e 61 6d 65 3e 54 77 69 74 74 65 72 3c 2f 53 68 6f 72 74 4e 61 6d 65 3e 0a 3c 44 65 73 63 72 69 70 74 69 6f 6e 3e 54 77 69 74 74 65 72 20 53 65 61 72 63 68 3c 2f 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 3c 55 72 6c 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 74 65 6d 70 6c 61 74 65 3d 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 Data Ascii: <OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/" xmlns:moz="http://www.mozilla.org/2006/browser/search/"><ShortName>Twitter</ShortName><Description>Twitter Search</Description><Url type="text/html" method="get" template="https://twit

Timestamp	Bytes transferred	Direction	Data
2024-10-02 21:59:55 UTC	948	OUT	GET /x/migrate?tok=7b2265223a222f45524141726368222c2274223a313732373930363339337de33f255e4fc2dff385e66b2ce23fac29 HTTP/1.1 Host: twitter.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://x.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A172790639275879069; guest_id_ads=v1%3A172790639275879069; personalization_id="v1_Rwb0uXH7/YvPZ6nzwPoxFQ=="; guest_id=v1%3A172790639275879069
2024-10-02 21:59:55 UTC	5637	IN	HTTP/1.1 200 OK date: Wed, 02 Oct 2024 21:59:55 GMT perf: 7402827104 expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b set-cookie: ct0=; Max-Age=-1727906394; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=Lax content-type: text/html; charset=utf-8 x-powered-by: Express cache-control: no-store, max-age=0 last-modified: Wed, 02 Oct 2024 21:59:55 GMT x-frame-options: DENY x-transaction-id: 547d94f39adf1251 x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 12 x-connection-hash: 9f136f7792710ee4081f323eb3bdb66f6c9598402632040b7df56ed5775e6308 connection: close transfer-encoding: chunked
2024-10-02 21:59:55 UTC	913	IN	Data Raw: 33 38 35 0d 0a 0a 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 78 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 35 3b 20 75 72 6c 20 3d 20 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 3f 6d 78 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 63 6f 6d 2f 78 2f 6d 69 67 72 61 74 65 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 6e 61 6d 65 3d 22 66 22 3e 0a 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 74 6f 6b 22 20 76 Data Ascii: 385 <!DOCTYPE html> <head><title>x.com</title> <meta http-equiv="refresh" content="5; url = https://twitter.com?mx=1" /> </head> <form action="https://x.com/x/migrate" method="post" name="f"> <input type="hidden" name="tok" v

Timestamp	Bytes transferred	Direction	Data
2024-10-02 21:59:56 UTC	975	OUT	POST /x/migrate HTTP/1.1 Host: x.com Connection: keep-alive Content-Length: 436 Cache-Control: max-age=0 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://twitter.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A172790639349045389; guest_id_ads=v1%3A172790639349045389; personalization_id="v1_1QlunajyQqiXV89SWMafzw=="; guest_id=v1%3A172790639349045389
2024-10-02 21:59:56 UTC	436	OUT	Data Raw: 74 6f 6b 3d 37 62 32 32 36 35 32 32 33 61 32 32 32 66 34 35 35 32 34 31 34 31 37 32 36 33 36 38 32 32 32 63 32 32 37 34 32 32 33 61 33 31 33 37 33 32 33 37 33 39 33 30 33 36 33 33 33 39 33 33 37 64 65 33 33 66 32 35 35 65 34 66 63 32 64 66 66 33 38 35 65 36 36 62 32 63 65 32 33 66 61 63 32 39 26 64 61 74 61 3d 61 38 64 75 36 7a 4c 5a 37 70 48 25 32 42 64 78 30 31 78 39 64 6c 72 71 4b 79 66 25 32 42 39 48 6c 72 33 36 57 5a 71 52 71 4d 67 6f 78 4f 43 4d 78 30 45 59 31 70 6a 54 43 7a 63 58 35 4b 73 71 55 58 49 75 42 66 25 32 46 43 43 55 6e 57 25 32 42 67 65 44 36 73 32 66 58 69 4a 70 51 52 7a 6e 6c 42 41 49 62 72 25 32 42 6e 71 55 5a 75 33 4a 35 34 59 7a 51 66 4d 54 4b 66 7a 77 6c 31 34 54 72 58 53 62 67 72 67 58 72 65 56 53 67 74 5a 61 42 6c 47 65 66 76 64 Data Ascii: tok=7b2265223a222f45524141726368222c2274223a313732373930363339337de33f255e4fc2dff385e66b2ce23fac29&data=a8du6zLZ7pH%2Bdx01x9dlrqKyf%2B9Hlr36WZqRqMgoxOCMx0EY1pjTCzcX5KsqUXIuBf%2FCCUnW%2BgeD6s2fXiJpQRznlBAIbr%2BnqUZu3J54YzQfMTKfzwl14TrXSbgrgXreVSgtZaBlGefvd
2024-10-02 21:59:57 UTC	6813	IN	HTTP/1.1 302 Found date: Wed, 02 Oct 2024 21:59:56 GMT perf: 7402827104 vary: Accept expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b location: /ERAArch?mx=2 set-cookie: guest_id_marketing=172790639275879069; Max-Age=31536000; Expires=Thu, 02 Oct 2025 21:59:56 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: guest_id_ads=172790639275879069; Max-Age=31536000; Expires=Thu, 02 Oct 2025 21:59:56 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: lang=; Max-Age=-1727906395; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: guest_id=v1%3A172790639275879069; Max-Age=31536000; Expires=Thu, 02 Oct 2025 21:59:56 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: night_mode=2; Max-Age=31536000; Expires=Thu, 02 Oct 2025 21:59:56 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: twid=; Max-Age=-1727906395; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: att=; Max-Age=-1727906395; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; HTTPOnly; SameSite=None set-cookie: ct0=; Max-Age=-1727906395; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=Lax set-cookie: auth_token=; Max-Age=-1727906395; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; HTTPOnly; SameSite=None content-type: text/html; charset=utf-8 x-powered-by: Express cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 02 Oct 2024 21:59:56 GMT content-length: 70 x-frame-options: DENY x-transaction-id: 1ead3fff30bf0f18 x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 17 x-connection-hash: 6918956a4c19545568ad8b67fc76d07e19d4dc59b38a2903a759f8beae2e3912 connection: close
2024-10-02 21:59:57 UTC	70	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 45 52 41 41 72 63 68 3f 6d 78 3d 32 22 3e 2f 45 52 41 41 72 63 68 3f 6d 78 3d 32 3c 2f 61 3e 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to <a href="/ERAArch?mx=2">/ERAArch?mx=2</a></p>

Timestamp	Bytes transferred	Direction	Data
