Edit tour

Windows Analysis Report
http://pixcams.com

Overview

General Information

Sample URL:	http://pixcams.com
Analysis ID:	1625634
Infos:

Detection

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

Connects to several IPs in different countries

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Detected potential crypto function

Drops PE files

Executes massive DNS lookups (> 100)

HTML page contains hidden javascript code

PE file contains sections with non-standard names

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1932,i,17220930051692312460,14663092190760225307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pixcams.com" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

firefox.exe (PID: 7128 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1952 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2772 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2220 -prefMapHandle 2192 -prefsLen 25250 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5b44eb71-9150-4466-8d73-b542ad338f24} 1952 "\\.\pipe\gecko-crash-server-pipe.1952" 1e8bdd6e710 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7400 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3340 -parentBuildID 20230927232528 -prefsHandle 3412 -prefMapHandle 3408 -prefsLen 25402 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1dd26791-2163-4155-91aa-9c2c9a3e8ab0} 1952 "\\.\pipe\gecko-crash-server-pipe.1952" 1e8bdd77d10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7380 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5104 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 5624 -prefMapHandle 5488 -prefsLen 33172 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {39695732-3388-48f6-9938-dbd14cce1266} 1952 "\\.\pipe\gecko-crash-server-pipe.1952" 1e8d160b510 utility MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-27T15:03:49.918466+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	62880	1.1.1.1	53	UDP
2025-02-27T15:03:49.918590+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	57757	1.1.1.1	53	UDP
2025-02-27T15:03:51.171032+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	58065	1.1.1.1	53	UDP
2025-02-27T15:03:51.171181+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	63814	1.1.1.1	53	UDP
2025-02-27T15:05:01.087764+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	56200	1.1.1.1	53	UDP
2025-02-27T15:05:01.087910+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	61684	1.1.1.1	53	UDP
2025-02-27T15:05:19.670850+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	56552	1.1.1.1	53	UDP
2025-02-27T15:05:19.847407+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	62329	1.1.1.1	53	UDP
2025-02-27T15:05:20.848627+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	62329	1.1.1.1	53	UDP
2025-02-27T15:05:21.042480+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	64058	1.1.1.1	53	UDP
2025-02-27T15:05:35.978646+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	59756	1.1.1.1	53	UDP
2025-02-27T15:05:47.457958+0100	2059867	1	Exploit Kit Activity Detected	192.168.2.18	50806	1.1.1.1	53	UDP

ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (rednosehorse .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-27T15:03:49.918743+0100	2059371	1	Exploit Kit Activity Detected	192.168.2.18	63494	1.1.1.1	53	UDP
2025-02-27T15:03:49.918964+0100	2059371	1	Exploit Kit Activity Detected	192.168.2.18	52957	1.1.1.1	53	UDP
2025-02-27T15:03:51.301630+0100	2059371	1	Exploit Kit Activity Detected	192.168.2.18	62404	1.1.1.1	53	UDP
2025-02-27T15:03:51.301767+0100	2059371	1	Exploit Kit Activity Detected	192.168.2.18	59162	1.1.1.1	53	UDP
2025-02-27T15:05:19.670040+0100	2059371	1	Exploit Kit Activity Detected	192.168.2.18	59141	1.1.1.1	53	UDP
2025-02-27T15:05:20.676382+0100	2059371	1	Exploit Kit Activity Detected	192.168.2.18	59141	1.1.1.1	53	UDP
2025-02-27T15:05:21.045314+0100	2059371	1	Exploit Kit Activity Detected	192.168.2.18	52445	1.1.1.1	53	UDP
2025-02-27T15:05:21.231897+0100	2059371	1	Exploit Kit Activity Detected	192.168.2.18	57235	1.1.1.1	53	UDP
2025-02-27T15:05:35.979912+0100	2059371	1	Exploit Kit Activity Detected	192.168.2.18	60528	1.1.1.1	53	UDP
2025-02-27T15:05:47.449014+0100	2059371	1	Exploit Kit Activity Detected	192.168.2.18	56126	1.1.1.1	53	UDP

ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-27T15:03:50.937639+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	49715	82.97.247.174	443	TCP
2025-02-27T15:03:51.878059+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	49727	82.97.247.174	443	TCP
2025-02-27T15:04:01.431614+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	49827	82.97.247.174	443	TCP
2025-02-27T15:04:02.503124+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	49836	82.97.247.174	443	TCP
2025-02-27T15:05:01.945270+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	50632	82.97.247.174	443	TCP
2025-02-27T15:05:03.072744+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	50635	82.97.247.174	443	TCP
2025-02-27T15:05:05.376936+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	50657	82.97.247.174	443	TCP
2025-02-27T15:05:06.441924+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	50666	82.97.247.174	443	TCP
2025-02-27T15:05:21.057478+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	50882	82.97.247.174	443	TCP
2025-02-27T15:05:28.101387+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	51017	82.97.247.174	443	TCP
2025-02-27T15:05:37.541136+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	51137	82.97.247.174	443	TCP
2025-02-27T15:05:39.140528+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	51145	82.97.247.174	443	TCP
2025-02-27T15:05:48.143897+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	51162	82.97.247.174	443	TCP
2025-02-27T15:05:48.225886+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	51173	82.97.247.174	443	TCP
2025-02-27T15:05:48.949659+0100	2059868	1	Exploit Kit Activity Detected	192.168.2.18	51178	82.97.247.174	443	TCP

ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-27T15:03:51.073348+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	49718	82.97.247.174	443	TCP
2025-02-27T15:03:52.269665+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	49736	82.97.247.174	443	TCP
2025-02-27T15:04:01.431758+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	49826	82.97.247.174	443	TCP
2025-02-27T15:04:02.512089+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	49837	82.97.247.174	443	TCP
2025-02-27T15:05:01.803794+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	50629	82.97.247.174	443	TCP
2025-02-27T15:05:02.896969+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	50633	82.97.247.174	443	TCP
2025-02-27T15:05:05.387618+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	50656	82.97.247.174	443	TCP
2025-02-27T15:05:06.478661+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	50668	82.97.247.174	443	TCP
2025-02-27T15:05:21.753850+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	50888	82.97.247.174	443	TCP
2025-02-27T15:05:27.376641+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	51009	82.97.247.174	443	TCP
2025-02-27T15:05:37.548064+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	51136	82.97.247.174	443	TCP
2025-02-27T15:05:38.404457+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	51144	82.97.247.174	443	TCP
2025-02-27T15:05:48.134663+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	51161	82.97.247.174	443	TCP
2025-02-27T15:05:48.230208+0100	2059372	1	Exploit Kit Activity Detected	192.168.2.18	51172	82.97.247.174	443	TCP

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-27T15:05:00.229737+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.18	50607	3.72.38.170	443	TCP
2025-02-27T15:05:08.882713+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.18	50730	216.200.232.253	443	TCP
2025-02-27T15:05:09.078426+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.18	50731	35.210.130.15	443	TCP
2025-02-27T15:05:15.629833+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.18	50838	34.111.113.62	443	TCP

HTTP traffic detected: HTTP/1.1 200 OKLast-Modified: Fri, 07 Feb 2025 06:55:57 GMTETag: 85430baed3398695717b0263807cf97cContent-Length: 453023Accept-Ranges: bytesX-Timestamp: 1738911356.44453Content-Type: application/zipX-Trans-Id: txf36a3cdb14a04fca91417-0067a71e89dfw1Cache-Control: public, max-age=168369Expires: Sat, 01 Mar 2025 12:50:50 GMTDate: Thu, 27 Feb 2025 14:04:41 GMTConnection: keep-aliveData Raw: 50 4b 03 04 14 00 00 00 08 00 cd 8d 62 4e d0 b9 df e8 52 e8 06 00 d0 97 0f 00 0f 00 00 00 67 6d 70 6f 70 65 6e 68 32 36 34 2e 64 6c 6c ec bd 0b 7c 14 45 b6 30 de 3d 99 84 49 98 a4 07 8c 18 31 c2 e8 ce ea 34 66 31 71 e3 9a 60 d4 e9 d0 93 f4 e0 04 c2 d3 80 88 71 a3 b9 a0 08 11 27 2b b8 10 08 93 68 2a 6d 7b d9 bb 7a d7 dd 6f 5f ff 7b 77 ef dd e7 c5 bd ee f2 d0 95 cc 24 92 07 28 24 41 21 c0 8a 11 7c 4c 18 81 00 42 26 41 32 ff 73 aa 7b 9e 04 44 64 f7 ff dd ff f7 f1 63 d2 55 d5 55 e7 d4 39 75 ce a9 53 a7 aa bb 4b 16 6c 60 12 18 86 d1 c3 2f 18 64 98 2d 8c fa cf c6 7c f9 bf 00 fc d2 26 be 9e c6 fc 39 f9 9d 9b b6 b0 ce 77 6e 9a b3 78 c9 d3 e6 aa 15 cb ff 69 c5 23 4f 9a 2b 1e 59 b6 6c b9 cb fc dd c7 cc 2b aa 97 99 97 2c 33 8b 33 66 9b 9f 5c fe e8 63 93 53 53 53 2c 1a 8c e9 d2 cf b7 a4 f0 fd fe d0 ef b1 92 cf 8f 4e a4 d7 d3 47 47 d1 eb 99 a3 ff 46 af 27 8f 26 d3 3a 27 fd 4b e0 5a 26 9c 3e 9a 40 af 67 8e de 4d af 9f 1f 4d d7 60 fc 13 fc 2a 84 fe a3 a3 e9 f5 14 bd ce 5a 52 b1 18 ef 85 fa 5e 6a 67 98 47 9f 4b 62 8e 6f 7e 76 61 a8 ac 9f b9 d9 3c 5a 97 c6 31 2e 23 c3 8c 4f a0 65 19 99 a3 19 c6 44 93 eb 58 fc 8b 69 1d c3 24 69 6d 42 57 c6 c3 51 26 be ba c1 04 b7 cb d9 50 a3 d0 e5 c2 bc 9a 2c 4d e4 98 2c a8 bd 3a 89 63 ac d1 cc 2d e5 98 0d 12 5c 9f e5 98 ce 1b e1 fa 2a c7 d4 01 8a ce 2d 69 cc 9c 4b 8c 49 f6 d6 34 86 61 a3 0a 36 18 99 2a dd c5 eb 4f 76 3d b6 d2 05 57 cb d3 46 b5 43 48 bb 3e b6 8e 99 61 ca 27 af 78 f4 11 d7 23 40 66 8d 8e c2 64 d6 c1 75 a5 31 a6 9e 0d fe 4f 56 ab 31 6f 7d 1b 09 84 0e 67 c2 35 90 16 5f cf 33 b9 4a ad 48 69 04 5a 99 69 70 4d e7 2e 84 b7 62 b9 5a 11 86 81 f9 25 dc 47 94 8b 46 aa f7 d8 d2 e5 15 0c e5 11 f2 8a d2 f2 f8 05 f5 0a 2f ce 89 ff 33 ff 71 9b d9 4a af c7 d0 f2 b6 f6 6f de 03 b3 25 f7 67 d9 4e d2 2a 91 7d 12 d9 29 c9 33 0d 4e 25 f1 21 b7 91 71 2a a9 0b e0 e2 eb b8 8b 81 b4 f1 5e 49 9e 6d 90 c8 7e 07 09 f8 36 dd 85 23 e9 7e 2b fb c1 87 17 85 41 d1 7f 12 49 5d 72 03 c7 e4 78 b4 e2 b9 2a 82 3c 49 59 6a c9 96 da ec cc 70 30 18 8c 60 53 ae 4d 40 14 45 f7 8f 66 ea 3d ae 3b 21 cf 40 1e b0 f8 be 0d 45 c4 bb 05 45 bb be a3 fa 9e ad 1b 20 e1 9b 9c 30 1a 6e da 03 12 f1 4a 64 c8 b7 1c 64 d2 7f fd d6 06 bc 75 4d ec 2d 94 71 49 c6 6c 52 8e 07 7a 9a 07 3d 7d a8 a5 72 83 44 e6 58 4c 5a a7 ac 92 f2 78 b6 24 97 04 7c 63 a1 31 d2 63 55 6b 4d e6 26 d6 51 6e 5d ac fe 61 5d 74 fd 68 fa a1 2a d4 b4 21 b9 36 20 37 80 e4 4a 64 af 44 76 4b 4a 22 57 67 64 2a 25 6e 99 07 d2 bf 77 ab e9 f6 4a 6e 69 fb 69 6e 6d 72 9b 40 4d 85 24 27 5a c7 73 8c 04 ec 18 23 29 25 Data Ascii: PKbNRgmpopenh264.dll|E0=I14f1q`

