Edit tour

Windows Analysis Report
https://www.temu.com/cmsg_transit.html?_cmsg_biz=9010&_cmsg_channel=mail&_cmsg_locale=100~ja~JPY&msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_p_landing=1&_x_src=mail

Overview

General Information

Sample URL:	https://www.temu.com/cmsg_transit.html?_cmsg_biz=9010&_cmsg_channel=mail&_cmsg_locale=100~ja~JPY&msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_p_landing=1&_x_src=mail
Analysis ID:	1528514
Tags:	urlscan
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

HTTP GET or POST without a user agent

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 --field-trial-handle=2248,i,12447262649654012378,5517667648891733041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2032 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5816 --field-trial-handle=2248,i,12447262649654012378,5517667648891733041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.temu.com/cmsg_transit.html?_cmsg_biz=9010&_cmsg_channel=mail&_cmsg_locale=100~ja~JPY&msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_p_landing=1&_x_src=mail" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /x/migrate HTTP/1.1Host: x.comConnection: keep-aliveContent-Length: 612Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://twitter.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172834047761380473; guest_id_ads=v1%3A172834047761380473; personalization_id="v1_52kFZYFv+r6JNj9T+YNY9w=="; guest_id=v1%3A172834047761380473

Source: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1	HTTP Parser: Number of links: 0
Source: https://x.com/i/flow/signup	HTTP Parser: Number of links: 0
Source: https://x.com/i/flow/login	HTTP Parser: Number of links: 0

Source: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1	HTTP Parser: Title: Sign In - Google Accounts does not match URL
Source: https://x.com/i/flow/signup	HTTP Parser: Title: Sign In - Google Accounts does not match URL
Source: https://x.com/i/flow/login	HTTP Parser: Title: Sign In - Google Accounts does not match URL

Source: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1	HTTP Parser: No favicon
Source: https://x.com/i/flow/signup	HTTP Parser: No favicon
Source: https://x.com/i/flow/login	HTTP Parser: No favicon
Source: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1	HTTP Parser: No favicon

Source: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1	HTTP Parser: No <meta name="author".. found
Source: https://x.com/i/flow/signup	HTTP Parser: No <meta name="author".. found
Source: https://x.com/i/flow/login	HTTP Parser: No <meta name="author".. found
Source: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1	HTTP Parser: No <meta name="author".. found

Source: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1	HTTP Parser: No <meta name="copyright".. found
Source: https://x.com/i/flow/signup	HTTP Parser: No <meta name="copyright".. found
Source: https://x.com/i/flow/login	HTTP Parser: No <meta name="copyright".. found
Source: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50683 version: TLS 1.2

Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/callback.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/account/personalization/sync_optout_settings.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.temu.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: x.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: abs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.twitter.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: pbs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.x.com
Source: global traffic	DNS traffic detected: DNS query: video.twimg.com
Source: global traffic	DNS traffic detected: DNS query: abs-0.twimg.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Mon, 07 Oct 2024 22:35:15 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 695bc94ee60aa1e3x-rate-limit-limit: 100x-rate-limit-reset: 1728341415x-rate-limit-remaining: 99strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 6x-connection-hash: 2804e5cfff6cb4e727e84d86471309fe9cab8300add8457b55e05df387116e3dconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Mon, 07 Oct 2024 22:35:16 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 3e6ece897f8285edx-rate-limit-limit: 500x-rate-limit-reset: 1728341416x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 5x-connection-hash: 21697607a3efada04db1b9943f15587d5e4a33ca6acd102032ff8a1a5015edfcconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenperf: 7402827104cache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 38eb7b7ed858c720access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 2x-connection-hash: fad573db746d5f23d82653e3c3d95fd94d98c27457476e36c758aff80b631008date: Mon, 07 Oct 2024 22:35:19 GMTserver: tsa_bconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Mon, 07 Oct 2024 22:35:22 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 29711595b432f007x-rate-limit-limit: 500x-rate-limit-reset: 1728341422x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 6x-connection-hash: b4a1725d46c01933b265d44b84c224499e89ed949ae6c5890eb48a79e4641091connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Mon, 07 Oct 2024 22:35:24 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 573ece6bef261cc8x-rate-limit-limit: 500x-rate-limit-reset: 1728341424x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 6x-connection-hash: 6a24c76ba1d829d9c095655a27ebec1e70afd206a1e43c42beb53d0c5e02162dconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Mon, 07 Oct 2024 22:35:26 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 8943e97d6d528327x-rate-limit-limit: 500x-rate-limit-reset: 1728341424x-rate-limit-remaining: 498strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 6x-connection-hash: 028338e41af0cb359972e972328919030a3e0082a83ecd3814fba88e2772189bconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Mon, 07 Oct 2024 22:35:40 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: f66ab48c29d94af0x-rate-limit-limit: 500x-rate-limit-reset: 1728341424x-rate-limit-remaining: 497strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 7x-connection-hash: fe41e644cb4286108b9faaa250469862841933530f1f3f4c1493cbed9c323ab8connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Mon, 07 Oct 2024 22:35:53 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: dea4377f0a4cfa71x-rate-limit-limit: 500x-rate-limit-reset: 1728341424x-rate-limit-remaining: 496strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 5x-connection-hash: 95f37ffe126de56c2620dd39838bd2ed0a7fa1b2208f9326479a1dfab9572762connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Mon, 07 Oct 2024 22:35:59 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 28028efc43a28f95x-rate-limit-limit: 500x-rate-limit-reset: 1728341424x-rate-limit-remaining: 495strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 5x-connection-hash: a4f2601b11621d9a3f90e975e9cdbb91dce75c594e45411d19dc589a44ff2496connection: close

Source: chromecache_571.1.dr, chromecache_646.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_748.1.dr, chromecache_420.1.dr	String found in binary or memory: http://git.io/TrdQbw
Source: chromecache_748.1.dr, chromecache_420.1.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_751.1.dr, chromecache_550.1.dr, chromecache_783.1.dr, chromecache_634.1.dr, chromecache_617.1.dr, chromecache_563.1.dr, chromecache_823.1.dr, chromecache_677.1.dr, chromecache_864.1.dr, chromecache_370.1.dr, chromecache_525.1.dr, chromecache_575.1.dr, chromecache_681.1.dr, chromecache_540.1.dr, chromecache_793.1.dr, chromecache_860.1.dr, chromecache_883.1.dr, chromecache_359.1.dr, chromecache_874.1.dr, chromecache_661.1.dr, chromecache_858.1.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/100ThievesEmoji2024/100ThievesEmoji2024.png
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11588_Loreal_Lancome_JP_Hashmoji2024/BF-11588_Loreal_Lancome_JP_H
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11611_MOC_Q324_Hashmoji/BF-11611_MOC_Q324_Hashmoji.png
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11618_SportsBoulevard_Q324_Hashmoji/BF-11618_SportsBoulevard_Q324
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11686_NetflixJP_Hashmoji_20240803-20241103_Jimenshi/BF-11686_Netf
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11687_NetflixJP_Gokuaku_Hashmoji2024/BF-11687_NetflixJP_Gokuaku_H
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11709_GenshinPaimon_Hashmoji2024/BF-11709_GenshinPaimon_Hashmoji2
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11710_GenshinKachina_Hashmoji2024/BF-11710_GenshinKachina_Hashmoj
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11711_GenshinKinich_Hashmoji2024/BF-11711_GenshinKinich_Hashmoji2
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11713_Genshin_NatlanSunSign_Hashmoji2024/BF-11713_Genshin_NatlanS
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11770_RacingMaster_JPLaunch_Hashmoji2024/BF-11770_RacingMaster_JP
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11790_COLOPL_Hashmoji/BF-11790_COLOPL_Hashmoji.png
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11804_NetEase_RacingMaster_2024Hashmoji2/BF-11804_NetEase_RacingM
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11821_lake_official__Custom_Like_after/BF-11821_lake_official__Cu
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11868_Schick_Hashmoji2024_V2/BF-11868_Schick_Hashmoji2024_V2.png
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11871_FANCLNew_calolimit_Hashmoji2024/BF-11871_FANCLNew_calolimit
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11901_AlatTechIce_Hashmoji2024/BF-11901_AlatTechIce_Hashmoji2024.
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11949_GlicoThailandPockyBox_Hashmoji2024_/BF-11949_GlicoThailandP
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11950_Riyadhseason_Hashmoji2024_/BF-11950_Riyadhseason_Hashmoji20
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11952_drama_wowow_GoldenKamuyDrama_Hashmoji2024/BF-11952_drama_wo
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12013_SportsBlvdSA_SND24_HashmojiAfter/BF-12013_SportsBlvdSA_SND2
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12041_ATLUS_stud_zero_launch_Hashmoji2024_V2/BF-12041_ATLUS_stud_
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12061_iriam_official_Hashmoji2024_V2/BF-12061_iriam_official_Hash
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12090_silenthill_jp_Hashmoji2024/BF-12090_silenthill_jp_Hashmoji2
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12168_Aljazeera_Hashmoji2024_v1/BF-12168_Aljazeera_Hashmoji2024_v
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12184_One_Plus_India_Pre_Diwali_2024_during/BF-12184_One_Plus_Ind
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-12195_MOJKSA_Hashmoji_2024/BF-12195_MOJKSA_Hashmoji_2024.png
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF_11905_Hashmoji_Only_After_Aeromexico_90anos/BF_11905_Hashmoji_Onl
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF_11915_Sabic_Homeland_Hashmoji_24_/BF_11915_Sabic_Homeland_Hashmoj
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF_12012_KFSHRC_National_Day_Hashmoji_2024_/BF_12012_KFSHRC_National
Source: chromecache_803.1.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF_12060_MOC_2024_SND_Hashmoji/BF_12060_MOC_2024_SND_Hashmoji.png