2024-10-02 21:59:57 UTC	882	OUT	GET /ERAArch?mx=2 HTTP/1.1 Host: x.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_1QlunajyQqiXV89SWMafzw=="; guest_id_marketing=172790639275879069; guest_id_ads=172790639275879069; guest_id=v1%3A172790639275879069; night_mode=2
2024-10-02 21:59:57 UTC	5674	IN	HTTP/1.1 200 OK date: Wed, 02 Oct 2024 21:59:57 GMT perf: 7402827104 expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b set-cookie: ct0=; Max-Age=-1727906396; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=Lax content-type: text/html; charset=utf-8 x-powered-by: Express cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 02 Oct 2024 21:59:57 GMT x-frame-options: DENY x-transaction-id: 68dec764bdcf068a x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 23 x-connection-hash: dc8089b381dcd3ada1656509dcdf41a854c7d1a0d511208909b19891fa9196ff connection: close transfer-encoding: chunked
2024-10-02 21:59:57 UTC	323	IN	Data Raw: 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 31 61 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 38 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 37 38 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 2c 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 2f 3e 0d 0a 36 32 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 61 Data Ascii: f<!DOCTYPE html>1a<html dir="ltr" lang="en">6<head>18<meta charset="utf-8" />78<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0,viewport-fit=cover" />62<link rel="preconnect" href="//a
2024-10-02 21:59:57 UTC	502	IN	Data Raw: 36 36 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 61 70 69 2e 74 77 69 74 74 65 72 2e 63 6f 6d 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 61 70 69 2e 74 77 69 74 74 65 72 2e 63 6f 6d 22 20 2f 3e 0d 0a 35 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 61 70 69 2e 78 2e 63 6f 6d 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 61 70 69 2e 78 2e 63 6f 6d 22 20 2f 3e 0d 0a 36 32 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 70 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 22 20 2f Data Ascii: 66<link rel="preconnect" href="//api.twitter.com" /><link rel="dns-prefetch" href="//api.twitter.com" />5a<link rel="preconnect" href="//api.x.com" /><link rel="dns-prefetch" href="//api.x.com" />62<link rel="preconnect" href="//pbs.twimg.com" /
2024-10-02 21:59:57 UTC	391	IN	Data Raw: 62 64 0d 0a 3c 6c 69 6e 6b 20 6e 6f 6e 63 65 3d 22 5a 6a 45 78 59 54 55 78 4d 54 51 74 4e 44 49 30 59 53 30 30 5a 44 6c 6d 4c 54 6c 6c 4d 6d 45 74 5a 44 51 35 5a 54 51 30 59 6a 64 68 4e 57 49 35 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 72 65 73 70 6f 6e 73 69 76 65 2d 77 65 62 2f 63 6c 69 65 6e 74 2d 77 65 62 2f 76 65 6e 64 6f 72 2e 36 32 64 31 38 65 34 61 2e 6a 73 22 20 2f 3e 0d 0a 62 65 0d 0a 3c 6c 69 6e 6b 20 6e 6f 6e 63 65 3d 22 5a 6a 45 78 59 54 55 78 4d 54 51 74 4e 44 49 30 59 53 30 30 5a 44 6c 6d 4c 54 6c 6c 4d 6d 45 74 5a 44 51 35 5a 54 51 30 59 6a 64 Data Ascii: bd<link nonce="ZjExYTUxMTQtNDI0YS00ZDlmLTllMmEtZDQ5ZTQ0YjdhNWI5" rel="preload" as="script" crossorigin="anonymous" href="https://abs.twimg.com/responsive-web/client-web/vendor.62d18e4a.js" />be<link nonce="ZjExYTUxMTQtNDI0YS00ZDlmLTllMmEtZDQ5ZTQ0Yjd
2024-10-02 21:59:57 UTC	193	IN	Data Raw: 62 62 0d 0a 3c 6c 69 6e 6b 20 6e 6f 6e 63 65 3d 22 5a 6a 45 78 59 54 55 78 4d 54 51 74 4e 44 49 30 59 53 30 30 5a 44 6c 6d 4c 54 6c 6c 4d 6d 45 74 5a 44 51 35 5a 54 51 30 59 6a 64 68 4e 57 49 35 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 72 65 73 70 6f 6e 73 69 76 65 2d 77 65 62 2f 63 6c 69 65 6e 74 2d 77 65 62 2f 6d 61 69 6e 2e 62 33 32 33 64 36 63 61 2e 6a 73 22 20 2f 3e 0d 0a Data Ascii: bb<link nonce="ZjExYTUxMTQtNDI0YS00ZDlmLTllMmEtZDQ5ZTQ0YjdhNWI5" rel="preload" as="script" crossorigin="anonymous" href="https://abs.twimg.com/responsive-web/client-web/main.b323d6ca.js" />
2024-10-02 21:59:57 UTC	1034	IN	Data Raw: 32 62 36 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 6e 69 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 33 65 34 74 69 78 6c 34 78 79 61 6a 74 72 7a 6f 36 32 7a 67 35 76 7a 74 6d 6a 75 72 69 63 6c 6a 64 70 32 63 35 6b 73 68 6a 75 34 61 76 79 6f 69 64 2e 6f 6e 69 6f 6e 2f 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 66 62 3a 61 70 70 5f 69 64 22 20 63 6f 6e 74 65 6e 74 3d 22 32 32 33 31 37 37 37 35 34 33 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 58 20 28 66 6f 72 6d 65 72 6c 79 20 54 77 69 74 74 65 72 29 22 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d Data Ascii: 2b6<meta http-equiv="onion-location" content="https://twitter3e4tixl4xyajtrzo62zg5vztmjuricljdp2c5kshju4avyoid.onion/" /><meta property="fb:app_id" content="2231777543" /><meta content="X (formerly Twitter)" property="og:site_name" /><meta name="google-
2024-10-02 21:59:57 UTC	320	IN	Data Raw: 36 37 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 65 61 72 63 68 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 70 65 6e 73 65 61 72 63 68 64 65 73 63 72 69 70 74 69 6f 6e 2b 78 6d 6c 22 20 68 72 65 66 3d 22 2f 6f 70 65 6e 73 65 61 72 63 68 2e 78 6d 6c 22 20 74 69 74 6c 65 3d 22 54 77 69 74 74 65 72 22 3e 0d 0a 37 66 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 73 6b 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 61 6e 79 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 72 65 73 70 6f 6e 73 69 76 65 2d 77 65 62 2f 63 6c 69 65 6e 74 2d 77 65 62 2f 69 63 6f 6e 2d 73 76 67 2e 65 61 35 66 66 34 61 61 2e 73 76 67 22 20 63 6f 6c 6f 72 3d 22 23 31 44 39 42 46 30 22 3e 0d 0a 34 38 0d 0a 3c 6c 69 6e 6b 20 72 65 6c Data Ascii: 67<link rel="search" type="application/opensearchdescription+xml" href="/opensearch.xml" title="Twitter">7f<link rel="mask-icon" sizes="any" href="https://abs.twimg.com/responsive-web/client-web/icon-svg.ea5ff4aa.svg" color="#1D9BF0">48<link rel
2024-10-02 21:59:57 UTC	51	IN	Data Raw: 32 64 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 20 2f 3e 0d 0a Data Ascii: 2d<meta name="theme-color" content="#000000" />