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pixcams.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.4 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/lasso/admin/assets/css/lasso-live.min.css?ver=1740492174 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/lasso/admin/assets/css/lasso-table-frontend.min.css?ver=1740492174 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/style.css?ver=6.7.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/main.min.css?ver=2.0.90 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/elementor-frontend.min.css?ver=2.0.90 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /affiliate.mvp.min.js HTTP/1.1Host: affiliate-cdn.raptive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /X5ItBYECdRzi2YP1oB1KE046dS2IzeG49exCR8ALHq9 HTTP/1.1Host: newgoodfoodmarket.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UAcBfRjO2gnlBsXxFJ9movpnBUaqO5vU-iz9AeVEbOE HTTP/1.1Host: rednosehorse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/cf-7.min.css?ver=2.0.90 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.35.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-6.css?ver=1740492437 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /affiliate.mvp.min.js HTTP/1.1Host: affiliate-cdn.raptive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /X5ItBYECdRzi2YP1oB1KE046dS2IzeG49exCR8ALHq9 HTTP/1.1Host: newgoodfoodmarket.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/css/widget-call-to-action.min.css?ver=3.27.4 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/css/conditionals/transitions.min.css?ver=3.27.4 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/css/widget-posts.min.css?ver=3.27.4 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UAcBfRjO2gnlBsXxFJ9movpnBUaqO5vU-iz9AeVEbOE HTTP/1.1Host: rednosehorse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-grow.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-float.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/widget-video.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/widget-image-carousel.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-9.css?ver=1740492765 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/youtube-embed-plus-pro/styles/ytprefs.min.css?ver=14.2.1.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/youtube-embed-plus-pro/scripts/lity.min.css?ver=14.2.1.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/youtube-embed-plus-pro/scripts/embdyn.min.css?ver=14.2.1.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/css/um-modal.min.css?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/jquery-ui/jquery-ui.min.css?ver=1.13.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/tipsy/tipsy.min.css?ver=1.0.0a HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/raty/um-raty.min.css?ver=2.6.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/select2/select2.min.css?ver=4.0.13 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/css/um-fileupload.min.css?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/um-confirm/um-confirm.min.css?ver=1.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/default.min.css?ver=3.6.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/default.date.min.css?ver=3.6.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/default.time.min.css?ver=3.6.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/legacy/fonticons/fonticons-ii.min.css?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/legacy/fonticons/fonticons-fa.min.css?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/css/um-fontawesome.min.css?ver=6.5.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/css/common.min.css?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/css/um-responsive.min.css?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/css/um-styles.min.css?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/cropper/cropper.min.css?ver=1.6.1 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/css/um-profile.min.css?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/css/um-account.min.css?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/css/um-misc.min.css?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/css/um-old-default.min.css?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/02/email-2-300x169.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/02/email-1-300x233.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/02/email-300x300.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/02/email-2-300x169.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon8-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/02/email-1-300x233.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/02/email-300x300.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon7-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /sites/65c53426c527914a9139f7b7/ads.min.js?referrer=https%3A%2F%2Fpixcams.com%2F&cb=75 HTTP/1.1Host: ads.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/marmalade?siteid=65c53426c527914a9139f7b7&url=https%3A%2F%2Fpixcams.com%2F&deliveryFeatures=amazonBetaApstag,consentManagerCMP,optimalBidders,raptiveFloors,raptiveManualCookieSync,recencyFrequency,reissuingSticky,stickyBucketsLocalStorage,switzerlandGdpr,ttdSync HTTP/1.1Host: ads.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pixcams.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon8-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon7-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=9.3.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/youtube-embed-plus-pro/scripts/lity.min.js?ver=14.2.1.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=iowij76&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pixcams.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/raptiveFloors/65c53426c527914a9139f7b7 HTTP/1.1Host: ads.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pixcams.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/optimalBidders/65c53426c527914a9139f7b7?bw=5.4&h=9 HTTP/1.1Host: ads.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pixcams.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/65c53426c527914a9139f7b7/ads.min.js?referrer=https%3A%2F%2Fpixcams.com%2F&cb=75 HTTP/1.1Host: ads.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/youtube-embed-plus-pro/scripts/ytprefs.min.js?ver=14.2.1.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=9.3.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /api/v1/marmalade?siteid=65c53426c527914a9139f7b7&url=https%3A%2F%2Fpixcams.com%2F&deliveryFeatures=amazonBetaApstag,consentManagerCMP,optimalBidders,raptiveFloors,raptiveManualCookieSync,recencyFrequency,reissuingSticky,stickyBucketsLocalStorage,switzerlandGdpr,ttdSync HTTP/1.1Host: ads.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/youtube-embed-plus-pro/scripts/embdyn.min.js?ver=14.2.1.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/youtube-embed-plus-pro/scripts/lity.min.js?ver=14.2.1.2 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=iowij76&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00805a4d-d742-43ee-9664-814be38f4b0a
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon6-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/youtube-embed-plus-pro/scripts/ytprefs.min.js?ver=14.2.1.2 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon5-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/youtube-embed-plus-pro/scripts/embdyn.min.js?ver=14.2.1.2 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /api/v2/raptiveFloors/65c53426c527914a9139f7b7 HTTP/1.1Host: ads.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/optimalBidders/65c53426c527914a9139f7b7?bw=5.4&h=9 HTTP/1.1Host: ads.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon4-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon6-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon5-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon3-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon4-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pixcams.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030Range: bytes=283811-283811If-Range: "4e800-62f1eb8a4da7a"
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pixcams.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030Range: bytes=283811-321535If-Range: "4e800-62f1eb8a4da7a"
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon3-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_B7EJY7EP1S=GS1.1.1740665030.1.0.1740665030.0.0.0; _ga=GA1.1.2011943033.1740665030
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/fluentform/assets/css/fluent-forms-elementor-widget.css?ver=5.2.12 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/convertkit/resources/frontend/js/broadcasts.js?ver=2.7.4 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /UAcBfRjO2gnlBsXxFJ9movpnBUaqO5vU-iz9AeVEbOE HTTP/1.1Host: rednosehorse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /X5ItBYECdRzi2YP1oB1KE046dS2IzeG49exCR8ALHq9 HTTP/1.1Host: newgoodfoodmarket.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /sites/65c53426c527914a9139f7b7/ads.min.js?referrer=https%3A%2F%2Fpixcams.com%2F&cb=19 HTTP/1.1Host: ads.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/convertkit/resources/frontend/js/broadcasts.js?ver=2.7.4 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.4 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pixcams.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://pixcams.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /api/v2/raptiveFloors/65c53426c527914a9139f7b7 HTTP/1.1Host: ads.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pixcams.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.35.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pixcams.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://pixcams.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.35.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/12/deer-1367217-3.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/wp-content/uploads/elementor/css/post-9.css?ver=1740492765Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/thumbs/EZWebGraphic4-1-qlw436qp9shix5vi5pbrvw9f4fxdvwbmzjjr5x7cf0.png HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /lasso-performance.min.js?ver=332.20250227 HTTP/1.1Host: js.getlasso.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/11/cropped-cropped-PixCams-Logo-w_Tagline-PNG.png HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /X5ItBYECdRzi2YP1oB1KE046dS2IzeG49exCR8ALHq9 HTTP/1.1Host: newgoodfoodmarket.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UAcBfRjO2gnlBsXxFJ9movpnBUaqO5vU-iz9AeVEbOE HTTP/1.1Host: rednosehorse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.4 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /SzlpnTAbCvQvG1OvfQpFvzkbU78xQAX7O1sfvzY= HTTP/1.1Host: virtual.urban-orthodontics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.4 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/convertkit/resources/frontend/js/convertkit.js?ver=2.7.4 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /sites/65c53426c527914a9139f7b7/ads.min.js?referrer=https%3A%2F%2Fpixcams.com%2F&cb=19 HTTP/1.1Host: ads.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/core/4170106/es2018/js/adthrive.min.js?deployment=2025-02-26-01:rpsc-253:pr6026:4170106:4&bucket=flex-27&deliveryFeatures=amazonBetaApstag,consentManagerCMP,optimalBidders,raptiveFloors,raptiveManualCookieSync,recencyFrequency,reissuingSticky,stickyBucketsLocalStorage,switzerlandGdpr,ttdSync&siteid=65c53426c527914a9139f7b7 HTTP/1.1Host: ads.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/prebid/load-cookie.html?endpoint=https://prebid.production.adthrive.com/cookie_sync&max_sync_count=15&coop_sync=true&bidders=undertone,gumgum,appnexus,adf,colossus,ix,kargo,openx,pubmatic,rubicon,triplelift,triplelift_native,33across,conversant,epsilon,unruly,yieldmo,resetDigital,grid,yahoossp,improvedigital,aidem,criteo&args=account:1234 HTTP/1.1Host: ads.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/optimalBidders/65c53426c527914a9139f7b7?bw=5.4&h=9 HTTP/1.1Host: ads.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pixcams.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lasso-performance.min.js?ver=332.20250227 HTTP/1.1Host: js.getlasso.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/main.js?ver=2.0.90 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.4 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/thumbs/EZWebGraphic4-1-qlw436qp9shix5vi5pbrvw9f4fxdvwbmzjjr5x7cf0.png HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-util.min.js?ver=6.7.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/12/deer-1367217-3.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/11/cropped-cropped-PixCams-Logo-w_Tagline-PNG.png HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /api/v2/raptiveFloors/65c53426c527914a9139f7b7 HTTP/1.1Host: ads.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/tipsy/tipsy.min.js?ver=1.0.0a HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/convertkit/resources/frontend/js/convertkit.js?ver=2.7.4 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/main.js?ver=2.0.90 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/um-confirm/um-confirm.min.js?ver=1.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.min.js?ver=3.6.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.date.min.js?ver=3.6.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.time.min.js?ver=3.6.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /api/v2/optimalBidders/65c53426c527914a9139f7b7?bw=5.4&h=9 HTTP/1.1Host: ads.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-util.min.js?ver=6.7.2 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/common.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/cropper/cropper.min.js?ver=1.6.1 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/tipsy/tipsy.min.js?ver=1.0.0a HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/common-frontend.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/um-confirm/um-confirm.min.js?ver=1.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-modal.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/jquery-form/jquery-form.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.min.js?ver=3.6.2 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/fileupload/fileupload.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-functions.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.date.min.js?ver=3.6.2 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.time.min.js?ver=3.6.2 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/common.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-responsive.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/cropper/cropper.min.js?ver=1.6.1 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-conditional.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/common-frontend.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/select2/select2.full.min.js?ver=4.0.13 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-modal.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/select2/i18n/en.js?ver=4.0.13 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/raty/um-raty.min.js?ver=2.6.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/fileupload/fileupload.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-scripts.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/jquery-form/jquery-form.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-functions.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-profile.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-responsive.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-account.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /cookie_sync HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/bounce/current?version=1&networkId=72582&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&rurl=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dconversant%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D HTTP/1.1Host: prebid-match.dotomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/select2/i18n/en.js?ver=4.0.13 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/raty/um-raty.min.js?ver=2.6.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.27.4 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-scripts.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-conditional.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.27.4 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-profile.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/libs/select2/select2.full.min.js?ver=4.0.13 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-member/assets/js/um-account.min.js?ver=2.10.0 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.27.4 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon2-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.27.4 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /match/bounce/current?DotomiTest=5f50bc489b881650&is_secure=true&version=1&networkId=72582&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&rurl=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dconversant%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D HTTP/1.1Host: prebid-match.dotomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DotomiTest=5f50bc489b881650
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon1-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/youtube-embed-plus-pro/scripts/fitvids.min.js?ver=14.2.1.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/3-25-2019a-1024x575.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.27.4 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon2-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/conditionals/dialog.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/conditionals/lightbox.min.css?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-json/contact-form-7/v1/contact-forms/2231/feedback/schema HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, /;q=0.1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.27.4 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/BF1-1024x568.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/02/1-17-2017_cam2-1024x574.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /bots.min.json HTTP/1.1Host: js.getlasso.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pixcams.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/135293X1598627.skimlinks.js HTTP/1.1Host: s.skimresources.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/HomeIcon1-150x150.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=conversant&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=AQAJumRVmb0towJQZAZrAQEBAQEBAQCURrnG3AEBAJRGucbc&expiration=1740751447 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /abd/abd.js HTTP/1.1Host: ads.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pixcams.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/youtube-embed-plus-pro/scripts/fitvids.min.js?ver=14.2.1.2 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/USS1-1024x583.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/3-25-2019a-1024x575.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/4-30-2021-1024x574.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/03/Eaglet-5-Question.png HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-json/contact-form-7/v1/contact-forms/2231/feedback/schema HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/03/Quiz2.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=2.9121310511663063 HTTP/1.1Host: p.skimresources.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/robots.txt?__skimjs_preflight__please_ignore__=true&rnd=0.7514156787751769 HTTP/1.1Host: t.skimresources.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=2.9121310511663063 HTTP/1.1Host: p.skimresources.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/135293X1598627.skimlinks.js HTTP/1.1Host: s.skimresources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/12/pattern.svg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/wp-content/uploads/elementor/css/post-9.css?ver=1740492765Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/12/20171201_112732-768x576.webp HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/02/1-17-2017_cam2-1024x574.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/BF1-1024x568.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0
Source: global traffic	HTTP traffic detected: GET /sync?gdpr=&cmp_cs=&us_privacy=&gpp=&gpp_sid=&redir=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dtriplelift_native%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=conversant&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=AQAJumRVmb0towJQZAZrAQEBAQEBAQCURrnG3AEBAJRGucbc&expiration=1740751447 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUp1bVJWbWIwdG93SlFaQVpyQVFFQkFRRUJBUUNVUnJuRzNBRUJBSlJHdWNiYyIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjA3Ljg0NzQ4NTQ0M1oifX19
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/USS1-1024x583.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/01/email-4-300x182.jpg HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /abd/abd.js HTTP/1.1Host: ads.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.7.2 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/12/4-30-2021-1024x574.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=2.9121310511663063 HTTP/1.1Host: p.skimresources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=2.9121310511663063 HTTP/1.1Host: p.skimresources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/ HTTP/1.1Host: r.skimresources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/921.5514159e238824c4aec6.js HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/12/pattern.svg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/68.612dc7fd3c0d776d0aa2.js HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /sync?gdpr=&cmp_cs=&us_privacy=&gpp=&gpp_sid=&redir=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dtriplelift_native%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24UID&ld=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=830255740567401366229; tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/lightbox.f3fa607b705962362647.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/03/Quiz2.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/12/20171201_112732-768x576.webp HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/01/email-4-300x182.jpg HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /api/v2/page HTTP/1.1Host: t.skimresources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/15.0.3/svg/1f534.svg HTTP/1.1Host: s.w.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/15.0.3/svg/1f4d6.svg HTTP/1.1Host: s.w.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.7.2 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/15.0.3/svg/1f6d2.svg HTTP/1.1Host: s.w.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/15.0.3/svg/1f989.svg HTTP/1.1Host: s.w.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/921.5514159e238824c4aec6.js HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/load-more.8b46f464e573feab5dd7.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/68.612dc7fd3c0d776d0aa2.js HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/posts.aec59265318492b89cb5.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/video.4343afefd25b5ede51a4.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/image-carousel.6167d20b95b33386757b.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?gdpr=&cmp_cs=&us_privacy=&gpp=&gpp_sid=&redir=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dtriplelift_native%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24UID&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIgAIQ7qLjvdQyCgoIoQEQ7qLjvdQyCgoI4gEQ7qLjvdQyCgoI5gEQ7qLjvdQyCgoIhwIQ7qLjvdQyCgkIOhDuouO91DIKCQgbEO6i473UMgoKCIwCEO6i473UMgoKCL8CEO6i473UMgoJCF8Q7qLjvdQy; tluidp=830255740567401366229; tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00805a4d-d742-43ee-9664-814be38f4b0a
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?gdpr=&cmp_cs=&us_privacy=&gpp=&gpp_sid=&redir=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dtriplelift_native%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24UID&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=830255740567401366229; tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /setuid?partner=tripleliftdbredirect&tlUid=830255740567401366229&dbredirect=true&gdpr=0&consent= HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/bounce/current?networkId=74572&version=1&gdpr=0&gdpr_consent= HTTP/1.1Host: triplelift-match.dotomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DotomiTest=5f50bc489b881650
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/15.0.3/svg/1f4da.svg HTTP/1.1Host: s.w.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/15.0.3/svg/1f534.svg HTTP/1.1Host: s.w.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/15.0.3/svg/1f4d6.svg HTTP/1.1Host: s.w.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/88342?bidder_id=246498&bidder_uuid=830255740567401366229 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/15.0.3/svg/1f6d2.svg HTTP/1.1Host: s.w.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/15.0.3/svg/1f989.svg HTTP/1.1Host: s.w.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/03/Eaglet-5-Question.png HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/lightbox.f3fa607b705962362647.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.27.6 HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /sync/triplelift/830255740567401366229?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/load-more.8b46f464e573feab5dd7.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/posts.aec59265318492b89cb5.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/15.0.3/svg/1f4da.svg HTTP/1.1Host: s.w.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=00805a4d-d742-43ee-9664-814be38f4b0a&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=830255740567401366229; tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=triplelift_native&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=b&uid=830255740567401366229 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUp1bVJWbWIwdG93SlFaQVpyQVFFQkFRRUJBUUNVUnJuRzNBRUJBSlJHdWNiYyIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjA4LjcwMDU0NDc0NloifX19