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 --field-trial-handle=2248,i,12447262649654012378,5517667648891733041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.temu.com/cmsg_transit.html?_cmsg_biz=9010&_cmsg_channel=mail&_cmsg_locale=100~ja~JPY&msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_p_landing=1&_x_src=mail"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5816 --field-trial-handle=2248,i,12447262649654012378,5517667648891733041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 --field-trial-handle=2248,i,12447262649654012378,5517667648891733041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5816 --field-trial-handle=2248,i,12447262649654012378,5517667648891733041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js	0%	URL Reputation	safe
http://underscorejs.org	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePee.8a7edc7a.js	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11950_Riyadhseason_Hashmoji2024_/BF-11950_Riyadhseason_Hashmoji20	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfile~bundle.UserProfile.6ba4be2a.js	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	0%	URL Reputation	safe
https://meet.google.com	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Birdwatch~	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Communitie	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.InlinePl	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome~bundle.TV.d10fe44a.js	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.EmojiPic	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
twitter.com	104.244.42.193	true	false	unknown
google.com	142.250.184.206	true	false	unknown
dualstack.video.twitter.map.fastly.net	146.75.52.158	true	false	unknown
gw-c-eu-isp.temu.com	20.157.119.2	true	false	unknown
tpop-api.x.com	104.244.42.194	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
tpop-api.twitter.com	104.244.42.130	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
t.co	162.159.140.229	true	false	unknown
twimg.twitter.map.fastly.net	146.75.52.159	true	false	unknown
play.google.com	142.250.74.206	true	false	unknown
dualstack.twimg.twitter.map.fastly.net	146.75.52.159	true	false	unknown
abs-zero.twimg.com	104.244.43.131	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
x.com	104.244.42.129	true	false	unknown
abs.twimg.com	unknown	unknown	false	unknown
pbs.twimg.com	unknown	unknown	false	unknown
api.x.com	unknown	unknown	false	unknown
abs-0.twimg.com	unknown	unknown	false	unknown
api.twitter.com	unknown	unknown	false	unknown
www.temu.com	unknown	unknown	false	unknown
video.twimg.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1&mx=2	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js	false	URL Reputation: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Compose~bundle.Conversation~bundle.DMRichTextCompose~bund.2433e2ba.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.NewTweetsPill.1180970a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/ondemand.LottieWeb.bcf9974a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/vendor.42364e5a.js	false		unknown
https://video.twimg.com/amplify_video/1830436579938058240/vid/avc1/0/3000/720x1280/_KokoJLS0-4KMPDE.m4s	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlayerMiniUI~loaders.video.VideoPlayerEventsUI.81db582a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/ondemand.ProfileSidebar.2b5e5e2a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~bundle.Ocf~bundle.RichTextCompose.e5c7ed2a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~bundle.LiveEvent~loaders.video.PlayerBase~loader.MediaPrevi.cb6bf63a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.LiveEvent~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle..5b89ca6a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.WideLayout~loader.ProfileClusterFollow.d0bbc1ea.js	false		unknown
https://video.twimg.com/amplify_video/1830436579938058240/aud/mp4a/3000/6000/128000/5IRTClJocffRT_At.m4s	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.DirectMessages~bundl.5455e27a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.ExtendedUserProfile~bundle.UserProfile.7c0c4f4a.js	false		unknown
https://abs-0.twimg.com/emoji/v2/svg/1f64c.svg	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~ondemand.SettingsInternals~bundle.UserLists~loader.EventSummaryHandler~loader.topicHa.bbc1529a.js	false		unknown
https://video.twimg.com/ext_tw_video/1804853923292790784/pu/vid/avc1/3000/6000/720x1280/4axQQCBek-etR_OJ.m4s	false		unknown
https://x.com/x/migrate	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~bundle.Account~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePee.8a7edc7a.js	false	URL Reputation: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsInternals~bundle.SettingsRevamp~bundle.SettingsTransparency.481520ea.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE.d4c05fca.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.B.8d67843a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsInternals~bundle.OAuth.493303ca.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi.20a474da.js	false		unknown
https://video.twimg.com/ext_tw_video/1804853923292790784/pu/aud/mp4a/6000/9000/128000/k7WfAE9HP9lI0_0w.m4s	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer.8137c55a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.1004095a.js	false		unknown
https://abs-0.twimg.com/emoji/v2/svg/1f469-200d-1f373.svg	false		unknown
https://video.twimg.com/ext_tw_video/1806682318976778241/pu/pl/mrZ1G2Wgh5jh9UUH.m3u8?variant_version=1&tag=12&v=cfc	false		unknown
https://video.twimg.com/ext_tw_video/1804853923292790784/pu/pl/_B4HmvWL6nKq2YsQ.m3u8?variant_version=1&tag=12&v=cfc	false		unknown
https://api.x.com/graphql/Yka-W8dz7RaEuQNkroPkYw/UserByScreenName?variables=%7B%22screen_name%22%3A%22shoptemu%22%2C%22withSafetyModeUserFields%22%3Afalse%7D&features=%7B%22hidden_profile_subscriptions_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22subscriptions_verification_info_is_identity_verified_enabled%22%3Atrue%2C%22subscriptions_verification_info_verified_since_enabled%22%3Atrue%2C%22highlights_tweets_tab_ui_enabled%22%3Atrue%2C%22responsive_web_twitter_article_notes_tab_enabled%22%3Atrue%2C%22subscriptions_feature_can_gift_premium%22%3Atrue%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22withAuxiliaryUserLabels%22%3Afalse%7D	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfile~bundle.UserProfile.6ba4be2a.js	false	URL Reputation: safe	unknown
https://video.twimg.com/ext_tw_video/1806682318976778241/pu/vid/avc1/0/3000/720x1280/JaShnwyq44F_8SaZ.m4s	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.AudioOnlyVideoPlayer.f013ad8a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.TimelineCardHandler.4010b5aa.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.AudioSpaceDetail~bundle.3b27748a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfile~bundle.Ocf.d7cc349a.js	false		unknown
https://api.x.com/graphql/E3opETHurmVJflFsUBVuUQ/UserTweets?variables=%7B%22userId%22%3A%221557364292160090112%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D	false		unknown
https://abs-0.twimg.com/emoji/v2/svg/1f6cd.svg	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Settings~bundle.SettingsTransparency.eb183c4a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/loader.AppModules.d89da73a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~bundle.Communities~bundle.TwitterArticles~bundle.WorkHistory~bundle.Delegate~bundle.J.050b62ea.js	false		unknown
https://api.x.com/graphql/dexO_2tohK86JDudXXG3Yw/UserMedia?variables=%7B%22userId%22%3A%221557364292160090112%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Afalse%2C%22withClientEventToken%22%3Afalse%2C%22withBirdwatchNotes%22%3Afalse%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.TweetCurationActionMenu.a8fa54da.js	false		unknown
https://video.twimg.com/amplify_video/1830436579938058240/vid/avc1/3000/6000/720x1280/bg-3oJOLiEak3hSd.m4s	false		unknown
https://video.twimg.com/amplify_video/1830436579938058240/vid/avc1/0/0/720x1280/cStyad8o4T05_pxo.mp4	false		unknown
https://video.twimg.com/ext_tw_video/1804853923292790784/pu/aud/mp4a/0/3000/128000/IlbmRPy4nQEnlfRJ.m4s	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.UserFollowLists~bundle.UserProfi.5af7a95a.js	false		unknown
https://video.twimg.com/ext_tw_video/1804853923292790784/pu/aud/mp4a/3000/6000/128000/yHmuTj36vhdadEoU.m4s	false		unknown
https://pbs.twimg.com/profile_images/1594728438237118465/4MQ3o6xJ_normal.jpg	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome~bundle.TV.d10fe44a.js	false	URL Reputation: safe	unknown
https://abs-0.twimg.com/emoji/v2/svg/1f45f.svg	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlayerEventsUI~loaders.video.VideoPlayerPrerollU.245797ea.js	false		unknown
https://video.twimg.com/ext_tw_video/1804853923292790784/pu/aud/mp4a/0/0/128000/c5jaXcrC6r-cXx0Z.mp4	false		unknown
https://abs.twimg.com/responsive-web/client-web/Chirp-Heavy.f44ae4ea.woff2	false		unknown
https://video.twimg.com/ext_tw_video/1757075145569533952/pu/pl/avc1/1280x720/ZMckTZBe2pUUPiqt.m3u8	false		unknown
https://api.x.com/graphql/Z2BA99jFw6TxaJM5v7Irmg/useFetchProfileBlocks_profileExistsQuery?variables=%7B%22screenName%22%3A%22shoptemu%22%7D	false		unknown
https://video.twimg.com/ext_tw_video/1806682318976778241/pu/aud/mp4a/0/0/128000/Ymf7IxqftPEUBxjy.mp4	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Grok~bundle.BrandedLikesPreview~bundle.TwitterArticles~bundle.Compose~bundle.Co.a5d0ffaa.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsInternals~bundle.Ocf.2874365a.js	false		unknown
https://api.x.com/1.1/onboarding/sso_init.json	false		unknown
https://api.x.com/1.1/users/recommendations.json?include_profile_interstitial_type=1&include_blocking=1&include_blocked_by=1&include_followed_by=1&include_want_retweets=1&include_mute_edge=1&include_can_dm=1&include_can_media_tag=1&include_ext_is_blue_verified=1&include_ext_verified_type=1&include_ext_profile_image_shape=1&skip_status=1&&pc=true&display_location=profile_accounts_sidebar&limit=3&user_id=1557364292160090112	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlayerHashtagHighlightUI~loaders.video.VideoPlay.e34b9d6a.js	false		unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~bundle.Account~ondemand.SettingsInternals~ondemand.SettingsRevamp~bundle.Settings.9de54c7a.js	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
http://underscorejs.org	chromecache_748.1.dr, chromecache_420.1.dr	false	URL Reputation: safe	unknown
https://support.x.com/articles/14016	chromecache_618.1.dr, chromecache_627.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TimelineRenderer.	chromecache_690.1.dr, chromecache_685.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SignupModule.b618	chromecache_756.1.dr, chromecache_822.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	chromecache_803.1.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11949_GlicoThailandPockyBox_Hashmoji2024_/BF-11949_GlicoThailandP	chromecache_803.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	chromecache_803.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.ProfileSidebar.	chromecache_447.1.dr, chromecache_642.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Ocf.f0d09c2a.js.m	chromecache_406.1.dr, chromecache_879.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	chromecache_803.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SideNav.22438fba.	chromecache_706.1.dr, chromecache_476.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina	chromecache_803.1.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	chromecache_803.1.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11950_Riyadhseason_Hashmoji2024_/BF-11950_Riyadhseason_Hashmoji20	chromecache_803.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	chromecache_367.1.dr, chromecache_485.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.DividerHandler.f6	chromecache_652.1.dr, chromecache_771.1.dr	false		unknown
https://x.com/en/privacy	chromecache_551.1.dr, chromecache_802.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.LottieWeb.bcf99	chromecache_449.1.dr, chromecache_699.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	chromecache_586.1.dr, chromecache_766.1.dr, chromecache_731.1.dr, chromecache_856.1.dr, chromecache_707.1.dr, chromecache_486.1.dr, chromecache_500.1.dr, chromecache_817.1.dr, chromecache_785.1.dr, chromecache_405.1.dr	false	URL Reputation: safe	unknown
https://x.com/i/broadcasts/$	chromecache_358.1.dr, chromecache_478.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF_12060_MOC_2024_SND_Hashmoji/BF_12060_MOC_2024_SND_Hashmoji.png	chromecache_803.1.dr	false		unknown
https://meet.google.com	chromecache_535.1.dr, chromecache_784.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Birdwatch~	chromecache_779.1.dr, chromecache_581.1.dr, chromecache_749.1.dr, chromecache_738.1.dr, chromecache_750.1.dr, chromecache_653.1.dr, chromecache_498.1.dr, chromecache_792.1.dr, chromecache_477.1.dr, chromecache_853.1.dr, chromecache_567.1.dr, chromecache_629.1.dr, chromecache_427.1.dr, chromecache_686.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Communitie	chromecache_584.1.dr, chromecache_411.1.dr, chromecache_786.1.dr, chromecache_635.1.dr, chromecache_872.1.dr, chromecache_611.1.dr, chromecache_713.1.dr, chromecache_554.1.dr, chromecache_366.1.dr, chromecache_558.1.dr, chromecache_876.1.dr, chromecache_454.1.dr, chromecache_840.1.dr, chromecache_440.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.InlinePl	chromecache_659.1.dr, chromecache_346.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AppModules.d89da7	chromecache_746.1.dr, chromecache_472.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Bookmarks~	chromecache_458.1.dr, chromecache_467.1.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11871_FANCLNew_calolimit_Hashmoji2024/BF-11871_FANCLNew_calolimit	chromecache_803.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loaders.video.PlayerHls1	chromecache_492.1.dr, chromecache_673.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.tweetHandler.4a33	chromecache_421.1.dr, chromecache_808.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.EmojiPic	chromecache_598.1.dr, chromecache_693.1.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.Dropdown.78a54e	chromecache_814.1.dr, chromecache_363.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TweetCurationActi	chromecache_703.1.dr, chromecache_770.1.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loaders.video.Vid	chromecache_806.1.dr, chromecache_679.1.dr, chromecache_683.1.dr, chromecache_742.1.dr, chromecache_502.1.dr, chromecache_769.1.dr, chromecache_857.1.dr, chromecache_361.1.dr, chromecache_396.1.dr, chromecache_365.1.dr, chromecache_774.1.dr, chromecache_432.1.dr, chromecache_849.1.dr, chromecache_827.1.dr, chromecache_831.1.dr, chromecache_709.1.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
104.244.42.129	x.com	United States	13414	TWITTERUS	false
216.58.212.142	unknown	United States	15169	GOOGLEUS	false
142.250.74.206	play.google.com	United States	15169	GOOGLEUS	false
146.75.52.159	twimg.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
146.75.52.158	dualstack.video.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
104.244.43.131	abs-zero.twimg.com	United States	54113	FASTLYUS	false
142.250.184.206	google.com	United States	15169	GOOGLEUS	false
172.217.16.142	unknown	United States	15169	GOOGLEUS	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	false
104.244.42.65	unknown	United States	13414	TWITTERUS	false
104.244.42.1	unknown	United States	13414	TWITTERUS	false
104.244.42.2	unknown	United States	13414	TWITTERUS	false
172.217.16.206	unknown	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
104.244.42.130	tpop-api.twitter.com	United States	13414	TWITTERUS	false
20.157.119.2	gw-c-eu-isp.temu.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.244.42.194	tpop-api.x.com	United States	13414	TWITTERUS	false
104.244.42.193	twitter.com	United States	13414	TWITTERUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528514
Start date and time:	2024-10-08 00:33:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.temu.com/cmsg_transit.html?_cmsg_biz=9010&_cmsg_channel=mail&_cmsg_locale=100~ja~JPY&msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_p_landing=1&_x_src=mail
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@36/812@72/28
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://x.com/login Browse: https://x.com/i/flow/signup Browse: https://x.com/settings

Input	Output
URL: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1&mx=2 Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign up", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Don't miss what's happening People on X are the first to know.", "has_visible_qrcode":false}

URL: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1 Model: jbxai	{ "brand":["x.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign up", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Seems like you lost connectivity. We'll keep retrying.", "has_visible_qrcode":false}

URL: https://x.com/i/flow/signup Model: jbxai	{ "brand":["Apple", "Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Create account", "text_input_field_labels":["Terms of Service", "Privacy Policy"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Join X today", "has_visible_qrcode":false}

URL: https://x.com/settings Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Log in", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Don't miss what's happening People on X are the first to know.", "has_visible_qrcode":false}

URL: https://x.com/settings/account/personalization Model: jbxai	{ "brand":["X"], "contains_trigger_text":true, "trigger_text":"Personalization and data", "prominent_button_name":"Sign up", "text_input_field_labels":["Allow additional information sharing with business partners"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Don't miss what's happening People on X are the first to know.", "has_visible_qrcode":false}