2024-10-02 21:59:57 UTC	280	IN	Data Raw: 31 31 31 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6c 70 43 6d 62 34 30 46 35 5a 6a 44 69 39 5a 59 65 2b 77 6e 72 2f 56 38 4d 46 2b 58 6d 59 34 31 4b 34 71 55 68 6f 71 2b 32 6d 62 65 70 4a 54 4e 64 33 71 34 43 52 71 6c 41 43 66 6e 79 74 68 45 50 5a 71 63 6a 72 79 66 41 53 31 2b 45 78 53 30 46 46 52 63 41 38 41 41 41 42 6d 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 52 33 61 58 52 30 5a 58 49 75 59 32 39 74 4f 6a 51 30 4d 79 49 73 49 6d 5a 6c 59 58 52 31 63 6d 55 69 4f 69 4a 4d 59 58 56 75 59 32 67 67 53 47 46 75 5a 47 78 6c 63 69 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 59 31 4e 54 49 31 4d 54 45 35 4f 53 77 69 61 58 4e 54 64 Data Ascii: 111<meta http-equiv="origin-trial" content="AlpCmb40F5ZjDi9ZYe+wnr/V8MF+XmY41K4qUhoq+2mbepJTNd3q4CRqlACfnythEPZqcjryfAS1+ExS0FFRcA8AAABmeyJvcmlnaW4iOiJodHRwczovL3R3aXR0ZXIuY29tOjQ0MyIsImZlYXR1cmUiOiJMYXVuY2ggSGFuZGxlciIsImV4cGlyeSI6MTY1NTI1MTE5OSwiaXNTd
2024-10-02 21:59:57 UTC	70	IN	Data Raw: 34 30 0d 0a 3c 73 74 79 6c 65 3e 68 74 6d 6c 2c 62 6f 64 79 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 3a 3a 63 75 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 3c 2f 73 74 79 6c 65 3e 0d 0a Data Ascii: 40<style>html,body{height: 100%;}::cue{white-space:normal}</style>
2024-10-02 21:59:57 UTC	10391	IN	Data Raw: 32 38 38 33 0d 0a 3c 73 74 79 6c 65 20 69 64 3d 22 72 65 61 63 74 2d 6e 61 74 69 76 65 2d 73 74 79 6c 65 73 68 65 65 74 22 3e 5b 73 74 79 6c 65 73 68 65 65 74 2d 67 72 6f 75 70 3d 22 30 22 5d 7b 7d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 7d 0a 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 0a 68 74 6d 6c 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 Data Ascii: 2883<style id="react-native-stylesheet">[stylesheet-group="0"]{}body{margin:0;}button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0;}html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:rgba(0,0,0,0)

Timestamp	Bytes transferred	Direction	Data
2024-10-02 21:59:58 UTC	567	OUT	GET /responsive-web/client-web/vendor.62d18e4a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://x.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://x.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 21:59:58 UTC	703	IN	HTTP/1.1 200 OK Connection: close Content-Length: 651104 etag: "N4jjTKXjaGcA3W651xT7nQ==" perf: 7402827104 expires: Tue, 23 Sep 2025 17:20:10 GMT content-type: application/javascript; charset=utf-8 last-modified: Mon, 23 Sep 2024 17:09:42 GMT x-transaction-id: 3e0f1a17bfb2de6d timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 access-control-allow-origin: * X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 02 Oct 2024 21:59:58 GMT X-Served-By: cache-pdk-kfty2130071-PDK, cache-fra-etou8220098-FRA X-Cache: HIT, HIT Vary: Accept-Encoding x-tw-cdn: FT Server-Timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 5f 53 43 52 49 50 54 53 5f 4c 4f 41 44 45 44 5f 5f 2e 72 75 6e 74 69 6d 65 26 26 28 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 22 5d 2c 7b 31 38 36 37 30 36 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 7a 74 3a 28 29 3d 3e 5a 2c 24 6a 3a 28 29 3d 3e 56 2c 49 30 3a 28 29 3d 3e 59 2c 76 39 3a 28 29 3d 3e 62 2c 6f 52 3a 28 29 3d 3e 57 7d 29 3b 76 61 72 20 6e 3d 72 28 37 34 33 31 30 30 29 2c 61 3d 72 28 33 34 31 31 31 30 29 2c 69 Data Ascii: window.__SCRIPTS_LOADED__.runtime&&((self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["vendor"],{186706:(e,t,r)=>{"use strict";r.d(t,{zt:()=>Z,$j:()=>V,I0:()=>Y,v9:()=>b,oR:()=>W});var n=r(743100),a=r(341110),i
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 70 28 66 2c 70 29 7b 63 6f 6e 73 74 20 68 3d 21 69 28 70 2c 73 29 2c 76 3d 21 61 28 66 2c 75 2c 70 2c 73 29 3b 72 65 74 75 72 6e 20 75 3d 66 2c 73 3d 70 2c 68 26 26 76 3f 28 6c 3d 65 28 75 2c 73 29 2c 74 2e 64 65 70 65 6e 64 73 4f 6e 4f 77 6e 50 72 6f 70 73 26 26 28 63 3d 74 28 6e 2c 73 29 29 2c 64 3d 72 28 6c 2c 63 2c 73 29 2c 64 29 3a 68 3f 28 65 2e 64 65 70 65 6e 64 73 4f 6e 4f 77 6e 50 72 6f 70 73 26 26 28 6c 3d 65 28 75 2c 73 29 29 2c 74 2e 64 65 70 65 6e 64 73 4f 6e 4f 77 6e 50 72 6f 70 73 26 26 28 63 3d 74 28 6e 2c 73 29 29 2c 64 3d 72 28 6c 2c 63 2c 73 29 2c 64 29 3a 76 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 65 28 75 2c 73 29 2c 6e 3d 21 6f 28 74 2c 6c 29 3b 72 65 74 75 72 6e 20 6c 3d 74 2c 6e 26 Data Ascii: ;function p(f,p){const h=!i(p,s),v=!a(f,u,p,s);return u=f,s=p,h&&v?(l=e(u,s),t.dependsOnOwnProps&&(c=t(n,s)),d=r(l,c,s),d):h?(e.dependsOnOwnProps&&(l=e(u,s)),t.dependsOnOwnProps&&(c=t(n,s)),d=r(l,c,s),d):v?function(){const t=e(u,s),n=!o(t,l);return l=t,n&
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 29 29 7d 2c 67 65 74 28 29 7b 6c 65 74 20 65 3d 5b 5d 2c 72 3d 74 3b 66 6f 72 28 3b 72 3b 29 65 2e 70 75 73 68 28 72 29 2c 72 3d 72 2e 6e 65 78 74 3b 72 65 74 75 72 6e 20 65 7d 2c 73 75 62 73 63 72 69 62 65 28 65 29 7b 6c 65 74 20 6e 3d 21 30 2c 61 3d 72 3d 7b 63 61 6c 6c 62 61 63 6b 3a 65 2c 6e 65 78 74 3a 6e 75 6c 6c 2c 70 72 65 76 3a 72 7d 3b 72 65 74 75 72 6e 20 61 2e 70 72 65 76 3f 61 2e 70 72 65 76 2e 6e 65 78 74 3d 61 3a 74 3d 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 28 6e 3d 21 31 2c 61 2e 6e 65 78 74 3f 61 2e 6e 65 78 74 2e 70 72 65 76 3d 61 2e 70 72 65 76 3a 72 3d 61 2e 70 72 65 76 2c 61 2e 70 72 65 76 3f 61 2e 70 72 65 76 2e 6e 65 78 74 3d 61 2e 6e 65 78 74 3a 74 3d 61 2e 6e 65 78 74 29 7d 7d 7d 7d 28 29 29 Data Ascii: ))},get(){let e=[],r=t;for(;r;)e.push(r),r=r.next;return e},subscribe(e){let n=!0,a=r={callback:e,next:null,prev:r};return a.prev?a.prev.next=a:t=a,function(){n&&null!==t&&(n=!1,a.next?a.next.prev=a.prev:r=a.prev,a.prev?a.prev.next=a.next:t=a.next)}}}}())