Source: global traffic	HTTP traffic detected: GET /s/88342?bidder_id=246498&bidder_uuid=830255740567401366229&_li_chk=true&previous_uuid=2ebb2d1914224d44a10bdabe43d76869 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=2ebb2d19-1422-4d44-a10b-dabe43d76869
Source: global traffic	HTTP traffic detected: GET /setuid?partner=tripleliftdbredirect&tlUid=830255740567401366229&dbredirect=true&gdpr=0&consent= HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: li_sugr=eda10c4b-b55b-40cf-adfc-c7cbe5bd63f4; bcookie="v=2&23c84410-4f17-442a-8e73-b20e7eb5579b"; lidc="b=TGST03:s=T:r=T:a=T:p=T:g=3433:u=1:x=1:i=1740665050:t=1740751450:v=2:sig=AQFG9YnBR1y6j6ZcaqJQ0ouvZPBbJLNc"
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-96b851f9-7bb6-567e-717a-e943de1df0ac$ip$8.46.123.189&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=830255740567401366229; tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/video.4343afefd25b5ede51a4.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=ODMwMjU1NzQwNTY3NDAxMzY2MjI5 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/image-carousel.6167d20b95b33386757b.bundle.min.js HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=ODMwMjU1NzQwNTY3NDAxMzY2MjI5 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/bounce/current?DotomiTest=10de4b4f7e2815a0&is_secure=true&networkId=74572&version=1&gdpr=0&gdpr_consent= HTTP/1.1Host: triplelift-match.dotomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DotomiTest=10de4b4f7e2815a0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm=&google_sc=&gdpr=0&gdpr_consent=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-VJ_JfoNE2oSkYE.HbHLZnfo7uPGivmchy_zT8vOGeQ--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=830255740567401366229; tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=00805a4d-d742-43ee-9664-814be38f4b0a&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-96b851f9-7bb6-567e-717a-e943de1df0ac$ip$8.46.123.189&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=triplelift_native&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=b&uid=830255740567401366229 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUp1bVJWbWIwdG93SlFaQVpyQVFFQkFRRUJBUUNVUnJuRzNBRUJBSlJHdWNiYyIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjA4LjcwMDU0NDc0NloifSwidHJpcGxlbGlmdF9uYXRpdmUiOnsidWlkIjoiODMwMjU1NzQwNTY3NDAxMzY2MjI5IiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MTEuMDUwOTQxNDUxWiJ9fX0=
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7006&vxii_pdid=2ebb2d19-1422-4d44-a10b-dabe43d76869&us_privacy=1YN- HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEBaEfSHIH-nfa6jzmQ0V_Fk&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=830255740567401366229; tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-VJ_JfoNE2oSkYE.HbHLZnfo7uPGivmchy_zT8vOGeQ--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /xuid?mid=6732&dongle=38F&xuid=AQAJNWWJFp-1kwJu-B7fAQEBAQEBAQCURrnZ2wEBAJRGudnb&expiration=1740751451&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=830255740567401366229; tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=ODMwMjU1NzQwNTY3NDAxMzY2MjI5&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=ODMwMjU1NzQwNTY3NDAxMzY2MjI5&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnb2etE2KR4jjJjA2edT8T1cD5OS03sy9SywBJZehRRA1CvLOqT6JmljEw-SpI; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /sync?_reach=1&vxii_pdid=2ebb2d19-1422-4d44-a10b-dabe43d76869&vxii_pid=12&vxii_pid1=7006&vxii_rcid=e9a925b8-bd4f-4ace-8a2b-a417512e0a04&vxii_rmax=3 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU5YTkyNWI4LWJkNGYtNGFjZS04YTJiLWE0MTc1MTJlMGEwNCIsImwiOjE3NDA2NjUwNTE5MzMsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEBaEfSHIH-nfa6jzmQ0V_Fk&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=830255740567401366229; tluidp=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /xuid?mid=6732&dongle=38F&xuid=AQAJNWWJFp-1kwJu-B7fAQEBAQEBAQCURrnZ2wEBAJRGudnb&expiration=1740751451&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=830255740567401366229; tluidp=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=830255740567401366229; tluid=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=ODMwMjU1NzQwNTY3NDAxMzY2MjI5&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnb2etE2KR4jjJjA2edT8T1cD5OS03sy9SywBJZehRRA1CvLOqT6JmljEw-SpI; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /connectors/throtle/usersync?redir=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5026%26vxii_pdid%3D%7BuserId%7D%26vxii_ts%3D1%26_t%3D1740665052%26_reach%3D1 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /connectors/throtle/usersync?cookieQ=1&redir=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5026%26vxii_pdid%3D%7BuserId%7D%26vxii_ts%3D1%26_t%3D1740665052%26_reach%3D1 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=d185d58c-0ac1-4210-9cdc-60b30d0753ad#1740665053126
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=830255740567401366229; tluidp=830255740567401366229
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5026&vxii_pdid=d185d58c-0ac1-4210-9cdc-60b30d0753ad-67c070dd-5553&vxii_ts=1&_t=1740665052&_reach=1 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU5YTkyNWI4LWJkNGYtNGFjZS04YTJiLWE0MTc1MTJlMGEwNCIsImwiOjE3NDA2NjUwNTI1MzYsInQiOjF9; sc=eyJpIjoiZTlhOTI1YjgtYmQ0Zi00YWNlLThhMmItYTQxNzUxMmUwYTA0Iiwic2lkIjoic2lkLWI4Y2M2YWQ1LWY1MTMtMTFlZi04N2Q2LTAyNDIwYWZmMTIzMyIsIm1zIjozLCJ0cyI6MSwicHMiOjEsInNwIjo1MDI2LCJwcCI6MSwidHNlIjoxLCJpciI6dHJ1ZSwibHRzZSI6MTc0MDY2NTA1MjUzNiwiXyI6dHJ1ZX0=
Source: global traffic	HTTP traffic detected: GET /cksync?cs=1&ovsid=e9a925b8-bd4f-4ace-8a2b-a417512e0a04&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5048%26vxii_pdid%3D%3Cvsid%3E%26vxii_ts%3D2%26_reach%3D1&type=thr&us_privacy=&vxii_pdid= HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5048&vxii_pdid=3836666556406175000V10&vxii_ts=2&_reach=1 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU5YTkyNWI4LWJkNGYtNGFjZS04YTJiLWE0MTc1MTJlMGEwNCIsImwiOjE3NDA2NjUwNTQyOTQsInQiOjJ9; sc=eyJpIjoiZTlhOTI1YjgtYmQ0Zi00YWNlLThhMmItYTQxNzUxMmUwYTA0Iiwic2lkIjoic2lkLWI4Y2M2YWQ1LWY1MTMtMTFlZi04N2Q2LTAyNDIwYWZmMTIzMyIsIm1zIjozLCJ0cyI6MiwicHMiOjIsInNwIjo1MDQ4LCJwcCI6MiwidHNlIjoyLCJpciI6dHJ1ZSwibHRzZSI6MTc0MDY2NTA1NDI5NH0=
Source: global traffic	HTTP traffic detected: GET /sync?nid=throtle HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDa4YG-BjABOgT87-jmQgS3Gq6W.ju2EwFD7zpvEBgivWHIcWax7NTgL33cOK4RjJa%2Fu%2BoA; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDa4YG-BjABOgT87-jmQgS3Gq6W.ju2EwFD7zpvEBgivWHIcWax7NTgL33cOK4RjJa%2Fu%2BoA
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5044&vxii_pdid=lrhR-Xu2Vn5xeulD3h3wrAgue70&_t=1740665056 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU5YTkyNWI4LWJkNGYtNGFjZS04YTJiLWE0MTc1MTJlMGEwNCIsImwiOjE3NDA2NjUwNTU5MDcsInQiOjN9; sc=eyJpIjoiZTlhOTI1YjgtYmQ0Zi00YWNlLThhMmItYTQxNzUxMmUwYTA0Iiwic2lkIjoic2lkLWI4Y2M2YWQ1LWY1MTMtMTFlZi04N2Q2LTAyNDIwYWZmMTIzMyIsIm1zIjozLCJ0cyI6MywicHMiOjMsInNwIjo1MDQ0LCJwcCI6MywidHNlIjozLCJpciI6dHJ1ZSwibHRzZSI6MTc0MDY2NTA1NTkwN30=
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5044&vxii_pdid=lrhR-Xu2Vn5xeulD3h3wrAgue70&_t=1740665056 HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU5YTkyNWI4LWJkNGYtNGFjZS04YTJiLWE0MTc1MTJlMGEwNCIsImwiOjE3NDA2NjUwNTcxMDQsInQiOjR9; sc=eyJpIjoiZTlhOTI1YjgtYmQ0Zi00YWNlLThhMmItYTQxNzUxMmUwYTA0Iiwic2lkIjoic2lkLWJiODU3Njk4LWY1MTMtMTFlZi04ZWZhLTAyNDIwYWZmMTIzOCIsIm1zIjozLCJwcyI6Mywic3AiOjUwNDQsInBwIjozLCJ0c2UiOjMsImx0c2UiOjE3NDA2NjUwNTU5MDd9
Source: global traffic	HTTP traffic detected: GET /exchange/sync.php?p=pbs-raptive&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: pixel.rubiconproject.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D5%26_t%3D1740665057&u=e9a925b8-bd4f-4ace-8a2b-a417512e0a04 HTTP/1.1Host: a.tribalfusion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=rubicon&uid=M7NF16P2-23-M2OO HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUp1bVJWbWIwdG93SlFaQVpyQVFFQkFRRUJBUUNVUnJuRzNBRUJBSlJHdWNiYyIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjA4LjcwMDU0NDc0NloifSwidHJpcGxlbGlmdF9uYXRpdmUiOnsidWlkIjoiODMwMjU1NzQwNTY3NDAxMzY2MjI5IiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MTEuOTc4NTQyNjg3WiJ9fX0=
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D5%26_t%3D1740665057&u=e9a925b8-bd4f-4ace-8a2b-a417512e0a04 HTTP/1.1Host: s.tribalfusion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aBnoeUqZbaOU6iPqcgTqHMAds2WRWy25Hhoax3TLW; ANON_ID_old=aBnoeUqZbaOU6iPqcgTqHMAds2WRWy25Hhoax3TLW
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5042&vxii_pdid=18072662149533095286&vxii_ts=5&_t=1740665057 HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU5YTkyNWI4LWJkNGYtNGFjZS04YTJiLWE0MTc1MTJlMGEwNCIsImwiOjE3NDA2NjUwNTc5MTAsInQiOjV9; sc=eyJpIjoiZTlhOTI1YjgtYmQ0Zi00YWNlLThhMmItYTQxNzUxMmUwYTA0Iiwic2lkIjoic2lkLWJiODU3Njk4LWY1MTMtMTFlZi04ZWZhLTAyNDIwYWZmMTIzOCIsIm1zIjozLCJ0cyI6MSwicHMiOjQsInNwIjo1MDQyLCJwcCI6NCwidHNlIjo0LCJpciI6dHJ1ZSwibHRzZSI6MTc0MDY2NTA1NzkxMH0=
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=rubicon&uid=M7NF16P2-23-M2OO HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUp1bVJWbWIwdG93SlFaQVpyQVFFQkFRRUJBUUNVUnJuRzNBRUJBSlJHdWNiYyIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjA4LjcwMDU0NDc0NloifSwidHJpcGxlbGlmdF9uYXRpdmUiOnsidWlkIjoiODMwMjU1NzQwNTY3NDAxMzY2MjI5IiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MTEuOTc4NTQyNjg3WiJ9LCJydWJpY29uIjp7InVpZCI6Ik03TkYxNlAyLTIzLU0yT08iLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDoxOS4xNjA1MTY4OThaIn19fQ==
Source: global traffic	HTTP traffic detected: GET /cookie?redirect_url=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dadf%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%24UID HTTP/1.1Host: c1.adform.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=10835/tp=ALCT/tpid=/gdpr=0/gdpr_consent=?https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5003%26vxii_pdid%3D%24%7Bprofile_id%7D%26vxii_ts%3D6%26_t%3D1740665059 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie?redirect_url=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dadf%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%24UID HTTP/1.1Host: c1.adform.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=7099912855764153863
Source: global traffic	HTTP traffic detected: GET /server_match?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&r=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dimprovedigital%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%7BPUB_USER_ID%7D HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=10835/tp=ALCT/tpid=/gdpr=0/gdpr_consent=?https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5003%26vxii_pdid%3D%24%7Bprofile_id%7D%26vxii_ts%3D6%26_t%3D1740665059 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=adf&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=7099912855764153863 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUp1bVJWbWIwdG93SlFaQVpyQVFFQkFRRUJBUUNVUnJuRzNBRUJBSlJHdWNiYyIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjA4LjcwMDU0NDc0NloifSwicnViaWNvbiI6eyJ1aWQiOiJNN05GMTZQMi0yMy1NMk9PIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MTkuOTk4NDExMjYzWiJ9LCJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiI4MzAyNTU3NDA1Njc0MDEzNjYyMjkiLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDoxMS45Nzg1NDI2ODdaIn19fQ==
Source: global traffic	HTTP traffic detected: GET /ul_cb/server_match?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&r=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dimprovedigital%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%7BPUB_USER_ID%7D HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=27e14c25-93e7-4995-a325-a4aac912f190; tuuid_lu=1740665061
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5003&vxii_pdid=4b8f3b0de0e7313afb97095254b8dcfc&vxii_ts=6&_t=1740665059 HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU5YTkyNWI4LWJkNGYtNGFjZS04YTJiLWE0MTc1MTJlMGEwNCIsImwiOjE3NDA2NjUwNTk4MzAsInQiOjZ9; sc=eyJpIjoiZTlhOTI1YjgtYmQ0Zi00YWNlLThhMmItYTQxNzUxMmUwYTA0Iiwic2lkIjoic2lkLWJiODU3Njk4LWY1MTMtMTFlZi04ZWZhLTAyNDIwYWZmMTIzOCIsIm1zIjozLCJ0cyI6MiwicHMiOjUsInNwIjo1MDAzLCJwcCI6NSwidHNlIjo1LCJpciI6dHJ1ZSwibHRzZSI6MTc0MDY2NTA1OTgzMX0=
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=improvedigital&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=27e14c25-93e7-4995-a325-a4aac912f190 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=THROTLE HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNpwwGcCEApucnR18uXZ7je6wz3zDYIFEgEBAQHCwWfKZwAAAAAA_eMAAA&S=AQAAAtbTsZqywEuL_2wdQJcLIJQ
Source: global traffic	HTTP traffic detected: GET /prebid_sync?gdpr=&consent=&us_privacy=&redirect=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Daidem%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%24UID HTTP/1.1Host: gum.aidemsrv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=improvedigital&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=27e14c25-93e7-4995-a325-a4aac912f190 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZGYiOnsidWlkIjoiNzA5OTkxMjg1NTc2NDE1Mzg2MyIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjIyLjM5OTM0NjE2NFoifSwicnViaWNvbiI6eyJ1aWQiOiJNN05GMTZQMi0yMy1NMk9PIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MTkuOTk4NDExMjYzWiJ9LCJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUp1bVJWbWIwdG93SlFaQVpyQVFFQkFRRUJBUUNVUnJuRzNBRUJBSlJHdWNiYyIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjA4LjcwMDU0NDc0NloifSwiaW1wcm92ZWRpZ2l0YWwiOnsidWlkIjoiMjdlMTRjMjUtOTNlNy00OTk1LWEzMjUtYTRhYWM5MTJmMTkwIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MjMuMjcyMTQ4Mjc0WiJ9LCJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiI4MzAyNTU3NDA1Njc0MDEzNjYyMjkiLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDoxMS45Nzg1NDI2ODdaIn19fQ==
Source: global traffic	HTTP traffic detected: GET /ups/58691/cms?partner_id=THROTLE HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNpwwGcCEApucnR18uXZ7je6wz3zDYIFEgEBAQHCwWfKZwAAAAAA_eMAAA&S=AQAAAtbTsZqywEuL_2wdQJcLIJQ
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/PrebidServer?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&r=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dkargo%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5038&vxii_pdid=y-zEtKeHZE2oRUTO8g.GTlizRIsxlL7vdwGBHthQ--~A HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImU5YTkyNWI4LWJkNGYtNGFjZS04YTJiLWE0MTc1MTJlMGEwNCIsImwiOjE3NDA2NjUwNjI3NjAsInQiOjd9; sc=eyJpIjoiZTlhOTI1YjgtYmQ0Zi00YWNlLThhMmItYTQxNzUxMmUwYTA0Iiwic2lkIjoic2lkLWJiODU3Njk4LWY1MTMtMTFlZi04ZWZhLTAyNDIwYWZmMTIzOCIsIm1zIjozLCJ0cyI6MywicHMiOjYsInNwIjo1MDM4LCJwcCI6NiwidHNlIjo2LCJpciI6dHJ1ZSwibHRzZSI6MTc0MDY2NTA2Mjc2MH0=
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/PrebidServer?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&r=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dkargo%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=8e754503-391c-0245-5873-97eef735aa3d
Source: global traffic	HTTP traffic detected: GET /usersync2/rmphb?gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmphb?zcc=1&redir=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%5BRX_UUID%5D&cb=1740665066001 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-38befef4-fb41-4250-aa4f-3c5f044cde03-003%22%2C%22zdxidn%22%3A%222064%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=45&id=RX-38befef4-fb41-4250-aa4f-3c5f044cde03-003&rndcb=8182010830 HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/turn/3287571420528001219?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-38befef4-fb41-4250-aa4f-3c5f044cde03-003%22%2C%22zdxidn%22%3A%222064%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/non-critical-styles.min.css?ver=2.0.90 HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/418.66ea70734eb9e0d6ad3f.js HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/95.9b58e560812076065644.js HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/815.e63c92833a5f3723714e.js HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /csync/RX-38befef4-fb41-4250-aa4f-3c5f044cde03-003?redir=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3DRX-38befef4-fb41-4250-aa4f-3c5f044cde03-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/418.66ea70734eb9e0d6ad3f.js HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-json/contact-form-7/v1/contact-forms/2231/refill HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, /;q=0.1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/11/cropped-camera-lens-icon-png-10-32x32.png HTTP/1.1Host: pixcams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixcams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/95.9b58e560812076065644.js HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/blocksy/static/bundle/815.e63c92833a5f3723714e.js HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=unruly&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=RX-38befef4-fb41-4250-aa4f-3c5f044cde03-003 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/11/cropped-camera-lens-icon-png-10-32x32.png HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /wp-json/contact-form-7/v1/contact-forms/2231/refill HTTP/1.1Host: pixcams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2011943033.1740665030; _ga_B7EJY7EP1S=GS1.1.1740665030.1.1.1740665039.0.0.0; __adblocker=false
Source: global traffic	HTTP traffic detected: GET /csync?pid=rubicon&redir=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dresetdigital%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%24USER_ID HTTP/1.1Host: sync.resetdigital.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=unruly&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=RX-38befef4-fb41-4250-aa4f-3c5f044cde03-003 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=resetdigital&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=0000017B1F1174A9 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=resetdigital&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=0000017B1F1174A9 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZGYiOnsidWlkIjoiNzA5OTkxMjg1NTc2NDE1Mzg2MyIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjIyLjM5OTM0NjE2NFoifSwidW5ydWx5Ijp7InVpZCI6IlJYLTM4YmVmZWY0LWZiNDEtNDI1MC1hYTRmLTNjNWYwNDRjZGUwMy0wMDMiLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDozMC44NDgxNDQyNDFaIn0sImltcHJvdmVkaWdpdGFsIjp7InVpZCI6IjI3ZTE0YzI1LTkzZTctNDk5NS1hMzI1LWE0YWFjOTEyZjE5MCIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjI0LjExNzg4MDE3MVoifSwidHJpcGxlbGlmdF9uYXRpdmUiOnsidWlkIjoiODMwMjU1NzQwNTY3NDAxMzY2MjI5IiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MTEuOTc4NTQyNjg3WiJ9LCJydWJpY29uIjp7InVpZCI6Ik03TkYxNlAyLTIzLU0yT08iLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDoxOS45OTg0MTEyNjNaIn0sImNvbnZlcnNhbnQiOnsidWlkIjoiQVFBSnVtUlZtYjB0b3dKUVpBWnJBUUVCQVFFQkFRQ1VScm5HM0FFQkFKUkd1Y2JjIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MDguNzAwNTQ0NzQ2WiJ9LCJyZXNldGRpZ2l0YWwiOnsidWlkIjoiMDAwMDAxN0IxRjExNzRBOSIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjMyLjI5Mjg2OTk4N1oifX19
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dadnxs%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fprebid.production.adthrive.com%252Fsetuid%253Fbidder%253Dadnxs%2526gdpr%253D%2526gdpr_consent%253D%2526us_privacy%253D%2526gpp%253D%2526gpp_sid%253D%2526f%253Di%2526uid%253D%2524UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=PTv01sIM2gM2q0IoJJMarmCsIg2rDi9Oc3DBG4LO2bVJUm00uiBAtDQRXwfg8nRGHEjsY0ZkI7SbhY9ViW2pnFtMsvc-BvBXihbeHu0MCbU.; receive-cookie-deprecation=1; uuid2=7942026095392305550
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=adnxs&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=7942026095392305550 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=adnxs&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=7942026095392305550 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /AdServer/js/user_sync.html?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&predirect=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D HTTP/1.1Host: ads.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/bounce/current?version=1&networkId=72582&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&rurl=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Depsilon%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D HTTP/1.1Host: prebid-match.dotomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DotomiTest=10de4b4f7e2815a0
Source: global traffic	HTTP traffic detected: GET /match/bounce/current?DotomiTest=3ab8e4d385ff177e&is_secure=true&version=1&networkId=72582&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&rurl=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Depsilon%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D HTTP/1.1Host: prebid-match.dotomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DotomiTest=3ab8e4d385ff177e
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=22236852&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=pubmatic&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=b&uid=8AEAAA60-4DEB-48F5-A523-A98D70A714E0 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=22236852&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=1; pi=0:2; DPSync4=1741824000%3A197_219_226_227; SyncRTB4=1741824000%3A201_21_56_251_71_220_13_54%7C1741219200%3A223%7C1741910400%3A35
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=epsilon&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=AQAJjOrNXDechQI-_Yu7AQEBAQEBAQCURrhAZAEBAJRGuEBk&expiration=1740751478 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=8AEAAA60-4DEB-48F5-A523-A98D70A714E0&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=214&mapped=8AEAAA60-4DEB-48F5-A523-A98D70A714E0&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=8AEAAA60-4DEB-48F5-A523-A98D70A714E0&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /serving/cookie/match?party=14&cid=8AEAAA60-4DEB-48F5-A523-A98D70A714E0&gdpr=0&gdpr_consent= HTTP/1.1Host: c1.adform.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=7099912855764153863
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=&gdpr_consent=&r=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=epsilon&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=i&uid=AQAJjOrNXDechQI-_Yu7AQEBAQEBAQCURrhAZAEBAJRGuEBk&expiration=1740751478 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=8AEAAA60-4DEB-48F5-A523-A98D70A714E0&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AzxaoLSnCkOhoJLcN6D9uxA\|t
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=8AEAAA60-4DEB-48F5-A523-A98D70A714E0&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNpwwGcCEApucnR18uXZ7je6wz3zDYIFEgEBAQHCwWfKZwAAAAAA_eMAAA&S=AQAAAtbTsZqywEuL_2wdQJcLIJQ; IDSYNC=19ab~2nrq
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=&gdpr_consent=&r=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D HTTP/1.1Host: u.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bb366253-df8a-458e-aab7-40241690baaa\|1740665079
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=8AEAAA60-4DEB-48F5-A523-A98D70A714E0&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=4BABDC6DC2E06096
Source: global traffic	HTTP traffic detected: GET /ups/58679/cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNpwwGcCEApucnR18uXZ7je6wz3zDYIFEgEBAQHCwWfKZwAAAAAA_eMAAA&S=AQAAAtbTsZqywEuL_2wdQJcLIJQ; IDSYNC=19ab~2nrq
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=openx&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=b&uid=5144d2c5-cf92-4990-9bed-48d9f3ec4bda HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=9&gdpr=0 HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3287571420528001219
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=8AEAAA60-4DEB-48F5-A523-A98D70A714E0 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=8AEAAA60-4DEB-48F5-A523-A98D70A714E0&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=4BABDC6DC2E06096
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073061&val=3287571420528001219&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bb366253-df8a-458e-aab7-40241690baaa\|1740665079; pd=v2\|1740665080\|hEiKgakWvMgy
Source: global traffic	HTTP traffic detected: GET /upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D HTTP/1.1Host: sync-tm.everesttech.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=openx&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=b&uid=5144d2c5-cf92-4990-9bed-48d9f3ec4bda HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=8AEAAA60-4DEB-48F5-A523-A98D70A714E0 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=a401a726-df71-4773-56ae-83b200625dd0
Source: global traffic	HTTP traffic detected: GET /?partner=252&mapped=y-qecIYHFE2pRHG2OAH..Dre.qnRiP6xK_UA--~A&gdpr=0 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=4fec1ad0817fd082; done_redirects252=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=OEFFQUFBNjAtNERFQi00OEY1LUE1MjMtQTk4RDcwQTcxNEUw&gdpr=0&gdpr_consent=&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnb2etE2KR4jjJjA2edT8T1cD5OS03sy9SywBJZehRRA1CvLOqT6JmljEw-SpI; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073061&val=3287571420528001219&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bb366253-df8a-458e-aab7-40241690baaa\|1740665079; pd=v2\|1740665080\|hEiKgakWvMgy
Source: global traffic	HTTP traffic detected: GET /ct/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D&_test=Z8Bw_gAAkDXH_QBE HTTP/1.1Host: sync-tm.everesttech.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: everest_g_v2=g_surferid~Z8Bw_gAAkDXH_QBE
Source: global traffic	HTTP traffic detected: GET /sync/openx/fc5d3b4e-e6a1-e830-c1b6-9e398de0441e?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNpwwGcCEApucnR18uXZ7je6wz3zDYIFEgEBAQHCwWfKZwAAAAAA_eMAAA&S=AQAAAtbTsZqywEuL_2wdQJcLIJQ
Source: global traffic	HTTP traffic detected: GET /?zdid=1332&zcluid=4fec1ad0817fd082 HTTP/1.1Host: spl.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=a401a726-df71-4773-56ae-83b200625dd0
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Z8Bw_gAAkDXH_QBE&_test=Z8Bw_gAAkDXH_QBE HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bb366253-df8a-458e-aab7-40241690baaa\|1740665079; pd=v2\|1740665080\|hEiKgakWvMgy
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEFfrevPjrQW-2XUwqg0HuIU&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073025&val=y-ftj55VRE2p.ZEw9LJB0P0jZAbcAHH9KCd6o-~A HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bb366253-df8a-458e-aab7-40241690baaa\|1740665079; pd=v2\|1740665080\|hEiKgakWvMgy
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Z8Bw_gAAkDXH_QBE&_test=Z8Bw_gAAkDXH_QBE HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bb366253-df8a-458e-aab7-40241690baaa\|1740665079; pd=v2\|1740665080\|hEiKgakWvMgy
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=a401a726-df71-4773-56ae-83b200625dd0&reqId=64a2aef4-b381-4cca-42c4-80dcee8d78d4&zcluid=4fec1ad0817fd082&zdid=1332 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnb2etE2KR4jjJjA2edT8T1cD5OS03sy9SywBJZehRRA1CvLOqT6JmljEw-SpI; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=689a5d0a-760d-7a79-f061-88cc72b78957&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00805a4d-d742-43ee-9664-814be38f4b0a; TDCPM=CAESFgoHc3Z4OXQ1MBILCPaizr600Os9EAUYASABKAIyCwiCmdHrytDrPRAFOAFaB3N2eDl0NTBgAg..
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073025&val=y-ftj55VRE2p.ZEw9LJB0P0jZAbcAHH9KCd6o-~A HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bb366253-df8a-458e-aab7-40241690baaa\|1740665079; pd=v2\|1740665080\|hEiKgakWvMgy
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEFfrevPjrQW-2XUwqg0HuIU&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; PugT=1740665081
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=iuqqYE3rSPWlI6mNcKcU4A%3D%3D&gdpr=0&gdpr_consent=&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnb2etE2KR4jjJjA2edT8T1cD5OS03sy9SywBJZehRRA1CvLOqT6JmljEw-SpI; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=NDRmNThlYzAtYmY3YS0yNGRkLWU1ODEtZDI3NWI4NTU0NzM3 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnb2etE2KR4jjJjA2edT8T1cD5OS03sy9SywBJZehRRA1CvLOqT6JmljEw-SpI; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=00805a4d-d742-43ee-9664-814be38f4b0a&ttd_puid=689a5d0a-760d-7a79-f061-88cc72b78957&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bb366253-df8a-458e-aab7-40241690baaa\|1740665079; pd=v2\|1740665080\|hEiKgakWvMgy
Source: global traffic	HTTP traffic detected: GET /mw?google_gid=CAESEKbhqCWn6rvHRi8AbR3HCf8&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=a401a726-df71-4773-56ae-83b200625dd0&reqId=64a2aef4-b381-4cca-42c4-80dcee8d78d4&zcluid=4fec1ad0817fd082&zdid=1332 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=a401a726-df71-4773-56ae-83b200625dd0; zsc=%E0%A0.%01%C3%AC3D%1DS%17%A9%EE%92%2A%1B%9A%C1%ECp%033%5E%29+7K%19%FF%16%C3%27%F6%0Do%7BD%C1%8F%D7%92%A4n%A3%19%7D%CEp%C4%EA%BB%A3%C9Ts%AA%7C%7C%8A%5C%D7l%A2%CF%83%22T%1E%95%A4%13%FF%0B%16%84%605%CC%A1r%0BP%2A
Source: global traffic	HTTP traffic detected: GET /AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=&google_gid=CAESEFF3mkvscgM_mJSaXnC5x1M&google_cver=1 HTTP/1.1Host: ads.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; PugT=1740665083
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=00805a4d-d742-43ee-9664-814be38f4b0a&ttd_puid=689a5d0a-760d-7a79-f061-88cc72b78957&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bb366253-df8a-458e-aab7-40241690baaa\|1740665079; pd=v2\|1740665080\|hEiKgakWvMgy; univ_id=537072971\|00805a4d-d742-43ee-9664-814be38f4b0a\|1740665084593985
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnb2etE2KR4jjJjA2edT8T1cD5OS03sy9SywBJZehRRA1CvLOqT6JmljEw-SpI; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=NDRmNThlYzAtYmY3YS0yNGRkLWU1ODEtZDI3NWI4NTU0NzM3 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnb2etE2KR4jjJjA2edT8T1cD5OS03sy9SywBJZehRRA1CvLOqT6JmljEw-SpI; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /mw?google_gid=CAESEKbhqCWn6rvHRi8AbR3HCf8&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=a401a726-df71-4773-56ae-83b200625dd0&reqId=64a2aef4-b381-4cca-42c4-80dcee8d78d4&zcluid=4fec1ad0817fd082&zdid=1332 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=a401a726-df71-4773-56ae-83b200625dd0; zsc=%E0%A0.%01%C3%AC3D%1DS%17%A9%EE%92%2A%1B%9A%C1%ECp%033%5E%29+7K%19%FF%16%C3%27%F6%0Do%7BD%C1%8F%D7%92%A4n%A3%19%7D%CEp%C4%EA%BB%A3%C9Ts%AA%7C%7C%8A%5C%D7l%A2%CF%83%22T%1E%95%A4%13%FF%0B%16%84%605%CC%A1r%0BP%2A
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnb2etE2KR4jjJjA2edT8T1cD5OS03sy9SywBJZehRRA1CvLOqT6JmljEw-SpI; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEHP7aSZcYSyJh6y0yda794o&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bb366253-df8a-458e-aab7-40241690baaa\|1740665079; pd=v2\|1740665080\|hEiKgakWvMgy; univ_id=537072971\|00805a4d-d742-43ee-9664-814be38f4b0a\|1740665085203206
Source: global traffic	HTTP traffic detected: GET /AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=&google_gid=CAESEFF3mkvscgM_mJSaXnC5x1M&google_cver=1 HTTP/1.1Host: ads.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; PugT=1740665083
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEHP7aSZcYSyJh6y0yda794o&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bb366253-df8a-458e-aab7-40241690baaa\|1740665079; pd=v2\|1740665080\|hEiKgakWvMgy; univ_id=537072971\|00805a4d-d742-43ee-9664-814be38f4b0a\|1740665085203206
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEFfrevPjrQW-2XUwqg0HuIU&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; PugT=1740665083
Source: global traffic	HTTP traffic detected: GET /ups/58830/sync?redir=true&gdpr=&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNpwwGcCEApucnR18uXZ7je6wz3zDYIFEgEBAQHCwWfKZwAAAAAA_eMAAA&S=AQAAAtbTsZqywEuL_2wdQJcLIJQ; IDSYNC="19ab~2nrq:199z~2nrq"
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=D88E735391E54DBB8CA212CE19422E16
Source: global traffic	HTTP traffic detected: GET /serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE%20YOUR%20PIGGYBACK%20COOKIES%20HERE]&gdpr=0&gdpr_consent= HTTP/1.1Host: c1.adform.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=7099912855764153863
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=00805a4d-d742-43ee-9664-814be38f4b0a; TDCPM=CAESFgoHc3Z4OXQ1MBILCPaizr600Os9EAUYASACKAIyCwiCmdHrytDrPRAFOAFaB3N2eDl0NTBgAg..
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEFfrevPjrQW-2XUwqg0HuIU&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; PugT=1740665085
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=yahooAds&f=b&uid=y-3yIdc0VE2uLbN95iYKlIRLcUDwwjxNJW~A HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=7099912855764153863 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; PugT=1740665085
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=00805a4d-d742-43ee-9664-814be38f4b0a&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; PugT=1740665085
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=yahooAds&f=b&uid=y-3yIdc0VE2uLbN95iYKlIRLcUDwwjxNJW~A HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiI3OTQyMDI2MDk1MzkyMzA1NTUwIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MzYuMDYzNTk3MzA5WiJ9LCJlcHNpbG9uIjp7InVpZCI6IkFRQUpqT3JOWERlY2hRSS1fWXU3QVFFQkFRRUJBUUNVUnJoQVpBRUJBSlJHdUVCayIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjQwLjEwNjI5MTg0MloifSwiYWRmIjp7InVpZCI6IjcwOTk5MTI4NTU3NjQxNTM4NjMiLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDoyMi4zOTkzNDYxNjRaIn0sInlhaG9vQWRzIjp7InVpZCI6InktM3lJZGMwVkUydUxiTjk1aVlLbElSTGNVRHd3anhOSld-QSIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjQ3Ljc3NzY2Nzc3MVoifSwidW5ydWx5Ijp7InVpZCI6IlJYLTM4YmVmZWY0LWZiNDEtNDI1MC1hYTRmLTNjNWYwNDRjZGUwMy0wMDMiLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDozMC44NDgxNDQyNDFaIn0sImltcHJvdmVkaWdpdGFsIjp7InVpZCI6IjI3ZTE0YzI1LTkzZTctNDk5NS1hMzI1LWE0YWFjOTEyZjE5MCIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjI0LjExNzg4MDE3MVoifSwidHJpcGxlbGlmdF9uYXRpdmUiOnsidWlkIjoiODMwMjU1NzQwNTY3NDAxMzY2MjI5IiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MTEuOTc4NTQyNjg3WiJ9LCJydWJpY29uIjp7InVpZCI6Ik03TkYxNlAyLTIzLU0yT08iLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDoxOS45OTg0MTEyNjNaIn0sImNvbnZlcnNhbnQiOnsidWlkIjoiQVFBSnVtUlZtYjB0b3dKUVpBWnJBUUVCQVFFQkFRQ1VScm5HM0FFQkFKUkd1Y2JjIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MDguNzAwNTQ0NzQ2WiJ9LCJyZXNldGRpZ2l0YWwiOnsidWlkIjoiMDAwMDAxN0IxRjExNzRBOSIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjMzLjE0NjIwOTM3NFoifSwib3BlbngiOnsidWlkIjoiNTE0NGQyYzUtY2Y5Mi00OTkwLTliZWQtNDhkOWYzZWM0YmRhIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6NDIuMTc1OTA5ODA1WiJ9fX0=
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=7099912855764153863 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; PugT=1740665086; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=8AEAAA60-4DEB-48F5-A523-A98D70A714E0&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNpwwGcCEApucnR18uXZ7je6wz3zDYIFEgEBAQHCwWfKZwAAAAAA_eMAAA&S=AQAAAtbTsZqywEuL_2wdQJcLIJQ; IDSYNC="19ab~2nrq:199z~2nrq:19e6~2nrq"
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=00805a4d-d742-43ee-9664-814be38f4b0a&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665087
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/8AEAAA60-4DEB-48F5-A523-A98D70A714E0?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNpwwGcCEApucnR18uXZ7je6wz3zDYIFEgEBAQHCwWfKZwAAAAAA_eMAAA&S=AQAAAtbTsZqywEuL_2wdQJcLIJQ
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1 HTTP/1.1Host: hde.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=Vz/bJWfAcQHMu3ZvWzAptA==
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-ZNISrEhE2uUSD48ifTmUP5EY0j0WDzk-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665089
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665089
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/8AEAAA60-4DEB-48F5-A523-A98D70A714E0?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNpwwGcCEApucnR18uXZ7je6wz3zDYIFEgEBAQHCwWfKZwAAAAAA_eMAAA&S=AQAAAtbTsZqywEuL_2wdQJcLIJQ
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=&ts=1740665089773.2&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D213014095542605%3As1%3D1740665088468%3Ats%3D1740665088468
Source: global traffic	HTTP traffic detected: GET /ps/?_=1740665089773.&ri=zzz000000000002zzz&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D213014095542605%3As1%3D1740665088468%3Ats%3D1740665088468
Source: global traffic	HTTP traffic detected: GET /utils/xapi/multi-sync.html?p=33across&endpoint=us-east&us_privacy= HTTP/1.1Host: secure-assets.rubiconproject.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: audit_p=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VtnKC5vnMyvVCqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==; khaos=M7NF16P2-23-M2OO; khaos_p=M7NF16P2-23-M2OO; audit=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VtnKC5vnMyvVCqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /sync?ssp=the33across&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-ZNISrEhE2uUSD48ifTmUP5EY0j0WDzk-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665089; SPugT=1740665088
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665089; SPugT=1740665090
Source: global traffic	HTTP traffic detected: GET /AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D HTTP/1.1Host: ads.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665089; SPugT=1740665090
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=33across&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=b&uid=213014095542605 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiI3OTQyMDI2MDk1MzkyMzA1NTUwIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MzYuMDYzNTk3MzA5WiJ9LCJlcHNpbG9uIjp7InVpZCI6IkFRQUpqT3JOWERlY2hRSS1fWXU3QVFFQkFRRUJBUUNVUnJoQVpBRUJBSlJHdUVCayIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjQwLjEwNjI5MTg0MloifSwiYWRmIjp7InVpZCI6IjcwOTk5MTI4NTU3NjQxNTM4NjMiLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDoyMi4zOTkzNDYxNjRaIn0sInlhaG9vQWRzIjp7InVpZCI6InktM3lJZGMwVkUydUxiTjk1aVlLbElSTGNVRHd3anhOSld-QSIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjQ4LjU1MTc2NTM1N1oifSwidW5ydWx5Ijp7InVpZCI6IlJYLTM4YmVmZWY0LWZiNDEtNDI1MC1hYTRmLTNjNWYwNDRjZGUwMy0wMDMiLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDozMC44NDgxNDQyNDFaIn0sImltcHJvdmVkaWdpdGFsIjp7InVpZCI6IjI3ZTE0YzI1LTkzZTctNDk5NS1hMzI1LWE0YWFjOTEyZjE5MCIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjI0LjExNzg4MDE3MVoifSwidHJpcGxlbGlmdF9uYXRpdmUiOnsidWlkIjoiODMwMjU1NzQwNTY3NDAxMzY2MjI5IiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MTEuOTc4NTQyNjg3WiJ9LCJydWJpY29uIjp7InVpZCI6Ik03TkYxNlAyLTIzLU0yT08iLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDoxOS45OTg0MTEyNjNaIn0sImNvbnZlcnNhbnQiOnsidWlkIjoiQVFBSnVtUlZtYjB0b3dKUVpBWnJBUUVCQVFFQkFRQ1VScm5HM0FFQkFKUkd1Y2JjIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MDguNzAwNTQ0NzQ2WiJ9LCJyZXNldGRpZ2l0YWwiOnsidWlkIjoiMDAwMDAxN0IxRjExNzRBOSIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjMzLjE0NjIwOTM3NFoifSwib3BlbngiOnsidWlkIjoiNTE0NGQyYzUtY2Y5Mi00OTkwLTliZWQtNDhkOWYzZWM0YmRhIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6NDIuMTc1OTA5ODA1WiJ9fX0=
Source: global traffic	HTTP traffic detected: GET /usync.html?p=33across&endpoint=us-east&us_privacy= HTTP/1.1Host: eus.rubiconproject.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: audit_p=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VtnKC5vnMyvVCqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==; khaos=M7NF16P2-23-M2OO; khaos_p=M7NF16P2-23-M2OO; audit=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VtnKC5vnMyvVCqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=the33across&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=b91449e8-2f28-492b-9aaf-befe6b9407a1; c=1740665090; tuuid_lu=1740665090
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=33across&gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&f=b&uid=213014095542605 HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiI3OTQyMDI2MDk1MzkyMzA1NTUwIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MzYuMDYzNTk3MzA5WiJ9LCJlcHNpbG9uIjp7InVpZCI6IkFRQUpqT3JOWERlY2hRSS1fWXU3QVFFQkFRRUJBUUNVUnJoQVpBRUJBSlJHdUVCayIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjQwLjEwNjI5MTg0MloifSwiYWRmIjp7InVpZCI6IjcwOTk5MTI4NTU3NjQxNTM4NjMiLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDoyMi4zOTkzNDYxNjRaIn0sInlhaG9vQWRzIjp7InVpZCI6InktM3lJZGMwVkUydUxiTjk1aVlLbElSTGNVRHd3anhOSld-QSIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjQ4LjU1MTc2NTM1N1oifSwidW5ydWx5Ijp7InVpZCI6IlJYLTM4YmVmZWY0LWZiNDEtNDI1MC1hYTRmLTNjNWYwNDRjZGUwMy0wMDMiLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDozMC44NDgxNDQyNDFaIn0sImltcHJvdmVkaWdpdGFsIjp7InVpZCI6IjI3ZTE0YzI1LTkzZTctNDk5NS1hMzI1LWE0YWFjOTEyZjE5MCIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjI0LjExNzg4MDE3MVoifSwidHJpcGxlbGlmdF9uYXRpdmUiOnsidWlkIjoiODMwMjU1NzQwNTY3NDAxMzY2MjI5IiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MTEuOTc4NTQyNjg3WiJ9LCIzM2Fjcm9zcyI6eyJ1aWQiOiIyMTMwMTQwOTU1NDI2MDUiLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDo1MS4yNjQ0Mjg4OFoifSwicnViaWNvbiI6eyJ1aWQiOiJNN05GMTZQMi0yMy1NMk9PIiwiZXhwaXJlcyI6IjIwMjUtMDMtMTNUMTQ6MDQ6MTkuOTk4NDExMjYzWiJ9LCJjb252ZXJzYW50Ijp7InVpZCI6IkFRQUp1bVJWbWIwdG93SlFaQVpyQVFFQkFRRUJBUUNVUnJuRzNBRUJBSlJHdWNiYyIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjA4LjcwMDU0NDc0NloifSwicmVzZXRkaWdpdGFsIjp7InVpZCI6IjAwMDAwMTdCMUYxMTc0QTkiLCJleHBpcmVzIjoiMjAyNS0wMy0xM1QxNDowNDozMy4xNDYyMDkzNzRaIn0sIm9wZW54Ijp7InVpZCI6IjUxNDRkMmM1LWNmOTItNDk5MC05YmVkLTQ4ZDlmM2VjNGJkYSIsImV4cGlyZXMiOiIyMDI1LTAzLTEzVDE0OjA0OjQyLjE3NTkwOTgwNVoifX19
Source: global traffic	HTTP traffic detected: GET /ups/58350/sync?redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNpwwGcCEApucnR18uXZ7je6wz3zDYIFEgEBAQHCwWfKZwAAAAAA_eMAAA&S=AQAAAtbTsZqywEuL_2wdQJcLIJQ; IDSYNC="19ab~2nrq:199z~2nrq:19e6~2nrq:18z8~2nrq"
Source: global traffic	HTTP traffic detected: GET /usync.js HTTP/1.1Host: eus.rubiconproject.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: audit_p=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VtnKC5vnMyvVCqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==; khaos=M7NF16P2-23-M2OO; khaos_p=M7NF16P2-23-M2OO; audit=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VtnKC5vnMyvVCqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /sync?nid=50&gdpr=&gdpr_consent=&gdpr_pd=&ssp=the33across HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDa4YG-BjABOgT87-jmQgS3Gq6W.ju2EwFD7zpvEBgivWHIcWax7NTgL33cOK4RjJa%2Fu%2BoA; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDa4YG-BjABOgT87-jmQgS3Gq6W.ju2EwFD7zpvEBgivWHIcWax7NTgL33cOK4RjJa%2Fu%2BoA
Source: global traffic	HTTP traffic detected: GET /ps/?xi=99&us_privacy=&xu=y-wz6NSc9E2uGH2C3bTEtXh_OEleL1.UjS~A HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D213014095542605%3As1%3D1740665088468%3Ats%3D1740665088468
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=188&user_id=lrhR-Xu2Vn5xeulD3h3wrAgue70&user_group=1&ssp=the33across HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=b91449e8-2f28-492b-9aaf-befe6b9407a1; c=1740665090; tuuid_lu=1740665091
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=84701410&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; chkChromeAb67Sec=2; pi=0:3; DPSync4=1741824000%3A245_197_219_226_227; SyncRTB4=1741824000%3A55_271_249_251_54_3_203_22_56_71_8_220_13_266_264_201_21%7C1741219200%3A223%7C1741478400%3A63%7C1741910400%3A35; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665089; SPugT=1740665090
Source: global traffic	HTTP traffic detected: GET /usync.js HTTP/1.1Host: eus.rubiconproject.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: khaos=M7NF16P2-23-M2OO; audit=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VtnKC5vnMyvVCqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==
Source: global traffic	HTTP traffic detected: GET /khaos.json? HTTP/1.1Host: token.rubiconproject.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://eus.rubiconproject.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: audit_p=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VtnKC5vnMyvVCqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==; khaos=M7NF16P2-23-M2OO; khaos_p=M7NF16P2-23-M2OO; audit=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VtnKC5vnMyvVCqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=99&external_user_id=y-wz6NSc9E2uGH2C3bTEtXh_OEleL1.UjS%7EA&ts=1740665092&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D213014095542605%3As1%3D1740665088468%3Ats%3D1740665088468
Source: global traffic	HTTP traffic detected: GET /ps/?xi=10&us_privacy=&xu=b91449e8-2f28-492b-9aaf-befe6b9407a1 HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D213014095542605%3As1%3D1740665088468%3Ats%3D1740665088468
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDa4YG-BjABOgT87-jmQgS3Gq6W.ju2EwFD7zpvEBgivWHIcWax7NTgL33cOK4RjJa%2Fu%2BoA; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCDa4YG-BjABOgT87-jmQgS3Gq6W.ju2EwFD7zpvEBgivWHIcWax7NTgL33cOK4RjJa%2Fu%2BoA
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1Host: ipac.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=84701410&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; DPSync4=1741824000%3A245_197_219_226_227; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665089; SPugT=1740665090; chkChromeAb67Sec=3; pi=156423:3; SyncRTB4=1741219200%3A223_2_15%7C1741478400%3A63%7C1741824000%3A201_21_165_54_220_13_266_264_176_3_233_88_55_271_166_214_270_234_249_71_161_254_251_46_99_238_203_56_8_81_22%7C1745798400%3A69%7C1741910400%3A35
Source: global traffic	HTTP traffic detected: GET /pixelGet?ex=50&gdpr={gdpr}&gdpr_consent={gdpr_consent}&dest=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA=&piggybackCookie={dmp_id}&gdpr={gdpr}&gdpr_consent={gdpr_consent} HTTP/1.1Host: dsp-ap.eskimi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=&bidder_id=25&external_user_id=8AEAAA60-4DEB-48F5-A523-A98D70A714E0 HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D213014095542605%3As1%3D1740665088468%3Ats%3D1740665088468
Source: global traffic	HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aBnoeUqZbaOU6iPqcgTqHMAds2WRWy25Hhoax3TLW
Source: global traffic	HTTP traffic detected: GET /cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: p.rfihub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: green.erne.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=99&external_user_id=y-wz6NSc9E2uGH2C3bTEtXh_OEleL1.UjS%7EA&ts=1740665092&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D213014095542605%3As1%3D1740665088468%3Ats%3D1740665088468
Source: global traffic	HTTP traffic detected: GET /ps/?ts=1740665089773.6&ri=129&us_privacy=&gpp_sid=&gpp=&ru=https%3A%2F%2Ft.adx.opera.com%2Fpub%2Fsync%3Fpubid%3Dpub11169426274368%26coppa%3D%26us_privacy%3D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D213014095542605%3As1%3D1740665088468%3Ats%3D1740665088468
Source: global traffic	HTTP traffic detected: GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=D88E735391E54DBB8CA212CE19422E16
Source: global traffic	HTTP traffic detected: GET /match/bounce/current?networkId=17100&version=1&nuid=8AEAAA60-4DEB-48F5-A523-A98D70A714E0&gdpr=0&gdpr_consent= HTTP/1.1Host: pubmatic-match.dotomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DotomiTest=3ab8e4d385ff177e
Source: global traffic	HTTP traffic detected: GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsby.bidtheatre.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /exchange/sync.php?p=33across&us_privacy=&khaos=M7NF16P2-23-M2OO HTTP/1.1Host: pixel-us-east.rubiconproject.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: khaos=M7NF16P2-23-M2OO; khaos_p=M7NF16P2-23-M2OO; receive-cookie-deprecation=1; audit_p=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VvYhS4N49g55CqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==; audit=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VvYhS4N49g55CqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==
Source: global traffic	HTTP traffic detected: GET /bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.adgrx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=10&external_user_id=b91449e8-2f28-492b-9aaf-befe6b9407a1&ts=1740665093&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fprebid.production.adthrive.com%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D213014095542605%3As1%3D1740665088468%3Ats%3D1740665088468
Source: global traffic	HTTP traffic detected: GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-38befef4-fb41-4250-aa4f-3c5f044cde03-003%22%7D
Source: global traffic	HTTP traffic detected: GET /getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID HTTP/1.1Host: d5p.de17a.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /token?pid=2249&pt=n HTTP/1.1Host: token.rubiconproject.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: khaos=M7NF16P2-23-M2OO; khaos_p=M7NF16P2-23-M2OO; receive-cookie-deprecation=1; audit_p=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VBOBlZaGQmk5CqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==; audit=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VBOBlZaGQmk5CqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==
Source: global traffic	HTTP traffic detected: GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1Host: core.iprom.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=lrhR-Xu2Vn5xeulD3h3wrAgue70&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; DPSync4=1741824000%3A245_197_219_226_227; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665089; SPugT=1740665090; chkChromeAb67Sec=3; pi=156423:3; SyncRTB4=1741219200%3A223_2_15%7C1741478400%3A63%7C1741824000%3A201_21_165_54_220_13_266_264_176_3_233_88_55_271_166_214_270_234_249_71_161_254_251_46_99_238_203_56_8_81_22%7C1745798400%3A69%7C1741910400%3A35
Source: global traffic	HTTP traffic detected: GET /khaos.json? HTTP/1.1Host: token.rubiconproject.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: khaos=M7NF16P2-23-M2OO; audit=1\|2MJAeJkwaAFQdgKai3WBovqatMDH0nM3h6UmeSeEmDHlGNsBp+KQQcDnULsfip2VvYhS4N49g55CqQ3+tQhlLHMDvubSxZCGXj6Gz0cmwXHUG//2tP0VXSDPJehrK0msQNfVMtfKwhxOr6J8xsEUxaPORH3GBq+bFHCnwnHpHpqt10T3Tn4Yk5xslXRdBQOqcbeFKfPxG0vQD5U7tEfUTQ==
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; DPSync4=1741824000%3A245_197_219_226_227; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665089; SPugT=1740665090; pi=156423:3; SyncRTB4=1741219200%3A223_2_15%7C1741478400%3A63%7C1741824000%3A201_21_165_54_220_13_266_264_176_3_233_88_55_271_166_214_270_234_249_71_161_254_251_46_99_238_203_56_8_81_22%7C1745798400%3A69%7C1741910400%3A35; chkChromeAb67Sec=4
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5107433837200871030 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; DPSync4=1741824000%3A245_197_219_226_227; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665089; SPugT=1740665090; pi=156423:3; SyncRTB4=1741219200%3A223_2_15%7C1741478400%3A63%7C1741824000%3A201_21_165_54_220_13_266_264_176_3_233_88_55_271_166_214_270_234_249_71_161_254_251_46_99_238_203_56_8_81_22%7C1745798400%3A69%7C1741910400%3A35; chkChromeAb67Sec=4
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw&piggybackCookie=18072662149535096985 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8AEAAA60-4DEB-48F5-A523-A98D70A714E0; DPSync4=1741824000%3A245_197_219_226_227; KRTBCOOKIE_80=22987-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&16514-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23025-CAESEFfrevPjrQW-2XUwqg0HuIU&KRTB&23386-CAESEFfrevPjrQW-2XUwqg0HuIU; KRTBCOOKIE_391=22924-7099912855764153863&KRTB&23263-7099912855764153863&KRTB&23481-7099912855764153863; KRTBCOOKIE_377=6810-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22918-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&22926-00805a4d-d742-43ee-9664-814be38f4b0a&KRTB&23031-00805a4d-d742-43ee-9664-814be38f4b0a; PugT=1740665089; SPugT=1740665090; pi=156423:3; SyncRTB4=1741219200%3A223_2_15%7C1741478400%3A63%7C1741824000%3A201_21_165_54_220_13_266_264_176_3_233_88_55_271_166_214_270_234_249_71_161_254_251_46_99_238_203_56_8_81_22%7C1745798400%3A69%7C1741910400%3A35; chkChromeAb67Sec=4

Source: chromecache_857.1.dr	String found in binary or memory: <div class="elementor-custom-embed-image-overlay" data-elementor-open-lightbox="yes" data-elementor-lightbox="{"type":"video","videoType":"youtube","url":"https:\/\/www.youtube.com\/embed\/-nBx_SfUA3E?feature=oembed&start&end&wmode=opaque&loop=0&controls=1&mute=0&rel=0&modestbranding=0&cc_load_policy=0","autoplay":"","modalOptions":{"id":"elementor-lightbox-f1594ae","entranceAnimation":"","entranceAnimation_tablet":"","entranceAnimation_mobile":"","videoAspectRatio":"169"}}" data-e-action-hash="#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJ0eXBlIjoidmlkZW8iLCJ2aWRlb1R5cGUiOiJ5b3V0dWJlIiwidXJsIjoiaHR0cHM6XC9cL3d3dy55b3V0dWJlLmNvbVwvZW1iZWRcLy1uQnhfU2ZVQTNFP2ZlYXR1cmU9b2VtYmVkJnN0YXJ0JmVuZCZ3bW9kZT1vcGFxdWUmbG9vcD0wJmNvbnRyb2xzPTEmbXV0ZT0wJnJlbD0wJm1vZGVzdGJyYW5kaW5nPTAmY2NfbG9hZF9wb2xpY3k9MCIsImF1dG9wbGF5IjoiIiwibW9kYWxPcHRpb25zIjp7ImlkIjoiZWxlbWVudG9yLWxpZ2h0Ym94LWYxNTk0YWUiLCJlbnRyYW5jZUFuaW1hdGlvbiI6IiIsImVudHJhbmNlQW5pbWF0aW9uX3RhYmxldCI6IiIsImVudHJhbmNlQW5pbWF0aW9uX21vYmlsZSI6IiIsInZpZGVvQXNwZWN0UmF0aW8iOiIxNjkifX0%3D"> equals www.youtube.com (Youtube)
Source: chromecache_857.1.dr	String found in binary or memory: <div class="elementor-custom-embed-image-overlay" data-elementor-open-lightbox="yes" data-elementor-lightbox="{"type":"video","videoType":"youtube","url":"https:\/\/www.youtube.com\/embed\/F1Q7iN_RWUs?feature=oembed&start&end&wmode=opaque&loop=0&controls=1&mute=0&rel=0&modestbranding=0&cc_load_policy=0","autoplay":"","modalOptions":{"id":"elementor-lightbox-2b84ed2","entranceAnimation":"","entranceAnimation_tablet":"","entranceAnimation_mobile":"","videoAspectRatio":"169"}}" data-e-action-hash="#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJ0eXBlIjoidmlkZW8iLCJ2aWRlb1R5cGUiOiJ5b3V0dWJlIiwidXJsIjoiaHR0cHM6XC9cL3d3dy55b3V0dWJlLmNvbVwvZW1iZWRcL0YxUTdpTl9SV1VzP2ZlYXR1cmU9b2VtYmVkJnN0YXJ0JmVuZCZ3bW9kZT1vcGFxdWUmbG9vcD0wJmNvbnRyb2xzPTEmbXV0ZT0wJnJlbD0wJm1vZGVzdGJyYW5kaW5nPTAmY2NfbG9hZF9wb2xpY3k9MCIsImF1dG9wbGF5IjoiIiwibW9kYWxPcHRpb25zIjp7ImlkIjoiZWxlbWVudG9yLWxpZ2h0Ym94LTJiODRlZDIiLCJlbnRyYW5jZUFuaW1hdGlvbiI6IiIsImVudHJhbmNlQW5pbWF0aW9uX3RhYmxldCI6IiIsImVudHJhbmNlQW5pbWF0aW9uX21vYmlsZSI6IiIsInZpZGVvQXNwZWN0UmF0aW8iOiIxNjkifX0%3D"> equals www.youtube.com (Youtube)
Source: chromecache_857.1.dr	String found in binary or memory: <div class="elementor-custom-embed-image-overlay" data-elementor-open-lightbox="yes" data-elementor-lightbox="{"type":"video","videoType":"youtube","url":"https:\/\/www.youtube.com\/embed\/HtNji7rdV0E?feature=oembed&start&end&wmode=opaque&loop=0&controls=1&mute=0&rel=0&modestbranding=0&cc_load_policy=0","autoplay":"","modalOptions":{"id":"elementor-lightbox-18aa92e","entranceAnimation":"","entranceAnimation_tablet":"","entranceAnimation_mobile":"","videoAspectRatio":"169"}}" data-e-action-hash="#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJ0eXBlIjoidmlkZW8iLCJ2aWRlb1R5cGUiOiJ5b3V0dWJlIiwidXJsIjoiaHR0cHM6XC9cL3d3dy55b3V0dWJlLmNvbVwvZW1iZWRcL0h0TmppN3JkVjBFP2ZlYXR1cmU9b2VtYmVkJnN0YXJ0JmVuZCZ3bW9kZT1vcGFxdWUmbG9vcD0wJmNvbnRyb2xzPTEmbXV0ZT0wJnJlbD0wJm1vZGVzdGJyYW5kaW5nPTAmY2NfbG9hZF9wb2xpY3k9MCIsImF1dG9wbGF5IjoiIiwibW9kYWxPcHRpb25zIjp7ImlkIjoiZWxlbWVudG9yLWxpZ2h0Ym94LTE4YWE5MmUiLCJlbnRyYW5jZUFuaW1hdGlvbiI6IiIsImVudHJhbmNlQW5pbWF0aW9uX3RhYmxldCI6IiIsImVudHJhbmNlQW5pbWF0aW9uX21vYmlsZSI6IiIsInZpZGVvQXNwZWN0UmF0aW8iOiIxNjkifX0%3D"> equals www.youtube.com (Youtube)
Source: chromecache_857.1.dr	String found in binary or memory: <div class="elementor-custom-embed-image-overlay" data-elementor-open-lightbox="yes" data-elementor-lightbox="{"type":"video","videoType":"youtube","url":"https:\/\/www.youtube.com\/embed\/u67o0kSe-jM?feature=oembed&start&end&wmode=opaque&loop=0&controls=1&mute=0&rel=0&modestbranding=0&cc_load_policy=0","autoplay":"","modalOptions":{"id":"elementor-lightbox-50a196c","entranceAnimation":"","entranceAnimation_tablet":"","entranceAnimation_mobile":"","videoAspectRatio":"169"}}" data-e-action-hash="#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJ0eXBlIjoidmlkZW8iLCJ2aWRlb1R5cGUiOiJ5b3V0dWJlIiwidXJsIjoiaHR0cHM6XC9cL3d3dy55b3V0dWJlLmNvbVwvZW1iZWRcL3U2N28wa1NlLWpNP2ZlYXR1cmU9b2VtYmVkJnN0YXJ0JmVuZCZ3bW9kZT1vcGFxdWUmbG9vcD0wJmNvbnRyb2xzPTEmbXV0ZT0wJnJlbD0wJm1vZGVzdGJyYW5kaW5nPTAmY2NfbG9hZF9wb2xpY3k9MCIsImF1dG9wbGF5IjoiIiwibW9kYWxPcHRpb25zIjp7ImlkIjoiZWxlbWVudG9yLWxpZ2h0Ym94LTUwYTE5NmMiLCJlbnRyYW5jZUFuaW1hdGlvbiI6IiIsImVudHJhbmNlQW5pbWF0aW9uX3RhYmxldCI6IiIsImVudHJhbmNlQW5pbWF0aW9uX21vYmlsZSI6IiIsInZpZGVvQXNwZWN0UmF0aW8iOiIxNjkifX0%3D"> equals www.youtube.com (Youtube)
Source: chromecache_857.1.dr	String found in binary or memory: <div class="elementor-element elementor-element-0a383ec elementor-widget elementor-widget-video" data-id="0a383ec" data-element_type="widget" data-settings="{"youtube_url":"https:\/\/www.youtube.com\/watch?v=1j6kc_TEd4U","show_image_overlay":"yes","image_overlay":{"url":"https:\/\/pixcams.com\/wp-content\/uploads\/2023\/12\/20171201_112732-scaled.webp","id":13630,"size":"","alt":"","source":"library"},"lazy_load":"yes","video_type":"youtube","controls":"yes"}" data-widget_type="video.default"> equals www.youtube.com (Youtube)
Source: chromecache_857.1.dr	String found in binary or memory: <div class="elementor-element elementor-element-18aa92e elementor-widget elementor-widget-video" data-id="18aa92e" data-element_type="widget" data-settings="{"youtube_url":"https:\/\/www.youtube.com\/watch?v=HtNji7rdV0E","show_image_overlay":"yes","image_overlay":{"url":"https:\/\/pixcams.com\/wp-content\/uploads\/2023\/12\/PA-Bird-Feeder-1-New.jpg","id":13599,"size":"","alt":"","source":"library"},"lightbox":"yes","lazy_load":"yes","video_type":"youtube","controls":"yes"}" data-widget_type="video.default"> equals www.youtube.com (Youtube)
Source: chromecache_857.1.dr	String found in binary or memory: <div class="elementor-element elementor-element-2b84ed2 elementor-widget elementor-widget-video" data-id="2b84ed2" data-element_type="widget" data-settings="{"youtube_url":"https:\/\/www.youtube.com\/watch?v=F1Q7iN_RWUs","show_image_overlay":"yes","image_overlay":{"url":"https:\/\/pixcams.com\/wp-content\/uploads\/2023\/12\/WildlifeCam2-YouTubeThumbnail.jpg","id":13595,"size":"","alt":"","source":"library"},"lightbox":"yes","lazy_load":"yes","video_type":"youtube","controls":"yes"}" data-widget_type="video.default"> equals www.youtube.com (Youtube)
Source: chromecache_857.1.dr	String found in binary or memory: <div class="elementor-element elementor-element-50a196c elementor-widget elementor-widget-video" data-id="50a196c" data-element_type="widget" data-settings="{"youtube_url":"https:\/\/www.youtube.com\/watch?v=u67o0kSe-jM","show_image_overlay":"yes","image_overlay":{"url":"https:\/\/pixcams.com\/wp-content\/uploads\/2023\/12\/1-8-2020.jpg","id":13590,"size":"","alt":"","source":"library"},"lightbox":"yes","lazy_load":"yes","video_type":"youtube","controls":"yes"}" data-widget_type="video.default"> equals www.youtube.com (Youtube)
Source: chromecache_857.1.dr	String found in binary or memory: <div class="elementor-element elementor-element-f1594ae elementor-widget elementor-widget-video" data-id="f1594ae" data-element_type="widget" data-settings="{"youtube_url":"https:\/\/www.youtube.com\/watch?v=-nBx_SfUA3E","show_image_overlay":"yes","image_overlay":{"url":"https:\/\/pixcams.com\/wp-content\/uploads\/2023\/12\/PAFeeder2_YouTubeThumbnail.webp","id":13603,"size":"","alt":"","source":"library"},"lightbox":"yes","lazy_load":"yes","video_type":"youtube","controls":"yes"}" data-widget_type="video.default"> equals www.youtube.com (Youtube)
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: <a href="https://www.facebook.com/PixCamsLiveStream" data-network="facebook" aria-label="Facebook" target="_blank" rel="noopener noreferrer nofollow"> equals www.facebook.com (Facebook)
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: <a href="https://www.facebook.com/PixCamsLiveStream" data-network="facebook" aria-label="Facebook"> equals www.facebook.com (Facebook)
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: <a href="https://www.youtube.com/c/PixCams" data-network="youtube" aria-label="YouTube" target="_blank" rel="noopener noreferrer nofollow"> equals www.youtube.com (Youtube)
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: <a href="https://www.youtube.com/c/PixCams" data-network="youtube" aria-label="YouTube"> equals www.youtube.com (Youtube)
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/PixCamsLiveStream" /> equals www.facebook.com (Facebook)
Source: chromecache_857.1.dr	String found in binary or memory: Watch Eagles, Birds & More","isPartOf":{"@id":"https://pixcams.com/#website"},"about":{"@id":"https://pixcams.com/#organization"},"primaryImageOfPage":{"@id":"https://pixcams.com/#primaryimage"},"image":{"@id":"https://pixcams.com/#primaryimage"},"thumbnailUrl":"https://pixcams.com/wp-content/uploads/elementor/thumbs/EZWebGraphic4-1-qlw436qp9shix5vi5pbrvw9f4fxdvwbmzjjr5x7cf0.png","datePublished":"2020-08-14T14:29:45+00:00","dateModified":"2025-02-06T21:37:19+00:00","description":"Watch live wildlife cams from around the world with PixCams! Experience bald eagles, owls, deer, bears, and more in real-time. Explore nature, learn with our educational resources, and never miss a moment of the wild. Tune in now!","breadcrumb":{"@id":"https://pixcams.com/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://pixcams.com/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://pixcams.com/#primaryimage","url":"https://pixcams.com/wp-content/uploads/elementor/thumbs/EZWebGraphic4-1-qlw436qp9shix5vi5pbrvw9f4fxdvwbmzjjr5x7cf0.png","contentUrl":"https://pixcams.com/wp-content/uploads/elementor/thumbs/EZWebGraphic4-1-qlw436qp9shix5vi5pbrvw9f4fxdvwbmzjjr5x7cf0.png"},{"@type":"BreadcrumbList","@id":"https://pixcams.com/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home"}]},{"@type":"WebSite","@id":"https://pixcams.com/#website","url":"https://pixcams.com/","name":"PixCams, Inc.","description":"View the world through our lens","publisher":{"@id":"https://pixcams.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://pixcams.com/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://pixcams.com/#organization","name":"PixCams, Inc.","url":"https://pixcams.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://pixcams.com/#/schema/logo/image/","url":"https://pixcams.com/wp-content/uploads/2021/12/PixCams.png","contentUrl":"https://pixcams.com/wp-content/uploads/2021/12/PixCams.png","width":772,"height":231,"caption":"PixCams, Inc."},"image":{"@id":"https://pixcams.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/PixCamsLiveStream","https://x.com/PixCams","https://www.instagram.com/pixcams/","https://www.youtube.com/c/PixCams"]}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_857.1.dr	String found in binary or memory: Watch Eagles, Birds & More","isPartOf":{"@id":"https://pixcams.com/#website"},"about":{"@id":"https://pixcams.com/#organization"},"primaryImageOfPage":{"@id":"https://pixcams.com/#primaryimage"},"image":{"@id":"https://pixcams.com/#primaryimage"},"thumbnailUrl":"https://pixcams.com/wp-content/uploads/elementor/thumbs/EZWebGraphic4-1-qlw436qp9shix5vi5pbrvw9f4fxdvwbmzjjr5x7cf0.png","datePublished":"2020-08-14T14:29:45+00:00","dateModified":"2025-02-06T21:37:19+00:00","description":"Watch live wildlife cams from around the world with PixCams! Experience bald eagles, owls, deer, bears, and more in real-time. Explore nature, learn with our educational resources, and never miss a moment of the wild. Tune in now!","breadcrumb":{"@id":"https://pixcams.com/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://pixcams.com/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://pixcams.com/#primaryimage","url":"https://pixcams.com/wp-content/uploads/elementor/thumbs/EZWebGraphic4-1-qlw436qp9shix5vi5pbrvw9f4fxdvwbmzjjr5x7cf0.png","contentUrl":"https://pixcams.com/wp-content/uploads/elementor/thumbs/EZWebGraphic4-1-qlw436qp9shix5vi5pbrvw9f4fxdvwbmzjjr5x7cf0.png"},{"@type":"BreadcrumbList","@id":"https://pixcams.com/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home"}]},{"@type":"WebSite","@id":"https://pixcams.com/#website","url":"https://pixcams.com/","name":"PixCams, Inc.","description":"View the world through our lens","publisher":{"@id":"https://pixcams.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://pixcams.com/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://pixcams.com/#organization","name":"PixCams, Inc.","url":"https://pixcams.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://pixcams.com/#/schema/logo/image/","url":"https://pixcams.com/wp-content/uploads/2021/12/PixCams.png","contentUrl":"https://pixcams.com/wp-content/uploads/2021/12/PixCams.png","width":772,"height":231,"caption":"PixCams, Inc."},"image":{"@id":"https://pixcams.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/PixCamsLiveStream","https://x.com/PixCams","https://www.instagram.com/pixcams/","https://www.youtube.com/c/PixCams"]}]}</script> equals www.youtube.com (Youtube)
Source: chromecache_612.1.dr, chromecache_737.1.dr	String found in binary or memory: !function(t){window.ShareLink=function(e,r){var i,n={},l=function(t){var e="";if(n.width&&n.height){var r=screen.width/2-n.width/2,i=screen.height/2-n.height/2;e="toolbar=0,status=0,width="+n.width+",height="+n.height+",top="+i+",left="+r}var l=ShareLink.getNetworkLink(t,n),s=/^https?:\/\//.test(l);open(l,s?"":"_self",e)},s=function(){t.each(e.classList,(function(){var t,e=(t=this).substr(0,n.classPrefixLength)===n.classPrefix?t.substr(n.classPrefixLength):null;if(e)return function(t){i.on("click",(function(){l(t)})),"button"===i.attr("role")&&i.on("keyup",(e=>{13!==e.keyCode&&32!==e.keyCode\|\|(e.preventDefault(),l(t))}))}(e),!1}))};t.extend(n,ShareLink.defaultSettings,r),["title","text"].forEach((function(t){n[t]=n[t].replace("#","")})),n.classPrefixLength=n.classPrefix.length,i=t(e),s()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text} {url}","x-twitter":"https://x.com/intent/tweet?text={text} {url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",threads:"https://threads.net/intent/post?text={text} {url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}%0A{text}%0A{url}",xing:"https://www.xing.com/spi/shares/new?url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}%0A{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(t,e){var r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,r){return e[r]\|\|""}));if("email"===t){if(-1<e.title.indexOf("&")\|\|-1<e.text.indexOf("&")){var i={text:e.text.replace(new RegExp("&","g"),"%26"),title:e.title.replace(new RegExp("&","g"),"%26"),url:e.url};r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,e){return i[e]}))}return r.indexOf("?subject=&body")&&(r=r.replace("subject=&","")),r}return r},t.fn.shareLink=function(e){return this.each((function(){t(this).data("shareLink",new ShareLink(this,e))}))}}(jQuery); equals www.facebook.com (Facebook)
Source: chromecache_612.1.dr, chromecache_737.1.dr	String found in binary or memory: !function(t){window.ShareLink=function(e,r){var i,n={},l=function(t){var e="";if(n.width&&n.height){var r=screen.width/2-n.width/2,i=screen.height/2-n.height/2;e="toolbar=0,status=0,width="+n.width+",height="+n.height+",top="+i+",left="+r}var l=ShareLink.getNetworkLink(t,n),s=/^https?:\/\//.test(l);open(l,s?"":"_self",e)},s=function(){t.each(e.classList,(function(){var t,e=(t=this).substr(0,n.classPrefixLength)===n.classPrefix?t.substr(n.classPrefixLength):null;if(e)return function(t){i.on("click",(function(){l(t)})),"button"===i.attr("role")&&i.on("keyup",(e=>{13!==e.keyCode&&32!==e.keyCode\|\|(e.preventDefault(),l(t))}))}(e),!1}))};t.extend(n,ShareLink.defaultSettings,r),["title","text"].forEach((function(t){n[t]=n[t].replace("#","")})),n.classPrefixLength=n.classPrefix.length,i=t(e),s()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text} {url}","x-twitter":"https://x.com/intent/tweet?text={text} {url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",threads:"https://threads.net/intent/post?text={text} {url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}%0A{text}%0A{url}",xing:"https://www.xing.com/spi/shares/new?url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}%0A{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(t,e){var r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,r){return e[r]\|\|""}));if("email"===t){if(-1<e.title.indexOf("&")\|\|-1<e.text.indexOf("&")){var i={text:e.text.replace(new RegExp("&","g"),"%26"),title:e.title.replace(new RegExp("&","g"),"%26"),url:e.url};r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,e){return i[e]}))}return r.indexOf("?subject=&body")&&(r=r.replace("subject=&","")),r}return r},t.fn.shareLink=function(e){return this.each((function(){t(this).data("shareLink",new ShareLink(this,e))}))}}(jQuery); equals www.linkedin.com (Linkedin)
Source: chromecache_612.1.dr, chromecache_737.1.dr	String found in binary or memory: !function(t){window.ShareLink=function(e,r){var i,n={},l=function(t){var e="";if(n.width&&n.height){var r=screen.width/2-n.width/2,i=screen.height/2-n.height/2;e="toolbar=0,status=0,width="+n.width+",height="+n.height+",top="+i+",left="+r}var l=ShareLink.getNetworkLink(t,n),s=/^https?:\/\//.test(l);open(l,s?"":"_self",e)},s=function(){t.each(e.classList,(function(){var t,e=(t=this).substr(0,n.classPrefixLength)===n.classPrefix?t.substr(n.classPrefixLength):null;if(e)return function(t){i.on("click",(function(){l(t)})),"button"===i.attr("role")&&i.on("keyup",(e=>{13!==e.keyCode&&32!==e.keyCode\|\|(e.preventDefault(),l(t))}))}(e),!1}))};t.extend(n,ShareLink.defaultSettings,r),["title","text"].forEach((function(t){n[t]=n[t].replace("#","")})),n.classPrefixLength=n.classPrefix.length,i=t(e),s()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text} {url}","x-twitter":"https://x.com/intent/tweet?text={text} {url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",threads:"https://threads.net/intent/post?text={text} {url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}%0A{text}%0A{url}",xing:"https://www.xing.com/spi/shares/new?url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}%0A{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(t,e){var r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,r){return e[r]\|\|""}));if("email"===t){if(-1<e.title.indexOf("&")\|\|-1<e.text.indexOf("&")){var i={text:e.text.replace(new RegExp("&","g"),"%26"),title:e.title.replace(new RegExp("&","g"),"%26"),url:e.url};r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,e){return i[e]}))}return r.indexOf("?subject=&body")&&(r=r.replace("subject=&","")),r}return r},t.fn.shareLink=function(e){return this.each((function(){t(this).data("shareLink",new ShareLink(this,e))}))}}(jQuery); equals www.twitter.com (Twitter)
Source: chromecache_612.1.dr, chromecache_737.1.dr	String found in binary or memory: !function(t){window.ShareLink=function(e,r){var i,n={},l=function(t){var e="";if(n.width&&n.height){var r=screen.width/2-n.width/2,i=screen.height/2-n.height/2;e="toolbar=0,status=0,width="+n.width+",height="+n.height+",top="+i+",left="+r}var l=ShareLink.getNetworkLink(t,n),s=/^https?:\/\//.test(l);open(l,s?"":"_self",e)},s=function(){t.each(e.classList,(function(){var t,e=(t=this).substr(0,n.classPrefixLength)===n.classPrefix?t.substr(n.classPrefixLength):null;if(e)return function(t){i.on("click",(function(){l(t)})),"button"===i.attr("role")&&i.on("keyup",(e=>{13!==e.keyCode&&32!==e.keyCode\|\|(e.preventDefault(),l(t))}))}(e),!1}))};t.extend(n,ShareLink.defaultSettings,r),["title","text"].forEach((function(t){n[t]=n[t].replace("#","")})),n.classPrefixLength=n.classPrefix.length,i=t(e),s()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text} {url}","x-twitter":"https://x.com/intent/tweet?text={text} {url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",threads:"https://threads.net/intent/post?text={text} {url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}%0A{text}%0A{url}",xing:"https://www.xing.com/spi/shares/new?url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}%0A{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(t,e){var r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,r){return e[r]\|\|""}));if("email"===t){if(-1<e.title.indexOf("&")\|\|-1<e.text.indexOf("&")){var i={text:e.text.replace(new RegExp("&","g"),"%26"),title:e.title.replace(new RegExp("&","g"),"%26"),url:e.url};r=ShareLink.networkTemplates[t].replace(/{([^}]+)}/g,(function(t,e){return i[e]}))}return r.indexOf("?subject=&body")&&(r=r.replace("subject=&","")),r}return r},t.fn.shareLink=function(e){return this.each((function(){t(this).data("shareLink",new ShareLink(this,e))}))}}(jQuery); equals www.vkontakte.ru (VKontakte)
Source: firefox.exe, 00000005.00000003.1404786732.000001E8DCDD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000005.00000003.1635069416.000001E8DC056000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000005.00000003.1792918933.000001E8DE3D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000005.00000003.1560998511.000001E8DC1BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1718627422.000001E8DC1BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1764579484.000001E8DC1BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8019000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1785409558.000001E8D596C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1479813966.000001E8D82FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8019000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1479813966.000001E8D82FE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1480407769.000001E8D7E92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000005.00000003.1792918933.000001E8DE3D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1553700604.000001E8DCA90000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1474691875.000001E8DCA90000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000005.00000003.1560998511.000001E8DC1BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1718627422.000001E8DC1BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1764579484.000001E8DC1BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7EEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7EEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: chromecache_727.1.dr, chromecache_761.1.dr	String found in binary or memory: b._EPYT_.ytapi_load&&("always"===b._EPYT_.ytapi_load\|\|d('iframe[src="youtube.com/embed/"], iframe[data-src="youtube.com/embed/"], .__youtube_prefs__').length)){var c=document.createElement("script");c.src="https://www.youtube.com/iframe_api";c.type="text/javascript";document.getElementsByTagName("head")[0].appendChild(c)}}else if(b.YT.loaded)if(b._EPYT_.pageLoaded)b._EPADashboard_.apiInit(),b._EPADashboard_.log("YT API available");else d(b).on("load._EPYT_",function(){b._EPADashboard_.apiInit(); equals www.youtube.com (Youtube)
Source: chromecache_761.1.dr	String found in binary or memory: d(".epyt-facade-poster[data-facadeoembed]").each(function(){var a=d(this);if(!a.data("facadeoembedcomplete")){a.data("facadeoembedcomplete","1");var e="https://www.youtube.com/"+a.data("facadeoembed");d.get("https://youtube.com/oembed",{url:e,format:"json"},function(f){f="eager"===b._EPYT_.maxres_facade?f.thumbnail_url.replace("hqdefault","maxresdefault"):f.thumbnail_url;a.attr("src",f)},"json").fail(function(){}).always(function(){})}});d(document).on("click",".epyt-facade",function(a){a=d(this); equals www.youtube.com (Youtube)
Source: chromecache_727.1.dr, chromecache_761.1.dr	String found in binary or memory: e.pauseVideo()}},justid:function(c,a="v"){return(new RegExp("[\\?&]"+a+"=([^&#]*)")).exec(c)[1]},setupevents:function(c){if("undefined"!==typeof b.YT&&null!==b.YT&&b.YT.loaded){var a=document.getElementById(c);if(!a.epytsetupdone)return b._EPADashboard_.log("Setting up YT API events: "+c),a.epytsetupdone=!0,a={events:{onReady:b._EPADashboard_.onPlayerReady,onStateChange:b._EPADashboard_.onPlayerStateChange},host:0<(a.src\|\|"").indexOf("nocookie")?"https://www.youtube-nocookie.com":"https://www.youtube.com"}, equals www.youtube.com (Youtube)
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8019000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1479813966.000001E8D82FE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1480407769.000001E8D7E92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8019000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1479813966.000001E8D82FE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1480407769.000001E8D7E92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000005.00000003.1844316640.000001E8CE88C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11E0A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2D0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000005.00000003.1844316640.000001E8CE88C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11E0A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2D0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000005.00000003.1844316640.000001E8CE88C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11E0A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2D0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: chromecache_727.1.dr, chromecache_761.1.dr	String found in binary or memory: if(a.length)try{var e="function"==typeof c.getVideoData?c.getVideoData().video_id\|\|b._EPADashboard_.justid(c.getVideoUrl()):b._EPADashboard_.justid(c.getVideoUrl()),f=document.createElement("iframe");d(f).addClass("epyt-live-chat").attr("src","https://www.youtube.com/live_chat?v="+e+"&embed_domain="+b.location.hostname);a.find(".epyt-live-chat-box").empty().append(f);964<a.width()&&a.addClass("epyt-live-chat-wrapper--wide");d(b).on("resize",function(){964<a.width()?a.addClass("epyt-live-chat-wrapper--wide"): equals www.youtube.com (Youtube)
Source: firefox.exe, 00000005.00000003.1596285995.000001E8DBAF6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1767935779.000001E8DBAF7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1635069416.000001E8DC056000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: moz-extension://2cc91266-7e73-453a-a128-14ace4899d8c/injections/js/bug1842437-www.youtube.com-performance-now-precision.js equals www.youtube.com (Youtube)
Source: chromecache_790.1.dr, chromecache_506.1.dr	String found in binary or memory: return f}CG.F="internal.enableAutoEventOnTimer";var $b=xa(["data-gtm-yt-inspected-"]),EG=["www.youtube.com","www.youtube-nocookie.com"],FG,GG=!1; equals www.youtube.com (Youtube)
Source: chromecache_501.1.dr	String found in binary or memory: tune in now!","breadcrumb":{"@id":"https://pixcams.com/live-cams-index/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://pixcams.com/live-cams-index/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://pixcams.com/live-cams-index/#primaryimage","url":"https://pixcams.com/wp-content/uploads/2024/10/RobInTree-scaled.jpg","contentUrl":"https://pixcams.com/wp-content/uploads/2024/10/RobInTree-scaled.jpg","width":1920,"height":2560},{"@type":"BreadcrumbList","@id":"https://pixcams.com/live-cams-index/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://pixcams.com/"},{"@type":"ListItem","position":2,"name":"LIVE Streaming Wildlife Cameras"}]},{"@type":"WebSite","@id":"https://pixcams.com/#website","url":"https://pixcams.com/","name":"PixCams, Inc.","description":"View the world through our lens","publisher":{"@id":"https://pixcams.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://pixcams.com/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://pixcams.com/#organization","name":"PixCams, Inc.","url":"https://pixcams.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://pixcams.com/#/schema/logo/image/","url":"https://pixcams.com/wp-content/uploads/2021/12/PixCams.png","contentUrl":"https://pixcams.com/wp-content/uploads/2021/12/PixCams.png","width":772,"height":231,"caption":"PixCams, Inc."},"image":{"@id":"https://pixcams.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/PixCamsLiveStream","https://x.com/PixCams","https://www.instagram.com/pixcams/","https://www.youtube.com/c/PixCams"]}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_501.1.dr	String found in binary or memory: tune in now!","breadcrumb":{"@id":"https://pixcams.com/live-cams-index/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://pixcams.com/live-cams-index/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://pixcams.com/live-cams-index/#primaryimage","url":"https://pixcams.com/wp-content/uploads/2024/10/RobInTree-scaled.jpg","contentUrl":"https://pixcams.com/wp-content/uploads/2024/10/RobInTree-scaled.jpg","width":1920,"height":2560},{"@type":"BreadcrumbList","@id":"https://pixcams.com/live-cams-index/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://pixcams.com/"},{"@type":"ListItem","position":2,"name":"LIVE Streaming Wildlife Cameras"}]},{"@type":"WebSite","@id":"https://pixcams.com/#website","url":"https://pixcams.com/","name":"PixCams, Inc.","description":"View the world through our lens","publisher":{"@id":"https://pixcams.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://pixcams.com/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://pixcams.com/#organization","name":"PixCams, Inc.","url":"https://pixcams.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://pixcams.com/#/schema/logo/image/","url":"https://pixcams.com/wp-content/uploads/2021/12/PixCams.png","contentUrl":"https://pixcams.com/wp-content/uploads/2021/12/PixCams.png","width":772,"height":231,"caption":"PixCams, Inc."},"image":{"@id":"https://pixcams.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/PixCamsLiveStream","https://x.com/PixCams","https://www.instagram.com/pixcams/","https://www.youtube.com/c/PixCams"]}]}</script> equals www.youtube.com (Youtube)
Source: recovery.jsonlz4.tmp.5.dr	String found in binary or memory: www.facebook equals www.facebook.com (Facebook)
Source: firefox.exe, 00000005.00000003.1792918933.000001E8DE3D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1553700604.000001E8DCA90000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1877881722.000001E8D7955000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000005.00000003.1560998511.000001E8DC1BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1718627422.000001E8DC1BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1477371850.000001E8DC1F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 00000005.00000003.1532722203.000001E8D7AC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com- equals www.youtube.com (Youtube)
Source: firefox.exe, 00000005.00000003.1846319386.000001E8CE3FB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1476677111.000001E8DC8FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: pixcams.com
Source: global traffic	DNS traffic detected: DNS query: ads.adthrive.com
Source: global traffic	DNS traffic detected: DNS query: affiliate-cdn.raptive.com
Source: global traffic	DNS traffic detected: DNS query: newgoodfoodmarket.com
Source: global traffic	DNS traffic detected: DNS query: rednosehorse.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: js.getlasso.co
Source: global traffic	DNS traffic detected: DNS query: virtual.urban-orthodontics.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prebid.production.adthrive.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prebid-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: s.skimresources.com
Source: global traffic	DNS traffic detected: DNS query: t.skimresources.com
Source: global traffic	DNS traffic detected: DNS query: p.skimresources.com
Source: global traffic	DNS traffic detected: DNS query: r.skimresources.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: shavar.prod.mozaws.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: s.w.org
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: triplelift-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: cs.media.net
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: ad.360yield.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: gum.aidemsrv.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: ad.turn.com
Source: global traffic	DNS traffic detected: DNS query: sync.targeting.unrulymedia.com
Source: global traffic	DNS traffic detected: DNS query: sync.resetdigital.co
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: services.addons.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: normandy.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: normandy.tombstone.experimenter.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: u.openx.net
Source: global traffic	DNS traffic detected: DNS query: widget.us.criteo.com
Source: global traffic	DNS traffic detected: DNS query: uipus.semasio.net
Source: global traffic	DNS traffic detected: DNS query: a19.dscg10.akamai.net
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: spl.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: ssc-cms.33across.com
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: hde.tynt.com
Source: global traffic	DNS traffic detected: DNS query: image4.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: simage4.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: secure-assets.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: events-ssc.33across.com

Source: unknown

HTTP traffic detected: POST /cookie_sync HTTP/1.1Host: prebid.production.adthrive.comConnection: keep-aliveContent-Length: 299sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://ads.adthrive.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ads.adthrive.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 27 Feb 2025 14:04:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 27 Feb 2025 14:04:07 GMTContent-Type: text/html; charset=UTF-8Content-Length: 8797Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originserver-timing: chlray;desc="9188b8e3ce3e72a5"x-content-options: nosniffx-frame-options: SAMEORIGIN
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 27 Feb 2025 14:04:23 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 27 Feb 2025 14:04:38 GMTSet-Cookie: __cf_bm=.HOZH.QKy7g0gIYC8BDujK_2GFnedqoxUsRP0OmPnuk-1740665063-1.0.1.1-cAYRLZ0_D.IojaXk4ywz0YZawDh5R3weLnhxdqR7R3PPWykko9SFBxs68bIpIK42wScexWnNy649QoR5AbgvxA; path=/; expires=Thu, 27-Feb-25 14:34:23 GMT; domain=.aidemsrv.com; HttpOnly; Secure; SameSite=NoneReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=12xPn3EHiy7R3%2Bu0uq8oePv96WbmiY4vqYK%2BhYjHfwxhB9Cc5inn2YewOyTuS1bj2NgoX6C1L%2BbgkuIOHBAPJa96TzG6QJPjfjqSeMnltmlYLTzw8k5DQcYk2M55f6aroHo%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9188b9497edbc43b-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 27 Feb 2025 14:05:03 GMTContent-Type: text/html; charset=UTF-8Content-Length: 8797Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originserver-timing: chlray;desc="9188ba404de8f5f7"x-content-options: nosniffx-frame-options: SAMEORIGIN
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 27 Feb 2025 14:05:06 GMTContent-Type: text/html; charset=UTF-8Content-Length: 8819Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originserver-timing: chlray;desc="9188ba53ba3d4302"x-content-options: nosniffx-frame-options: SAMEORIGIN
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 27 Feb 2025 14:05:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 27 Feb 2025 14:05:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 27 Feb 2025 14:05:18 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 27 Feb 2025 14:05:33 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=84%2BBN4TJmzy257c5jDKOLdB3ejV2HI%2BN72lfcC7a%2BCMiFP4PIzhGfRVnFD4FJbQAEm6m8fvplU7fs6CnlZ6ibzkHEGmIuKt2yEDPU7N9MXzuckDmOH6t291k7%2FIcvHG2SVE%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9188ba9d7e7143a1-EWRalt-svc: h3=":443"; ma=86400

Source: firefox.exe, 00000005.00000003.1622311355.000001E8D8254000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1602957831.000001E8D8252000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1775614836.000001E8D8250000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: chromecache_652.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: chromecache_652.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: chromecache_652.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: firefox.exe, 00000005.00000003.1847076566.000001E8DCA5C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1818602623.000001E8D05AE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1731518850.000001E8DCA5C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1759101021.000001E8DCA5C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1870151446.000001E8DCA5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org
Source: firefox.exe, 00000005.00000003.1847177083.000001E8DC470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-android-aarch64-42954cf0fe8a2bdc97fdc180462a3eaefceb035f.zi
Source: firefox.exe, 00000005.00000003.1847177083.000001E8DC470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-android-arm-42954cf0fe8a2bdc97fdc180462a3eaefceb035f.zip
Source: firefox.exe, 00000005.00000003.1847177083.000001E8DC470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-android-x86-42954cf0fe8a2bdc97fdc180462a3eaefceb035f.zip
Source: firefox.exe, 00000005.00000003.1847177083.000001E8DC470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-android-x86_64-42954cf0fe8a2bdc97fdc180462a3eaefceb035f.zip
Source: firefox.exe, 00000005.00000003.1847177083.000001E8DC470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-linux32-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
Source: firefox.exe, 00000005.00000003.1847177083.000001E8DC470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
Source: firefox.exe, 00000005.00000003.1847177083.000001E8DC470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-macosx64-2e1774ab6dc6c43debb0b5b628bdf122a391d521-2.zip
Source: firefox.exe, 00000005.00000003.1847177083.000001E8DC470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-macosx64-aarch64-2e1774ab6dc6c43debb0b5b628bdf122a391d521-2
Source: firefox.exe, 00000005.00000003.1847177083.000001E8DC470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-win32-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
Source: firefox.exe, 00000005.00000003.1778112766.000001E8D7CB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
Source: firefox.exe, 00000005.00000003.1847177083.000001E8DC470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-win64-aarch64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1852895969.000001E8E06F9000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: chromecache_652.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: chromecache_652.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: chromecache_652.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: firefox.exe, 00000005.00000003.1840617681.000001E8CE8FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000005.00000003.1844316640.000001E8CE88C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/
Source: firefox.exe, 00000005.00000003.1877881722.000001E8D7949000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1826313562.000001E8D029C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1780579592.000001E8D5BED000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000005.00000003.1778112766.000001E8D7C87000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 00000005.00000003.1604925341.000001E8D8021000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1818602623.000001E8D053D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 00000005.00000003.1622311355.000001E8D8237000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 00000005.00000003.1622311355.000001E8D8237000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 00000005.00000003.1622311355.000001E8D8237000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#-
Source: firefox.exe, 00000005.00000003.1622311355.000001E8D8237000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1443988826.000001E8D78D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 00000005.00000003.1814732386.000001E8D0F99000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1528352853.000001E8D809C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1556149217.000001E8DC8BD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1391292532.000001E8DC076000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1383815381.000001E8DC0CD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1341162512.000001E8D0F1A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1780579592.000001E8D5BC2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1903274871.000001E8D5D65000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1825098486.000001E8D02BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1434769239.000001E8DC076000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1840689566.000001E8CE8F5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1684583285.000001E8D195D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1480407769.000001E8D7ECA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1803575190.000001E8D7E98000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1811702889.000001E8D59EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1777139578.000001E8D7E95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1806295493.000001E8D7A84000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1315288326.000001E8CB489000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1624525472.000001E8D5C87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: chromecache_652.1.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, chromecache_652.1.dr, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: chromecache_652.1.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1852895969.000001E8E06F9000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: firefox.exe, 00000005.00000003.1599581083.000001E8D9CAC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1771699342.000001E8D9CAC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1952679732.000001E8D9CAC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1524825821.000001E8D9CAC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1478300765.000001E8D9CA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pixcams./
Source: firefox.exe, 00000005.00000003.1552136979.000001E8DE05D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1827752150.000001E8DE066000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pixcams.co/
Source: firefox.exe, 00000005.00000003.1483587857.000001E8D0FEF000.00000004.00000800.00020000.00000000.sdmp, places.sqlite.5.dr	String found in binary or memory: http://pixcams.com
Source: firefox.exe, 00000005.00000003.1526469636.000001E8D83D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1776210383.000001E8D7EEB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1599307922.000001E8D9CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pixcams.com/
Source: firefox.exe, 00000005.00000003.1778112766.000001E8D7CD0000.00000004.00000800.00020000.00000000.sdmp, places.sqlite.5.dr	String found in binary or memory: http://pixcams.com/moc.smacxip.
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 00000005.00000003.1481452402.000001E8D7CDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 00000005.00000003.1481452402.000001E8D7CDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: chromecache_732.1.dr, chromecache_780.1.dr, chromecache_577.1.dr	String found in binary or memory: http://sorgalla.com/lity/
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 00000005.00000003.1592645816.000001E8DC949000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.imagemagick.org
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1852895969.000001E8E06F9000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: http://www.mozilla.com0
Source: firefox.exe, 00000005.00000003.1789636826.000001E8D1642000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updatex
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 00000005.00000003.1343315166.000001E8CF8D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1596285995.000001E8DBAF6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1833166856.000001E8D0247000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1835783620.000001E8CF8DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1487414786.000001E8CC8DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1852966764.000001EB0003F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1338469886.000001E8D0075000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1339018519.000001E8CFAC1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1777139578.000001E8D7EAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 00000005.00000003.1833166856.000001E8D0247000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulu
Source: firefox.exe, 00000009.00000003.1335783873.000001ED12AFC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2538215099.000001ED12AFC000.00000004.00000020.00020000.00000000.sdmp, mozilla-temp-41.5.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: firefox.exe, 00000005.00000003.1481452402.000001E8D7CDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: firefox.exe, 00000005.00000003.1481452402.000001E8D7CDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://MD8.mozilla.org/1/m
Source: firefox.exe, 00000005.00000003.1309995847.000001E8CB705000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1309701947.000001E8CB500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 00000005.00000003.1340713445.000001E8D0FE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 00000005.00000003.1706346550.000001E8DE46F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1537103294.000001E8DE46F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 00000005.00000003.1781494012.000001E8D5B3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1873575221.000001E8D5B42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: chromecache_497.1.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 00000005.00000003.1532722203.000001E8D7AC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/enhancer-for-youtube/
Source: firefox.exe, 00000005.00000003.1532722203.000001E8D7AC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/facebook-container/
Source: firefox.exe, 00000005.00000003.1532722203.000001E8D7AC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/reddit-enhancement-suite/
Source: firefox.exe, 00000005.00000003.1532722203.000001E8D7AC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/to-google-translate/
Source: firefox.exe, 00000005.00000003.1532722203.000001E8D7AC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/wikipedia-context-menu-search/
Source: firefox.exe, 00000005.00000003.1710179223.000001E8DCA5C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1731518850.000001E8DCA5C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1474691875.000001E8DCA5D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1553700604.000001E8DCA5D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1520157515.000001E8DCA5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads-us.rd.linksynergy.com/as.php
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://ads.adthrive.com/
Source: firefox.exe, 00000005.00000003.1474691875.000001E8DCAA8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1846319386.000001E8CE3FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://affiliate-cdn.raptive.com/affiliate.mvp.min.js
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7EEB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1532086424.000001E8D7EEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 00000005.00000003.1532722203.000001E8D7AC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://app.adjust.com/167k4ih?campaign=firefox-desktop&adgroup=pb&creative=focus-omc172&redirect=ht
Source: firefox.exe, 00000005.00000003.1532722203.000001E8D7AC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://app.adjust.com/a8bxj8j?campaign=firefox-desktop&adgroup=pb&creative=focus-omc172&redirect=ht
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 00000005.00000003.1844316640.000001E8CE88C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 00000005.00000003.1844316640.000001E8CE88C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 00000005.00000003.1711651268.000001E8DC8BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1876750249.000001E8DC8BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1805650090.000001E8D7C2A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release/Win
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 00000005.00000003.1711651268.000001E8DC8BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1876750249.000001E8DC8BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1805650090.000001E8D7C2A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/re
Source: firefox.exe, 00000005.00000003.1838271307.000001E8CED41000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1764579484.000001E8DC1A6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1522123258.000001E8DC1A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1795294670.000001E8DCA20000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1561618353.000001E8DC1A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1593923118.000001E8DC1AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1807198082.000001E8D7A7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: firefox.exe, 00000007.00000002.2517315432.0000023AF27C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11EE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2530894267.000002BED3003000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.5.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&ci=1696586146862.12791&key=1696586146400600
Source: firefox.exe, 00000007.00000002.2517315432.0000023AF27C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11EE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2530894267.000002BED3003000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.5.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&ci=1696586146862.12791&key=1696586146400600000.1&cta
Source: firefox.exe, 00000005.00000003.1486338918.000001E8CDFF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 00000005.00000003.1458141710.000001E8D04FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1170143
Source: firefox.exe, 00000005.00000003.1456676241.000001E8DB69C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1189266
Source: firefox.exe, 00000005.00000003.1465998613.000001E8CBCE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1207993
Source: firefox.exe, 00000005.00000003.1465998613.000001E8CBCE2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1463244789.000001E8CB636000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1266220
Source: firefox.exe, 00000005.00000003.1467421946.000001E8CE6E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1283601
Source: firefox.exe, 00000005.00000003.1458141710.000001E8D04FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1678448
Source: firefox.exe, 00000005.00000003.1516244462.000001E8DC22F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1694699#c21
Source: firefox.exe, 00000005.00000003.1467421946.000001E8CE6E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=792480
Source: firefox.exe, 00000005.00000003.1463244789.000001E8CB636000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=806991
Source: firefox.exe, 00000005.00000003.1465998613.000001E8CBCDE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=809550
Source: firefox.exe, 00000005.00000003.1465998613.000001E8CBCE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=840161
Source: chromecache_497.1.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 00000005.00000003.1309995847.000001E8CB705000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1309701947.000001E8CB500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7E9C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1801256391.000001E8D8053000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1528352853.000001E8D8052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1604728383.000001E8D8053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 00000005.00000003.1604728383.000001E8D8053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 00000005.00000003.1777139578.000001E8D7EAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: firefox.exe, 00000007.00000002.2517315432.0000023AF27C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11EE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2530894267.000002BED3003000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.5.dr	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: firefox.exe, 00000007.00000002.2517315432.0000023AF27C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11EE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2530894267.000002BED3003000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.5.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 00000005.00000003.1807633440.000001E8D7A64000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 00000005.00000003.1807390487.000001E8D7A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 00000005.00000003.1807390487.000001E8D7A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/P
Source: firefox.exe, 00000005.00000003.1807390487.000001E8D7A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: chromecache_497.1.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_733.1.dr	String found in binary or memory: https://creativethemes.com
Source: chromecache_733.1.dr	String found in binary or memory: https://creativethemes.com/blocksy/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 00000005.00000003.1731518850.000001E8DCAE5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1710179223.000001E8DCAE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1759101021.000001E8DCAE5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1404786732.000001E8DCDD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1496718487.000001E8DE081000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1520101323.000001E8DE088000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1520157515.000001E8DCAE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1474691875.000001E8DCAE5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1543528111.000001E8DCAE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://datastudio.google.com/embed/reporting/
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1336517675.000001E8D1AA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 00000005.00000003.1336517675.000001E8D1AA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureWebExtensionUncheckedLastErr
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 00000005.00000003.1336517675.000001E8D1AA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureElementReleaseCaptureWarningElem
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 00000005.00000003.1383815381.000001E8DC0CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Mozilla/Tech/XPCOM/Reference/Interface/nsIEffectiveTLDServi
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/analyticsjs/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: chromecache_497.1.dr	String found in binary or memory: https://dsp-cookie.adfarm1.adition.com/?ssp=9&gdpr=0&gdpr_consent=
Source: chromecache_497.1.dr	String found in binary or memory: https://dsp.360yield.com/dsp_match/275?ssp=76&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fimage2.pubmatic.c
Source: firefox.exe, 00000005.00000003.1486338918.000001E8CDF8E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1597208236.000001E8DBA56000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1522123258.000001E8DC1C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1560998511.000001E8DC1C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1309995847.000001E8CB705000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1309701947.000001E8CB500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1437495980.000001E8DC280000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1764579484.000001E8DC1C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1477371850.000001E8DC1C5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1416216610.000001E8CB4EA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1315288326.000001E8CB4EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 00000005.00000003.1496718487.000001E8DE0C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?t=ffab&q=
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A8B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 00000005.00000003.1336517675.000001E8D1AA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/SelectOptionsLengthAssignmentW
Source: chromecache_834.1.dr, chromecache_773.1.dr, chromecache_844.1.dr	String found in binary or memory: https://fengyuanchen.github.io/cropperjs
Source: firefox.exe, 00000005.00000003.1818602623.000001E8D053D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11E12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2D13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000005.00000003.1367075164.000001E8D5DB9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1373056805.000001E8D7DD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 00000005.00000003.1367075164.000001E8D5DB9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1366134491.000001E8D7DAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 00000005.00000003.1373056805.000001E8D7DD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/d8e772fe-4909-4f05-9f9
Source: firefox.exe, 00000005.00000003.1373056805.000001E8D7DD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 00000005.00000003.1785858267.000001E8D1A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 00000005.00000003.1801256391.000001E8D80A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1718627422.000001E8DC15C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1561832628.000001E8DC15D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1523271515.000001E8DC15D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com
Source: firefox.exe, 00000005.00000003.1840689566.000001E8CE8F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/
Source: firefox.exe, 00000005.00000003.1596101608.000001E8DC111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/
Source: firefox.exe, 00000005.00000003.1777139578.000001E8D7EAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expe
Source: firefox.exe, 00000005.00000003.1876750249.000001E8DC8BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1767212695.000001E8DC137000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1764579484.000001E8DC17B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?colle
Source: chromecache_581.1.dr, chromecache_646.1.dr, chromecache_545.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_581.1.dr, chromecache_646.1.dr, chromecache_545.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Mukta%20Malar:wght
Source: firefox.exe, 00000005.00000003.1487414786.000001E8CC8FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 00000005.00000003.1818602623.000001E8D053D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11E12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2D13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11EC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000005.00000003.1784198078.000001E8D59B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11EC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000005.00000003.1784198078.000001E8D59CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1483016090.000001E8D59C2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11E2F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2D30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 00000005.00000003.1784198078.000001E8D59B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11EC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 00000005.00000003.1784198078.000001E8D59B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11EC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: chromecache_588.1.dr, chromecache_698.1.dr	String found in binary or memory: https://github.com/ded/script.js
Source: firefox.exe, 00000005.00000003.1429523028.000001E8D19C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 00000005.00000003.1429523028.000001E8D19C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 00000005.00000003.1309995847.000001E8CB705000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1309701947.000001E8CB500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: chromecache_801.1.dr, chromecache_786.1.dr, chromecache_605.1.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: firefox.exe, 00000005.00000003.1524106590.000001E8DBAB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 00000005.00000003.1762536729.000001E8DC952000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1404786732.000001E8DCDE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1558604560.000001E8DC94E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ib.absa.co.za/
Source: chromecache_497.1.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 00000005.00000003.1473324258.000001E8DE457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/apps/oldsyncS
Source: firefox.exe, 00000005.00000003.1558604560.000001E8DC9C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/apps/relay
Source: firefox.exe, 00000005.00000003.1473324258.000001E8DE457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/cmd/H
Source: firefox.exe, 00000005.00000003.1473324258.000001E8DE457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/cmd/HCX
Source: firefox.exe, 00000005.00000003.1473324258.000001E8DE457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/ids/ecosystem_telemetryU
Source: firefox.exe, 00000005.00000003.1473324258.000001E8DE457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/ids/ecosystem_telemetryUFj
Source: firefox.exe, 00000010.00000002.2530894267.000002BED3003000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.5.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4CLmfC2m4pbW4QbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 00000005.00000003.1763522139.000001E8DC90A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 00000010.00000002.2516540930.000002BED2DF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000005.00000003.1873575221.000001E8D5B42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/activity-stream/sessions/1/edc962c0-9297-4823-9f7b-a69
Source: firefox.exe, 00000005.00000003.1487414786.000001E8CC8BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/firefox-desktop/events/1/55379f50-96f9-41e6-9a1d-aec16
Source: firefox.exe, 00000005.00000003.1844316640.000001E8CE8C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/firefox-desktop/metrics/1/a61320e2-6474-4646-8e7f-3733
Source: firefox.exe, 00000005.00000003.1785409558.000001E8D596C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1553989220.000001E8DCA3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1605966533.000001E8D7EAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1777139578.000001E8D7EAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1550955651.000001E8DE0F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/firefox-desktop/newtab/1/a109723b-26d6-405d-ab65-9e32a
Source: firefox.exe, 00000005.00000003.1526027085.000001E8D9C33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1522123258.000001E8DC1A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1773428605.000001E8D9C33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1561618353.000001E8DC1A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/messaging-system/undesired-events/1/5b9009eb-4cb2-4934
Source: firefox.exe, 00000005.00000003.1526027085.000001E8D9C33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1522123258.000001E8DC1A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1773428605.000001E8D9C33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1561618353.000001E8DC1A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/messaging-system/undesired-events/1/b63e346e-7f2a-457b
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 00000005.00000003.1622311355.000001E8D8237000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema.
Source: firefox.exe, 00000005.00000003.1622311355.000001E8D8237000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema./
Source: firefox.exe, 00000005.00000003.1622311355.000001E8D8237000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/
Source: firefox.exe, 00000005.00000003.1622311355.000001E8D8237000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/=
Source: firefox.exe, 00000005.00000003.1838271307.000001E8CED36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1343872052.000001E8CED2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 00000005.00000003.1343800435.000001E8CED45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 00000005.00000003.1772917482.000001E8D9C7F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1486338918.000001E8CDF9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1342377172.000001E8D01E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1805650090.000001E8D7C2A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000005.00000003.1340713445.000001E8D0FE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 00000005.00000003.1771699342.000001E8D9C9D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1341162512.000001E8D0FD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 00000005.00000003.1404786732.000001E8DCDD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1496718487.000001E8DE081000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1520101323.000001E8DE088000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1827752150.000001E8DE088000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1708113849.000001E8DE088000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lookerstudio.google.com/embed/reporting/
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1484358559.000001E8D0FA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 00000005.00000003.1743775835.000001E8D81E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mathiasbynens.be/
Source: firefox.exe, 00000005.00000003.1743775835.000001E8D81E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mathiasbynens.be/notes/javascript-encoding#surrogate-formulae
Source: firefox.exe, 00000005.00000003.1743775835.000001E8D81E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mathiasbynens.be/notes/javascript-escapes#single
Source: firefox.exe, 00000007.00000002.2517315432.0000023AF2772000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11E81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2D8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 00000007.00000002.2517315432.0000023AF2772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestabout
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 00000005.00000003.1743775835.000001E8D81E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mths.be/jsesc
Source: firefox.exe, 00000005.00000003.1808393642.000001E8D79BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 00000005.00000003.1772917482.000001E8D9C8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 00000005.00000003.1785664650.000001E8D5967000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1483587857.000001E8D0FF2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1763522139.000001E8DC90A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1814210967.000001E8D0FF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1780579592.000001E8D5BC2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1780579592.000001E8D5BDD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1806295493.000001E8D7A84000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1810424440.000001E8D5BDD000.00000004.00000800.00020000.00000000.sdmp, places.sqlite.5.dr	String found in binary or memory: https://pixcams.com
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/#/schema/logo/image/
Source: chromecache_857.1.dr	String found in binary or memory: https://pixcams.com/#breadcrumb
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/#organization
Source: chromecache_857.1.dr	String found in binary or memory: https://pixcams.com/#primaryimage
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/#website
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/?s=
Source: firefox.exe, 00000005.00000003.1558604560.000001E8DC970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pixcams.com/ages_temp_afterupdate_triggermoz_openpages_tempCREATE
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/comments/feed/
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/feed/
Source: favicons.sqlite-wal.5.dr, chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/hays-bald-eagle-nest/
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.4
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/elementor-pro/assets/css/conditionals/transitions.min.css?ver
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/elementor-pro/assets/css/widget-call-to-action.min.css?ver=3.
Source: chromecache_857.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/elementor-pro/assets/css/widget-posts.min.css?ver=3.27.4
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.27.6
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.27.6
Source: chromecache_857.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.27.6
Source: chromecache_857.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.27.6
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.27.6
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.27.6
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/lasso/admin/assets/css/lasso-live.min.css?ver=1740492174
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/plugins/lasso/admin/assets/css/lasso-table-frontend.min.css?ver=17404
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/themes/blocksy/static/bundle/cf-7.min.css?ver=2.0.90
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/themes/blocksy/static/bundle/elementor-frontend.min.css?ver=2.0.90
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/themes/blocksy/static/bundle/main.min.css?ver=2.0.90
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/themes/blocksy/style.css?ver=6.7.2
Source: favicons.sqlite-wal.5.dr, chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/uploads/2021/11/cropped-camera-lens-icon-png-10-192x192.png
Source: favicons.sqlite-wal.5.dr, chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/uploads/2021/11/cropped-camera-lens-icon-png-10-32x32.png
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/uploads/2021/12/PixCams.png
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://pixcams.com/wp-content/uploads/elementor/css/post-6.css?ver=1740492437
Source: chromecache_857.1.dr, places.sqlite.5.dr	String found in binary or memory: https://pixcams.com/wp-content/uploads/elementor/thumbs/EZWebGraphic4-1-qlw436qp9shix5vi5pbrvw9f4fxd
Source: firefox.exe, 00000005.00000003.1814440110.000001E8D0FF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pixcams.commain-context-menu-copy-link-simple
Source: permissions.sqlite.5.dr	String found in binary or memory: https://pixcams.comstorageAccessAPI
Source: chromecache_497.1.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000005.00000003.1788443926.000001E8D16A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 00000005.00000003.1763522139.000001E8DC90A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://push.services.mozilla.com
Source: firefox.exe, 00000005.00000003.1518948957.000001E8DE413000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://push.services.mozilla.com/
Source: firefox.exe, 00000005.00000003.1802938971.000001E8D8038000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redirector.gvt1.com
Source: firefox.exe, 00000005.00000003.1814732386.000001E8D0FD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2557.0-linux-x64.zip
Source: firefox.exe, 00000005.00000003.1814732386.000001E8D0FD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2557.0-mac-arm64.zip
Source: firefox.exe, 00000005.00000003.1814732386.000001E8D0FD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2557.0-mac-x64.zip
Source: firefox.exe, 00000005.00000003.1814732386.000001E8D0FD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2557.0-win-arm64.zip
Source: firefox.exe, 00000005.00000003.1778112766.000001E8D7CB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2557.0-win-x64.zip
Source: firefox.exe, 00000005.00000003.1814732386.000001E8D0FD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2557.0-win-x86.zip
Source: firefox.exe, 00000005.00000003.1602957831.000001E8D8252000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1775614836.000001E8D8250000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 00000005.00000003.1602957831.000001E8D8252000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1775614836.000001E8D8250000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2&
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 00000005.00000003.1522123258.000001E8DC1A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1561618353.000001E8DC1A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 00000005.00000003.1602957831.000001E8D8252000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1775614836.000001E8D8250000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 00000005.00000003.1775614836.000001E8D8250000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://schema.org
Source: firefox.exe, 00000005.00000003.1309701947.000001E8CB500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000005.00000003.1383815381.000001E8DC0CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152
Source: firefox.exe, 00000005.00000003.1787446217.000001E8D16FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 00000005.00000003.1808756621.000001E8D79A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 00000005.00000003.1795294670.000001E8DCA20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 00000005.00000003.1524825821.000001E8D9CA5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com
Source: firefox.exe, 00000005.00000003.1476435668.000001E8DCA2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000005.00000003.1478300765.000001E8D9C77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000005.00000003.1486338918.000001E8CDF9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000005.00000003.1486338918.000001E8CDF9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 00000005.00000003.1486338918.000001E8CDF8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1624525472.000001E8D5C1C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1810207509.000001E8D5C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 00000005.00000003.1777139578.000001E8D7E95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1818602623.000001E8D053D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11E12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2D13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000005.00000003.1777139578.000001E8D7E95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 00000005.00000003.1833673023.000001E8D0104000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11ECC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2DF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000005.00000003.1474691875.000001E8DCAA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000005.00000003.1474691875.000001E8DCAA8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1846319386.000001E8CE3FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 00000005.00000003.1538206481.000001E8DC65B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1604280120.000001E8D8082000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1478300765.000001E8D9C8A000.00000004.00000800.00020000.00000000.sdmp, places.sqlite.5.dr	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 00000005.00000003.1373056805.000001E8D7DD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 00000005.00000003.1373056805.000001E8D7DD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 00000005.00000003.1823465910.000001E8D03C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1818602623.000001E8D053D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 00000005.00000003.1591210464.000001E8DC9B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1761319760.000001E8DC9B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1558604560.000001E8DC9B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/firefox-relay-integration
Source: firefox.exe, 00000005.00000003.1546136781.000001E8DC6DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: favicons.sqlite-wal.5.dr, places.sqlite.5.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 00000005.00000003.1423343305.000001E8D04C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 00000005.00000003.1834803680.000001E8CFA6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: favicons.sqlite-wal.5.dr	String found in binary or memory: https://support.mozilla.org/products/firefox
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4D9000.00000004.00000800.00020000.00000000.sdmp, places.sqlite.5.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.BoEX37k-iQhx
Source: chromecache_595.1.dr, chromecache_505.1.dr, chromecache_521.1.dr	String found in binary or memory: https://swiperjs.com
Source: chromecache_497.1.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_497.1.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=8AEAAA60-4DEB-48F5-A523-A98D70A714E0&gdpr=0&gdpr_
Source: chromecache_497.1.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub8730968190912&gdpr=0&gdpr_consent=
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D80A6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1777139578.000001E8D7E95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: chromecache_612.1.dr, chromecache_737.1.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 00000005.00000003.1597956879.000001E8DBA47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://watch.sling.com/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 00000005.00000003.1718627422.000001E8DC127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7ECA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1777139578.000001E8D7E95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: firefox.exe, 00000007.00000002.2517315432.0000023AF27C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11EE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2530894267.000002BED3003000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.5.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_1489ebcc3648faa1d485bf99fe44320523fb3b015627dc7b
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7ECA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7E9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7EEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7EEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 00000005.00000003.1749957250.000001E8DC541000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7EEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.co.uk/
Source: chromecache_733.1.dr	String found in binary or memory: https://www.gnu.org/licenses/gpl-2.0.html
Source: firefox.exe, 00000005.00000003.1708113849.000001E8DE08F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1496718487.000001E8DE08B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1519416397.000001E8DE090000.00000004.00000800.00020000.00000000.sdmp, chromecache_790.1.dr, chromecache_506.1.dr	String found in binary or memory: https://www.google.com
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D803A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1480407769.000001E8D7EEB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1486338918.000001E8CDFF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7E9C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1359179039.000001E8D5DF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000005.00000003.1481452402.000001E8D7C48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1309701947.000001E8CB500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: firefox.exe, 00000005.00000003.1708113849.000001E8DE088000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=pi
Source: firefox.exe, 00000005.00000003.1480407769.000001E8D7E9C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1309995847.000001E8CB705000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1486338918.000001E8CDF9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1309701947.000001E8CB500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1437495980.000001E8DC280000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1780579592.000001E8D5BC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000005.00000003.1778112766.000001E8D7CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 00000005.00000003.1596101608.000001E8DC111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=p
Source: firefox.exe, 00000005.00000003.1762536729.000001E8DC92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=pi
Source: firefox.exe, 00000005.00000003.1708113849.000001E8DE088000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=pix
Source: firefox.exe, 00000005.00000003.1518948957.000001E8DE428000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=pixc
Source: firefox.exe, 00000005.00000003.1518948957.000001E8DE428000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=pixca
Source: firefox.exe, 00000005.00000003.1518948957.000001E8DE428000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=pixcam
Source: firefox.exe, 00000005.00000003.1525656244.000001E8D9C8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=pixcams
Source: firefox.exe, 00000005.00000003.1525656244.000001E8D9C8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=pixcams.
Source: firefox.exe, 00000005.00000003.1525656244.000001E8D9C8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=pixcams.c
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 00000005.00000003.1780579592.000001E8D5BC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mobilesuica.com/
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://www.monsterinsights.com/
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D8017000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1528352853.000001E8D8050000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1538206481.000001E8DC65B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1604280120.000001E8D8082000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1478300765.000001E8D9C8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1528352853.000001E8D800F000.00000004.00000800.00020000.00000000.sdmp, places.sqlite.5.dr	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D803A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1528352853.000001E8D8026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: favicons.sqlite-wal.5.dr	String found in binary or memory: https://www.mozilla.org/about/
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4D9000.00000004.00000800.00020000.00000000.sdmp, places.sqlite.5.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bKxBjSHff0w5
Source: firefox.exe, 00000005.00000003.1367075164.000001E8D5DB9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1367075164.000001E8D5DBF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1366134491.000001E8D7DAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: firefox.exe, 00000005.00000003.1532722203.000001E8D7AC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/anything/?
Source: favicons.sqlite-wal.5.dr	String found in binary or memory: https://www.mozilla.org/contribute/
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4D9000.00000004.00000800.00020000.00000000.sdmp, places.sqlite.5.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.0qLVhD3otCFX
Source: firefox.exe, 00000005.00000003.1591210464.000001E8DC9B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1761319760.000001E8DC9B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1558604560.000001E8DC9B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/about/legal/terms/subscription-services/
Source: firefox.exe, 00000005.00000003.1771699342.000001E8D9CD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1487414786.000001E8CC8BE000.00000004.00000800.00020000.00000000.sdmp, targeting.snapshot.json.tmp.5.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: firefox.exe, 00000005.00000003.1778112766.000001E8D7CD0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1470835964.000001E8DE4D9000.00000004.00000800.00020000.00000000.sdmp, places.sqlite.5.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: firefox.exe, 00000005.00000003.1591210464.000001E8DC9B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1761319760.000001E8DC9B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1558604560.000001E8DC9B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/subscription-services/
Source: firefox.exe, 00000005.00000003.1827752150.000001E8DE02F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/
Source: favicons.sqlite-wal.5.dr, places.sqlite.5.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 00000005.00000003.1532722203.000001E8D7AC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/mobile/get-app/?utm_medium=firefox-desktop&utm_source=onboarding-mod
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 00000007.00000002.2517315432.0000023AF27C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11ECC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2DF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000005.00000003.1547074619.000001E8D1941000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 00000009.00000002.2518884961.000001ED11C90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000005.00000003.1807788569.000001E8D7A3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: firefox.exe, 00000005.00000003.1778112766.000001E8D7CD0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1470835964.000001E8DE4D9000.00000004.00000800.00020000.00000000.sdmp, places.sqlite.5.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000005.00000003.1340713445.000001E8D0FE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 00000005.00000003.1718627422.000001E8DC127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: chromecache_612.1.dr, chromecache_737.1.dr	String found in binary or memory: https://www.pinterest.com/pin/create/button/?url=
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D80A6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1777139578.000001E8D7E95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 00000005.00000003.1597956879.000001E8DBA47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sling.com/
Source: firefox.exe, 00000007.00000002.2517315432.0000023AF27C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11EE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2530894267.000002BED3003000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.5.dr	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: firefox.exe, 00000005.00000003.1404786732.000001E8DCDD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1474418205.000001E8DE413000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1518948957.000001E8DE413000.00000004.00000800.00020000.00000000.sdmp, chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://www.tiktok.com/
Source: chromecache_727.1.dr, chromecache_761.1.dr, chromecache_750.1.dr, chromecache_699.1.dr	String found in binary or memory: https://www.youtube-nocookie.com
Source: chromecache_727.1.dr, chromecache_761.1.dr	String found in binary or memory: https://www.youtube.com
Source: firefox.exe, 00000005.00000003.1528352853.000001E8D80A6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1787446217.000001E8D16FB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2523987650.000001ED11E0A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2516540930.000002BED2D0C000.00000004.00000800.00020000.00000000.sdmp, chromecache_727.1.dr, chromecache_761.1.dr	String found in binary or memory: https://www.youtube.com/
Source: chromecache_727.1.dr, chromecache_761.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_727.1.dr, chromecache_761.1.dr	String found in binary or memory: https://www.youtube.com/live_chat?v=
Source: firefox.exe, 00000005.00000003.1718627422.000001E8DC127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: chromecache_497.1.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY
Source: chromecache_612.1.dr, chromecache_737.1.dr	String found in binary or memory: https://x.com/intent/tweet?text=
Source: firefox.exe, 00000005.00000003.1336990767.000001E8D1A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: chromecache_857.1.dr, chromecache_501.1.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/
Source: chromecache_727.1.dr, chromecache_761.1.dr	String found in binary or memory: https://youtube.com/oembed

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 51225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 51021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 51201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 51082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 51209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 51119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116

Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.18:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.18:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.18:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.18:50123 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:50183 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.18:50278 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.18:50279 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.91:443 -> 192.168.2.18:50286 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.91:443 -> 192.168.2.18:50293 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.18:50307 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.18:50308 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.18:50309 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.18:50386 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.18:50395 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:50705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:50707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:50704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:50703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:50706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:50702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:50710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:50709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.18:50808 version: TLS 1.2

Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 9_2_000001ED11CFB877 NtQuerySystemInformation,		9_2_000001ED11CFB877
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 9_2_000001ED12473A32 NtQuerySystemInformation,		9_2_000001ED12473A32

Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 9_2_000001ED11CFB877	9_2_000001ED11CFB877
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 9_2_000001ED12473A32	9_2_000001ED12473A32
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 9_2_000001ED12473A72	9_2_000001ED12473A72
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 9_2_000001ED1247415C	9_2_000001ED1247415C

Source: classification engine

Classification label: mal56.win@74/756@528/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File created: C:\Users\user\AppData\Local\Temp\firefox

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: firefox.exe, 00000005.00000003.1624525472.000001E8D5CDF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: UPDATE moz_places SET foreign_count = foreign_count - 1 WHERE id = OLD.place_idUPDATE moz_places SET foreign_count = foreign_count + 1 WHERE id = NEW.place_id;
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4A8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000005.00000003.1785409558.000001E8D596C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT * FROM events WHERE timestamp BETWEEN date(:dateFrom) AND date(:dateTo);
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE events (id INTEGER PRIMARY KEY, type INTEGER NOT NULL, count INTEGER NOT NULL, timestamp DATE );
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: INSERT INTO events (type, count, timestamp) VALUES (:type, 1, date(:date));
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT timestamp FROM events ORDER BY timestamp ASC LIMIT 1;;
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT timestamp FROM events ORDER BY timestamp ASC LIMIT 1;;Fy6
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: UPDATE events SET count = count + 1 WHERE id = :id;-
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT sum(count) FROM events;9'
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT sum(count) FROM events;9
Source: firefox.exe, 00000005.00000003.1470835964.000001E8DE4A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT * FROM events WHERE type = :type AND timestamp = date(:date);

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1932,i,17220930051692312460,14663092190760225307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pixcams.com"
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2220 -prefMapHandle 2192 -prefsLen 25250 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5b44eb71-9150-4466-8d73-b542ad338f24} 1952 "\\.\pipe\gecko-crash-server-pipe.1952" 1e8bdd6e710 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3340 -parentBuildID 20230927232528 -prefsHandle 3412 -prefMapHandle 3408 -prefsLen 25402 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1dd26791-2163-4155-91aa-9c2c9a3e8ab0} 1952 "\\.\pipe\gecko-crash-server-pipe.1952" 1e8bdd77d10 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5104 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 5624 -prefMapHandle 5488 -prefsLen 33172 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {39695732-3388-48f6-9938-dbd14cce1266} 1952 "\\.\pipe\gecko-crash-server-pipe.1952" 1e8d160b510 utility
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1932,i,17220930051692312460,14663092190760225307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe"	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2220 -prefMapHandle 2192 -prefsLen 25250 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5b44eb71-9150-4466-8d73-b542ad338f24} 1952 "\\.\pipe\gecko-crash-server-pipe.1952" 1e8bdd6e710 socket	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3340 -parentBuildID 20230927232528 -prefsHandle 3412 -prefMapHandle 3408 -prefsLen 25402 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1dd26791-2163-4155-91aa-9c2c9a3e8ab0} 1952 "\\.\pipe\gecko-crash-server-pipe.1952" 1e8bdd77d10 rdd	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5104 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 5624 -prefMapHandle 5488 -prefsLen 33172 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {39695732-3388-48f6-9938-dbd14cce1266} 1952 "\\.\pipe\gecko-crash-server-pipe.1952" 1e8d160b510 utility	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: z:\task_1551543573\build\openh264\gmpopenh264.pdbV source: firefox.exe, 00000005.00000003.1852895969.000001E8E0600000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr
Source:	Binary string: z:\task_1551543573\build\openh264\gmpopenh264.pdb source: firefox.exe, 00000005.00000003.1852895969.000001E8E0600000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.5.dr

Source: gmpopenh264.dll.tmp.5.dr

Static PE information: section name: .rodata

Source: C:\Program Files\Mozilla Firefox\firefox.exe	File created: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\wuifzt30.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll.tmp			Jump to dropped file
Source: C:\Program Files\Mozilla Firefox\firefox.exe	File created: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\wuifzt30.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll (copy)			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

Code function: 9_2_000001ED11CFB877 rdtsc

9_2_000001ED11CFB877

Source: firefox.exe, 00000007.00000002.2511100459.0000023AF25CA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp
Source: firefox.exe, 00000009.00000002.2533802725.000001ED12360000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllq
Source: firefox.exe, 00000007.00000002.2533814601.0000023AF2A00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dlle
Source: firefox.exe, 00000007.00000002.2533814601.0000023AF2A00000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2510864010.000001ED11B1A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2509011659.000002BED2A4A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000010.00000002.2529902245.000002BED2E90000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 00000007.00000002.2531678387.0000023AF2920000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: firefox.exe, 00000009.00000002.2510864010.000001ED11B1A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWj
Source: firefox.exe, 00000007.00000002.2533814601.0000023AF2A00000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000009.00000002.2533802725.000001ED12360000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Program Files\Mozilla Firefox\firefox.exe

Code function: 9_2_000001ED11CFB877 rdtsc

9_2_000001ED11CFB877

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Source: https://pixcams.com/	HTTP Parser: Iframe src: https://ads.adthrive.com/builds/prebid/load-cookie.html?endpoint=https://prebid.production.adthrive.com/cookie_sync&max_sync_count=15&coop_sync=true&bidders=undertone,gumgum,appnexus,adf,colossus,ix,kargo,openx,pubmatic,rubicon,triplelift,triplelift_native,33across,conversant,epsilon,unruly,yieldmo,resetDigital,grid,yahoossp,improvedigital,aidem,criteo&args=account:1234
Source: https://pixcams.com/	HTTP Parser: Iframe src: https://ads.adthrive.com/builds/prebid/load-cookie.html?endpoint=https://prebid.production.adthrive.com/cookie_sync&max_sync_count=15&coop_sync=true&bidders=undertone,gumgum,appnexus,adf,colossus,ix,kargo,openx,pubmatic,rubicon,triplelift,triplelift_native,33across,conversant,epsilon,unruly,yieldmo,resetDigital,grid,yahoossp,improvedigital,aidem,criteo&args=account:1234
Source: https://pixcams.com/	HTTP Parser: Iframe src: https://ads.adthrive.com/builds/prebid/load-cookie.html?endpoint=https://prebid.production.adthrive.com/cookie_sync&max_sync_count=15&coop_sync=true&bidders=undertone,gumgum,appnexus,adf,colossus,ix,kargo,openx,pubmatic,rubicon,triplelift,triplelift_native,33across,conversant,epsilon,unruly,yieldmo,resetDigital,grid,yahoossp,improvedigital,aidem,criteo&args=account:1234
Source: https://pixcams.com/live-cams-index/	HTTP Parser: Iframe src: https://ads.adthrive.com/builds/prebid/load-cookie.html?endpoint=https://prebid.production.adthrive.com/cookie_sync&max_sync_count=15&coop_sync=true&bidders=undertone,gumgum,appnexus,adf,colossus,ix,kargo,openx,pubmatic,rubicon,triplelift,triplelift_native,33across,conversant,epsilon,unruly,yieldmo,resetDigital,grid,yahoossp,improvedigital,aidem,criteo&args=account:1234

Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No favicon

Source: https://pixcams.com/	HTTP Parser: No <meta name="author".. found
Source: https://pixcams.com/	HTTP Parser: No <meta name="author".. found
Source: https://pixcams.com/	HTTP Parser: No <meta name="author".. found
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No <meta name="author".. found

Source: https://pixcams.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://pixcams.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://pixcams.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://pixcams.com/live-cams-index/	HTTP Parser: No <meta name="copyright".. found

Source: Network traffic	Suricata IDS: 2059867 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com) : 192.168.2.18:57757 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059371 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (rednosehorse .com) : 192.168.2.18:52957 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059371 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (rednosehorse .com) : 192.168.2.18:63494 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:49715 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:49718 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059867 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com) : 192.168.2.18:58065 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059867 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com) : 192.168.2.18:63814 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059371 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (rednosehorse .com) : 192.168.2.18:62404 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059867 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com) : 192.168.2.18:62880 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059371 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (rednosehorse .com) : 192.168.2.18:59162 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:49727 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:49736 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:49826 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:49836 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:49837 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:49827 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059867 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com) : 192.168.2.18:56200 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:50629 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:50632 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059867 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com) : 192.168.2.18:61684 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:50635 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:50633 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:50657 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:50656 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:50666 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:50668 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059867 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com) : 192.168.2.18:62329 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059867 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com) : 192.168.2.18:64058 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059371 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (rednosehorse .com) : 192.168.2.18:59141 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:50882 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059371 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (rednosehorse .com) : 192.168.2.18:57235 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059867 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com) : 192.168.2.18:56552 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:50888 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:51009 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:51017 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059371 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (rednosehorse .com) : 192.168.2.18:52445 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059867 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com) : 192.168.2.18:59756 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059371 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (rednosehorse .com) : 192.168.2.18:60528 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:51136 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:51145 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:51144 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059371 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (rednosehorse .com) : 192.168.2.18:56126 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059867 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (newgoodfoodmarket .com) : 192.168.2.18:50806 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:51161 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059372 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (rednosehorse .com) : 192.168.2.18:51172 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:51162 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:51178 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:51173 -> 82.97.247.174:443
Source: Network traffic	Suricata IDS: 2059868 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (newgoodfoodmarket .com) : 192.168.2.18:51137 -> 82.97.247.174:443

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report
http://pixcams.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Malware Analysis System Evasion

Anti Debugging

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.18:50607 -> 3.72.38.170:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.18:50730 -> 216.200.232.253:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.18:50731 -> 35.210.130.15:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.18:50838 -> 34.111.113.62:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.166
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.166
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.166
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.202.238.101
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.166
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.166
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.166
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.166
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.166
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.166
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.166
Source: unknown	TCP traffic detected without corresponding DNS query: 124.146.153.166
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pixcams.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Malware Analysis System Evasion

Anti Debugging

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Windows Analysis Report
http://pixcams.com