URL: https://x.com/settings/account/personalization Model: jbxai	{ "brand":["X"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Log in", "text_input_field_labels":["Don't miss what's happening", "People on X are the first to know."], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "text":"Don't miss what's happening People on X are the first to know.", "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18529)
Category:	dropped
Size (bytes):	18719
Entropy (8bit):	5.396024238506273
Encrypted:	false
SSDEEP:	384:GbqhvWde6j0n7fvEuTB9MhNEn5i2HtjlqxvmVEFyC9sv/:GbqhvWQ6QD7t9UE5i2Hexe2gksv/
MD5:	4772F50994B9C5EE9E54B2001A7FB0DC
SHA1:	4C63F3383DED24B25282D188E3A403305F856016
SHA-256:	3CA99EECA15811820D8802BCE891164E0D9E495EE5A4C9C4E3602CDEBB51F561
SHA-512:	1AC367F4277C2C7EFAC7798D27259ECE910826316B7197EEAD430B03975B603F6BE91D78F0CB3688EF236B689E91393F46F548F4C64E7C8E6253D26830DF261C
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Ocf~bundle.Payments~ondemand.Insights~bundle.TV~bundle.Account"],{839515:(t,r,e)=>{var n=e(638761)(e(137772),"DataView");t.exports=n},989612:(t,r,e)=>{var n=e(752118),o=e(196909),a=e(198138),u=e(704174),i=e(507942);function s(t){var r=-1,e=null==t?0:t.length;for(this.clear();++r<e;){var n=t[r];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=o,s.prototype.get=a,s.prototype.has=u,s.prototype.set=i,t.exports=s},180235:(t,r,e)=>{var n=e(103945),o=e(221846),a=e(988028),u=e(572344),i=e(594769);function s(t){var r=-1,e=null==t?0:t.length;for(this.clear();++r<e;){var n=t[r];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=o,s.prototype.get=a,s.prototype.has=u,s.prototype.set=i,t.exports=s},510326:(t,r,e)=>{var n=e(638761)(e(137772),"Map");t.exports=n},896738:(t,r,e)=>{var n=e(792411),o=e(436417),a=e(586928),u=e(479493),i=e(724150);function s(t){var r=-1,e=null==t

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 8, 2024 00:34:34.972376108 CEST	192.168.2.4	1.1.1.1	0xca4c	Standard query (0)	www.temu.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:34.972549915 CEST	192.168.2.4	1.1.1.1	0x4323	Standard query (0)	www.temu.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:36.060899973 CEST	192.168.2.4	1.1.1.1	0x88a	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:36.061048985 CEST	192.168.2.4	1.1.1.1	0x6f36	Standard query (0)	twitter.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:36.817034960 CEST	192.168.2.4	1.1.1.1	0x325f	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:36.817667007 CEST	192.168.2.4	1.1.1.1	0xb0e2	Standard query (0)	x.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:37.545845985 CEST	192.168.2.4	1.1.1.1	0xf93f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:37.546067953 CEST	192.168.2.4	1.1.1.1	0x6edb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:37.913532019 CEST	192.168.2.4	1.1.1.1	0xb4b9	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:37.914354086 CEST	192.168.2.4	1.1.1.1	0xef23	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:37.915945053 CEST	192.168.2.4	1.1.1.1	0xe034	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:37.916488886 CEST	192.168.2.4	1.1.1.1	0x20fd	Standard query (0)	api.twitter.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:38.055996895 CEST	192.168.2.4	1.1.1.1	0x1ef4	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:38.056619883 CEST	192.168.2.4	1.1.1.1	0x92af	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 8, 2024 00:34:38.064471960 CEST	192.168.2.4	1.1.1.1	0xf751	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:38.064976931 CEST	192.168.2.4	1.1.1.1	0x433d	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:38.079668045 CEST	192.168.2.4	1.1.1.1	0xecfc	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:38.079988956 CEST	192.168.2.4	1.1.1.1	0x788f	Standard query (0)	api.x.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:40.346952915 CEST	192.168.2.4	1.1.1.1	0x8370	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:40.347445011 CEST	192.168.2.4	1.1.1.1	0xba60	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:40.367985010 CEST	192.168.2.4	1.1.1.1	0x4376	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:40.367985010 CEST	192.168.2.4	1.1.1.1	0x9924	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:42.877295971 CEST	192.168.2.4	1.1.1.1	0x10aa	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:42.877474070 CEST	192.168.2.4	1.1.1.1	0xd301	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:44.659398079 CEST	192.168.2.4	1.1.1.1	0xc532	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:44.659796000 CEST	192.168.2.4	1.1.1.1	0x9858	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:49.840562105 CEST	192.168.2.4	1.1.1.1	0x5774	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:49.840719938 CEST	192.168.2.4	1.1.1.1	0x2cd5	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:49.845007896 CEST	192.168.2.4	1.1.1.1	0x7832	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:49.845166922 CEST	192.168.2.4	1.1.1.1	0xd95b	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:49.846684933 CEST	192.168.2.4	1.1.1.1	0x722d	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:49.846867085 CEST	192.168.2.4	1.1.1.1	0xfd02	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:50.711755037 CEST	192.168.2.4	1.1.1.1	0x6c62	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:50.711936951 CEST	192.168.2.4	1.1.1.1	0x3055	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:50.718271017 CEST	192.168.2.4	1.1.1.1	0xa00d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:50.718488932 CEST	192.168.2.4	1.1.1.1	0xfb72	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:50.729015112 CEST	192.168.2.4	1.1.1.1	0x9358	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:50.729276896 CEST	192.168.2.4	1.1.1.1	0x5c35	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:34:50.961007118 CEST	192.168.2.4	1.1.1.1	0x7f6e	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:50.961148024 CEST	192.168.2.4	1.1.1.1	0xc69b	Standard query (0)	api.x.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:14.601732969 CEST	192.168.2.4	1.1.1.1	0xf94f	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:14.602524996 CEST	192.168.2.4	1.1.1.1	0xf3f5	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:15.899496078 CEST	192.168.2.4	1.1.1.1	0xc37a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:15.899496078 CEST	192.168.2.4	1.1.1.1	0x532f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:25.282478094 CEST	192.168.2.4	1.1.1.1	0xaf63	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:25.282839060 CEST	192.168.2.4	1.1.1.1	0xc1d2	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:25.477864027 CEST	192.168.2.4	1.1.1.1	0xb848	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:25.478071928 CEST	192.168.2.4	1.1.1.1	0x2d6d	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:27.539993048 CEST	192.168.2.4	1.1.1.1	0xe1ca	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:27.540364027 CEST	192.168.2.4	1.1.1.1	0x9cd2	Standard query (0)	twitter.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:28.750138998 CEST	192.168.2.4	1.1.1.1	0xdafc	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:28.751250982 CEST	192.168.2.4	1.1.1.1	0x4b4a	Standard query (0)	twitter.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:33.080805063 CEST	192.168.2.4	1.1.1.1	0x25a4	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:33.081126928 CEST	192.168.2.4	1.1.1.1	0x8ad7	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:33.975744963 CEST	192.168.2.4	1.1.1.1	0x5901	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:33.976231098 CEST	192.168.2.4	1.1.1.1	0xde67	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:39.164109945 CEST	192.168.2.4	1.1.1.1	0x7295	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:39.167066097 CEST	192.168.2.4	1.1.1.1	0xf59d	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:43.405148983 CEST	192.168.2.4	1.1.1.1	0x8315	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:43.405462980 CEST	192.168.2.4	1.1.1.1	0x6c5f	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:43.455780029 CEST	192.168.2.4	1.1.1.1	0xb315	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:43.456178904 CEST	192.168.2.4	1.1.1.1	0x165	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:44.642530918 CEST	192.168.2.4	1.1.1.1	0x7391	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:44.642868996 CEST	192.168.2.4	1.1.1.1	0xa1e7	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:49.070441961 CEST	192.168.2.4	1.1.1.1	0x860e	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:49.070647955 CEST	192.168.2.4	1.1.1.1	0x17e7	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:49.996962070 CEST	192.168.2.4	1.1.1.1	0xe9f8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:49.997117043 CEST	192.168.2.4	1.1.1.1	0xf642	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:50.196439028 CEST	192.168.2.4	1.1.1.1	0x27f1	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:50.196605921 CEST	192.168.2.4	1.1.1.1	0xf9c4	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Oct 8, 2024 00:35:57.412564993 CEST	192.168.2.4	1.1.1.1	0x78ef	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:57.413052082 CEST	192.168.2.4	1.1.1.1	0x85e5	Standard query (0)	api.x.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 8, 2024 00:34:34.981434107 CEST	1.1.1.1	192.168.2.4	0xca4c	No error (0)	www.temu.com	temu-gtm.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:34.981434107 CEST	1.1.1.1	192.168.2.4	0xca4c	No error (0)	gw-c-eu-isp.temu.com		20.157.119.2	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:34.981434107 CEST	1.1.1.1	192.168.2.4	0xca4c	No error (0)	gw-c-eu-isp.temu.com		20.157.217.118	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:34.981434107 CEST	1.1.1.1	192.168.2.4	0xca4c	No error (0)	gw-c-eu-isp.temu.com		20.157.217.65	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:34.981434107 CEST	1.1.1.1	192.168.2.4	0xca4c	No error (0)	gw-c-eu-isp.temu.com		20.47.117.32	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:34.982008934 CEST	1.1.1.1	192.168.2.4	0x4323	No error (0)	www.temu.com	temu-gtm.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:36.070599079 CEST	1.1.1.1	192.168.2.4	0x88a	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:36.826066971 CEST	1.1.1.1	192.168.2.4	0x325f	No error (0)	x.com		104.244.42.129	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:37.554414988 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:34:37.554831028 CEST	1.1.1.1	192.168.2.4	0xf93f	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:37.920435905 CEST	1.1.1.1	192.168.2.4	0xb4b9	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:37.920435905 CEST	1.1.1.1	192.168.2.4	0xb4b9	No error (0)	twimg.twitter.map.fastly.net		146.75.52.159	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:37.921394110 CEST	1.1.1.1	192.168.2.4	0xef23	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:37.922768116 CEST	1.1.1.1	192.168.2.4	0xe034	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:37.922768116 CEST	1.1.1.1	192.168.2.4	0xe034	No error (0)	tpop-api.twitter.com		104.244.42.130	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:37.923896074 CEST	1.1.1.1	192.168.2.4	0x20fd	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:38.064496994 CEST	1.1.1.1	192.168.2.4	0x1ef4	No error (0)	t.co		162.159.140.229	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:38.073690891 CEST	1.1.1.1	192.168.2.4	0xf751	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:38.073690891 CEST	1.1.1.1	192.168.2.4	0xf751	No error (0)	dualstack.twimg.twitter.map.fastly.net		146.75.52.159	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:38.073894024 CEST	1.1.1.1	192.168.2.4	0x433d	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:38.087986946 CEST	1.1.1.1	192.168.2.4	0xecfc	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:38.087986946 CEST	1.1.1.1	192.168.2.4	0xecfc	No error (0)	tpop-api.x.com		104.244.42.194	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:38.088716984 CEST	1.1.1.1	192.168.2.4	0x788f	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:40.356241941 CEST	1.1.1.1	192.168.2.4	0x8370	No error (0)	video.twimg.com	dualstack.video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:40.356241941 CEST	1.1.1.1	192.168.2.4	0x8370	No error (0)	dualstack.video.twitter.map.fastly.net		146.75.52.158	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:40.356682062 CEST	1.1.1.1	192.168.2.4	0xba60	No error (0)	video.twimg.com	dualstack.video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:40.376575947 CEST	1.1.1.1	192.168.2.4	0x4376	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:40.376575947 CEST	1.1.1.1	192.168.2.4	0x4376	No error (0)	abs-zero.twimg.com		104.244.43.131	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:40.376893997 CEST	1.1.1.1	192.168.2.4	0x9924	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:42.885860920 CEST	1.1.1.1	192.168.2.4	0x10aa	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:42.885860920 CEST	1.1.1.1	192.168.2.4	0x10aa	No error (0)	abs-zero.twimg.com		104.244.43.131	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:42.887283087 CEST	1.1.1.1	192.168.2.4	0xd301	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:44.669053078 CEST	1.1.1.1	192.168.2.4	0xc532	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:44.669053078 CEST	1.1.1.1	192.168.2.4	0xc532	No error (0)	twimg.twitter.map.fastly.net		146.75.52.159	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:44.669507027 CEST	1.1.1.1	192.168.2.4	0x9858	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:46.117660046 CEST	1.1.1.1	192.168.2.4	0xe598	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:46.117660046 CEST	1.1.1.1	192.168.2.4	0xe598	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:47.926008940 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:47.926008940 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:49.847462893 CEST	1.1.1.1	192.168.2.4	0x2cd5	No error (0)	google.com			65	IN (0x0001)	false
Oct 8, 2024 00:34:49.847577095 CEST	1.1.1.1	192.168.2.4	0x5774	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:49.851845026 CEST	1.1.1.1	192.168.2.4	0xd95b	No error (0)	google.com			65	IN (0x0001)	false
Oct 8, 2024 00:34:49.851895094 CEST	1.1.1.1	192.168.2.4	0x7832	No error (0)	google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:49.853651047 CEST	1.1.1.1	192.168.2.4	0xfd02	No error (0)	google.com			65	IN (0x0001)	false
Oct 8, 2024 00:34:49.853682041 CEST	1.1.1.1	192.168.2.4	0x722d	No error (0)	google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:50.720110893 CEST	1.1.1.1	192.168.2.4	0x3055	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:34:50.720309019 CEST	1.1.1.1	192.168.2.4	0x6c62	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:50.726190090 CEST	1.1.1.1	192.168.2.4	0xa00d	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:50.726793051 CEST	1.1.1.1	192.168.2.4	0xfb72	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:34:50.738302946 CEST	1.1.1.1	192.168.2.4	0x9358	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:50.738378048 CEST	1.1.1.1	192.168.2.4	0x5c35	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:34:50.968986988 CEST	1.1.1.1	192.168.2.4	0x7f6e	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:34:50.968986988 CEST	1.1.1.1	192.168.2.4	0x7f6e	No error (0)	tpop-api.x.com		104.244.42.130	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:34:50.969484091 CEST	1.1.1.1	192.168.2.4	0xc69b	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:06.822369099 CEST	1.1.1.1	192.168.2.4	0x53e2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:06.822369099 CEST	1.1.1.1	192.168.2.4	0x53e2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:14.609150887 CEST	1.1.1.1	192.168.2.4	0xf94f	No error (0)	google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:14.609167099 CEST	1.1.1.1	192.168.2.4	0xf3f5	No error (0)	google.com			65	IN (0x0001)	false
Oct 8, 2024 00:35:15.907536983 CEST	1.1.1.1	192.168.2.4	0xc37a	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:15.907551050 CEST	1.1.1.1	192.168.2.4	0x532f	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:35:25.291182995 CEST	1.1.1.1	192.168.2.4	0xaf63	No error (0)	play.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:25.488796949 CEST	1.1.1.1	192.168.2.4	0xb848	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:25.488796949 CEST	1.1.1.1	192.168.2.4	0xb848	No error (0)	dualstack.twimg.twitter.map.fastly.net		146.75.52.159	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:25.488814116 CEST	1.1.1.1	192.168.2.4	0x2d6d	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:27.546853065 CEST	1.1.1.1	192.168.2.4	0xe1ca	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:27.793988943 CEST	1.1.1.1	192.168.2.4	0x7588	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:27.793988943 CEST	1.1.1.1	192.168.2.4	0x7588	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:28.757814884 CEST	1.1.1.1	192.168.2.4	0xdafc	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:33.089572906 CEST	1.1.1.1	192.168.2.4	0x25a4	No error (0)	google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:33.089948893 CEST	1.1.1.1	192.168.2.4	0x8ad7	No error (0)	google.com			65	IN (0x0001)	false
Oct 8, 2024 00:35:33.983396053 CEST	1.1.1.1	192.168.2.4	0x5901	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:33.983952045 CEST	1.1.1.1	192.168.2.4	0xde67	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:35:39.172517061 CEST	1.1.1.1	192.168.2.4	0x7295	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:39.172517061 CEST	1.1.1.1	192.168.2.4	0x7295	No error (0)	twimg.twitter.map.fastly.net		146.75.52.159	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:39.175282001 CEST	1.1.1.1	192.168.2.4	0xf59d	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:43.412226915 CEST	1.1.1.1	192.168.2.4	0x8315	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:43.412226915 CEST	1.1.1.1	192.168.2.4	0x8315	No error (0)	dualstack.twimg.twitter.map.fastly.net		146.75.52.159	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:43.412570953 CEST	1.1.1.1	192.168.2.4	0x6c5f	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:43.462557077 CEST	1.1.1.1	192.168.2.4	0xb315	No error (0)	video.twimg.com	dualstack.video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:43.462557077 CEST	1.1.1.1	192.168.2.4	0xb315	No error (0)	dualstack.video.twitter.map.fastly.net		146.75.52.158	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:43.465409040 CEST	1.1.1.1	192.168.2.4	0x165	No error (0)	video.twimg.com	dualstack.video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:44.649338007 CEST	1.1.1.1	192.168.2.4	0x7391	No error (0)	video.twimg.com	dualstack.video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:44.649338007 CEST	1.1.1.1	192.168.2.4	0x7391	No error (0)	dualstack.video.twitter.map.fastly.net		146.75.52.158	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:44.650090933 CEST	1.1.1.1	192.168.2.4	0xa1e7	No error (0)	video.twimg.com	dualstack.video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:47.573853016 CEST	1.1.1.1	192.168.2.4	0x393	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:47.573853016 CEST	1.1.1.1	192.168.2.4	0x393	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:49.079473972 CEST	1.1.1.1	192.168.2.4	0x17e7	No error (0)	google.com			65	IN (0x0001)	false
Oct 8, 2024 00:35:49.079498053 CEST	1.1.1.1	192.168.2.4	0x860e	No error (0)	google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:50.005223036 CEST	1.1.1.1	192.168.2.4	0xe9f8	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:50.005250931 CEST	1.1.1.1	192.168.2.4	0xf642	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:35:50.205406904 CEST	1.1.1.1	192.168.2.4	0xf9c4	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:50.205626011 CEST	1.1.1.1	192.168.2.4	0x27f1	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:50.205626011 CEST	1.1.1.1	192.168.2.4	0x27f1	No error (0)	twimg.twitter.map.fastly.net		146.75.52.159	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:57.421964884 CEST	1.1.1.1	192.168.2.4	0x78ef	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:35:57.421964884 CEST	1.1.1.1	192.168.2.4	0x78ef	No error (0)	tpop-api.x.com		104.244.42.2	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:35:57.421979904 CEST	1.1.1.1	192.168.2.4	0x85e5	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:36:15.143253088 CEST	1.1.1.1	192.168.2.4	0xffb4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:36:15.143253088 CEST	1.1.1.1	192.168.2.4	0xffb4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:34:35 UTC	811	OUT	GET /cmsg_transit.html?_cmsg_biz=9010&_cmsg_channel=mail&_cmsg_locale=100~ja~JPY&msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_p_landing=1&_x_src=mail HTTP/1.1 Host: www.temu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:34:36 UTC	1971	IN	HTTP/1.1 302 Server: nginx Date: Mon, 07 Oct 2024 22:34:35 GMT Content-Length: 0 Connection: close Location: https://twitter.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1 x-yak-request-id: 1728340475942-92642340fc27ead39102115ad60ce5dd strict-transport-security: max-age=31536000 Set-Cookie: region=211; Expires=Sat, 05-Apr-25 22:34:35 GMT; Path=/; Secure Set-Cookie: language=en; Expires=Sat, 05-Apr-25 22:34:35 GMT; Path=/; Secure Set-Cookie: currency=USD; Expires=Sat, 05-Apr-25 22:34:35 GMT; Path=/; Secure Content-Security-Policy-Report-Only: default-src temu: .temu.com .kwcdn.com wss://.temu.com .paypal.com .googleapis.com .gstatic.com .googletagmanager.com .google-analytics.com .analytics.google.com .doubleclick.net .google.com .googlesyndication.com .googleusercontent.com www.googleadservices.com www.google.cn www.google.com.hk www.google.co.uk www.google.ca www.google.com.au www.google.co.nz google.com connect.facebook.net www.facebook.com appleid.cdn-apple.com socialplugin.facebook.net .cash.app .forter.com www.paypalobjects.com .braintree-api.com .braintreegateway.com cash-f.squarecdn.com api.squareup.com api.lab.amplitude.com .paidy.com .cardinalcommerce.com .stripe.com d3nocrch4qti4v.cloudfront.net duuytoqss3gu4.cloudfront.net df45ay5pw60dy.cloudfront.net d2o5idwacg3gyw.cloudfront.net d3lqotgbn3npr.cloudfront.net d6rak4b14t5gp.cloudfront.net dlthst9q2beh8.cloudfront.net o160250.ingest.sentry.io *.pagoefectivo.pe wauth.teledit.com blob: data: 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe [TRUNCATED] vary: User-Agent Referrer-Policy: strict-origin-when-cross-origin x-frame-options: SAMEORIGIN Set-Cookie: api_uid=Cmy4GmcEYftgMgBILKAuAg==; expires=Tue, 07-Oct-25 22:34:35 GMT; domain=.temu.com; path=/; secure cip: 8.46.123.33 Alt-Svc: h3=":443"; ma=604800