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 65 72 67 65 64 50 72 6f 70 73 45 71 75 61 6c 3a 75 3d 4c 2c 66 6f 72 77 61 72 64 52 65 66 3a 6c 3d 21 31 2c 63 6f 6e 74 65 78 74 3a 63 3d 66 7d 3d 7b 7d 29 7b 63 6f 6e 73 74 20 64 3d 63 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 50 28 65 29 3a 4f 28 65 2c 22 6d 61 70 53 74 61 74 65 54 6f 50 72 6f 70 73 22 29 3a 54 28 28 28 29 3d 3e 28 7b 7d 29 29 29 7d 28 65 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 54 28 28 74 3d 3e 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 69 6e 20 65 29 7b 63 6f 6e 73 74 20 61 3d 65 5b Data Ascii: ergedPropsEqual:u=L,forwardRef:l=!1,context:c=f}={}){const d=c,p=function(e){return e?"function"==typeof e?P(e):O(e,"mapStateToProps"):T((()=>({})))}(e),h=function(e){return e&&"object"==typeof e?T((t=>function(e,t){const r={};for(const n in e){const a=e[
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 6f 6e 28 65 2c 74 29 7b 6c 65 74 7b 69 6e 69 74 4d 61 70 53 74 61 74 65 54 6f 50 72 6f 70 73 3a 72 2c 69 6e 69 74 4d 61 70 44 69 73 70 61 74 63 68 54 6f 50 72 6f 70 73 3a 6e 2c 69 6e 69 74 4d 65 72 67 65 50 72 6f 70 73 3a 61 7d 3d 74 2c 69 3d 28 30 2c 53 2e 5a 29 28 74 2c 52 29 3b 72 65 74 75 72 6e 20 78 28 72 28 65 2c 69 29 2c 6e 28 65 2c 69 29 2c 61 28 65 2c 69 29 2c 65 2c 69 29 7d 28 66 2e 64 69 73 70 61 74 63 68 2c 6e 29 29 2c 5b 66 5d 29 2c 5b 76 2c 6d 5d 3d 73 2e 75 73 65 4d 65 6d 6f 28 28 28 29 3d 3e 7b 69 66 28 21 67 29 72 65 74 75 72 6e 20 55 3b 63 6f 6e 73 74 20 65 3d 41 28 66 2c 6c 3f 76 6f 69 64 20 30 3a 75 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 29 2c 74 3d 65 2e 6e 6f 74 69 66 79 4e 65 73 74 65 64 53 75 62 73 2e 62 69 6e 64 28 65 29 3b 72 65 Data Ascii: on(e,t){let{initMapStateToProps:r,initMapDispatchToProps:n,initMergeProps:a}=t,i=(0,S.Z)(t,R);return x(r(e,i),n(e,i),a(e,i),e,i)}(f.dispatch,n)),[f]),[v,m]=s.useMemo((()=>{if(!g)return U;const e=A(f,l?void 0:u.subscription),t=e.notifyNestedSubs.bind(e);re
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 79 7d 2c 56 29 3a 56 29 2c 5b 6f 2c 56 2c 79 5d 29 7d 63 6f 6e 73 74 20 66 3d 73 2e 6d 65 6d 6f 28 63 29 3b 69 66 28 66 2e 57 72 61 70 70 65 64 43 6f 6d 70 6f 6e 65 6e 74 3d 65 2c 66 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 63 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 72 2c 6c 29 7b 63 6f 6e 73 74 20 74 3d 73 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 66 2c 28 30 2c 5f 2e 5a 29 28 7b 7d 2c 65 2c 7b 72 65 61 63 74 52 65 64 75 78 46 6f 72 77 61 72 64 65 64 52 65 66 3a 74 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 72 2c 74 2e 57 72 61 70 70 65 64 43 6f 6d 70 6f 6e 65 6e 74 3d 65 Data Ascii: vider,{value:y},V):V),[o,V,y])}const f=s.memo(c);if(f.WrappedComponent=e,f.displayName=c.displayName=r,l){const t=s.forwardRef((function(e,t){return s.createElement(f,(0,_.Z)({},e,{reactReduxForwardedRef:t}))}));return t.displayName=r,t.WrappedComponent=e
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 61 63 74 2e 73 65 72 76 65 72 5f 63 6f 6e 74 65 78 74 22 29 2c 64 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 2c 66 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 22 29 2c 70 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 5f 6c 69 73 74 22 29 2c 68 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 2c 76 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 2c 67 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6f 66 66 73 63 72 65 65 6e 22 29 3b 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 69 73 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d Data Ascii: act.server_context"),d=Symbol.for("react.forward_ref"),f=Symbol.for("react.suspense"),p=Symbol.for("react.suspense_list"),h=Symbol.for("react.memo"),v=Symbol.for("react.lazy"),g=Symbol.for("react.offscreen");/** * @license React * react-is.production.m
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 73 74 72 69 63 74 22 3b 72 28 31 33 36 37 32 38 29 3b 63 6f 6e 73 74 20 6e 3d 72 28 36 37 33 39 35 37 29 2c 61 3d 72 28 33 36 34 35 35 31 29 2c 7b 41 63 74 75 61 6c 49 31 38 4e 46 6f 72 6d 61 74 4d 65 73 73 61 67 65 4b 65 79 3a 69 7d 3d 72 28 38 36 32 33 30 32 29 2c 6f 3d 6e 26 26 21 31 2c 75 3d 7b 7d 3b 6c 65 74 20 73 2c 6c 3b 63 6f 6e 73 74 20 63 3d 28 65 2c 74 29 3d 3e 6c 5b 74 5d 2c 64 3d 7b 7d 2c 66 3d 7b 7d 2c 70 3d 65 3d 3e 66 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 66 5b 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 5d 7c 7c 22 65 6e 22 2c 68 3d 5b 5d 2c 76 3d 28 65 3d 3e 7b 6c 65 74 20 74 2c 72 3b 72 65 74 75 72 6e 28 6e 3d 73 29 3d 3e 6e 3d 3d 3d 74 3f 72 3a 28 74 3d 6e 2c 73 3d 70 28 74 29 2c 72 3d 65 28 73 29 29 7d 29 28 28 65 Data Ascii: strict";r(136728);const n=r(673957),a=r(364551),{ActualI18NFormatMessageKey:i}=r(862302),o=n&&!1,u={};let s,l;const c=(e,t)=>l[t],d={},f={},p=e=>f[e.toLowerCase()]\|\|f[e.split("-")[0]]\|\|"en",h=[],v=(e=>{let t,r;return(n=s)=>n===t?r:(t=n,s=p(t),r=e(s))})((e
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 65 29 2c 7b 75 6e 73 75 62 73 63 72 69 62 65 3a 28 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 69 6e 64 65 78 4f 66 28 65 29 3b 74 3e 3d 30 26 26 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 73 70 6c 69 63 65 28 74 2c 31 29 7d 7d 7d 6e 6f 74 69 66 79 28 65 29 7b 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 28 65 29 7d 29 29 7d 67 65 74 4c 69 73 74 65 6e 65 72 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 7d 7d 7d 2c 39 35 38 39 35 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 6e 3d Data Ascii: his._listeners.push(e),{unsubscribe:()=>{const t=this._listeners.indexOf(e);t>=0&&this._listeners.splice(t,1)}}}notify(e){this._listeners.forEach((t=>{t(e)}))}getListeners(){return this._listeners}}},958955:(e,t,r)=>{"use strict";r.d(t,{Z:()=>n});const n=
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 5d 2c 72 2c 65 29 29 72 65 74 75 72 6e 21 31 3b 72 2b 3d 31 7d 72 65 74 75 72 6e 21 30 7d 7d 2c 39 35 39 32 31 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 6e 3d 72 28 31 37 35 30 30 29 3b 63 6f 6e 73 74 20 61 3d 28 65 2c 74 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 28 30 2c 6e 2e 5a 29 28 65 2c 74 2c 72 29 3b 72 65 74 75 72 6e 20 61 3e 2d 31 3f 65 5b 61 5d 3a 76 6f 69 64 20 30 7d 7d 2c 31 37 35 30 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 6e 3d 72 28 39 35 31 34 36 31 29 3b 63 6f 6e 73 74 20 61 3d 28 65 2c 74 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 28 30 2c 6e 2e 5a Data Ascii: ],r,e))return!1;r+=1}return!0}},959211:(e,t,r)=>{"use strict";r.d(t,{Z:()=>a});var n=r(17500);const a=(e,t,r)=>{const a=(0,n.Z)(e,t,r);return a>-1?e[a]:void 0}},17500:(e,t,r)=>{"use strict";r.d(t,{Z:()=>a});var n=r(951461);const a=(e,t,r)=>{const a=(0,n.Z

