Analysis Report http://mryoung.ytv.com

Phishing:

Phishing site detected (based on logo template match)

Source: http://mryoung.ytv.com/

Matcher: Template: yahoo matched

HTML title does not match URL

Source: http://mryoung.ytv.com/projects/smartfox-server	HTTP Parser: Title: SmartFoxServer : A51 does not match URL
Source: http://mryoung.ytv.com/	HTTP Parser: Title: Digital innovation : A51 does not match URL
Source: http://mryoung.ytv.com/projects/quoteplease	HTTP Parser: Title: QuotePlease : A51 does not match URL
Source: http://mryoung.ytv.com/	HTTP Parser: Title: Digital innovation : A51 does not match URL
Source: http://mryoung.ytv.com/our-services	HTTP Parser: Title: We bring digital innovation to market : A51 does not match URL
Source: http://mryoung.ytv.com/about	HTTP Parser: Title: About Us : A51 does not match URL
Source: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nfl	HTTP Parser: Title: AdrenalynXL for NBA/NHL/NFL : A51 does not match URL
Source: http://mryoung.ytv.com/projects/digthisdata	HTTP Parser: Title: DigThisData : A51 does not match URL
Source: http://mryoung.ytv.com/projects/tweenbrands-scapenation	HTTP Parser: Title: ScapeNation : A51 does not match URL
Source: http://mryoung.ytv.com/projects/runsocial	HTTP Parser: Title: RunSocial : A51 does not match URL
Source: http://mryoung.ytv.com/projects/backspin	HTTP Parser: Title: BackSpin : A51 does not match URL
Source: http://mryoung.ytv.com/projects/cbc-radio-canada	HTTP Parser: Title: CBC / Radio-Canada : A51 does not match URL
Source: http://mryoung.ytv.com/projects/smartfox-server	HTTP Parser: Title: SmartFoxServer : A51 does not match URL
Source: http://mryoung.ytv.com/	HTTP Parser: Title: Digital innovation : A51 does not match URL
Source: http://mryoung.ytv.com/projects/quoteplease	HTTP Parser: Title: QuotePlease : A51 does not match URL
Source: http://mryoung.ytv.com/	HTTP Parser: Title: Digital innovation : A51 does not match URL
Source: http://mryoung.ytv.com/our-services	HTTP Parser: Title: We bring digital innovation to market : A51 does not match URL
Source: http://mryoung.ytv.com/about	HTTP Parser: Title: About Us : A51 does not match URL
Source: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nfl	HTTP Parser: Title: AdrenalynXL for NBA/NHL/NFL : A51 does not match URL
Source: http://mryoung.ytv.com/projects/digthisdata	HTTP Parser: Title: DigThisData : A51 does not match URL
Source: http://mryoung.ytv.com/projects/tweenbrands-scapenation	HTTP Parser: Title: ScapeNation : A51 does not match URL
Source: http://mryoung.ytv.com/projects/runsocial	HTTP Parser: Title: RunSocial : A51 does not match URL
Source: http://mryoung.ytv.com/projects/backspin	HTTP Parser: Title: BackSpin : A51 does not match URL
Source: http://mryoung.ytv.com/projects/cbc-radio-canada	HTTP Parser: Title: CBC / Radio-Canada : A51 does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Source: http://mryoung.ytv.com/projects/smartfox-server	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/quoteplease	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/our-services	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/about	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nfl	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/digthisdata	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/tweenbrands-scapenation	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/runsocial	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/backspin	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/cbc-radio-canada	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/smartfox-server	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/quoteplease	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/our-services	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/about	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nfl	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/digthisdata	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/tweenbrands-scapenation	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/runsocial	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/backspin	HTTP Parser: Has password / email / username input fields
Source: http://mryoung.ytv.com/projects/cbc-radio-canada	HTTP Parser: Has password / email / username input fields

Compliance:

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49720 version: TLS 1.2

Networking:

Downloads compressed data via HTTP

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 25 Feb 2021 20:07:24 GMTContent-Type: text/css; charset=utf-8Content-Length: 8313Connection: keep-aliveSet-Cookie: __cfduid=d27fe7551833ab79d54e332259573c2501614283644; expires=Sat, 27-Mar-21 20:07:24 GMT; path=/; domain=.ionicframework.com; HttpOnly; SameSite=Laxx-origin-cache: HITlast-modified: Fri, 12 Feb 2021 21:52:26 GMTAccess-Control-Allow-Origin: *ETag: W/"6026f89a-c854"expires: Thu, 25 Feb 2021 15:29:00 GMTCache-Control: max-age=31536000Content-Encoding: gzipx-proxy-cache: MISSX-GitHub-Request-Id: 7A22:5CC9:1ED534:2090BE:6037BFE4Via: 1.1 varnishAge: 4453X-Served-By: cache-fra19182-FRAX-Cache: HITX-Cache-Hits: 1X-Timer: S1614279192.548578,VS0,VE1Vary: Accept-EncodingX-Fastly-Request-ID: 69080294bd8505ca4b765a4b1e35ebdfb3f5adbdCF-Cache-Status: HITAccept-Ranges: bytescf-request-id: 087c66b4eb00004e8631906000000001Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=mUxRUs8W%2BlbkoRCJixQyS%2FaLtMCGvb7XkvIIRgifxrDUiP280IiiPxJMF0AHg7NFkN1v2v3hXHv%2Bc78ustwxEhdJ75Aw9HAIGV%2F8QAblEYOhDuL2ikrTuA%3D%3D"}]}NEL: {"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 62740d67d9844e86-FRAalt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400Data Raw: 1f 8b 08 00 00 Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 25 Feb 2021 20:07:24 GMTContent-Type: application/javascript; charset=utf-8Content-Length: 7521Connection: keep-aliveAccess-Control-Allow-Origin: *Cache-Control: public, max-age=30672000Content-Encoding: gzipETag: "5eb03ec2-5add"Last-Modified: Mon, 04 May 2020 16:11:46 GMTcf-cdnjs-via: cfworker/kvCross-Origin-Resource-Policy: cross-originTiming-Allow-Origin: *X-Content-Type-Options: nosniffcf-request-id: 087c66b5670000fcb5679c4000000001Vary: Accept-EncodingCF-Cache-Status: HITAge: 453898Expires: Tue, 15 Feb 2022 20:07:24 GMTAccept-Ranges: bytesReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=%2FG8JSv5AJGOhX1lrALAuq3rtdwf6nLKVfphNVCXCyuiwT%2BcIKo5snYNYLjHzF4yaCYSUJhDnZeEfmPwOeIfAFZy8f0Mo4Z2GDsaQroUsRRwSdMS3sw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"max_age":604800,"report_to":"cf-nel"}Server: cloudflareCF-RAY: 62740d68a889fcb5-VIEalt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400Data Raw: 1f 8b 08 00 00 00 00 00 02 ff b4 7c fd b2 db 36 96 e7 ff