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.temu.com/cmsg_transit.html?_cmsg_biz=9010&_cmsg_channel=mail&_cmsg_locale=100~ja~JPY&msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_p_landing=1&_x_src=mail

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 345

Chrome Cache Entry: 346

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Chrome Cache Entry: 351

Chrome Cache Entry: 352

Chrome Cache Entry: 353

Chrome Cache Entry: 354

Chrome Cache Entry: 355

Chrome Cache Entry: 356

Chrome Cache Entry: 357

Chrome Cache Entry: 358

Chrome Cache Entry: 359

Chrome Cache Entry: 360

Chrome Cache Entry: 361

Chrome Cache Entry: 362

Chrome Cache Entry: 363

Chrome Cache Entry: 364

Chrome Cache Entry: 365

Chrome Cache Entry: 366

Chrome Cache Entry: 367

Chrome Cache Entry: 368

Chrome Cache Entry: 369

Chrome Cache Entry: 370

Chrome Cache Entry: 371

Chrome Cache Entry: 372

Windows Analysis Report
https://www.temu.com/cmsg_transit.html?_cmsg_biz=9010&_cmsg_channel=mail&_cmsg_locale=100~ja~JPY&msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_p_landing=1&_x_src=mail

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:34:36 UTC	743	OUT	GET /shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1 HTTP/1.1 Host: twitter.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:34:36 UTC	6484	IN	HTTP/1.1 302 Found date: Mon, 07 Oct 2024 22:34:36 GMT perf: 7402827104 vary: Accept expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b location: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1 set-cookie: guest_id_marketing=v1%3A172834047674055607; Max-Age=63072000; Expires=Wed, 07 Oct 2026 22:34:36 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A172834047674055607; Max-Age=63072000; Expires=Wed, 07 Oct 2026 22:34:36 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: personalization_id="v1_v62cDTa26QrMGlAK4yXNGw=="; Max-Age=63072000; Expires=Wed, 07 Oct 2026 22:34:36 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A172834047674055607; Max-Age=63072000; Expires=Wed, 07 Oct 2026 22:34:36 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: ct0=; Max-Age=-1728340475; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=Lax content-type: text/html; charset=utf-8 x-powered-by: Express cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Mon, 07 Oct 2024 22:34:36 GMT content-length: 266 x-frame-options: DENY x-transaction-id: 30a7cb0670ad7095 x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 12 x-connection-hash: 3e9e04ed7c0ac63aa982169ae1b0319685ee16cac39df53adc64a44fc85d4a14 connection: close
2024-10-07 22:34:36 UTC	266	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 63 6f 6d 2f 73 68 6f 70 74 65 6d 75 3f 6d 73 67 69 64 3d 31 30 30 2d 32 30 32 34 31 30 30 31 2d 31 35 2d 42 2d 37 38 33 32 33 39 34 35 31 38 33 37 31 34 39 31 38 34 2d 34 32 37 2d 71 6a 33 36 64 53 66 33 26 61 6d 70 3b 5f 78 5f 73 72 63 3d 6d 61 69 6c 26 61 6d 70 3b 5f 70 5f 6c 61 6e 64 69 6e 67 3d 31 22 3e 68 74 74 70 73 3a 2f 2f 78 2e 63 6f 6d 2f 73 68 6f 70 74 65 6d 75 3f 6d 73 67 69 64 3d 31 30 30 2d 32 30 32 34 31 30 30 31 2d 31 35 2d 42 2d 37 38 33 32 33 39 34 35 31 38 33 37 31 34 39 31 38 34 2d 34 32 37 2d 71 6a 33 36 64 53 66 33 26 61 6d 70 3b 5f 78 5f 73 72 63 3d 6d 61 69 6c 26 61 6d 70 3b 5f 70 5f 6c 61 6e 64 69 6e Data Ascii: <p>Found. Redirecting to <a href="https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1">https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landin