Timestamp	Bytes transferred	Direction	Data
2024-10-02 21:59:58 UTC	568	OUT	GET /responsive-web/client-web/i18n/en.ba58ee8a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://x.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://x.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 21:59:58 UTC	703	IN	HTTP/1.1 200 OK Connection: close Content-Length: 468700 etag: "w7zpFzjjFc7w5c+WZqlZtQ==" perf: 7402827104 expires: Thu, 02 Oct 2025 04:27:23 GMT content-type: application/javascript; charset=utf-8 last-modified: Wed, 02 Oct 2024 03:38:03 GMT x-transaction-id: 1dc187316801605c timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 access-control-allow-origin: * X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 02 Oct 2024 21:59:58 GMT X-Served-By: cache-pdk-kpdk1780043-PDK, cache-fra-etou8220037-FRA X-Cache: HIT, HIT Vary: Accept-Encoding x-tw-cdn: FT Server-Timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 69 31 38 6e 2f 65 6e 22 5d 2c 7b 34 31 37 33 34 36 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 76 61 72 20 61 3d 6f 28 33 37 39 34 30 34 29 2e 5f 72 65 67 69 73 74 65 72 28 22 65 6e 22 2c 7b 67 65 74 20 65 6d 6f 6a 69 28 29 7b 72 65 74 75 72 6e 20 6f 2e 65 28 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 65 6e 22 29 2e 74 68 65 6e 28 6f 2e 74 2e 62 69 6e 64 28 6f 2c 39 32 30 37 34 37 2c 32 33 29 29 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["i18n/en"],{417346:(e,t,o)=>{var a=o(379404)._register("en",{get emoji(){return o.e("i18n/emoji-en").then(o.t.bind(o,920747,23))}});function n(e,t,
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 68 6f 6e 65 20 6e 75 6d 62 65 72 2e 22 29 2c 61 28 22 68 31 35 34 37 30 32 61 22 2c 22 57 65 20 63 61 6e 27 74 20 63 6f 6d 70 6c 65 74 65 20 74 68 69 73 20 72 65 71 75 65 73 74 20 62 65 63 61 75 73 65 20 74 68 69 73 20 6c 69 6e 6b 20 68 61 73 20 62 65 65 6e 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 58 20 6f 72 20 6f 75 72 20 70 61 72 74 6e 65 72 73 20 61 73 20 62 65 69 6e 67 20 70 6f 74 65 6e 74 69 61 6c 6c 79 20 68 61 72 6d 66 75 6c 2e 20 56 69 73 69 74 20 6f 75 72 20 48 65 6c 70 20 43 65 6e 74 65 72 20 74 6f 20 6c 65 61 72 6e 20 6d 6f 72 65 2e 22 29 2c 61 28 22 63 38 63 62 30 62 34 63 22 2c 22 54 68 65 20 70 61 73 73 77 6f 72 64 20 79 6f 75 20 65 6e 74 65 72 65 64 20 77 61 73 20 69 6e 63 6f 72 72 65 63 74 2e 22 29 2c 61 28 22 62 31 62 35 34 66 39 65 Data Ascii: hone number."),a("h154702a","We can't complete this request because this link has been identified by X or our partners as being potentially harmful. Visit our Help Center to learn more."),a("c8cb0b4c","The password you entered was incorrect."),a("b1b54f9e
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 74 6f 20 70 65 72 66 6f 72 6d 20 74 68 69 73 20 61 63 74 69 6f 6e 2e 22 29 2c 61 28 22 62 66 62 32 32 66 61 65 22 2c 22 53 6f 72 72 79 2c 20 74 68 61 74 20 70 6f 73 74 20 68 61 73 20 62 65 65 6e 20 64 65 6c 65 74 65 64 2e 22 29 2c 61 28 22 61 32 33 63 64 33 62 61 22 2c 22 53 6f 6d 65 20 61 63 74 69 6f 6e 73 20 6f 6e 20 74 68 69 73 20 70 6f 73 74 20 68 61 76 65 20 62 65 65 6e 20 64 69 73 61 62 6c 65 64 20 62 79 20 58 2e 22 29 2c 61 28 22 62 62 35 35 38 38 39 32 22 2c 22 54 68 69 73 20 75 73 65 72 20 61 6c 72 65 61 64 79 20 68 61 73 20 61 20 76 65 72 69 66 69 65 64 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 2e 22 29 2c 61 28 22 68 61 65 31 63 39 33 34 22 2c 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2c 20 62 75 74 20 64 6f 6e e2 80 99 74 20 Data Ascii: to perform this action."),a("bfb22fae","Sorry, that post has been deleted."),a("a23cd3ba","Some actions on this post have been disabled by X."),a("bb558892","This user already has a verified phone number."),a("hae1c934","Something went wrong, but dont
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 50 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 74 74 69 6e 67 73 2e 20 22 29 2c 61 28 22 66 30 32 37 66 65 64 38 22 2c 22 50 69 63 74 75 72 65 2d 69 6e 2d 50 69 63 74 75 72 65 22 29 2c 61 28 22 63 36 30 65 64 39 62 30 22 2c 22 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 75 74 68 6f 72 69 7a 65 64 20 74 6f 20 6a 6f 69 6e 20 74 68 69 73 20 53 70 61 63 65 2e 22 29 2c 61 28 22 64 38 32 32 37 65 31 36 22 2c 22 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 75 74 68 6f 72 69 7a 65 64 20 74 6f 20 63 72 65 61 74 65 20 74 68 69 73 20 53 70 61 63 65 22 29 2c 61 28 22 66 37 63 38 36 31 37 61 22 2c 22 57 68 61 74 20 61 72 65 20 63 6c 69 70 73 3f 22 29 2c 61 28 22 65 63 63 37 64 32 65 63 22 2c 22 43 6c 69 70 73 20 61 72 65 20 63 61 70 74 75 72 Data Ascii: Please check your browser settings. "),a("f027fed8","Picture-in-Picture"),a("c60ed9b0","You are not authorized to join this Space."),a("d8227e16","You are not authorized to create this Space"),a("f7c8617a","What are clips?"),a("ecc7d2ec","Clips are captur
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 61 63 65 73 20 61 72 65 20 70 75 62 6c 69 63 20 e2 80 94 20 61 6e 79 6f 6e 65 20 63 61 6e 20 6a 6f 69 6e 22 29 2c 61 28 22 65 30 30 32 35 36 38 38 22 2c 22 59 6f 75 72 20 53 70 61 63 65 2c 20 79 6f 75 72 20 72 75 6c 65 73 22 29 2c 61 28 22 63 31 62 63 36 66 38 36 22 2c 22 41 73 20 68 6f 73 74 2c 20 79 6f 75 20 63 6f 6e 74 72 6f 6c 20 77 68 6f e2 80 99 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 73 70 65 61 6b 2e 20 59 6f 75 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 70 6f 77 65 72 20 74 6f 20 72 65 6d 6f 76 65 20 70 65 6f 70 6c 65 20 79 6f 75 20 64 6f 6e e2 80 99 74 20 77 61 6e 74 20 69 6e 20 79 6f 75 72 20 53 70 61 63 65 2e 22 29 2c 61 28 22 62 30 62 63 38 33 33 30 22 2c 22 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 62 6c 6f 63 6b 20 61 6e 64 20 72 65 70 6f 72 Data Ascii: aces are public anyone can join"),a("e0025688","Your Space, your rules"),a("c1bc6f86","As host, you control whos allowed to speak. You also have the power to remove people you dont want in your Space."),a("b0bc8330","You can also block and repor