f3 14 14 3a 4d 03 16 2e 25 5d 3b 71 c2 6b 58 ed 71 27 35 d9 4a 9c de d8 33 53 35 92 7a 17 04 40 89 d7 12 a9 26 29 5f bb 45 ee 63 ed 0b ec 8b 6d e1 93 20 45 dd 38 33 d3 55 2e 5f e1 eb 00 38 00 ce c7 0f 07 9c 3d 9d 04 f7 ff f3 24 ca cf c1 bf d1 7d c6 69 9d 15 79 f0 97 fd 69 9b e5 c1 4d f0 71 11 2d 5e 44 f3 e0 26 78 31 bb fd 6e 76 3b 5f bc f8 a7 e0 69 b0 ab eb 63 15 cf 66 f7 7f 93 2d 3f ba 86 51 51 6e 67 b2 c2 9b e2 f8 b9 cc b6 bb 3a 80 0c 05 b2 59 f0 3f fe df ff 2d f3 e0 3f a8 48 53 51 8a f2 2e f8 29 63 22 af 04 0f 7e fe f1 7d f0 74 f6 4f 93 f4 94 33 49 05 52 74 06 36 01 08 a9 3f 1f 45 91 06 5c a4 59 2e c2 50 ff 8d e8 81 2f f5 4f b8 02 7a 20 60 83 29 8a 41 91 dc 0b 56 77 0d 0f 05 3f ed 45 18 ea bf 91 f8 74 2c ca ba 5a f6 93 84 c2 52 fc ed 94 95 02 5a 6a 08 c5 14 6a e6 a0 16 fa a3 a3 91 f8 54 8b 9c 43 1a a5 39 3e 1b 06 88 d8 d5 49 d0 39 4b e1 a4 de Data Ascii: |6:M.%];qkXq'5J3S5z@&)_Ecm E83U._8=$}iyiMq-^D&x1nv;_icf-?QQng:Y?-?HSQ.)c"~}tO3IRt6?E\Y.P/Oz `)AVw?Et,ZRZjjTC9>I9K
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 25 Feb 2021 20:07:24 GMTContent-Type: application/javascript; charset=utf-8Content-Length: 50293Connection: keep-aliveAccess-Control-Allow-Origin: *Cache-Control: public, max-age=30672000Content-Encoding: gzipETag: "5eb03efe-2894d"Last-Modified: Mon, 04 May 2020 16:12:46 GMTcf-cdnjs-via: cfworker/kvCross-Origin-Resource-Policy: cross-originTiming-Allow-Origin: *X-Content-Type-Options: nosniffcf-request-id: 087c66b56a000038bfbb385000000001Vary: Accept-EncodingCF-Cache-Status: MISSExpires: Tue, 15 Feb 2022 20:07:24 GMTAccept-Ranges: bytesReport-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=aIz40vXXO0QE%2FV0bqD%2FGc5IRmWPr3F0KY%2FgOeMM3sdH%2FuBp0bqx3CEYJvp8X8pRYmBODVukinUdf1NIhJ1TcVsHMxXkyUQsNR3lzQb%2F2t3nCm%2FJsaQ%3D%3D"}]}NEL: {"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 62740d68ad4a38bf-VIEalt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400Data Raw: 1f 8b 08 00 00 00 00 00 02 ff cc fd 7b 77 db b6 d2 28 0e ff 7f 3e 85 c4 93 cd 05 58 10 25 ca 71 d2 52 81 b5 52 c7 69 b2 77 6e 8d dd 5c aa 30 5d b4 04 49 48 28 42 21 21 5b 8e c8 ef fe 2e dc 48 50 a2 9c 74 3f cf 79 d7 6f b5 b1 88 fb 00 18 0c 66 06 83 41 ef a8 fd 7f 5a 47 ad 97 11 27 29 8d 62 fa 9d b4 ae fb 9e df ef 7b 83 16 58 70 be 0a 7a bd 65 95 38 c9 32 6f c2 96 50 94 39 63 ab db 94 ce 17 