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:34:37 UTC	737	OUT	GET /shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1 HTTP/1.1 Host: x.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:34:37 UTC	6286	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 22:34:37 GMT perf: 7402827104 expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b set-cookie: guest_id_marketing=v1%3A172834047761380473; Max-Age=63072000; Expires=Wed, 07 Oct 2026 22:34:37 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A172834047761380473; Max-Age=63072000; Expires=Wed, 07 Oct 2026 22:34:37 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: personalization_id="v1_52kFZYFv+r6JNj9T+YNY9w=="; Max-Age=63072000; Expires=Wed, 07 Oct 2026 22:34:37 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: guest_id=v1%3A172834047761380473; Max-Age=63072000; Expires=Wed, 07 Oct 2026 22:34:37 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: ct0=; Max-Age=-1728340476; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=Lax content-type: text/html; charset=utf-8 x-powered-by: Express cache-control: no-store, max-age=0 last-modified: Mon, 07 Oct 2024 22:34:37 GMT x-frame-options: DENY x-transaction-id: 55c7c97f5698571c x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 19 x-connection-hash: 39c40043675d76266244dc2ac78cf37846f14eb00e5095e1dbd02af2fc5d4bad connection: close transfer-encoding: chunked
2024-10-07 22:34:37 UTC	2978	IN	Data Raw: 62 39 36 0d 0a 0a 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 78 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 20 3d 20 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 78 2f 6d 69 67 72 61 74 65 3f 74 6f 6b 3d 37 62 32 32 36 35 32 32 33 61 32 32 32 66 37 33 36 38 36 66 37 30 37 34 36 35 36 64 37 35 33 66 36 64 37 33 36 37 36 39 36 34 33 64 33 31 33 30 33 30 32 64 33 32 33 30 33 32 33 34 33 31 33 30 33 30 33 31 32 64 33 31 33 35 32 64 34 32 32 64 33 37 33 38 33 33 33 32 33 33 33 39 33 34 33 35 33 31 33 38 33 33 33 37 33 31 Data Ascii: b96 <!DOCTYPE html> <head> <title>x.com</title> <meta http-equiv="refresh" content="0; url = https://twitter.com/x/migrate?tok=7b2265223a222f73686f7074656d753f6d736769643d3130302d32303234313030312d31352d422d37383332333934353138333731

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:34:38 UTC	770	OUT	GET /manifest.json HTTP/1.1 Host: x.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://x.com/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A172834047761380473; guest_id_ads=v1%3A172834047761380473; personalization_id="v1_52kFZYFv+r6JNj9T+YNY9w=="; guest_id=v1%3A172834047761380473
2024-10-07 22:34:38 UTC	5756	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 22:34:38 GMT etag: W/"b70-fZ39zidqFVL2AulQ1ofHQ4LLo+w" perf: 7402827104 expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b set-cookie: ct0=; Max-Age=-1728340477; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=Lax content-type: application/manifest+json; charset=utf-8 x-powered-by: Express cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Mon, 07 Oct 2024 22:34:38 GMT content-length: 2928 x-frame-options: DENY x-transaction-id: a835d87b772a76b3 x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 12 x-connection-hash: 72f39d0baf945ce666f68524d50dbd20fafa08f94bc62dc164c44cb871f2d8ee connection: close
2024-10-07 22:34:38 UTC	2928	IN	Data Raw: 7b 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 73 6f 63 69 61 6c 22 2c 22 6e 65 77 73 22 2c 22 6d 61 67 61 7a 69 6e 65 73 22 5d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 65 74 20 62 72 65 61 6b 69 6e 67 20 6e 65 77 73 2c 20 70 6f 6c 69 74 69 63 73 2c 20 74 72 65 6e 64 69 6e 67 20 6d 75 73 69 63 2c 20 77 6f 72 6c 64 20 65 76 65 6e 74 73 2c 20 73 70 6f 72 74 73 20 73 63 6f 72 65 73 2c 20 61 6e 64 20 74 68 65 20 6c 61 74 65 73 74 20 67 6c 6f 62 61 6c 20 6e 65 77 73 20 73 74 6f 72 69 65 73 20 61 73 20 74 68 65 79 20 75 6e 66 6f 6c 64 20 2d 20 61 6c 6c 20 77 69 74 68 20 6c 65 73 73 20 64 61 74 61 2e 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e Data Ascii: {"background_color":"#ffffff","categories":["social","news","magazines"],"description":"Get breaking news, politics, trending music, world events, sports scores, and the latest global news stories as they unfold - all with less data.","display":"standalon

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:34:38 UTC	1111	OUT	GET /x/migrate?tok=7b2265223a222f73686f7074656d753f6d736769643d3130302d32303234313030312d31352d422d3738333233393435313833373134393138342d3432372d716a333664536633265f785f7372633d6d61696c265f705f6c616e64696e673d31222c2274223a313732383334303437377dba6ac705cb37290e1e31f5d24fc7a6c1 HTTP/1.1 Host: twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://x.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A172834047674055607; guest_id_ads=v1%3A172834047674055607; personalization_id="v1_v62cDTa26QrMGlAK4yXNGw=="; guest_id=v1%3A172834047674055607
2024-10-07 22:34:38 UTC	5666	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 22:34:38 GMT perf: 7402827104 expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b set-cookie: ct0=; Max-Age=-1728340477; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=Lax content-type: text/html; charset=utf-8 x-powered-by: Express cache-control: no-store, max-age=0 last-modified: Mon, 07 Oct 2024 22:34:38 GMT x-frame-options: DENY x-transaction-id: 886250f20c49d66a x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 18 x-connection-hash: 56b26d8d6c6528fefd1cf4f2c2b125a85d0264af1ecc02c138058694867c047a connection: close transfer-encoding: chunked
2024-10-07 22:34:38 UTC	1077	IN	Data Raw: 34 32 39 0d 0a 0a 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 78 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 35 3b 20 75 72 6c 20 3d 20 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 3f 6d 78 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 63 6f 6d 2f 78 2f 6d 69 67 72 61 74 65 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 6e 61 6d 65 3d 22 66 22 3e 0a 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 74 6f 6b 22 20 76 Data Ascii: 429 <!DOCTYPE html> <head><title>x.com</title> <meta http-equiv="refresh" content="5; url = https://twitter.com?mx=1" /> </head> <form action="https://x.com/x/migrate" method="post" name="f"> <input type="hidden" name="tok" v

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:34:39 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 22:34:39 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=151863 Date: Mon, 07 Oct 2024 22:34:39 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:34:39 UTC	974	OUT	POST /x/migrate HTTP/1.1 Host: x.com Connection: keep-alive Content-Length: 612 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://twitter.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A172834047761380473; guest_id_ads=v1%3A172834047761380473; personalization_id="v1_52kFZYFv+r6JNj9T+YNY9w=="; guest_id=v1%3A172834047761380473
2024-10-07 22:34:39 UTC	612	OUT	Data Raw: 74 6f 6b 3d 37 62 32 32 36 35 32 32 33 61 32 32 32 66 37 33 36 38 36 66 37 30 37 34 36 35 36 64 37 35 33 66 36 64 37 33 36 37 36 39 36 34 33 64 33 31 33 30 33 30 32 64 33 32 33 30 33 32 33 34 33 31 33 30 33 30 33 31 32 64 33 31 33 35 32 64 34 32 32 64 33 37 33 38 33 33 33 32 33 33 33 39 33 34 33 35 33 31 33 38 33 33 33 37 33 31 33 34 33 39 33 31 33 38 33 34 32 64 33 34 33 32 33 37 32 64 37 31 36 61 33 33 33 36 36 34 35 33 36 36 33 33 32 36 35 66 37 38 35 66 37 33 37 32 36 33 33 64 36 64 36 31 36 39 36 63 32 36 35 66 37 30 35 66 36 63 36 31 36 65 36 34 36 39 36 65 36 37 33 64 33 31 32 32 32 63 32 32 37 34 32 32 33 61 33 31 33 37 33 32 33 38 33 33 33 34 33 30 33 34 33 37 33 37 37 64 62 61 36 61 63 37 30 35 63 62 33 37 32 39 30 65 31 65 33 31 66 35 64 32 34 Data Ascii: tok=7b2265223a222f73686f7074656d753f6d736769643d3130302d32303234313030312d31352d422d3738333233393435313833373134393138342d3432372d716a333664536633265f785f7372633d6d61696c265f705f6c616e64696e673d31222c2274223a313732383334303437377dba6ac705cb37290e1e31f5d24
2024-10-07 22:34:39 UTC	6925	IN	HTTP/1.1 302 Found date: Mon, 07 Oct 2024 22:34:39 GMT perf: 7402827104 vary: Accept expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b location: /shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1&mx=2 set-cookie: guest_id_marketing=172834047674055607; Max-Age=31536000; Expires=Tue, 07 Oct 2025 22:34:39 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: guest_id_ads=172834047674055607; Max-Age=31536000; Expires=Tue, 07 Oct 2025 22:34:39 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: lang=; Max-Age=-1728340478; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: guest_id=v1%3A172834047674055607; Max-Age=31536000; Expires=Tue, 07 Oct 2025 22:34:39 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: night_mode=2; Max-Age=31536000; Expires=Tue, 07 Oct 2025 22:34:39 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: twid=; Max-Age=-1728340478; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: att=; Max-Age=-1728340478; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; HTTPOnly; SameSite=None set-cookie: ct0=; Max-Age=-1728340478; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=Lax set-cookie: auth_token=; Max-Age=-1728340478; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; HTTPOnly; SameSite=None content-type: text/html; charset=utf-8 x-powered-by: Express cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Mon, 07 Oct 2024 22:34:39 GMT content-length: 258 x-frame-options: DENY x-transaction-id: 1ceb45e529514898 x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 18 x-connection-hash: 641d27b319cd143c9536826e4ee76082ee4b2d334263825ba0118414301e7956 connection: close
2024-10-07 22:34:39 UTC	258	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 73 68 6f 70 74 65 6d 75 3f 6d 73 67 69 64 3d 31 30 30 2d 32 30 32 34 31 30 30 31 2d 31 35 2d 42 2d 37 38 33 32 33 39 34 35 31 38 33 37 31 34 39 31 38 34 2d 34 32 37 2d 71 6a 33 36 64 53 66 33 26 61 6d 70 3b 5f 78 5f 73 72 63 3d 6d 61 69 6c 26 61 6d 70 3b 5f 70 5f 6c 61 6e 64 69 6e 67 3d 31 26 61 6d 70 3b 6d 78 3d 32 22 3e 2f 73 68 6f 70 74 65 6d 75 3f 6d 73 67 69 64 3d 31 30 30 2d 32 30 32 34 31 30 30 31 2d 31 35 2d 42 2d 37 38 33 32 33 39 34 35 31 38 33 37 31 34 39 31 38 34 2d 34 32 37 2d 71 6a 33 36 64 53 66 33 26 61 6d 70 3b 5f 78 5f 73 72 63 3d 6d 61 69 6c 26 61 6d 70 3b 5f 70 5f 6c 61 6e 64 69 6e 67 3d 31 26 61 6d 70 3b 6d 78 3d 32 3c 2f 61 3e 3c Data Ascii: <p>Found. Redirecting to <a href="/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1&mx=2">/shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1&mx=2</a><

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:34:39 UTC	963	OUT	GET /shoptemu?msgid=100-20241001-15-B-783239451837149184-427-qj36dSf3&_x_src=mail&_p_landing=1&mx=2 HTTP/1.1 Host: x.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_52kFZYFv+r6JNj9T+YNY9w=="; guest_id_marketing=172834047674055607; guest_id_ads=172834047674055607; guest_id=v1%3A172834047674055607; night_mode=2
2024-10-07 22:34:40 UTC	5703	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 22:34:40 GMT perf: 7402827104 expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_b set-cookie: ct0=; Max-Age=-1728340479; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=Lax content-type: text/html; charset=utf-8 x-powered-by: Express cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Mon, 07 Oct 2024 22:34:40 GMT x-frame-options: DENY x-transaction-id: 9c1e2206fc785a86 x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://.pscp.tv https://.twimg.com https://.video.pscp.tv https://aa.twitter.com https://aa.x.com https://accounts.google.com/gsi/ https://ads-api.twitter.com https://ads-api.x.com https://api-stream.twitter.com https://api-stream.x.com https://api.twitter.com https://api.x.ai https://api.x.com https://api.x.com https://caps.twitter.com https://caps.x.com https://jf.twitter.com https://jf.x.com https://pay.twitter.com https://pay.x.com https://production.plaid.com/ https://sandbox.plaid.com/ https://sentry.io https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://ton.twitter.com https://ton.x.com https://twitter.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://x.com https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.c [TRUNCATED] strict-transport-security: max-age=631138519 cross-origin-opener-policy: unsafe-none cross-origin-embedder-policy: unsafe-none x-response-time: 36 x-connection-hash: 706ca4b4df58777a656d0736c5944bcf1384ed5a2e3662290591c9a86dccf4d0 connection: close transfer-encoding: chunked
2024-10-07 22:34:40 UTC	1216	IN	Data Raw: 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 31 61 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 38 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 37 38 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 2c 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 2f 3e 0d 0a 36 32 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 61 Data Ascii: f<!DOCTYPE html>1a<html dir="ltr" lang="en">6<head>18<meta charset="utf-8" />78<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0,viewport-fit=cover" />62<link rel="preconnect" href="//a
2024-10-07 22:34:40 UTC	1336	IN	Data Raw: 62 62 0d 0a 3c 6c 69 6e 6b 20 6e 6f 6e 63 65 3d 22 4f 47 5a 6d 5a 6a 42 6c 5a 6d 55 74 5a 6d 59 34 59 79 30 30 5a 57 56 6b 4c 57 49 32 4e 47 51 74 4d 44 49 35 59 54 56 6c 4e 7a 63 34 4e 7a 55 30 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 72 65 73 70 6f 6e 73 69 76 65 2d 77 65 62 2f 63 6c 69 65 6e 74 2d 77 65 62 2f 6d 61 69 6e 2e 30 38 64 65 32 39 35 61 2e 6a 73 22 20 2f 3e 0d 0a 32 62 36 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 6e 69 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 Data Ascii: bb<link nonce="OGZmZjBlZmUtZmY4Yy00ZWVkLWI2NGQtMDI5YTVlNzc4NzU0" rel="preload" as="script" crossorigin="anonymous" href="https://abs.twimg.com/responsive-web/client-web/main.08de295a.js" />2b6<meta http-equiv="onion-location" content="https://twitte
2024-10-07 22:34:40 UTC	211	IN	Data Raw: 37 66 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 73 6b 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 61 6e 79 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 72 65 73 70 6f 6e 73 69 76 65 2d 77 65 62 2f 63 6c 69 65 6e 74 2d 77 65 62 2f 69 63 6f 6e 2d 73 76 67 2e 65 61 35 66 66 34 61 61 2e 73 76 67 22 20 63 6f 6c 6f 72 3d 22 23 31 44 39 42 46 30 22 3e 0d 0a 34 38 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 73 2f 74 77 69 74 74 65 72 2e 33 2e 69 63 6f 22 3e 0d 0a Data Ascii: 7f<link rel="mask-icon" sizes="any" href="https://abs.twimg.com/responsive-web/client-web/icon-svg.ea5ff4aa.svg" color="#1D9BF0">48<link rel="shortcut icon" href="//abs.twimg.com/favicons/twitter.3.ico">
2024-10-07 22:34:40 UTC	331	IN	Data Raw: 32 64 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 20 2f 3e 0d 0a 31 31 31 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6c 70 43 6d 62 34 30 46 35 5a 6a 44 69 39 5a 59 65 2b 77 6e 72 2f 56 38 4d 46 2b 58 6d 59 34 31 4b 34 71 55 68 6f 71 2b 32 6d 62 65 70 4a 54 4e 64 33 71 34 43 52 71 6c 41 43 66 6e 79 74 68 45 50 5a 71 63 6a 72 79 66 41 53 31 2b 45 78 53 30 46 46 52 63 41 38 41 41 41 42 6d 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 52 33 61 58 52 30 5a 58 49 75 59 32 39 74 4f 6a 51 30 4d 79 49 73 49 6d 5a 6c 59 58 52 31 63 6d 55 69 4f 69 4a 4d 59 58 Data Ascii: 2d<meta name="theme-color" content="#000000" />111<meta http-equiv="origin-trial" content="AlpCmb40F5ZjDi9ZYe+wnr/V8MF+XmY41K4qUhoq+2mbepJTNd3q4CRqlACfnythEPZqcjryfAS1+ExS0FFRcA8AAABmeyJvcmlnaW4iOiJodHRwczovL3R3aXR0ZXIuY29tOjQ0MyIsImZlYXR1cmUiOiJMYX
2024-10-07 22:34:40 UTC	70	IN	Data Raw: 34 30 0d 0a 3c 73 74 79 6c 65 3e 68 74 6d 6c 2c 62 6f 64 79 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 3a 3a 63 75 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 3c 2f 73 74 79 6c 65 3e 0d 0a Data Ascii: 40<style>html,body{height: 100%;}::cue{white-space:normal}</style>
2024-10-07 22:34:40 UTC	10438	IN	Data Raw: 32 38 38 33 0d 0a 3c 73 74 79 6c 65 20 69 64 3d 22 72 65 61 63 74 2d 6e 61 74 69 76 65 2d 73 74 79 6c 65 73 68 65 65 74 22 3e 5b 73 74 79 6c 65 73 68 65 65 74 2d 67 72 6f 75 70 3d 22 30 22 5d 7b 7d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 7d 0a 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 0a 68 74 6d 6c 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 Data Ascii: 2883<style id="react-native-stylesheet">[stylesheet-group="0"]{}body{margin:0;}button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0;}html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:rgba(0,0,0,0)
2024-10-07 22:34:40 UTC	1002	IN	Data Raw: 31 31 0d 0a 3c 6e 6f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 0d 0a 33 63 63 0d 0a 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 20 73 63 72 6f 6c 6c 62 61 72 3b 0a 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 20 20 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 2d 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 46 31 34 31 39 3b 0a 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e Data Ascii: 11<noscript><style>3cc body { -ms-overflow-style: scrollbar; overflow-y: scroll; overscroll-behavior-y: none; } .errorContainer { background-color: #FFF; color: #0F1419; max-width: 600px; margin
2024-10-07 22:34:40 UTC	1572	IN	Data Raw: 33 65 62 0d 0a 0a 20 20 20 20 20 20 23 70 6c 61 63 65 68 6f 6c 64 65 72 2c 0a 20 20 20 20 20 20 23 72 65 61 63 74 2d 72 6f 6f 74 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 3c 73 76 67 20 72 6f 6c 65 3d 22 69 6d 67 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 58 20 6c 6f 67 6f 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 Data Ascii: 3eb #placeholder, #react-root { display: none !important; } body { background-color: #FFF !important; } </style> <div class="errorContainer"> <svg role="img" aria-label="X logo" width="48" heig
2024-10-07 22:34:40 UTC	2353	IN	Data Raw: 39 32 61 0d 0a 3c 64 69 76 20 69 64 3d 22 72 65 61 63 74 2d 72 6f 6f 74 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 73 73 2d 31 37 35 6f 69 32 72 20 72 2d 31 33 61 77 67 74 30 20 72 2d 31 32 76 66 66 6b 76 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 73 73 2d 31 37 35 6f 69 32 72 20 72 2d 31 33 61 77 67 74 30 20 72 2d 31 32 76 66 66 6b 76 22 3e 3c 64 69 76 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4c 6f 61 64 69 6e 67 e2 80 a6 22 20 63 6c 61 73 73 3d 22 63 73 73 2d 31 37 35 6f 69 32 72 20 72 2d 6b 65 6d 6b 73 69 20 72 2d 31 70 30 64 74 61 69 20 72 2d 7a 63 68 6c 6e 6a 20 72 2d 31 64 32 66 34 39 30 20 72 2d 31 78 63 61 6a 61 6d 20 72 2d 69 70 6d 35 61 66 22 Data Ascii: 92a<div id="react-root" style="height:100%;display:flex;"><div class="css-175oi2r r-13awgt0 r-12vffkv"><div class="css-175oi2r r-13awgt0 r-12vffkv"><div aria-label="Loading" class="css-175oi2r r-kemksi r-1p0dtai r-zchlnj r-1d2f490 r-1xcajam r-ipm5af"
2024-10-07 22:34:40 UTC	4740	IN	Data Raw: 33 61 66 0d 0a 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 69 64 3d 22 6c 6f 61 64 69 6e 67 2d 78 2d 61 6e 69 6d 2d 30 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 72 2d 31 70 30 64 74 61 69 20 72 2d 31 33 67 78 70 75 39 20 72 2d 34 71 74 71 70 39 20 72 2d 79 79 79 79 6f 6f 20 72 2d 77 79 36 31 78 66 20 72 2d 31 64 32 66 34 39 30 20 72 2d 37 31 74 75 34 6f 20 72 2d 79 77 6a 65 35 31 20 72 2d 64 6e 6d 72 7a 73 20 72 2d 75 38 73 31 64 20 72 2d 7a 63 68 6c 6e 6a 20 72 2d 31 70 6c 63 72 75 69 20 72 2d 69 70 6d 35 61 66 20 72 2d 6c 72 76 69 62 72 20 72 2d 31 62 6c 6e 70 32 62 22 3e 3c 67 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2e 32 34 34 20 32 2e 32 35 68 33 2e 33 30 38 6c 2d 37 2e 32 32 37 Data Ascii: 3af<svg viewBox="0 0 24 24" id="loading-x-anim-0" aria-hidden="true" class="r-1p0dtai r-13gxpu9 r-4qtqp9 r-yyyyoo r-wy61xf r-1d2f490 r-71tu4o r-ywje51 r-dnmrzs r-u8s1d r-zchlnj r-1plcrui r-ipm5af r-lrvibr r-1blnp2b"><g><path d="M18.244 2.25h3.308l-7.227

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:34:40 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 22:34:40 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=151798 Date: Mon, 07 Oct 2024 22:34:40 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 22:34:40 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:34:40 UTC	566	OUT	GET /responsive-web/client-web/vendor.42364e5a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://x.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://x.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:34:42 UTC	698	IN	HTTP/1.1 200 OK Connection: close Content-Length: 651177 etag: "i240D5ENXohzwquXclWEaA==" perf: 7402827104 expires: Tue, 07 Oct 2025 12:01:26 GMT content-type: application/javascript; charset=utf-8 last-modified: Mon, 07 Oct 2024 10:42:59 GMT x-transaction-id: 234e931d3f38d8d7 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 access-control-allow-origin: * X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Mon, 07 Oct 2024 22:34:41 GMT X-Served-By: cache-pdk-katl1840099-PDK, cache-lin1730023-LIN X-Cache: HIT, HIT Vary: Accept-Encoding x-tw-cdn: FT Server-Timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
2024-10-07 22:34:42 UTC	1379	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 5f 53 43 52 49 50 54 53 5f 4c 4f 41 44 45 44 5f 5f 2e 72 75 6e 74 69 6d 65 26 26 28 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 22 5d 2c 7b 31 38 36 37 30 36 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 7a 74 3a 28 29 3d 3e 5a 2c 24 6a 3a 28 29 3d 3e 56 2c 49 30 3a 28 29 3d 3e 59 2c 76 39 3a 28 29 3d 3e 62 2c 6f 52 3a 28 29 3d 3e 57 7d 29 3b 76 61 72 20 6e 3d 72 28 37 34 33 31 30 30 29 2c 61 3d 72 28 33 34 31 31 31 30 29 2c 69 Data Ascii: window.__SCRIPTS_LOADED__.runtime&&((self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["vendor"],{186706:(e,t,r)=>{"use strict";r.d(t,{zt:()=>Z,$j:()=>V,I0:()=>Y,v9:()=>b,oR:()=>W});var n=r(743100),a=r(341110),i
2024-10-07 22:34:42 UTC	1379	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 70 28 66 2c 70 29 7b 63 6f 6e 73 74 20 68 3d 21 69 28 70 2c 73 29 2c 76 3d 21 61 28 66 2c 75 2c 70 2c 73 29 3b 72 65 74 75 72 6e 20 75 3d 66 2c 73 3d 70 2c 68 26 26 76 3f 28 6c 3d 65 28 75 2c 73 29 2c 74 2e 64 65 70 65 6e 64 73 4f 6e 4f 77 6e 50 72 6f 70 73 26 26 28 63 3d 74 28 6e 2c 73 29 29 2c 64 3d 72 28 6c 2c 63 2c 73 29 2c 64 29 3a 68 3f 28 65 2e 64 65 70 65 6e 64 73 4f 6e 4f 77 6e 50 72 6f 70 73 26 26 28 6c 3d 65 28 75 2c 73 29 29 2c 74 2e 64 65 70 65 6e 64 73 4f 6e 4f 77 6e 50 72 6f 70 73 26 26 28 63 3d 74 28 6e 2c 73 29 29 2c 64 3d 72 28 6c 2c 63 2c 73 29 2c 64 29 3a 76 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 65 28 75 2c 73 29 2c 6e 3d 21 6f 28 74 2c 6c 29 3b 72 65 74 75 72 6e 20 6c 3d 74 2c 6e 26 Data Ascii: ;function p(f,p){const h=!i(p,s),v=!a(f,u,p,s);return u=f,s=p,h&&v?(l=e(u,s),t.dependsOnOwnProps&&(c=t(n,s)),d=r(l,c,s),d):h?(e.dependsOnOwnProps&&(l=e(u,s)),t.dependsOnOwnProps&&(c=t(n,s)),d=r(l,c,s),d):v?function(){const t=e(u,s),n=!o(t,l);return l=t,n&
2024-10-07 22:34:42 UTC	1379	IN	Data Raw: 29 29 7d 2c 67 65 74 28 29 7b 6c 65 74 20 65 3d 5b 5d 2c 72 3d 74 3b 66 6f 72 28 3b 72 3b 29 65 2e 70 75 73 68 28 72 29 2c 72 3d 72 2e 6e 65 78 74 3b 72 65 74 75 72 6e 20 65 7d 2c 73 75 62 73 63 72 69 62 65 28 65 29 7b 6c 65 74 20 6e 3d 21 30 2c 61 3d 72 3d 7b 63 61 6c 6c 62 61 63 6b 3a 65 2c 6e 65 78 74 3a 6e 75 6c 6c 2c 70 72 65 76 3a 72 7d 3b 72 65 74 75 72 6e 20 61 2e 70 72 65 76 3f 61 2e 70 72 65 76 2e 6e 65 78 74 3d 61 3a 74 3d 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 28 6e 3d 21 31 2c 61 2e 6e 65 78 74 3f 61 2e 6e 65 78 74 2e 70 72 65 76 3d 61 2e 70 72 65 76 3a 72 3d 61 2e 70 72 65 76 2c 61 2e 70 72 65 76 3f 61 2e 70 72 65 76 2e 6e 65 78 74 3d 61 2e 6e 65 78 74 3a 74 3d 61 2e 6e 65 78 74 29 7d 7d 7d 7d 28 29 29 Data Ascii: ))},get(){let e=[],r=t;for(;r;)e.push(r),r=r.next;return e},subscribe(e){let n=!0,a=r={callback:e,next:null,prev:r};return a.prev?a.prev.next=a:t=a,function(){n&&null!==t&&(n=!1,a.next?a.next.prev=a.prev:r=a.prev,a.prev?a.prev.next=a.next:t=a.next)}}}}())
2024-10-07 22:34:42 UTC	1379	IN	Data Raw: 65 72 67 65 64 50 72 6f 70 73 45 71 75 61 6c 3a 75 3d 4c 2c 66 6f 72 77 61 72 64 52 65 66 3a 6c 3d 21 31 2c 63 6f 6e 74 65 78 74 3a 63 3d 66 7d 3d 7b 7d 29 7b 63 6f 6e 73 74 20 64 3d 63 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 50 28 65 29 3a 4f 28 65 2c 22 6d 61 70 53 74 61 74 65 54 6f 50 72 6f 70 73 22 29 3a 54 28 28 28 29 3d 3e 28 7b 7d 29 29 29 7d 28 65 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 54 28 28 74 3d 3e 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 69 6e 20 65 29 7b 63 6f 6e 73 74 20 61 3d 65 5b Data Ascii: ergedPropsEqual:u=L,forwardRef:l=!1,context:c=f}={}){const d=c,p=function(e){return e?"function"==typeof e?P(e):O(e,"mapStateToProps"):T((()=>({})))}(e),h=function(e){return e&&"object"==typeof e?T((t=>function(e,t){const r={};for(const n in e){const a=e[
2024-10-07 22:34:42 UTC	1379	IN	Data Raw: 6f 6e 28 65 2c 74 29 7b 6c 65 74 7b 69 6e 69 74 4d 61 70 53 74 61 74 65 54 6f 50 72 6f 70 73 3a 72 2c 69 6e 69 74 4d 61 70 44 69 73 70 61 74 63 68 54 6f 50 72 6f 70 73 3a 6e 2c 69 6e 69 74 4d 65 72 67 65 50 72 6f 70 73 3a 61 7d 3d 74 2c 69 3d 28 30 2c 53 2e 5a 29 28 74 2c 52 29 3b 72 65 74 75 72 6e 20 78 28 72 28 65 2c 69 29 2c 6e 28 65 2c 69 29 2c 61 28 65 2c 69 29 2c 65 2c 69 29 7d 28 66 2e 64 69 73 70 61 74 63 68 2c 6e 29 29 2c 5b 66 5d 29 2c 5b 76 2c 6d 5d 3d 73 2e 75 73 65 4d 65 6d 6f 28 28 28 29 3d 3e 7b 69 66 28 21 67 29 72 65 74 75 72 6e 20 55 3b 63 6f 6e 73 74 20 65 3d 41 28 66 2c 6c 3f 76 6f 69 64 20 30 3a 75 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 29 2c 74 3d 65 2e 6e 6f 74 69 66 79 4e 65 73 74 65 64 53 75 62 73 2e 62 69 6e 64 28 65 29 3b 72 65 Data Ascii: on(e,t){let{initMapStateToProps:r,initMapDispatchToProps:n,initMergeProps:a}=t,i=(0,S.Z)(t,R);return x(r(e,i),n(e,i),a(e,i),e,i)}(f.dispatch,n)),[f]),[v,m]=s.useMemo((()=>{if(!g)return U;const e=A(f,l?void 0:u.subscription),t=e.notifyNestedSubs.bind(e);re
2024-10-07 22:34:42 UTC	1379	IN	Data Raw: 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 79 7d 2c 56 29 3a 56 29 2c 5b 6f 2c 56 2c 79 5d 29 7d 63 6f 6e 73 74 20 66 3d 73 2e 6d 65 6d 6f 28 63 29 3b 69 66 28 66 2e 57 72 61 70 70 65 64 43 6f 6d 70 6f 6e 65 6e 74 3d 65 2c 66 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 63 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 72 2c 6c 29 7b 63 6f 6e 73 74 20 74 3d 73 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 66 2c 28 30 2c 5f 2e 5a 29 28 7b 7d 2c 65 2c 7b 72 65 61 63 74 52 65 64 75 78 46 6f 72 77 61 72 64 65 64 52 65 66 3a 74 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 72 2c 74 2e 57 72 61 70 70 65 64 43 6f 6d 70 6f 6e 65 6e 74 3d 65 Data Ascii: vider,{value:y},V):V),[o,V,y])}const f=s.memo(c);if(f.WrappedComponent=e,f.displayName=c.displayName=r,l){const t=s.forwardRef((function(e,t){return s.createElement(f,(0,_.Z)({},e,{reactReduxForwardedRef:t}))}));return t.displayName=r,t.WrappedComponent=e
2024-10-07 22:34:42 UTC	1379	IN	Data Raw: 61 63 74 2e 73 65 72 76 65 72 5f 63 6f 6e 74 65 78 74 22 29 2c 64 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 2c 66 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 22 29 2c 70 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 5f 6c 69 73 74 22 29 2c 68 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 2c 76 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 2c 67 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6f 66 66 73 63 72 65 65 6e 22 29 3b 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 69 73 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d Data Ascii: act.server_context"),d=Symbol.for("react.forward_ref"),f=Symbol.for("react.suspense"),p=Symbol.for("react.suspense_list"),h=Symbol.for("react.memo"),v=Symbol.for("react.lazy"),g=Symbol.for("react.offscreen");/** * @license React * react-is.production.m
2024-10-07 22:34:42 UTC	1379	IN	Data Raw: 73 74 72 69 63 74 22 3b 72 28 31 33 36 37 32 38 29 3b 63 6f 6e 73 74 20 6e 3d 72 28 36 37 33 39 35 37 29 2c 61 3d 72 28 33 36 34 35 35 31 29 2c 7b 41 63 74 75 61 6c 49 31 38 4e 46 6f 72 6d 61 74 4d 65 73 73 61 67 65 4b 65 79 3a 69 7d 3d 72 28 38 36 32 33 30 32 29 2c 6f 3d 6e 26 26 21 31 2c 75 3d 7b 7d 3b 6c 65 74 20 73 2c 6c 3b 63 6f 6e 73 74 20 63 3d 28 65 2c 74 29 3d 3e 6c 5b 74 5d 2c 64 3d 7b 7d 2c 66 3d 7b 7d 2c 70 3d 65 3d 3e 66 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 66 5b 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 5d 7c 7c 22 65 6e 22 2c 68 3d 5b 5d 2c 76 3d 28 65 3d 3e 7b 6c 65 74 20 74 2c 72 3b 72 65 74 75 72 6e 28 6e 3d 73 29 3d 3e 6e 3d 3d 3d 74 3f 72 3a 28 74 3d 6e 2c 73 3d 70 28 74 29 2c 72 3d 65 28 73 29 29 7d 29 28 28 65 Data Ascii: strict";r(136728);const n=r(673957),a=r(364551),{ActualI18NFormatMessageKey:i}=r(862302),o=n&&!1,u={};let s,l;const c=(e,t)=>l[t],d={},f={},p=e=>f[e.toLowerCase()]\|\|f[e.split("-")[0]]\|\|"en",h=[],v=(e=>{let t,r;return(n=s)=>n===t?r:(t=n,s=p(t),r=e(s))})((e
2024-10-07 22:34:42 UTC	1379	IN	Data Raw: 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 65 29 2c 7b 75 6e 73 75 62 73 63 72 69 62 65 3a 28 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 69 6e 64 65 78 4f 66 28 65 29 3b 74 3e 3d 30 26 26 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 73 70 6c 69 63 65 28 74 2c 31 29 7d 7d 7d 6e 6f 74 69 66 79 28 65 29 7b 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 28 65 29 7d 29 29 7d 67 65 74 4c 69 73 74 65 6e 65 72 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 7d 7d 7d 2c 39 35 38 39 35 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 6e 3d Data Ascii: his._listeners.push(e),{unsubscribe:()=>{const t=this._listeners.indexOf(e);t>=0&&this._listeners.splice(t,1)}}}notify(e){this._listeners.forEach((t=>{t(e)}))}getListeners(){return this._listeners}}},958955:(e,t,r)=>{"use strict";r.d(t,{Z:()=>n});const n=
2024-10-07 22:34:42 UTC	1379	IN	Data Raw: 5d 2c 72 2c 65 29 29 72 65 74 75 72 6e 21 31 3b 72 2b 3d 31 7d 72 65 74 75 72 6e 21 30 7d 7d 2c 39 35 39 32 31 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 6e 3d 72 28 31 37 35 30 30 29 3b 63 6f 6e 73 74 20 61 3d 28 65 2c 74 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 28 30 2c 6e 2e 5a 29 28 65 2c 74 2c 72 29 3b 72 65 74 75 72 6e 20 61 3e 2d 31 3f 65 5b 61 5d 3a 76 6f 69 64 20 30 7d 7d 2c 31 37 35 30 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 6e 3d 72 28 39 35 31 34 36 31 29 3b 63 6f 6e 73 74 20 61 3d 28 65 2c 74 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 28 30 2c 6e 2e 5a Data Ascii: ],r,e))return!1;r+=1}return!0}},959211:(e,t,r)=>{"use strict";r.d(t,{Z:()=>a});var n=r(17500);const a=(e,t,r)=>{const a=(0,n.Z)(e,t,r);return a>-1?e[a]:void 0}},17500:(e,t,r)=>{"use strict";r.d(t,{Z:()=>a});var n=r(951461);const a=(e,t,r)=>{const a=(0,n.Z