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 70 69 63 22 29 2c 61 28 22 61 36 64 35 62 30 31 30 22 2c 22 54 69 6d 65 6c 69 6e 65 22 29 2c 61 28 22 68 35 38 36 30 61 36 38 22 2c 22 47 72 6f 6b 22 29 2c 61 28 22 61 39 39 30 39 30 30 63 22 2c 22 42 69 6f 22 29 2c 61 28 22 68 30 32 61 36 66 65 36 22 2c 22 43 6f 6d 6d 75 6e 69 74 69 65 73 22 29 2c 61 28 22 61 31 35 36 34 38 61 34 22 2c 22 43 6f 6d 6d 75 6e 69 74 79 20 4e 6f 74 65 73 22 29 2c 61 28 22 6a 33 35 39 61 32 61 39 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 68 61 6e 64 6c 65 2b 22 20 e2 80 a2 20 22 2b 65 2e 69 74 65 6d 4e 61 6d 65 7d 29 29 2c 61 28 22 6a 35 65 63 39 37 36 35 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 68 61 6e 64 6c 65 2b 22 20 e2 80 a2 20 42 6f 6f 6b 6d 61 72 6b 20 46 6f Data Ascii: pic"),a("a6d5b010","Timeline"),a("h5860a68","Grok"),a("a990900c","Bio"),a("h02a6fe6","Communities"),a("a15648a4","Community Notes"),a("j359a2a9",(function(e){return e.handle+" "+e.itemName})),a("j5ec9765",(function(e){return e.handle+" Bookmark Fo
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 65 29 7b 72 65 74 75 72 6e 22 59 6f 75 72 20 76 69 64 65 6f 20 69 73 20 74 6f 6f 20 6c 6f 6e 67 2e 20 54 72 79 20 74 6f 20 6b 65 65 70 20 69 74 20 22 2b 65 2e 6c 69 6d 69 74 2b 22 20 73 65 63 6f 6e 64 73 20 6f 72 20 6c 65 73 73 2e 22 7d 29 29 2c 61 28 22 62 65 30 34 34 30 62 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 59 6f 75 72 20 76 69 64 65 6f 20 69 73 20 74 6f 6f 20 6c 6f 6e 67 2e 20 54 72 79 20 74 6f 20 6b 65 65 70 20 69 74 20 22 2b 65 2e 6c 69 6d 69 74 2b 22 20 6d 69 6e 75 74 65 73 20 6f 72 20 6c 65 73 73 2e 22 7d 29 29 2c 61 28 22 66 65 65 62 61 35 31 32 22 2c 22 59 6f 75 72 20 69 6d 61 67 65 20 66 69 6c 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 2e 20 50 6c 65 61 73 65 20 73 65 65 20 74 69 70 Data Ascii: e){return"Your video is too long. Try to keep it "+e.limit+" seconds or less."})),a("be0440bf",(function(e){return"Your video is too long. Try to keep it "+e.limit+" minutes or less."})),a("feeba512","Your image file could not be processed. Please see tip
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 62 65 64 20 74 6f 20 50 72 65 6d 69 75 6d 20 74 6f 20 68 69 67 68 6c 69 67 68 74 20 70 6f 73 74 73 20 6f 6e 20 79 6f 75 72 20 70 72 6f 66 69 6c 65 2e 22 29 2c 61 28 22 69 33 62 33 31 31 33 36 22 2c 22 57 72 69 74 65 20 41 72 74 69 63 6c 65 73 20 6f 6e 20 58 22 29 2c 61 28 22 62 36 61 34 31 63 35 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 59 6f 75 20 6d 75 73 74 20 62 65 20 73 75 62 73 63 72 69 62 65 64 20 74 6f 20 22 2b 65 2e 74 69 65 72 2b 22 20 74 6f 20 77 72 69 74 65 20 41 72 74 69 63 6c 65 73 20 6f 6e 20 58 22 7d 29 29 2c 61 28 22 61 65 32 63 34 61 66 63 22 2c 22 57 61 6e 74 20 74 6f 20 70 75 62 6c 69 73 68 20 79 6f 75 72 20 6f 77 6e 20 41 72 74 69 63 6c 65 3f 22 29 2c 61 28 22 64 33 30 30 65 32 39 62 22 2c 28 66 75 6e 63 74 Data Ascii: bed to Premium to highlight posts on your profile."),a("i3b31136","Write Articles on X"),a("b6a41c5f",(function(e){return"You must be subscribed to "+e.tier+" to write Articles on X"})),a("ae2c4afc","Want to publish your own Article?"),a("d300e29b",(funct
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 74 69 6e 75 65 20 6d 65 73 73 61 67 69 6e 67 2e 22 29 2c 61 28 22 6a 35 30 33 61 65 65 36 22 2c 22 44 6f 77 6e 6c 6f 61 64 20 76 69 64 65 6f 73 20 77 69 74 68 20 58 20 50 72 65 6d 69 75 6d 22 29 2c 61 28 22 6a 34 64 64 33 62 66 34 22 2c 22 4f 6e 6c 79 20 58 20 50 72 65 6d 69 75 6d 20 73 75 62 73 63 72 69 62 65 72 73 20 63 61 6e 20 64 6f 77 6e 6c 6f 61 64 20 76 69 64 65 6f 73 2e 20 55 70 67 72 61 64 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 2e 22 29 2c 61 28 22 62 63 32 33 31 61 37 34 22 2c 22 55 6e 6c 6f 63 6b 20 62 6f 6f 6b 6d 61 72 6b 20 66 6f 6c 64 65 72 73 20 77 69 74 68 20 58 20 50 72 65 6d 69 75 6d 22 29 2c 61 28 22 65 64 35 33 34 63 37 38 22 2c 22 4f 6e 6c 79 20 58 20 50 72 65 6d 69 75 6d 20 73 75 62 73 63 72 69 62 65 72 73 20 68 61 76 65 20 61 63 63 Data Ascii: tinue messaging."),a("j503aee6","Download videos with X Premium"),a("j4dd3bf4","Only X Premium subscribers can download videos. Upgrade to continue."),a("bc231a74","Unlock bookmark folders with X Premium"),a("ed534c78","Only X Premium subscribers have acc
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 61 74 69 6f 6e 2e 22 29 2c 61 28 22 69 63 65 32 34 38 30 38 22 2c 22 55 6e 6c 6f 63 6b 20 61 63 63 6f 75 6e 74 20 61 6e 61 6c 79 74 69 63 73 20 77 69 74 68 20 58 20 50 72 65 6d 69 75 6d 22 29 2c 61 28 22 61 63 33 38 64 62 63 30 22 2c 22 53 65 65 20 79 6f 75 72 20 70 72 6f 66 69 6c 65 20 61 6e 61 6c 79 74 69 63 73 2c 20 75 6e 64 65 72 73 74 61 6e 64 20 79 6f 75 72 20 61 75 64 69 65 6e 63 65 20 61 6e 64 20 6d 6f 72 65 2e 20 55 70 67 72 61 64 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 2e 22 29 2c 61 28 22 69 36 65 37 33 31 35 34 22 2c 22 50 72 65 76 69 65 77 20 6f 66 20 74 68 65 20 41 63 63 6f 75 6e 74 20 61 6e 61 6c 79 74 69 63 73 20 66 65 61 74 75 72 65 20 69 6e 63 6c 75 64 69 6e 67 20 62 61 72 20 63 68 61 72 74 73 20 61 6e 64 20 6d 65 74 72 69 63 73 22 29 2c Data Ascii: ation."),a("ice24808","Unlock account analytics with X Premium"),a("ac38dbc0","See your profile analytics, understand your audience and more. Upgrade to continue."),a("i6e73154","Preview of the Account analytics feature including bar charts and metrics"),

Timestamp	Bytes transferred	Direction	Data
2024-10-02 21:59:58 UTC	565	OUT	GET /responsive-web/client-web/main.b323d6ca.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://x.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://x.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 21:59:58 UTC	704	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2804251 etag: "Yraumc3Vm2spqcb/iXpCsQ==" perf: 7402827104 expires: Thu, 02 Oct 2025 04:19:32 GMT content-type: application/javascript; charset=utf-8 last-modified: Wed, 02 Oct 2024 03:38:04 GMT x-transaction-id: 1cb2a5d74adc8448 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 access-control-allow-origin: * X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 02 Oct 2024 21:59:58 GMT X-Served-By: cache-pdk-katl1840073-PDK, cache-fra-etou8220020-FRA X-Cache: HIT, HIT Vary: Accept-Encoding x-tw-cdn: FT Server-Timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 5f 53 43 52 49 50 54 53 5f 4c 4f 41 44 45 44 5f 5f 2e 76 65 6e 64 6f 72 26 26 28 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 61 69 6e 22 5d 2c 7b 31 32 36 37 33 38 3a 28 65 2c 64 2c 6e 29 3d 3e 7b 76 61 72 20 74 3d 6e 28 33 37 39 34 30 34 29 3b 74 2e 6c 6f 61 64 4c 61 6e 67 75 61 67 65 2e 72 65 67 69 73 74 65 72 43 68 75 6e 6b 4c 6f 61 64 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 38 33 31 38 39 33 29 28 60 2e 2f 24 7b 65 7d 60 29 7d 29 2c 5b 22 65 6e 22 2c Data Ascii: window.__SCRIPTS_LOADED__.vendor&&((self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["main"],{126738:(e,d,n)=>{var t=n(379404);t.loadLanguage.registerChunkLoader((function(e){return n(831893)(`./${e}`)}),["en",
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 78 2d 66 6d 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 61 72 2e 6a 73 22 3a 5b 38 32 33 31 31 36 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 61 72 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 62 67 22 3a 5b 34 39 30 30 39 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 62 67 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 62 67 2e 6a 73 22 3a 5b 34 39 30 30 39 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 62 67 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 62 6e 22 3a 5b 31 37 32 36 35 34 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 62 6e 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 62 6e 2e 6a 73 22 3a 5b 31 37 32 36 35 34 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 62 6e 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 63 61 22 3a 5b 31 32 32 30 31 36 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 63 61 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 63 61 2e 6a Data Ascii: x-fm"],"./emoji.ar.js":[823116,"i18n/emoji-ar"],"./emoji.bg":[49009,"i18n/emoji-bg"],"./emoji.bg.js":[49009,"i18n/emoji-bg"],"./emoji.bn":[172654,"i18n/emoji-bn"],"./emoji.bn.js":[172654,"i18n/emoji-bn"],"./emoji.ca":[122016,"i18n/emoji-ca"],"./emoji.ca.j
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 66 72 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 66 72 2e 6a 73 22 3a 5b 39 37 38 35 36 39 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 66 72 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 67 61 22 3a 5b 34 38 36 39 30 32 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 67 61 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 67 61 2e 6a 73 22 3a 5b 34 38 36 39 30 32 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 67 61 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 67 6c 22 3a 5b 35 33 35 36 36 37 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 67 6c 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 67 6c 2e 6a 73 22 3a 5b 35 33 35 36 36 37 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 67 6c 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 67 75 22 3a 5b 39 32 31 34 36 37 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 67 75 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 67 75 2e 6a Data Ascii: fr"],"./emoji.fr.js":[978569,"i18n/emoji-fr"],"./emoji.ga":[486902,"i18n/emoji-ga"],"./emoji.ga.js":[486902,"i18n/emoji-ga"],"./emoji.gl":[535667,"i18n/emoji-gl"],"./emoji.gl.js":[535667,"i18n/emoji-gl"],"./emoji.gu":[921467,"i18n/emoji-gu"],"./emoji.gu.j
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 62 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 6e 6c 22 3a 5b 32 37 32 30 33 33 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 6e 6c 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 6e 6c 2e 6a 73 22 3a 5b 32 37 32 30 33 33 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 6e 6c 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 70 6c 22 3a 5b 38 39 33 33 38 39 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 70 6c 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 70 6c 2e 6a 73 22 3a 5b 38 39 33 33 38 39 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 70 6c 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 70 74 22 3a 5b 33 39 38 34 36 39 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 70 74 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 70 74 2e 6a 73 22 3a 5b 33 39 38 34 36 39 2c 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 70 74 22 5d 2c 22 2e 2f 65 6d 6f 6a 69 2e 72 6f 22 3a 5b Data Ascii: b"],"./emoji.nl":[272033,"i18n/emoji-nl"],"./emoji.nl.js":[272033,"i18n/emoji-nl"],"./emoji.pl":[893389,"i18n/emoji-pl"],"./emoji.pl.js":[893389,"i18n/emoji-pl"],"./emoji.pt":[398469,"i18n/emoji-pt"],"./emoji.pt.js":[398469,"i18n/emoji-pt"],"./emoji.ro":[
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 65 6e 22 5d 2c 22 2e 2f 65 6e 2d 47 42 22 3a 5b 31 30 32 38 37 39 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 65 6e 2d 47 42 22 5d 2c 22 2e 2f 65 6e 2d 47 42 2e 6a 73 22 3a 5b 31 30 32 38 37 39 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 65 6e 2d 47 42 22 5d 2c 22 2e 2f 65 6e 2d 73 73 22 3a 5b 31 30 37 30 36 37 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 65 6e 2d 73 73 22 5d 2c 22 2e 2f 65 6e 2d 73 73 2e 6a 73 22 3a 5b 31 30 37 30 36 37 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 65 6e 2d 73 73 22 5d 2c 22 2e 2f 65 6e 2d 78 78 22 3a 5b 33 32 39 30 37 35 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 65 6e 2d 78 78 22 5d 2c 22 2e 2f 65 6e 2d 78 78 2e 6a 73 22 3a 5b 33 32 39 30 37 35 2c 22 76 65 6e Data Ascii: vendor","i18n/en"],"./en-GB":[102879,"vendor","i18n/en-GB"],"./en-GB.js":[102879,"vendor","i18n/en-GB"],"./en-ss":[107067,"vendor","i18n/en-ss"],"./en-ss.js":[107067,"vendor","i18n/en-ss"],"./en-xx":[329075,"vendor","i18n/en-xx"],"./en-xx.js":[329075,"ven