bc 35 e8 fb f7 bb 83 be ff d0 ae 47 56 fb fc b2 f5 82 4e 48 92 11 55 5b 16 f4 7a 69 74 e3 cd 29 5f ac af d6 19 49 27 2c e1 24 e1 a2 d6 de 13 36 9f 45 31 b3 1b ec 2d a3 8c 93 b4 f7 e2 f9 d9 f9 ab 8b 73 d1 70 ef ff cc d6 c9 84 53 96 b4 fe 9e c4 51 96 9d 45 71 7c b6 20 93 af 80 23 02 b7 74 06 da 80 b7 68 92 f1 28 99 10 36 6b 11 08 f9 22 65 37 ad 84 dc b4 2e 6f 57 e4 3c 4d 59 0a 9c b3 28 49 18 6f 4d a2 38 6e 45 2d 59 57 2b ca 5a 51 cb 34 e0 c0 e2 3a 4a 5b 7f 4f 52 12 71 72 26 32 60 93 06 e0 b6 84 83 ab 96 67 2c 05 22 3f c5 fd Data Ascii: {w(>X%qRRiwn\0]IH(B!![.HPt?yofAZG')b{Xpze82oP9c5GVNHU[zit)_I',$6E1-spSQEq| #th(6k"e7.oW<MY(IoM8nE-YW+ZQ4:J[ORqr&2`g,"?
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 25 Feb 2021 20:07:26 GMTContent-Type: application/vnd.ms-fontobjectContent-Length: 69086Connection: keep-alivelast-modified: Fri, 12 Feb 2021 21:52:26 GMTAccess-Control-Allow-Origin: *ETag: W/"6026f89a-1d794"expires: Thu, 25 Feb 2021 09:49:51 GMTCache-Control: max-age=31536000Content-Encoding: gzipx-proxy-cache: MISSX-GitHub-Request-Id: D7AE:3538:1327D:180AC:60377067Via: 1.1 varnishX-Served-By: cache-fra19180-FRAX-Cache: HITX-Cache-Hits: 1X-Timer: S1614283646.191493,VS0,VE93Vary: Accept-EncodingX-Fastly-Request-ID: 33e9c081ed45a218c14e4e4239d2d2702227d775CF-Cache-Status: MISSAccept-Ranges: bytescf-request-id: 087c66bce500004e86f7309000000001Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=E5CJd11FFGoVgyV%2BmwekxPu%2BEImzMWCL55u4manMKcj6Lbjq%2BdVgnWbduSgoSc6ELSxVjzVHng100mKnUFnq6l%2FEbabjQDg5e4FAFGt7VNSFiRXcCKEIjg%3D%3D"}]}NEL: {"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 62740d74acbe4e86-FRAalt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 79 9c 1b c5 99 30 dc d5 f7 a5 56 4b ea 43 b7 5a d2 48 9a fb d0 e9 6b 66 64 63 e3 db 8c 8d 31 c6 eb 43 3e b1 8d 81 c1 80 f1 72 0a ec 4d 08 81 c4 21 40 1c 42 c8 84 10 42 80 10 43 58 e2 00 81 09 21 09 b0 59 e2 78 b3 84 64 f3 66 27 6c 7e 59 96 cd 9b 35 0e 9b 65 f9 78 c5 fb 54 77 6b 46 33 18 36 f9 7d df 7f df 58 d5 5d 5d 5d 5d f5 d4 53 55 cf 55 4f 95 ef f8 39 22 7e fb 2a 22 10 41 12 f8 8f 24 58 ca 8e 40 ca db 08 df 57 8c 38 cf 84 ea de 09 e4 de f7 08 97 9d 4d 7c e0 4f 25 96 12 97 12 97 10 7b 88 ed f6 fd 72 48 93 89 95 c4 4e 62 07 a4 5d 49 Data Ascii: y0VKCZHkfdc1C>rM!@BBCX!Yxdf'l~Y5exTwkF36}X]]]]SUUO9"~*"A$X@W8M|O%{rHNb]I