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:34:41 UTC	567	OUT	GET /responsive-web/client-web/i18n/en.2673d73a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://x.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://x.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:34:42 UTC	698	IN	HTTP/1.1 200 OK Connection: close Content-Length: 469666 etag: "Gt5BHg7Q/y/Cyu6yXF5Zug==" perf: 7402827104 expires: Tue, 07 Oct 2025 17:33:26 GMT content-type: application/javascript; charset=utf-8 last-modified: Mon, 07 Oct 2024 16:37:58 GMT x-transaction-id: 6fcea33077c6ea08 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 access-control-allow-origin: * X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Mon, 07 Oct 2024 22:34:41 GMT X-Served-By: cache-pdk-katl1840048-PDK, cache-lin1730077-LIN X-Cache: HIT, HIT Vary: Accept-Encoding x-tw-cdn: FT Server-Timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
2024-10-07 22:34:42 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 69 31 38 6e 2f 65 6e 22 5d 2c 7b 34 31 37 33 34 36 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 76 61 72 20 61 3d 6f 28 33 37 39 34 30 34 29 2e 5f 72 65 67 69 73 74 65 72 28 22 65 6e 22 2c 7b 67 65 74 20 65 6d 6f 6a 69 28 29 7b 72 65 74 75 72 6e 20 6f 2e 65 28 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 65 6e 22 29 2e 74 68 65 6e 28 6f 2e 74 2e 62 69 6e 64 28 6f 2c 39 32 30 37 34 37 2c 32 33 29 29 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["i18n/en"],{417346:(e,t,o)=>{var a=o(379404)._register("en",{get emoji(){return o.e("i18n/emoji-en").then(o.t.bind(o,920747,23))}});function n(e,t,
2024-10-07 22:34:42 UTC	16384	IN	Data Raw: 28 22 63 30 33 62 31 31 32 36 22 2c 22 4d 75 74 65 20 61 63 63 6f 75 6e 74 22 29 2c 61 28 22 65 62 64 32 61 62 62 32 22 2c 22 42 6c 6f 63 6b 20 61 63 63 6f 75 6e 74 22 29 2c 61 28 22 68 63 36 63 35 35 31 30 22 2c 22 4f 70 65 6e 20 70 6f 73 74 20 64 65 74 61 69 6c 73 22 29 2c 61 28 22 65 65 62 64 65 66 33 38 22 2c 22 45 78 70 61 6e 64 20 70 68 6f 74 6f 22 29 2c 61 28 22 62 34 38 38 37 35 38 63 22 2c 22 4f 70 65 6e 2f 43 6c 6f 73 65 20 4d 65 73 73 61 67 65 73 20 64 6f 63 6b 22 29 2c 61 28 22 63 38 32 33 31 34 65 30 22 2c 22 50 61 75 73 65 2f 50 6c 61 79 20 73 65 6c 65 63 74 65 64 20 56 69 64 65 6f 22 29 2c 61 28 22 62 38 38 31 35 36 30 65 22 2c 22 4d 75 74 65 20 73 65 6c 65 63 74 65 64 20 56 69 64 65 6f 22 29 2c 61 28 22 61 39 34 66 37 33 30 32 22 2c 22 47 Data Ascii: ("c03b1126","Mute account"),a("ebd2abb2","Block account"),a("hc6c5510","Open post details"),a("eebdef38","Expand photo"),a("b488758c","Open/Close Messages dock"),a("c82314e0","Pause/Play selected Video"),a("b881560e","Mute selected Video"),a("a94f7302","G
2024-10-07 22:34:42 UTC	16384	IN	Data Raw: 22 64 32 61 37 37 36 32 32 22 2c 22 41 6e 20 6f 66 66 69 63 69 61 6c 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 77 69 74 68 20 74 68 65 20 64 6f 6d 61 69 6e 20 6f 66 20 61 20 71 75 61 6c 69 66 79 69 6e 67 20 6e 65 77 73 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 6f 72 20 70 75 62 6c 69 63 61 74 69 6f 6e 2e 22 29 2c 61 28 22 65 65 63 33 34 31 64 61 22 2c 22 41 6e 20 6f 66 66 69 63 69 61 6c 20 77 65 62 73 69 74 65 20 6f 66 20 61 20 6e 65 77 73 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 6f 72 20 70 75 62 6c 69 63 61 74 69 6f 6e 20 74 68 61 74 20 72 65 66 65 72 65 6e 63 65 73 20 79 6f 75 72 20 58 20 61 63 63 6f 75 6e 74 2e 22 29 2c 61 28 22 62 30 33 61 65 30 36 38 22 2c 22 53 65 6c 65 63 74 20 61 20 6d 65 74 68 6f 64 20 74 6f 20 73 68 6f 77 20 74 68 61 74 20 Data Ascii: "d2a77622","An official email address with the domain of a qualifying news organization or publication."),a("eec341da","An official website of a news organization or publication that references your X account."),a("b03ae068","Select a method to show that
2024-10-07 22:34:42 UTC	16384	IN	Data Raw: 67 65 73 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2e 22 29 2c 61 28 22 64 31 30 39 31 66 35 30 22 2c 22 46 6f 72 67 6f 74 20 70 61 73 73 77 6f 72 64 3f 22 29 2c 61 28 22 64 39 37 63 30 37 62 65 22 2c 22 4d 61 6e 61 67 65 20 43 72 65 61 74 6f 72 20 53 75 62 73 63 72 69 70 74 69 6f 6e 73 22 29 2c 61 28 22 65 66 61 32 39 31 64 61 22 2c 22 56 69 65 77 20 61 6e 64 20 6d 61 6e 61 67 65 20 79 6f 75 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 73 20 74 6f 20 63 72 65 61 74 6f 72 73 20 62 65 6c 6f 77 20 75 73 69 6e 67 20 53 74 72 69 70 65 2e 20 41 6e 79 20 61 63 74 69 76 65 20 73 75 62 73 63 72 69 70 74 69 6f 6e 73 20 79 6f 75 20 69 6e 69 74 69 61 74 65 64 20 6f 6e 20 69 4f 53 20 6f 72 20 41 6e 64 72 6f 69 64 20 63 61 6e 20 62 65 20 6d 61 6e 61 67 65 64 20 69 Data Ascii: ges to your account."),a("d1091f50","Forgot password?"),a("d97c07be","Manage Creator Subscriptions"),a("efa291da","View and manage your subscriptions to creators below using Stripe. Any active subscriptions you initiated on iOS or Android can be managed i
2024-10-07 22:34:42 UTC	16384	IN	Data Raw: 6e 64 65 72 73 74 61 6e 64 22 29 2c 61 28 22 62 36 66 65 38 61 35 36 22 2c 22 63 6f 6e 66 75 73 69 6e 67 20 6f 72 20 75 6e 63 6c 65 61 72 22 29 2c 61 28 22 64 34 63 33 33 39 62 39 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 50 6f 73 74 20 66 72 6f 6d 20 22 2b 65 2e 66 75 6c 6c 4e 61 6d 65 2b 22 20 28 40 22 2b 65 2e 73 63 72 65 65 6e 4e 61 6d 65 2b 22 29 22 7d 29 29 2c 61 28 22 64 62 30 63 62 36 34 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 66 75 6c 6c 4e 61 6d 65 2b 22 20 28 40 22 2b 65 2e 73 63 72 65 65 6e 4e 61 6d 65 2b 22 29 20 70 6f 73 74 65 64 3a 5c 6e 22 2b 65 2e 74 77 65 65 74 7d 29 29 2c 61 28 22 68 36 66 39 39 61 63 34 22 2c 22 41 64 64 65 64 20 74 6f 20 79 6f 75 72 20 42 6f 6f 6b 6d 61 72 6b Data Ascii: nderstand"),a("b6fe8a56","confusing or unclear"),a("d4c339b9",(function(e){return"Post from "+e.fullName+" (@"+e.screenName+")"})),a("db0cb64f",(function(e){return e.fullName+" (@"+e.screenName+") posted:\n"+e.tweet})),a("h6f99ac4","Added to your Bookmark
2024-10-07 22:34:42 UTC	16384	IN	Data Raw: 22 2c 22 43 72 65 61 74 6f 72 20 53 75 62 73 63 72 69 70 74 69 6f 6e 22 29 2c 61 28 22 66 36 31 63 64 61 38 33 22 2c 22 41 64 73 20 52 65 76 65 6e 75 65 20 53 68 61 72 65 22 29 2c 61 28 22 67 33 37 32 33 34 38 30 22 2c 22 43 72 65 61 74 6f 72 20 53 75 62 73 63 72 69 70 74 69 6f 6e 22 29 2c 61 28 22 63 37 37 36 66 35 32 33 22 2c 22 41 64 73 20 52 65 76 65 6e 75 65 20 53 68 61 72 65 22 29 2c 61 28 22 64 65 61 66 35 62 31 36 22 2c 22 52 65 74 72 79 22 29 2c 61 28 22 67 31 61 34 61 31 62 36 22 2c 22 49 44 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 65 72 72 6f 72 22 29 2c 61 28 22 65 32 34 33 30 35 65 34 22 2c 22 59 6f 75 72 20 69 64 65 6e 74 69 74 79 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 73 65 73 73 69 6f 6e 20 77 61 73 20 73 74 61 6c 65 20 6f 72 20 69 6e Data Ascii: ","Creator Subscription"),a("f61cda83","Ads Revenue Share"),a("g3723480","Creator Subscription"),a("c776f523","Ads Revenue Share"),a("deaf5b16","Retry"),a("g1a4a1b6","ID verification error"),a("e24305e4","Your identity verification session was stale or in
2024-10-07 22:34:42 UTC	16384	IN	Data Raw: 20 74 6f 20 72 65 70 6f 73 74 20 74 68 69 73 20 70 6f 73 74 3f 22 29 2c 61 28 22 68 31 39 66 33 38 64 65 22 2c 22 59 6f 75 e2 80 99 6c 6c 20 6e 65 65 64 20 74 6f 20 6c 6f 67 20 69 6e 20 62 65 66 6f 72 65 20 79 6f 75 20 63 61 6e 20 70 6f 73 74 20 74 68 61 74 2e 22 29 2c 61 28 22 65 32 38 39 64 39 35 30 22 2c 22 59 6f 75 e2 80 99 6c 6c 20 6e 65 65 64 20 74 6f 20 6c 6f 67 20 69 6e 20 62 65 66 6f 72 65 20 79 6f 75 20 63 61 6e 20 73 68 61 72 65 20 74 68 61 74 20 70 6f 73 74 2e 22 29 2c 61 28 22 64 32 38 32 31 35 66 30 22 2c 22 53 6f 72 72 79 2c 20 70 6f 6c 6c 73 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 69 6e 20 43 6f 6d 6d 75 6e 69 74 69 65 73 21 22 29 2c 61 28 22 65 63 32 66 63 30 38 39 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e Data Ascii: to repost this post?"),a("h19f38de","Youll need to log in before you can post that."),a("e289d950","Youll need to log in before you can share that post."),a("d28215f0","Sorry, polls are not allowed in Communities!"),a("ec2fc089",(function(e){return
2024-10-07 22:34:42 UTC	16384	IN	Data Raw: 20 68 65 72 65 22 29 2c 61 28 22 63 32 37 35 36 37 31 38 22 2c 22 59 6f 75 72 20 70 75 62 6c 69 73 68 65 64 20 41 72 74 69 63 6c 65 73 20 6c 69 76 65 20 68 65 72 65 22 29 2c 61 28 22 61 66 36 35 63 38 35 34 22 2c 22 45 64 69 74 20 69 6e 20 66 6f 63 75 73 20 6d 6f 64 65 22 29 2c 61 28 22 65 30 35 65 32 33 33 36 22 2c 22 55 6e 70 75 62 6c 69 73 68 2c 20 6d 6f 76 65 20 41 72 74 69 63 6c 65 20 74 6f 20 64 72 61 66 74 73 22 29 2c 61 28 22 64 33 36 34 34 37 65 30 22 2c 22 54 68 69 73 20 69 73 20 77 68 65 72 65 20 79 6f 75 20 77 72 69 74 65 22 29 2c 61 28 22 63 61 30 65 64 39 38 32 22 2c 22 43 6f 6e 74 69 6e 75 65 20 61 20 64 72 61 66 74 20 6f 72 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 41 72 74 69 63 6c 65 22 29 2c 61 28 22 65 65 39 65 34 32 61 61 22 2c 22 57 Data Ascii: here"),a("c2756718","Your published Articles live here"),a("af65c854","Edit in focus mode"),a("e05e2336","Unpublish, move Article to drafts"),a("d36447e0","This is where you write"),a("ca0ed982","Continue a draft or create a new Article"),a("ee9e42aa","W
2024-10-07 22:34:42 UTC	16384	IN	Data Raw: 68 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2e 20 59 6f 75 e2 80 99 6c 6c 20 61 6c 73 6f 20 72 65 63 65 69 76 65 20 74 68 65 6d 20 77 68 65 6e 20 79 6f 75 e2 80 99 72 65 20 6e 6f 74 20 6f 6e 20 58 2e 20 54 75 72 6e 20 74 68 65 6d 20 6f 66 66 20 61 6e 79 74 69 6d 65 2e 22 29 2c 61 28 22 66 65 31 31 62 33 65 61 22 2c 22 55 6e 73 75 70 70 6f 72 74 65 64 20 62 72 6f 77 73 65 72 22 29 2c 61 28 22 61 31 32 34 35 64 33 61 22 2c 22 49 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 64 6f 65 73 6e e2 80 99 74 20 73 75 70 70 6f 72 74 20 70 75 73 68 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2e 22 29 2c 61 28 22 66 35 38 30 63 37 33 38 22 2c 22 54 75 72 6e 20 6f 6e 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 3f 22 29 2c 61 28 22 69 39 35 Data Ascii: h notifications. Youll also receive them when youre not on X. Turn them off anytime."),a("fe11b3ea","Unsupported browser"),a("a1245d3a","It looks like your browser doesnt support push notifications."),a("f580c738","Turn on notifications?"),a("i95
2024-10-07 22:34:42 UTC	16384	IN	Data Raw: 22 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 6f 75 72 20 4d 6f 6e 65 74 69 7a 61 74 69 6f 6e 20 70 72 6f 67 72 61 6d 73 20 61 6e 64 20 70 6f 6c 69 63 69 65 73 20 68 65 72 65 2e 22 29 2c 61 28 22 68 37 61 36 38 30 38 30 22 2c 22 45 61 72 6e 20 69 6e 63 6f 6d 65 20 66 72 6f 6d 20 74 68 65 20 61 64 73 20 73 65 72 76 65 64 20 69 6e 20 74 68 65 20 72 65 70 6c 69 65 73 20 74 6f 20 79 6f 75 72 20 70 6f 73 74 73 2e 22 29 2c 61 28 22 61 65 61 30 62 31 31 61 22 2c 22 45 61 72 6e 20 61 20 6c 69 76 69 6e 67 20 6f 6e 20 58 20 62 79 20 6c 65 74 74 69 6e 67 20 61 6e 79 6f 6e 65 20 73 75 62 73 63 72 69 62 65 20 74 6f 20 79 6f 75 20 66 6f 72 20 6d 6f 6e 74 68 6c 79 20 63 6f 6e 74 65 6e 74 2e 22 29 2c 61 28 22 65 65 66 64 30 39 31 65 22 2c 22 49 64 65 6e 74 69 74 Data Ascii: "Learn more about our Monetization programs and policies here."),a("h7a68080","Earn income from the ads served in the replies to your posts."),a("aea0b11a","Earn a living on X by letting anyone subscribe to you for monthly content."),a("eefd091e","Identit