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 22 3a 5b 31 32 32 31 35 35 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 69 64 22 5d 2c 22 2e 2f 69 67 22 3a 5b 39 33 34 38 34 35 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 69 67 22 5d 2c 22 2e 2f 69 67 2e 6a 73 22 3a 5b 39 33 34 38 34 35 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 69 67 22 5d 2c 22 2e 2f 69 6e 64 65 78 2e 6e 6f 64 65 22 3a 5b 32 32 34 34 34 36 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 69 6e 64 65 78 2d 6e 6f 64 65 22 5d 2c 22 2e 2f 69 6e 64 65 78 2e 6e 6f 64 65 2e 6a 73 22 3a 5b 32 32 34 34 34 36 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 69 6e 64 65 78 2d 6e 6f 64 65 22 5d 2c 22 2e 2f 69 74 22 3a 5b 32 30 30 38 38 38 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 69 74 22 5d 2c 22 2e 2f 69 74 2e 6a 73 22 3a 5b 32 Data Ascii: ":[122155,"vendor","i18n/id"],"./ig":[934845,"vendor","i18n/ig"],"./ig.js":[934845,"vendor","i18n/ig"],"./index.node":[224446,"vendor","i18n/index-node"],"./index.node.js":[224446,"vendor","i18n/index-node"],"./it":[200888,"vendor","i18n/it"],"./it.js":[2
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 5b 37 34 33 38 33 34 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 74 68 22 5d 2c 22 2e 2f 74 68 2e 6a 73 22 3a 5b 37 34 33 38 33 34 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 74 68 22 5d 2c 22 2e 2f 74 72 22 3a 5b 36 36 31 35 36 38 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 74 72 22 5d 2c 22 2e 2f 74 72 2e 6a 73 22 3a 5b 36 36 31 35 36 38 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 74 72 22 5d 2c 22 2e 2f 75 6b 22 3a 5b 31 33 37 35 31 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 75 6b 22 5d 2c 22 2e 2f 75 6b 2e 6a 73 22 3a 5b 31 33 37 35 31 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 75 6b 22 5d 2c 22 2e 2f 75 72 22 3a 5b 37 35 39 33 32 2c 22 76 65 6e 64 6f 72 22 2c 22 69 31 38 6e 2f 75 72 22 5d 2c 22 2e 2f 75 72 2e 6a 73 22 3a 5b Data Ascii: [743834,"vendor","i18n/th"],"./th.js":[743834,"vendor","i18n/th"],"./tr":[661568,"vendor","i18n/tr"],"./tr.js":[661568,"vendor","i18n/tr"],"./uk":[13751,"vendor","i18n/uk"],"./uk.js":[13751,"vendor","i18n/uk"],"./ur":[75932,"vendor","i18n/ur"],"./ur.js":[
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 65 5b 6e 2b 2b 5d 5d 2b 74 5b 65 5b 6e 2b 2b 5d 5d 2b 22 2d 22 2b 74 5b 65 5b 6e 2b 2b 5d 5d 2b 74 5b 65 5b 6e 2b 2b 5d 5d 2b 22 2d 22 2b 74 5b 65 5b 6e 2b 2b 5d 5d 2b 74 5b 65 5b 6e 2b 2b 5d 5d 2b 74 5b 65 5b 6e 2b 2b 5d 5d 2b 74 5b 65 5b 6e 2b 2b 5d 5d 2b 74 5b 65 5b 6e 2b 2b 5d 5d 2b 74 5b 65 5b 6e 2b 2b 5d 5d 7d 76 61 72 20 69 3d 74 28 29 2c 75 3d 5b 31 7c 69 5b 30 5d 2c 69 5b 31 5d 2c 69 5b 32 5d 2c 69 5b 33 5d 2c 69 5b 34 5d 2c 69 5b 35 5d 5d 2c 73 3d 31 36 33 38 33 26 28 69 5b 36 5d 3c 3c 38 7c 69 5b 37 5d 29 2c 63 3d 30 2c 62 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 64 2c 6e 29 7b 76 61 72 20 72 3d 64 26 26 6e 7c 7c 30 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 64 3d 22 62 69 6e 61 72 79 22 3d 3d 65 3f 6e 65 77 20 41 Data Ascii: e[n++]]+t[e[n++]]+"-"+t[e[n++]]+t[e[n++]]+"-"+t[e[n++]]+t[e[n++]]+t[e[n++]]+t[e[n++]]+t[e[n++]]+t[e[n++]]}var i=t(),u=[1\|i[0],i[1],i[2],i[3],i[4],i[5]],s=16383&(i[6]<<8\|i[7]),c=0,b=0;function h(e,d,n){var r=d&&n\|\|0;"string"==typeof e&&(d="binary"==e?new A
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 7b 66 65 61 74 75 72 65 53 77 69 74 63 68 65 73 3a 5b 5d 2c 66 69 65 6c 64 54 6f 67 67 6c 65 73 3a 5b 5d 7d 7d 7d 2c 34 36 31 35 36 31 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 71 75 65 72 79 49 64 3a 22 50 46 49 78 54 6b 38 6f 77 4d 6f 5a 67 69 4d 63 63 50 30 72 34 67 22 2c 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 3a 22 67 65 74 41 6c 74 54 65 78 74 50 72 6f 6d 70 74 50 72 65 66 65 72 65 6e 63 65 22 2c 6f 70 65 72 61 74 69 6f 6e 54 79 70 65 3a 22 71 75 65 72 79 22 2c 6d 65 74 61 64 61 74 61 3a 7b 66 65 61 74 75 72 65 53 77 69 74 63 68 65 73 3a 5b 5d 2c 66 69 65 6c 64 54 6f 67 67 6c 65 73 3a 5b 5d 7d 7d 7d 2c 34 35 31 37 39 32 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 71 75 65 72 79 49 64 3a 22 61 51 4b 72 64 75 6b 5f 44 41 34 36 58 66 4f 51 44 Data Ascii: {featureSwitches:[],fieldToggles:[]}}},461561:e=>{e.exports={queryId:"PFIxTk8owMoZgiMccP0r4g",operationName:"getAltTextPromptPreference",operationType:"query",metadata:{featureSwitches:[],fieldToggles:[]}}},451792:e=>{e.exports={queryId:"aQKrduk_DA46XfOQD
2024-10-02 21:59:58 UTC	1379	IN	Data Raw: 6e 73 5f 71 75 6f 74 65 5f 74 77 65 65 74 5f 70 72 65 76 69 65 77 5f 65 6e 61 62 6c 65 64 22 2c 22 66 72 65 65 64 6f 6d 5f 6f 66 5f 73 70 65 65 63 68 5f 6e 6f 74 5f 72 65 61 63 68 5f 66 65 74 63 68 5f 65 6e 61 62 6c 65 64 22 2c 22 73 74 61 6e 64 61 72 64 69 7a 65 64 5f 6e 75 64 67 65 73 5f 6d 69 73 69 6e 66 6f 22 2c 22 74 77 65 65 74 5f 77 69 74 68 5f 76 69 73 69 62 69 6c 69 74 79 5f 72 65 73 75 6c 74 73 5f 70 72 65 66 65 72 5f 67 71 6c 5f 6c 69 6d 69 74 65 64 5f 61 63 74 69 6f 6e 73 5f 70 6f 6c 69 63 79 5f 65 6e 61 62 6c 65 64 22 2c 22 72 77 65 62 5f 76 69 64 65 6f 5f 74 69 6d 65 73 74 61 6d 70 73 5f 65 6e 61 62 6c 65 64 22 2c 22 6c 6f 6e 67 66 6f 72 6d 5f 6e 6f 74 65 74 77 65 65 74 73 5f 72 69 63 68 5f 74 65 78 74 5f 72 65 61 64 5f 65 6e 61 62 6c 65 64 Data Ascii: ns_quote_tweet_preview_enabled","freedom_of_speech_not_reach_fetch_enabled","standardized_nudges_misinfo","tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled","rweb_video_timestamps_enabled","longform_notetweets_rich_text_read_enabled