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /css/main.css HTTP/1.1Accept: text/css, */*Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/a51_logo-light.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-shaw.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-bell.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-cbc-tv.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-fox.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-corus.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-underarmour.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ionicons/2.0.1/css/ionicons.min.css HTTP/1.1Accept: text/css, */*Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: code.ionicframework.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-validate/1.17.0/jquery.validate.min.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: cdnjs.cloudflare.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ajax/libs/materialize/0.100.2/js/materialize.min.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: cdnjs.cloudflare.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /js/main.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-yahoo.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-tweenbrands.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-panini.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-tiff.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-serendipity.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-thunderbird.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-wasserman.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-ing.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-ontario.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-miele.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-rt.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/splash.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/street-view.mp4 HTTP/1.1Range: bytes=0-Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/GetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ionicons/2.0.1/fonts/ionicons.eot?v=2.0.1 HTTP/1.1Accept: */*Referer: http://mryoung.ytv.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://mryoung.ytv.comAccept-Encoding: gzip, deflateHost: code.ionicframework.comConnection: Keep-AliveCookie: __cfduid=d27fe7551833ab79d54e332259573c2501614283644
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Accept: */*Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/street-view.mp4 HTTP/1.1If-Modified-Since: Tue, 27 Sep 2016 23:03:08 GMTIf-None-Match: "57eafaac-f5e0f"Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/GetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/street-view.mp4 HTTP/1.1If-Modified-Since: Tue, 27 Sep 2016 23:03:08 GMTIf-None-Match: "57eafaac-f5e0f"Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/GetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/street-view.mp4 HTTP/1.1If-Modified-Since: Tue, 27 Sep 2016 23:03:08 GMTIf-None-Match: "57eafaac-f5e0f"Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/GetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /about HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/street-view.mp4 HTTP/1.1If-Modified-Since: Tue, 27 Sep 2016 23:03:08 GMTIf-None-Match: "57eafaac-f5e0f"Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/GetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/toronto-cn-tower.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/aboutAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/toronto-city-hall.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/aboutAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /our-services HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /projects/digthisdata HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-digthisdata.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/digthisdataAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /projects/cbc-radio-canada HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-cbc-radio-canada-tv-red.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/cbc-radio-canadaAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-cbc-radio-canada4.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/cbc-radio-canadaAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-cbc-radio-canada6.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/cbc-radio-canadaAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /projects/quoteplease HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/logo-quoteplease.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/quotepleaseAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-quoteplease-dashboard.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/quotepleaseAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /projects/backspin HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-backspin-logo.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/backspinAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-backspin-player.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/backspinAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-backspin-metrics.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/backspinAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-backspin-laptop.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/backspinAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /projects/runsocial HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-runsocial-logo.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/runsocialAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/cover-runsocial.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/runsocialAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/cover-london-marathon-space.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/runsocialAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/runsocial.mp4 HTTP/1.1Range: bytes=0-Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/projects/runsocialGetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/london-marathon.mp4 HTTP/1.1Range: bytes=0-Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/projects/runsocialGetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/runsocial.mp4 HTTP/1.1Range: bytes=0-Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/projects/runsocialGetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/london-marathon.mp4 HTTP/1.1Range: bytes=0-Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/projects/runsocialGetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /projects/tweenbrands-scapenation HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-scapenation-coliseum.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/tweenbrands-scapenationAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-scapenation-downtown.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/tweenbrands-scapenationAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-scapenation-hub.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/tweenbrands-scapenationAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-scapenation-skylinecrest.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/tweenbrands-scapenationAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-scapenation-clocktower.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/tweenbrands-scapenationAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/cover-scapenation.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/tweenbrands-scapenationAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/cover-scapenation-games.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/tweenbrands-scapenationAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/cover-scapenation-gordo.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/tweenbrands-scapenationAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/cover-scapenation-scream.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/tweenbrands-scapenationAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/scapenation-free-games.mp4 HTTP/1.1Range: bytes=0-Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/projects/tweenbrands-scapenationGetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/scapenation-gordo.mp4 HTTP/1.1Range: bytes=0-Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/projects/tweenbrands-scapenationGetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/cover-scapenation-lizard.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/tweenbrands-scapenationAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/scapenation-spot.mp4 HTTP/1.1Range: bytes=0-Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/projects/tweenbrands-scapenationGetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/scapenation-scream.mp4 HTTP/1.1Range: bytes=0-Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/projects/tweenbrands-scapenationGetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/scapenation-lizard.mp4 HTTP/1.1Range: bytes=0-Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/projects/tweenbrands-scapenationGetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /projects/smartfox-server HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-sfs-logo.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/smartfox-serverAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-smartfox-spacerace.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/smartfox-serverAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /projects/adrenalynxl-nba-nhl-nfl HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-panini-adrenalynxl-logo.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nflAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-panini.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nflAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-panini-nhl-logo.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nflAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-panini-nba-logo.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nflAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/client-panini-nfl-logo.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nflAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /img/cover-adrenalynxl.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5Referer: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nflAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /media/panini-adrenalynxl-spot.mp4 HTTP/1.1Range: bytes=0-Accept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoReferer: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nflGetContentFeatures.DLNA.ORG: 1Accept-Language: en-USAccept-Encoding: gzip, deflateHost: mryoung.ytv.comConnection: Keep-Alive

