终端记录

调查员在工作站上跑过的指令。点一下指令，就像按下 Enter，会展开它的输出。

investigator@mistport:~/芷宁给的资料$ grep -i authentication *.eml

扣款通知.eml:Authentication-Results: mx1.maskmail.tw;
BeatBird电子报_1130.eml:Authentication-Results: mx1.maskmail.tw;

investigator@mistport:~/芷宁给的资料$ grep ^From: *.eml

扣款通知.eml:From: "BeatBird 会员中心" <notice@kq3fz.idv.tw>
BeatBird电子报_1130.eml:From: "BeatBird" <news@beatbird.app>

investigator@mistport:~$ whois beatbird.app

Domain Name             : beatbird.app
Creation Date           : 2019-03-11
Registrar               : TWNIC 认证注册商 HiDomain
Registrant Organization : 心跳鸟科技股份有限公司
Registrant Country      : TW
Name Server             : ns1.beatbird.app

investigator@mistport:~$ whois member-care.com

Domain Name             : member-care.com
Creation Date           : 2026-12-02
Registrar               : NameDrop Ltd.
Registrant              : REDACTED FOR PRIVACY
Registrant Country      : REDACTED
Name Server             : ns1.fastparkdns.net

investigator@mistport:~$ whois beatbird-help.app

Domain Name             : beatbird-help.app
Creation Date           : 2026-12-03
Registrar               : NameDrop Ltd.
Registrant              : REDACTED FOR PRIVACY
Registrant Country      : REDACTED
Name Server             : ns1.fastparkdns.net

investigator@mistport:~$ whois xn--batbird-7gg.app

Domain Name             : xn--batbird-7gg.app（显示为 bеatbird.app，第二个字母是西里尔字母 е）
Creation Date           : 2026-12-02
Registrar               : NameDrop Ltd.
Registrant              : REDACTED FOR PRIVACY
Registrant Country      : REDACTED
Name Server             : ns1.fastparkdns.net

investigator@mistport:~$ whois kq3fz.idv.tw

Domain Name             : kq3fz.idv.tw
Creation Date           : 2026-12-01
Registrar               : TWNIC 认证注册商 QuickReg
Registrant              : REDACTED FOR PRIVACY
Name Server             : ns1.fastparkdns.net

investigator@mistport:~$ dig txt kq3fz.idv.tw

;; QUESTION SECTION:
;kq3fz.idv.tw.		IN	TXT

;; ANSWER SECTION:
kq3fz.idv.tw.	300	IN	TXT	"v=spf1 ip4:203.0.113.47 -all"

investigator@mistport:~$ dig txt beatbird.app

;; QUESTION SECTION:
;beatbird.app.		IN	TXT

;; ANSWER SECTION:
beatbird.app.	300	IN	TXT	"v=spf1 include:_spf.mail.beatbird.app -all"
beatbird.app.	300	IN	TXT	"google-site-verification=0x3bA…"

investigator@mistport:~$ dig txt _dmarc.beatbird.app

;; QUESTION SECTION:
;_dmarc.beatbird.app.		IN	TXT

;; ANSWER SECTION:
_dmarc.beatbird.app.	300	IN	TXT	"v=DMARC1; p=reject; rua=mailto:dmarc@beatbird.app"

investigator@mistport:~/BeatBird提供数据$ grep avg_sleep_30d *.csv

数据提供记录.csv:F-03,云杉数据,App 使用分析,user_hash / avg_sleep_30d / sleep_score / app_sessions / device_model

investigator@mistport:~/BeatBird提供数据$ grep C-05 *.csv

陷阱名单.csv:C-05,D-05,许书豪,shuhao.hsu.m9@maskmail.tw

会用终端的话，也可以在文件页下载源文件，自己用 grep 查。