Mistport Workstation static

Terminal log

Commands the investigator ran on the workstation. Click a command, as if pressing Enter, to see its output.

investigator@mistport:~/from-chih-ning$ grep -i authentication *.eml
billing-notice.eml:Authentication-Results: mx1.maskmail.tw;
beatbird-newsletter_1130.eml:Authentication-Results: mx1.maskmail.tw;
investigator@mistport:~/from-chih-ning$ grep ^From: *.eml
billing-notice.eml:From: "BeatBird Member Centre" <notice@kq3fz.idv.tw>
beatbird-newsletter_1130.eml:From: "BeatBird" <news@beatbird.app>
investigator@mistport:~$ whois beatbird.app
Domain Name             : beatbird.app
Creation Date           : 2019-03-11
Registrar               : HiDomain (TWNIC accredited)
Registrant Organization : BeatBird Technology Co., Ltd.
Registrant Country      : TW
Name Server             : ns1.beatbird.app
investigator@mistport:~$ whois member-care.com
Domain Name             : member-care.com
Creation Date           : 2026-12-02
Registrar               : NameDrop Ltd.
Registrant              : REDACTED FOR PRIVACY
Registrant Country      : REDACTED
Name Server             : ns1.fastparkdns.net
investigator@mistport:~$ whois beatbird-help.app
Domain Name             : beatbird-help.app
Creation Date           : 2026-12-03
Registrar               : NameDrop Ltd.
Registrant              : REDACTED FOR PRIVACY
Registrant Country      : REDACTED
Name Server             : ns1.fastparkdns.net
investigator@mistport:~$ whois xn--batbird-7gg.app
Domain Name             : xn--batbird-7gg.app (shown as bеatbird.app; the second letter is a Cyrillic е)
Creation Date           : 2026-12-02
Registrar               : NameDrop Ltd.
Registrant              : REDACTED FOR PRIVACY
Registrant Country      : REDACTED
Name Server             : ns1.fastparkdns.net
investigator@mistport:~$ whois kq3fz.idv.tw
Domain Name             : kq3fz.idv.tw
Creation Date           : 2026-12-01
Registrar               : QuickReg (TWNIC accredited)
Registrant              : REDACTED FOR PRIVACY
Name Server             : ns1.fastparkdns.net
investigator@mistport:~$ dig txt kq3fz.idv.tw
;; QUESTION SECTION:
;kq3fz.idv.tw.		IN	TXT

;; ANSWER SECTION:
kq3fz.idv.tw.	300	IN	TXT	"v=spf1 ip4:203.0.113.47 -all"
investigator@mistport:~$ dig txt beatbird.app
;; QUESTION SECTION:
;beatbird.app.		IN	TXT

;; ANSWER SECTION:
beatbird.app.	300	IN	TXT	"v=spf1 include:_spf.mail.beatbird.app -all"
beatbird.app.	300	IN	TXT	"google-site-verification=0x3bA…"
investigator@mistport:~$ dig txt _dmarc.beatbird.app
;; QUESTION SECTION:
;_dmarc.beatbird.app.		IN	TXT

;; ANSWER SECTION:
_dmarc.beatbird.app.	300	IN	TXT	"v=DMARC1; p=reject; rua=mailto:dmarc@beatbird.app"
investigator@mistport:~/beatbird-records$ grep avg_sleep_30d *.csv
data-provided.csv:F-03,Yunshan Data,app usage analytics,user_hash / avg_sleep_30d / sleep_score / app_sessions / device_model
investigator@mistport:~/beatbird-records$ grep C-05 *.csv
canaries.csv:C-05,D-05,Hsu Shu-hao,shuhao.hsu.m9@maskmail.tw

If you use a terminal, you can also download the originals on the Files page and grep them yourself.