Found strings which match to known social media urls

Source: backspin[1].htm.3.dr	String found in binary or memory: <li><a href="//www.linkedin.com/company/a51-integrated"><span class="large ion-social-linkedin"></span></a></li> equals www.linkedin.com (Linkedin)
Source: smartfox-server[1].htm.3.dr	String found in binary or memory: <p class="flow-text">On top of developing sample applications and tutorials, we&rsquo;ve published numerous White Papers and were asked us to create the <a class="text-orange" href="//www.youtube.com/user/SmartFoxServer">Official SmartFoxServer Tutorials on YouTube</a>.</p> equals www.youtube.com (Youtube)

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: mryoung.ytv.com

Urls found in memory or binary data

Source: 5O3QW89A.htm.3.dr	String found in binary or memory: http://adage.com/article/media-morph/justice-s-scapenation-engaging-tweens-store/134925/
Source: ionicons.min[1].css.3.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: ionicons[1].eot.3.dr	String found in binary or memory: http://fontforge.sf.net)
Source: ionicons[1].eot.3.dr	String found in binary or memory: http://fontforge.sf.net)Created
Source: ionicons[1].eot.3.dr	String found in binary or memory: http://fontforge.sf.net)IoniconsIoniconsMediumMediumFontForge
Source: css[1].css.3.dr	String found in binary or memory: http://fonts.gstatic.com/s/materialicons/v78/flUhRq6tzZclQEJ-Vdg-IuiaDsNa.woff)
Source: css[1].css.3.dr	String found in binary or memory: http://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rg-Vg.woff)
Source: css[1].css.3.dr	String found in binary or memory: http://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN_r8-Vg.woff)
Source: css[1].css.3.dr	String found in binary or memory: http://fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-U1UQ.woff)
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: http://gulfnews.com/business/sme/start-ups-offer-vr-training-for-runners-1.1866852
Source: ionicons.min[1].css.3.dr	String found in binary or memory: http://ionicons.com/
Source: materialize.min[1].js.3.dr	String found in binary or memory: http://materializecss.com)
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: http://mediaincanada.com/2007/01/15/falcon-20070115/
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.yt
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr, ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/0Digital
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/P
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/Root
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr, ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/about
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/aboutZ
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/aboutbout
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/favicon.png
Source: imagestore.dat.3.dr	String found in binary or memory: http://mryoung.ytv.com/favicon.pngP
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr, ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/our-services
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/our-servicesVWe
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/our-servicesh
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr, ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nfl
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/adrenalynxl-nba-nhl-nflBAdrenalynXL
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/backspin
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/backspinenada
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/backspinenadaV
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/cbc-radio-canada
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/cbc-radio-canada0CBC
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr, ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/digthisdata
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/digthisdatax
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/quoteplease
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/quotepleasenada
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/quotepleasenadang.ytv.com/projects/cbc-radio-canada
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/runsocial
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/runsocialenada
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/runsocialenadacts/backspin
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/smartfox-server
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/smartfox-server(SmartFoxServer
Source: ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/smartfox-serverenation
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/tweenbrands-scapenRoot
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr, ~DFFFE0E708E9FBB09D.TMP.2.dr	String found in binary or memory: http://mryoung.ytv.com/projects/tweenbrands-scapenation
Source: {8164E486-77F0-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: http://mryoung.ytv.comRoot
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: http://oldads.playbackmag.com/articles/magazine/20070205/falcon.html
Source: backspin[1].htm.3.dr	String found in binary or memory: http://schema.org/SoftwareApplication
Source: about[1].htm.3.dr	String found in binary or memory: http://smartfoxserver.com
Source: skb1elu[1].js0.3.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001587f
Source: skb1elu[1].js0.3.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000015888
Source: skb1elu[1].js0.3.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001588a
Source: skb1elu[1].js0.3.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001588d
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: http://web.tmxmoney.com/article.php?newsid=26497160&qm_symbol=NWS:US
Source: runsocial[1].htm.3.dr	String found in binary or memory: http://www.bbc.com/sport/athletics/26989649
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: http://www.dmnews.com/agency/tween-brands-creates-interactive-promotion/article/128147/
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: http://www.huffingtonpost.ca/2013/11/04/chris-jericho-wwe-interview_n_4214463.html
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: http://www.huffingtonpost.com/entry/tim-peake-astronaut-london-marathon_us_57109251e4b0060ccda2e5ae
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: http://www.sportscardreport.info/2011/01/2010-11-adrenalyn-nhl-hockey-xl.html
Source: runsocial[1].dat.3.dr, street-view[1].dat.3.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: https://baronmag.ca/2018/12/wayne-helman-president-of-dig-this-data/
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: https://cartt.ca/article/cbc-other-public-broadcasters-unveil-plans-global-content-distribution-mark
Source: digthisdata[1].htm.3.dr	String found in binary or memory: https://digthisdata.com
Source: digthisdata[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/feature-hero.png
Source: digthisdata[1].htm.3.dr, 5O3QW89A.htm.3.dr	String found in binary or memory: https://digthisdata.com/img/hero.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-acehill.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-all-or-nothing.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-amsterdam.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-anderson.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-barnstormer.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-beaus.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-bellcity.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-bigrig.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-bigrock.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-black-creek.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-blackbellows.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-bobcaygeon.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-boldworks.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-brockstreet.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-brunswick.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-calabogie.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-camerons.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-clifford.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-clocktower.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-coffinridge.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-collectivearts.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-collingwood.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-cowbell.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-craftbrandco.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-descendants.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-dixons.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-drinklab.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-dunes-beach.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-duntroon.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-duxbury.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-elora.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-embr.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-equals.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-exchange.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-featherstone.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-fielding.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-flying-monkeys.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-folly-brewpub.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-forkedriver.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-formosa.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-foundersoriginal.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-frankbrewing.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-georgianbay.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-glb.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-glutenberg.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-grb.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-great-cider.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-haliburton.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-henderson.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-heretic.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-hespeler.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-hobbsco.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-hometown.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-iconic.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-ironwood.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-junction56.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-lake-of-the-woods.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-liberty.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-london.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-longslice.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-lostcraft.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-macleans.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-magnotta.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-manitoulin.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-maverick.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-millst.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-mor.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-muddyyork.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-muskoka.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-napanee.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-newontario.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-nickel-brook.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-normanhardie.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-north-american-craft.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-northof7.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-old-flame.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-oldtomorrow.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-partake.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-pei.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-pommies.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-puddicombe.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-railwaycity.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-rainhard.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-rogers.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-rosehall-run.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-royal-canadian-mead.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-royal-city.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-russian-standard.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-sawdust.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-shiny-apple-cider.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-sidelaunch.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-sleeping-giant.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-small-talk.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-sonsofkent.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-spearhead.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-steamwhistle.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-stray-dog.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-trestle.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-unoapp.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-wellington.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-whitewater.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-woodhouse.png
Source: our-services[1].htm.3.dr	String found in binary or memory: https://digthisdata.com/img/slider-zirkova.png
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: https://digthisdata.com/press/digthisdata-acquires-winemetrics
Source: ionicons.min[1].css.3.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: ionicons.min[1].css.3.dr	String found in binary or memory: https://github.com/google/material-design-icons
Source: jquery.validate.min[1].js.3.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: skb1elu[1].js0.3.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: materialize.min[1].js.3.dr	String found in binary or memory: https://raw.githubusercontent.com/Dogfalo/materialize/master/LICENSE)
Source: ionicons.min[1].css.3.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: ionicons.min[1].css.3.dr	String found in binary or memory: https://twitter.com/ionicframework
Source: skb1elu[1].js0.3.dr	String found in binary or memory: https://use.typekit.net/af/36d41c/00000000000000000001587f/27/
Source: skb1elu[1].js0.3.dr	String found in binary or memory: https://use.typekit.net/af/55bf1d/000000000000000000015888/27/
Source: skb1elu[1].js0.3.dr	String found in binary or memory: https://use.typekit.net/af/87ca8a/00000000000000000001588a/27/
Source: skb1elu[1].js0.3.dr	String found in binary or memory: https://use.typekit.net/af/997ade/00000000000000000001588d/27/
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: https://www.infotech.com/research/beer-data-strengthening-relationships-between-retailers-and-suppli
Source: 5O3QW89A.htm.3.dr	String found in binary or memory: https://www.theguardian.com/science/2016/apr/24/runners-high-tim-peake-finishes-london-marathon-in-s

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.200:443 -> 192.168.2.3:49720 version: TLS 1.2

System Summary:

Classification label

Source: classification engine

Classification label: sus21.phis.win@3/201@6/5

Creates files inside the user directory

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Creates temporary files

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF5B9CED1C147E0EC9.TMP

Jump to behavior

Reads ini files

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:1528 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:1528 CREDAT:17410 /prefetch:2			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior