Windows Analysis Report
http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg

Phishing

Source: https://aqfer.lijit.com/samples/empty.js

HTTP Parser: (function(){})()

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=10401728060750FF13A5CAA71E77004B
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=10401728060750FF13A5CAA71E77004B
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.40497007869512736&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060753647&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=10401728060750FF13A5CAA71E77004B
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.40497007869512736&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060753647&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.13922402065348716&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060769303&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=10401728060750FF13A5CAA71E77004B
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.40497007869512736&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060753647&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.6403823838867404&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060777362&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.7304689290372415&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060796059&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.7304689290372415&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060796059&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.6403823838867404&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060777362&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=page_id%3D2&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=17	HTTP Parser: Iframe src: https://www.youtube.com/embed/J1zRwo_-LAk
Source: http://nirothniroth.site/?p=17	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D17&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.6403823838867404&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060777362&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=14	HTTP Parser: Iframe src: https://www.youtube.com/embed/J1zRwo_-LAk?feature=oembed
Source: http://nirothniroth.site/?p=14	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D14&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D17&cc=US&cont=NA&ipaddr=

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Title: Hollywood announced about the Legendary actor Sylvester Stallone, He has been confirm as See more1946_2024.,. - nirothniroth.site does not match URL
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Title: Hollywood announced about the Legendary actor Sylvester Stallone, He has been confirm as See more1946_2024.,. - nirothniroth.site does not match URL
Source: http://nirothniroth.site/?p=22	HTTP Parser: Title: Hollywood announced about the Legendary actor Sylvester Stallone, He has been confirm as See more1946_2024.,. - nirothniroth.site does not match URL
Source: http://nirothniroth.site/?p=17	HTTP Parser: Title: Hollywood Reports Very Sad News About Angelina Jolie, She Is Confirmed AsSee more - nirothniroth.site does not match URL
Source: http://nirothniroth.site/?p=14	HTTP Parser: Title: #1007Hollywood Reports Very Sad News About Angelina Jolie, She Is Confirmed AsSee More #14https://pulors.xyz/?p=31 - nirothniroth.site does not match URL

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Has password / email / username input fields
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Has password / email / username input fields
Source: http://nirothniroth.site/?p=22	HTTP Parser: Has password / email / username input fields
Source: http://nirothniroth.site/?p=17	HTTP Parser: Has password / email / username input fields
Source: http://nirothniroth.site/?p=14	HTTP Parser: Has password / email / username input fields

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=17	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=14	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?page_id=2	HTTP Parser: No favicon
Source: http://nirothniroth.site/?page_id=2	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=17	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=14	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=14	HTTP Parser: No favicon

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=17	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=14	HTTP Parser: No <meta name="copyright".. found

Compliance

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50386 version: TLS 1.2

Networking

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: pulors.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: pulors.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: pulors.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: pulors.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.11.178
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.11.178
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Fri, 04 Oct 2024 16:50:48 GMTcontent-type: text/html; charset=UTF-8vary: Accept-Encodingx-pingback: http://nirothniroth.site/xmlrpc.phplink: <http://nirothniroth.site/index.php?rest_route=/>; rel="https://api.w.org/"link: <http://nirothniroth.site/index.php?rest_route=/wp/v2/posts/22>; rel="alternate"; title="JSON"; type="application/json"link: <http://nirothniroth.site/?p=22>; rel=shortlinkx-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockcache-control: publicreferrer-policy: strict-origin-when-cross-origincontent-encoding: gzipx-cacheable: YESage: 96accept-ranges: bytesx-cache: HITcontent-length: 40992Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd db 72 db 48 b2 28 fa 3c 8a 58 ff 00 a1 77 cb 44 0b a4 00 f0 4e 0a f2 a6 2e b6 d5 96 6c 8d 28 bb 3d a3 d6 52 80 00 48 a2 05 12 34 40 4a 62 8b 8a 58 ff 70 9e 76 c4 39 af 3b e2 7c c7 f9 93 f5 25 27 33 ab 0a 00 49 90 92 2f 3d 3d b3 63 1c 16 58 a8 ca ca ca ca ca ca ca ac 1b 76 37 9d c0 1e 4f 47 ae d4 1f 0f fc bd ff d8 d8 c5 5f c9 b7 86 3d 53 76 87 f9 0f 6d 99 22 5d cb 81 df bf ec 0e dc b1 25 d9 7d 2b 8c dc b1 29 7f b8 78 95 af c9 49 c2 d0 1a b8 a6 7c eb b9 77 a3 20 1c cb 92 1d 0c c7 ee 10 00 ef 3c 67 dc 37 1d f7 d6 b3 dd 3c bd a8 92 37 f4 c6 9e e5 e7 23 db f2 5d 53 67 68 7c 6f 78 23 85 ae 6f ca a3 30 e8 7a be 2b 4b fd d0 ed 9a 72 7f 3c 1e 45 8d 9d 9d de 60 d4 2b 04 61 6f e7 be 3b dc d1 29 d7 7c f1 2f c2 a0 13 8c a3 17 71 e1 2f bc a1 e3 de ab 52 37 f0 fd e0 4e 95 06 d6 7d de 1b 58 3d 37 3f 0a 5d a4 b5 e1 5b 61 cf 65 09 d1 d0 1b 8d dc 71 23 af b3 f7 5b cf 71 83 18 30 af bf 90 76 f6 36 a0 bc cd 7c 5e ba e8 7b 91 14 79 63 57 82 df 60 34 f6 06 de ef ae 23 dd 79 e3 be 34 ee bb d2 df 02 2b 1a 4b ed a3 f7 d2 c8 9f f4 bc a1 74 6b 14 0b 25 29 2f 89 ba 4c 11 a0 60 07 83 9d bb 20 74 a0 90 28 da 61 a0 d1 4e e4 06 3b 52 3e bf 07 65 8d bd b1 ef ee bd 01 f2 a7 77 41 e0 48 d6 70 18 4c 86 36 14 65 75 82 c9 98 ca 3a 71 7b ee d0 b1 c2 a9 64 d9 e3 20 94 da 53 ff d6 8d c6 2e 84 c6 16 d4 7b 08 f5 7b 03 8d 6c 45 52 c7 75 87 c8 9c ae 17 0e 24 2b fa ef ff fa df 52 db 75 a5 41 10 ba 7a bd 54 b9 36 34 a3 04 91 05 15 1f 40 ed d0 0b 83 71 9f 3d 0b 58 dd dd 1d 46 d1 5c 73 d9 d6 30 18 7a d0 94 e9 06 83 3a Data Ascii: rH(<XwDN.l(=RH4@JbXpv9;|%'3I/==cXv7OG_=Svm"]%}+)xI|w <g7<7#]Sgh|ox#o0z+Kr<E`+ao;)|/q/R7N}X=7?][aeq#[q0v6|^{ycW`4#y4+Ktk%)/L` t(aN;R>ewAHpL6eu:q{d S.{{lERu$+RuAzT64@q=XF\s0z:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Wed, 04 Sep 2024 16:49:19 GMTetag: "66d88f8f-1b72b"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: text/cssvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63061accept-ranges: bytesx-cache: HITcontent-length: 14841Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d db 8e e3 38 b2 e0 fb 7e 85 a6 1a 8d 93 ae 4e 65 fb 9e 4e 7b ba 30 d8 03 ec 17 ec 02 67 d1 28 24 64 89 4e 6b 4a b6 3c 92 9c 59 d9 46 9d df da f7 fd b2 e5 4d 12 2f 41 8a b2 a9 aa 9e d9 53 89 ca b4 25 32 22 18 0c 5e 22 18 8c f8 5b bc 8f 8a 12 55 c1 87 ff f5 3f ff 47 b8 fa b0 79 78 3b 85 db 2c 8f bf 84 51 11 ef d3 57 54 5e b6 f9 d7 b0 4c ff 48 8f 2f eb 6d 5e 24 a8 08 f1 93 6f 7a c1 30 29 f2 53 92 bf 1d 83 2c da a2 ec 92 a4 e5 29 8b de d7 b4 94 58 fe 35 aa a2 e2 92 a5 47 14 ee 51 fa b2 af d6 63 ed f5 bd fa 20 48 0f 2f dd a4 d0 a2 0f 51 96 be 1c 63 74 ac 50 71 a9 d0 d7 2a a4 0f d6 ec 89 58 fc 9c a4 79 37 50 52 2a 58 bf ed 51 81 ee 76 e9 4b 1c 9d aa 34 3f 8e 2e 87 a8 78 49 8f b8 74 55 e5 87 f5 04 1d 36 fc 49 95 9f d6 0f 0b 74 d0 80 30 84 07 5c e4 2d 4d aa fd 7a 36 1e 9f be 6e d8 e7 c9 78 fc b3 50 61 7b c6 50 8f cf cf 98 4d 5f 60 12 37 f1 b9 28 f3 62 7d ca 53 d2 ae 4d cd ef f4 48 59 4b c1 6c b4 e6 6f de 30 80 70 5b a0 e8 cb 9a fe 0e c9 03 03 62 67 4e ea 95 0a d2 b1 62 1d fa e0 1b 67 23 5c 73 74 e1 ad 2b a2 24 3d 97 eb 27 fc 0f f3 87 b6 7e 1f 61 d1 5a 1f f3 23 da 9c a2 24 21 ac 88 a3 2c be 7b 58 2e 1f d1 21 f8 25 98 9e be 8e 02 fa 68 f2 30 9b cd 9a 67 8c 05 09 8a f3 22 22 fd 46 61 68 a4 ff 5e 56 ef 19 fa f8 9b 52 f8 73 60 e8 11 15 68 7a c4 ed 4a 2b 0d 6e f9 49 7d f2 b0 8f ca 30 3e 97 58 66 98 14 60 39 fa ca e5 01 24 cd 01 84 89 4a 8b 64 d9 a1 ee f2 63 45 24 0e 99 20 37 05 fa b4 5c 03 45 e9 0b a7 0b 4e 28 ed bd e9 e2 e7 20 0c 5e a3 e2 2e 0c 71 85 90 76 4c c8 2b be 44 a7 fb 80 0c ad d1 c7 87 c7 c5 e8 06 a4 8b b1 88 74 31 76 44 7a 13 ce 47 a9 a1 8f ae 0d 9d de 84 14 f7 fe 65 97 a1 af e1 36 2a d3 92 0a 83 6d c6 29 1f d2 32 7c 45 45 95 62 22 fb 77 21 ee 3d 4f 20 9b 0e 5a 78 a3 b2 e1 ff 23 40 25 81 c8 ba a0 fc c7 39 2a 50 72 0f 8b 7e 67 3d Data Ascii: }8~NeN{0g($dNkJ<YFM/AS%2"^"[U?Gyx;,QWT^LH/m^$oz0)S,)X5GQc H/QctPq*Xy7PR*XQvK4?.xItU6It0\-Mz6nxPa{PM_`7(b}SMHYKlo0p[bgNbg#\st+$='~aZ#$!,{X.!%h0g""Fah^VRs`hzJ+nI}0>Xf`9$JdcE$ 7\EN( ^.qvL+Dt1vDzGe6*
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Fri, 09 Jun 2023 05:49:24 GMTetag: "6482bd64-3509"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63061accept-ranges: bytesx-cache: HITcontent-length: 4872Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 1b 6b 73 db b8 f1 7b 7f 05 8d cb c8 44 04 51 76 72 fd 22 85 d1 38 b1 5d e7 e6 9c 87 9d 6b 3a 23 2b 1e 9a 84 24 c6 14 a1 80 a0 25 9d a5 fe f6 ee 02 7c 4a 94 93 5e fb c5 02 40 60 77 b1 2f ec 2e e0 ee f3 03 eb db a7 94 cb 95 75 19 4e a4 a7 b8 f5 f0 d2 f9 d5 39 b6 d6 96 ed 53 eb c3 9c c7 bf 5d 5b e7 22 8d 03 4f 85 22 b6 bc 38 b0 84 9a 72 69 f9 22 56 32 bc 4b 95 90 09 4c ff f6 1d c1 38 42 4e ba 51 e8 f3 38 e1 d6 f3 ee df 08 2c e4 e3 30 e6 01 71 5d b5 9a 73 31 ce 10 3a 33 83 f0 32 55 bc d5 b2 77 07 dd 83 23 ca c6 69 ec 23 5e 5b d1 47 92 02 cc 04 70 fa 8a f4 49 fe a5 84 6b 10 b5 5a e6 d7 f1 66 c1 c0 34 ed 21 31 d4 91 51 09 90 d3 47 c9 55 2a 63 4b d9 9c 2d c2 38 10 0b ba a1 3d 22 ee be 71 c0 50 80 9d 89 20 8d 00 ac f9 75 f8 72 2e a4 4a 06 f5 ae ab 6c c9 bf a7 a1 e4 76 8e 8b e6 40 7b 2a db 5d 81 c5 2e a8 48 58 bc b5 b1 fc 93 c5 2b 24 1e bd 72 4b c2 19 f0 62 2c a4 fd e0 49 4b ba dd af f6 4d d0 a6 37 4e f5 a7 cb 62 57 02 6d dc 07 20 eb f5 70 c4 44 de 57 a6 ef b9 c7 7d ef 95 fb b2 ef b5 db f4 31 1c db 6d 31 f4 46 af da 31 fc a5 19 d6 e3 3e 8e c7 7a 5c 94 e3 9d e3 4d 4e d6 c6 4e 9c 71 ec 98 1d 33 4e 37 49 2e c1 7f 72 99 00 b5 2e d1 ea 44 fa 48 ac 72 3f 68 de 3a be e4 30 c5 8e d3 28 a2 fd 62 c9 69 98 78 77 11 ff e8 29 7f ca 93 72 c3 e5 6e b9 7b d4 e7 af 3c 39 49 67 3c 56 89 13 f1 78 a2 a6 7d 0e 5b 50 c3 62 78 c8 47 23 50 9e 0d 2b 20 9f c5 7f 1d 70 c0 23 0e 66 b1 05 bf 02 fc 5d a2 01 1b 1c 81 bb ab 60 07 0a 56 6c 58 ec 80 c5 24 02 55 a9 68 3a 91 98 80 f2 27 ad 16 e8 cd 4b e7 c8 39 22 b4 d5 3a 80 ce df 4d 67 bd ae cd b5 c9 6f 9f 2e df fd e3 ea e4 f3 59 2f 37 dc 97 ce b2 f3 ab b3 b4 ae ce 3e fd f1 ee ea ec 14 14 af a0 ed 8b 27 e3 30 9e 24 5b 28 6b 60 72 c3 9f 47 e9 24 8c ad 48 78 01 0f ac 59 1a a9 70 1e c1 c6 Data Ascii: ks{DQvr"8]k:#+$%|J^@`w/.uN9S]["O"8ri"V2KL8BNQ8,0q]s1:32Uw#i#^[GpIkZf4!1QGU*cK-8="qP ur.Jlv@{*].HX+$rKb,IKM7NbWm pDW}1m1F1>z\MNNq3N7I.r.DHr?h:0(bixw)rn{<9Ig<Vx}[PbxG#P+ p#f]`VlX$Uh:'K9":Mgo.Y/7>'0$[(k`rG$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-23954"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: text/cssvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63061accept-ranges: bytesx-cache: HITcontent-length: 21828Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd 5b 8f e4 38 96 26 f8 de 40 ff 07 df 1a 0c 26 73 36 94 a9 ab c9 2c 0b 58 74 56 56 25 d0 40 2f 76 80 99 7e 18 60 5f 28 89 32 53 b8 4c 52 ea e2 1e 16 83 f9 ef 4b 52 32 77 3b 14 f9 51 f2 ca aa 9e de 89 42 56 b8 bb d9 f9 78 78 e7 e1 e1 b9 fc f8 9f ff 8f 7f fc 87 a7 ff fc f4 6b db 8c 4f 3f bf f2 a1 bd f2 a7 5f 7b ce 9f 0e 3f 04 3f 04 4f d9 ed e9 9f 4a f1 1d 5b be f2 9e 2e e3 d8 0d 3f fd f8 e3 c3 a7 3f e4 ed 55 95 f2 2f 55 ce 9b 01 50 fd 58 cf 14 3f 96 92 c5 77 ff 9c b7 cd f0 d3 d3 2f bf 3c fd e9 bf 3f c5 3f f8 9f 54 3d c4 27 ff f5 9f ff e5 e9 ff f9 f5 5f 9e 44 15 3e 3d fd d2 16 fc a7 a7 ff fb 9f ff db bd fc ef 15 b3 5f da ee d6 57 e7 cb f8 14 fa 61 a8 90 95 2c ef d3 d3 3f 37 f9 0f 92 e4 c7 7f fc 87 1f 4a f6 f4 3f c4 ef 4f b2 22 5e c9 ae 55 7d fb e9 e9 85 f5 df 79 e2 2f 6f 18 6f 35 5f 3e fe f4 f4 07 d2 0b 07 d5 0f 7f f8 fe 8f 6f f0 57 2e d9 e9 f0 4f 4f 27 df ff fe 8f 4f ff f3 1f ff 41 f1 fb a4 fe 1d e6 1f de d0 d6 55 31 ff de 2f 1f f5 fc 3c d5 f7 bf ea e5 c3 5a 16 3d ff be fc f0 c6 4b d5 cc bf 2e 05 78 c5 d4 8e 6d c3 e7 bf b2 e5 c3 ac 67 4d 31 cc ad f4 ae ed 57 af 1d be 78 aa be c3 b5 6d 65 21 e7 9f 9e ce 3d bb 0d 39 ab b9 6a 8d 68 49 f6 5c 8d 2b 2a 26 ba 90 d5 15 1b 78 a1 e8 8a 6a e8 6a f6 d8 61 cb 27 9f 9e aa a6 ae 1a ee 65 75 9b 3f 3f 74 91 ea 91 9f 9e 9a b6 bf b2 fa fd 63 81 af 44 e1 e4 0b 85 bf 2c 5d 1a a8 8f 46 fe 65 14 dd d3 14 bc 9f eb 33 8d ed 7b c7 7a c1 97 87 b1 1c aa af 82 51 c0 af 0f 04 e1 9a 20 24 04 d1 9a 20 22 04 f1 9a 20 26 04 c9 9a 20 21 04 87 35 c1 81 10 a4 6b 82 94 10 1c d7 04 47 42 70 5a 13 9c 08 41 e0 1b 7a ca d7 ba 6a 58 91 f8 3f 1c 42 d9 98 d5 e8 f8 3f 04 cb c7 2f bc 17 ab 8c d5 9e 98 26 e7 46 7e 13 86 b4 fd c6 72 53 4b b1 fe 31 8a 22 6b d1 81 56 f4 70 35 14 7d b4 96 9d 06 b1 bd 6c 3f 89 12 da ed f5 79 dd 67 Data Ascii: [8&@&s6,XtVV%@/v~`_(2SLRKR2w;QBVxxkO?_{??OJ[.??U/UPX?w/<??T='_D>=_Wa,?7J?O"^U}y/oo5_>oW.OO'OAU1/<Z=K.xmgM1Wxme!=9jhI\+*&xjja'eu??tcD,]Fe3{zQ $ " & !5kGBpZAzjX?B?/
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-c6e5"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: text/cssvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63061accept-ranges: bytesx-cache: HITcontent-length: 10076Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d eb 8e db 46 96 f0 6f 1b f0 3b 70 6c 7c 88 ed 11 65 51 12 d5 17 63 82 cd c5 ce 66 90 d8 46 e2 ec 60 31 1b 8c 29 89 92 38 4d 91 5a 92 72 bb 93 0d f0 bd c6 be de 3e c9 9e 53 37 d6 e5 14 49 75 77 66 17 db 4e ec 56 5d 4e 9d aa 3a f7 3a 55 7a f1 fc 0f 8f 1e be df a5 fb 34 78 93 ec d3 cb e0 f5 b1 b8 ba 09 be cc cb ad 2c ff e9 87 6f 2f 83 5d d3 1c ea cb 17 2f ae af af c7 ab 2a db d7 65 d1 60 6d 3d 5e 95 fb 17 eb f2 ba c8 cb 64 5d bf d8 60 f7 70 c9 ba 7f 71 6c 76 65 75 19 7c c5 db 07 0c 5c 2d cb 87 c0 7d f4 f0 eb b4 86 e2 43 93 95 c5 25 00 c8 ea a0 6e 6e f2 ac de 05 49 b1 0e d2 3c dd 26 45 13 b0 2e c1 2e a9 83 65 9a 16 c1 3e 59 a7 c1 75 d6 60 a3 20 dd 1f a0 02 3a 02 06 cb 34 39 36 37 ac eb 26 a9 77 19 16 01 aa db ac d8 b2 c2 ac 09 ae 01 c8 3a ad b3 6d 91 ae 39 0c a3 65 5a d5 41 06 23 64 c5 7a 1c bc fa 98 56 37 65 91 06 2b 18 e7 df 8f d9 ea 2a e7 c0 53 18 10 7e ad d3 26 38 1e 10 bb ac 0a ae d3 65 9d 35 02 2f be ca 08 91 35 2a 37 41 d2 34 55 b2 6a b2 8f 30 8f 72 9f 1e 92 6d 5a 33 58 ab a4 4a 37 c7 1c c0 29 b4 78 3f 58 07 58 a6 71 bb 61 01 4c 32 09 56 79 0a d8 60 4f 40 32 db 27 39 6f ce 96 68 3c c6 4d 08 0e 69 b5 49 57 0d 02 6c b2 22 c1 c5 0d 36 b0 23 29 ce 27 38 54 e5 26 ad 6b 28 84 be c1 6b 3e fb 51 90 67 50 8a 63 8e 02 c0 f4 63 9a cb 05 61 63 f1 22 f8 00 38 ec d2 2a fd 83 46 48 e6 9a e2 40 49 9e 07 fb 72 9d 56 80 e8 fa 63 5a 34 c7 2a 15 20 00 c6 88 d5 37 37 07 58 01 58 19 b9 fe 38 0c df c0 51 70 bd 2b 83 22 05 68 4d 19 ac aa 34 69 d8 a4 6a 86 32 5f 1d 5c 6a 07 53 b6 f6 75 b6 3f e4 29 5f 5b ec 8a 4b be 81 7f 01 07 be e2 e9 06 57 a7 46 d8 fb e4 2a 0d a0 d1 1a f7 7d 93 02 a8 06 d7 0f 96 b8 46 94 01 3b ac 44 f2 61 a3 1e ca ba e1 30 92 aa c9 56 b8 3f c1 b7 9b e0 a6 3c 42 01 0c 49 2c 19 9b 2f 00 2d 80 f8 fe eb ff ff 27 ee a0 dc 9e d5 ae cc 56 Data Ascii: }Fo;pl|eQcfF`1)8MZr>S7IuwfNV]N::Uz4x,o/]/*e`m=^d]`pqlveu|\-}C%nnI<&E..e>Yu` :4967&w:m9eZA#dzV7e+*S~&8e5/5*7A4Uj0rmZ3XJ7)x?XXqaL2Vy`O@2'9oh<MiIWl"6#)'8T&k(k>QgPccac"8*FH@IrVcZ4* 77XX8Qp+"hM4ij2_\jSu?)_[KWF*}
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Mon, 28 Aug 2023 17:14:23 GMTetag: "64ecd5ef-15601"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63061accept-ranges: bytesx-cache: HITcontent-length: 30419Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 79 77 db 46 b2 07 fa ff fb 14 22 c6 a3 01 cc 26 25 3a 93 dc 3b a0 10 1e 47 b6 13 cf 24 71 12 3b db 50 8c 0f 4c b6 24 c4 10 c0 00 a0 96 88 9c cf fe ea 57 bd a0 b1 50 4e e6 dc f7 32 63 11 4b a3 d7 ea ea da eb e8 f1 e0 e0 d7 6f 37 b2 b8 3b b8 fe 68 fc 3f e3 c9 c1 f6 c0 5f 06 07 af d6 32 fb e7 eb 83 17 f9 26 5b c5 55 92 67 07 71 b6 3a c8 ab 4b 59 1c 2c f3 ac 2a 92 77 9b 2a 2f 4a 2a fe eb 6f f8 7c 9c 17 17 47 69 b2 94 59 29 0f 1e 1f fd 3f 83 f3 4d b6 c4 87 be 14 55 70 ef 6d e8 71 49 9f 2d 2b 6f ea e5 ef 7e 95 74 11 45 d5 dd 5a e6 e7 07 57 f9 6a 93 ca c3 c3 3d 2f c6 f2 76 9d 17 55 39 6b de 46 72 bc ca 97 9b 2b 99 55 b3 8a 9a 19 1c 07 61 dd 6a 70 9f 9c fb 83 ba 48 50 5d 16 f9 cd 41 26 6f 0e 9e 17 45 5e f8 9e 1e 77 21 7f db 24 85 2c 0f e2 83 9b 24 5b 51 99 9b a4 ba a4 3b f3 a5 17 4c 0b 59 6d 8a ec 80 5a 09 76 21 ff f5 3d 9a 19 79 9e 64 72 e5 0d 4c 77 d5 f7 33 f5 13 56 97 49 29 6c 87 12 29 64 6b 1e ae e3 e2 20 97 d1 7c 21 8a e8 15 8f 7c 7c 21 ab 6f 8a bc ca 51 e1 ab 73 11 cb 28 97 e3 12 f3 2a 2e 70 79 9e c6 d5 cc 1d a4 ee 99 7e 35 5e c6 69 ca 9d ec 2f 43 4b b7 a4 52 f1 7a 9d de f9 d4 2e 95 14 25 ea 5d 6f ca 4b 51 72 6b d4 79 79 4b 6d 67 d1 fd 4e 24 51 36 ae f2 d7 d4 e1 ec 42 6c 24 dd 5d c6 e5 ab 9b 8c 3a b9 96 45 75 27 f2 68 23 eb 12 71 94 ab 2e a8 e1 04 22 95 a8 e5 3a ea 76 c7 33 8f ea d5 06 04 64 9b ab 77 b2 a8 a7 54 8e b3 7c 25 df d0 0d bd b4 9f 38 af 93 4a 5e ed c4 5d 4f 0b 07 d9 26 4d 07 11 7d 28 a3 88 80 45 2d cb 4e 9c 46 49 0d 16 62 13 dd a3 ae 70 70 2c ca 62 89 9f 8c 26 49 aa 8b af 18 e0 e8 7a 37 35 f5 1f 5c 01 a2 45 16 dc 63 f9 0a 91 d0 14 f8 59 94 6d b7 a7 c1 78 59 c8 b8 92 cf 53 89 aa 7d af 5c 16 c9 1a f0 43 a0 98 8f 2b 79 5b 45 d8 0d e7 04 7d c5 41 92 1d 6c 02 3f 89 aa 79 b1 d8 6e Data Ascii: ywF"&%:;G$q;PL$WPN2cKo7;h?_2&[Ugq:KY,*w*/J*o|GiY)?MUpmqI-+o~tEZWj=/vU9kFr+UajpHP]A&oE^w!$,$[Q;LYmZv!=ydrLw3VI)l)dk |!||!oQs(*.py~5^i/CKRz.%]oKQrkyyKmgN$Q6Bl$]:Eu'h#q.":v3dwT|%8J^]O&M}(E-NFIbpp,b&Iz75\EcYmxYS}\C+y[E}Al
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-b69"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 1055Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 56 4d 6f db 38 10 3d 2b 40 fe c3 f4 24 27 b1 e5 ee b9 eb 02 49 37 d9 2d 90 6d 0f c9 ad 28 52 46 1a d9 dc c8 94 97 a4 e2 1a 0b ff f7 9d e1 87 44 c7 76 d0 f4 52 db 9c 99 f7 f8 66 e6 31 d3 f3 f3 d3 13 38 87 1b d9 20 28 f1 2c e7 c2 ca 56 15 ff 98 82 7f 77 67 7f 09 55 35 68 c0 b6 f3 79 23 d5 1c ec 22 8d 85 25 aa 0e ea 56 83 59 8a a6 01 53 6a 44 65 80 b2 00 95 78 e4 d4 fb cb 2b 78 c2 8d 2b 97 64 9a 6e b5 6a b5 75 c9 95 6e 57 55 bb f6 e5 3c fa f4 f4 64 04 75 a7 4a 0e 1e 9d c1 7f a7 27 d9 b3 d0 50 b6 ca 0a a9 50 8f e1 b1 b3 b6 55 63 97 34 06 62 f7 64 c6 20 e9 13 aa 0f a7 27 14 df c7 c2 0c aa b6 ec 28 d0 16 73 b4 d7 0d f2 c7 ab cd e7 6a 04 b9 91 16 27 03 b1 1c ce 28 3b 93 35 8c e0 dd 00 07 9e 42 a6 d1 76 9a eb 67 5b 87 e1 49 10 40 1f 99 20 98 ab cd bd 98 7f 11 4b 24 1c 1f 49 e5 bf bd ff de 23 e4 9d aa b0 a6 b4 2a 87 d9 6c 06 76 b3 c2 b6 0e 57 3b 86 e9 44 ff 05 c4 ae e9 d1 fa bc c2 a0 bd b4 56 4b 82 e0 18 a1 a5 98 e0 cf 15 75 8c 38 8c 21 af 45 63 30 15 61 f2 9b 63 e6 92 cb 46 18 c3 d5 0b 49 f1 3f bf d6 54 81 a4 9b f0 21 e5 44 c2 bb b1 70 31 83 1c fa b0 97 da 15 ad 2a 1b 59 3e d1 8d 5e f4 bb c7 7f 37 4b 6f 7b 88 84 9b 4f 16 b1 e7 90 1d 48 80 c3 65 34 ae 1a 51 b2 1a 10 eb 90 10 41 83 2c d2 7c 8b 70 d9 db b5 ce b6 80 f4 ed 15 f2 4e c6 48 f0 4d d4 ac ee de c8 2c cd d8 72 c3 fc 46 4d a7 f0 27 5a e0 55 67 23 e0 9d 23 d6 7e f2 60 2d ed 42 2a 77 e0 30 28 de 2d 25 d0 bf 30 3f 47 06 55 78 28 0f 70 2d ca 05 58 49 17 16 de 5e 1c 8a 34 e4 14 65 67 b0 02 32 8c c7 a6 d3 1a ab 71 90 c3 1f 31 20 bb c9 08 24 e1 bd 77 46 40 1f 1c 87 82 3e cf ed e2 03 1d fd ee 0c 02 e4 c5 45 1c 15 17 f1 4d 7e 2f 44 55 5d 3f 13 b9 5b 69 2c 92 f8 44 cd 55 ce 23 d0 0d 7f a3 2f a4 4e 10 e7 b5 5c 66 79 3c d5 ef c0 94 4d 38 23 6b bc 43 92 90 d8 6b Data Ascii: VMo8=+@$'I7-m(RFDvRf18 (,VwgU5hy#"%VYSjDex+x+dnjunWU<duJ'PPUc4bd '(sj'(;5Bvg[I@ K$I#*lvW;DVKu8!Ec0acFI?T!Dp1*Y>^7Ko{OHe4QA,|pNHM,rFM'ZUg##~`-B*w0(-%0?GUx(p-XI^4eg2q1 $wF@>EM~/DU]?[i,DU#/N\f
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-2cc"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 424Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 92 dd 6a dc 30 10 85 af bd b0 ef 30 85 90 d8 db 58 4a 7a d7 0d a5 a4 90 d2 85 90 db 5e 94 b6 c8 d6 d8 9e ae 57 5a a4 f1 fe b4 ce bb 57 b6 36 6e 52 08 46 c6 d2 9c 39 f3 1d db 72 b1 98 cf 60 01 9f a9 45 f0 6b da e6 2d 99 75 5e d9 b2 f3 79 45 07 f1 cb 8b 41 30 8a be 60 bb f5 b0 27 6e 40 95 25 7a 4f 05 b5 c4 47 a8 ac 83 35 1e 0b ab 9c 06 6b da 23 74 1e dd b3 ce 7b 54 ce c0 c6 3a 5c 42 c3 bc f5 4b 29 6b 62 41 56 ee be 6a f7 6e 10 c9 f9 2c 85 aa 33 25 93 35 69 06 7f e6 b3 64 a7 1c 90 5f 21 7c 00 99 b2 23 8d 86 fb 8d 27 cc 24 09 46 cf 29 18 b5 a3 5a b1 75 62 98 79 5b 07 05 64 37 f3 59 e8 a6 0a d2 d8 7e 7e 0e 3a 44 da 84 a2 a8 91 ef 5a 1c 1e 3f 1d 57 7a 28 ed c9 68 bb 17 4a eb bb 5d 38 be 27 cf 68 d0 41 64 48 5e 29 a7 70 d1 28 df 94 8d 32 35 5e 5c fe 8f 9e 44 78 1d d0 5b 5b aa a1 22 06 bd f0 5d e1 43 14 53 a7 70 0d d9 e5 28 4d 30 12 45 ee 24 92 bf 09 4b fe f8 76 9b ff be ca df ff cc bf bf 3d 93 a7 cc c1 35 1b af 38 28 71 c8 9d 33 37 e3 e6 f1 64 71 72 0c e3 5f 49 1e 6d 5e 4c 7c ea 99 8c 9f 71 a4 1f 97 aa f7 41 51 72 4f 66 db 71 5f 74 cc d6 f4 8c 07 56 0e 55 76 36 7d 93 93 8f 60 55 3f a8 0d be 84 4d fe 55 8b 95 d1 78 08 88 f9 75 84 9f e8 27 d1 f8 27 a6 d9 94 2d dc c2 ab 56 ad c7 91 7d 38 7a 84 6c 14 fc 05 64 43 67 c5 cc 02 00 00 Data Ascii: uj00XJz^WZW6nRF9r`Ek-u^yEA0`'n@%zOG5k#t{T:\BK)kbAVjn,3%5id_!|#'$F)Zuby[d7Y~~:DZ?Wz(hJ]8'hAdH^)p(25^\Dx[["]CSp(M0E$Kv=58(q37dqr_Im^L|qAQrOfq_tVUv6}`U?MUxu''-V}8zldCg
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Fri, 09 Jun 2023 05:49:24 GMTetag: "6482bd64-3509"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 4872Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 1b 6b 73 db b8 f1 7b 7f 05 8d cb c8 44 04 51 76 72 fd 22 85 d1 38 b1 5d e7 e6 9c 87 9d 6b 3a 23 2b 1e 9a 84 24 c6 14 a1 80 a0 25 9d a5 fe f6 ee 02 7c 4a 94 93 5e fb c5 02 40 60 77 b1 2f ec 2e e0 ee f3 03 eb db a7 94 cb 95 75 19 4e a4 a7 b8 f5 f0 d2 f9 d5 39 b6 d6 96 ed 53 eb c3 9c c7 bf 5d 5b e7 22 8d 03 4f 85 22 b6 bc 38 b0 84 9a 72 69 f9 22 56 32 bc 4b 95 90 09 4c ff f6 1d c1 38 42 4e ba 51 e8 f3 38 e1 d6 f3 ee df 08 2c e4 e3 30 e6 01 71 5d b5 9a 73 31 ce 10 3a 33 83 f0 32 55 bc d5 b2 77 07 dd 83 23 ca c6 69 ec 23 5e 5b d1 47 92 02 cc 04 70 fa 8a f4 49 fe a5 84 6b 10 b5 5a e6 d7 f1 66 c1 c0 34 ed 21 31 d4 91 51 09 90 d3 47 c9 55 2a 63 4b d9 9c 2d c2 38 10 0b ba a1 3d 22 ee be 71 c0 50 80 9d 89 20 8d 00 ac f9 75 f8 72 2e a4 4a 06 f5 ae ab 6c c9 bf a7 a1 e4 76 8e 8b e6 40 7b 2a db 5d 81 c5 2e a8 48 58 bc b5 b1 fc 93 c5 2b 24 1e bd 72 4b c2 19 f0 62 2c a4 fd e0 49 4b ba dd af f6 4d d0 a6 37 4e f5 a7 cb 62 57 02 6d dc 07 20 eb f5 70 c4 44 de 57 a6 ef b9 c7 7d ef 95 fb b2 ef b5 db f4 31 1c db 6d 31 f4 46 af da 31 fc a5 19 d6 e3 3e 8e c7 7a 5c 94 e3 9d e3 4d 4e d6 c6 4e 9c 71 ec 98 1d 33 4e 37 49 2e c1 7f 72 99 00 b5 2e d1 ea 44 fa 48 ac 72 3f 68 de 3a be e4 30 c5 8e d3 28 a2 fd 62 c9 69 98 78 77 11 ff e8 29 7f ca 93 72 c3 e5 6e b9 7b d4 e7 af 3c 39 49 67 3c 56 89 13 f1 78 a2 a6 7d 0e 5b 50 c3 62 78 c8 47 23 50 9e 0d 2b 20 9f c5 7f 1d 70 c0 23 0e 66 b1 05 bf 02 fc 5d a2 01 1b 1c 81 bb ab 60 07 0a 56 6c 58 ec 80 c5 24 02 55 a9 68 3a 91 98 80 f2 27 ad 16 e8 cd 4b e7 c8 39 22 b4 d5 3a 80 ce df 4d 67 bd ae cd b5 c9 6f 9f 2e df fd e3 ea e4 f3 59 2f 37 dc 97 ce b2 f3 ab b3 b4 ae ce 3e fd f1 ee ea ec 14 14 af a0 ed 8b 27 e3 30 9e 24 5b 28 6b 60 72 c3 9f 47 e9 24 8c ad 48 78 01 0f ac 59 1a a9 70 1e c1 c6 Data Ascii: ks{DQvr"8]k:#+$%|J^@`w/.uN9S]["O"8ri"V2KL8BNQ8,0q]s1:32Uw#i#^[GpIkZf4!1QGU*cK-8="qP ur.Jlv@{*].HX+$rKb,IKM7NbWm pDW}1m1F1>z\MNNq3N7I.r.DHr?h:0(bixw)rn{<9Ig<Vx}[PbxG#P+ p#f]`VlX$Uh:'K9":Mgo.Y/7>'0$[(k`rG$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Thu, 27 Jun 2024 13:51:43 GMTetag: "667d6e6f-ba5"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 1351Data Raw: 1f 8b 08 00 00 00 00 00 00 03 85 56 5d 6f db 36 14 7d df af b0 f5 20 90 2d cd 26 d8 9b 5d 22 68 1d 17 33 ba b6 c0 12 a0 03 8a a2 90 c5 6b 9b 88 4c 7a 12 e5 4c b3 fd df 77 28 c9 b1 ec da 5b 10 24 d2 bd 57 e4 fd 38 e7 90 6f 5e f5 7b 8f 4b 53 f4 e6 26 a3 1e fe 27 a5 77 83 05 59 ca 13 4f ba f7 ea cd 2f cf c6 6a f7 2c 13 ad c7 6e b5 22 eb d5 bc b4 a9 37 ce b2 0d df 6e 92 bc 37 15 63 b1 14 13 b5 91 da a5 65 08 11 33 b5 4d 9b e8 3f 68 9d 55 e3 2c 29 8a 61 d4 9a 06 79 b0 0d 32 63 9f 22 d1 0d 7b 34 3e a3 a9 1e 46 4d 80 0f af 88 48 6c 4a 59 1d 10 7c cd eb e0 3f d6 fa e0 f2 55 1d d9 bc ce f1 1a 09 4f ab b5 cb 93 bc 3a 78 9f d7 83 60 1b 04 f7 40 9b 4d 24 d6 49 8e f0 a9 fe 60 28 d3 9d 05 7e 34 0e 04 b8 e2 a2 1b e6 1f d3 fb 68 2f 08 3d f8 54 fa 24 74 e7 cb ac a0 7c 43 f9 6e b7 91 5f 69 f6 d1 f8 4b 9e 4f ee 9f 73 b3 c8 55 f4 57 49 79 f5 40 19 a5 de e5 91 b1 bd 49 1c 47 18 c1 64 83 0d 7f 37 85 0f 13 0a f6 8d b0 aa df 9f bc 74 7e 92 51 f8 27 75 e2 93 82 fc e8 30 ab 9e 67 7c ab 19 17 14 c7 96 9e 7b c4 1c 97 ae d9 91 4d e4 cc e9 4a 6c d3 a5 c9 74 58 7d d8 bf 11 45 39 f3 39 11 1e f7 7c ff b2 8c 66 c4 b7 66 ce f2 38 66 53 b5 60 33 79 32 1e 2e c6 8d b1 3b 09 2e a6 9c 6f a7 f2 3c 7f 16 79 57 a6 cb c2 27 39 9a 9b 21 ec 42 48 9a 99 f4 29 78 bb a5 34 39 30 92 2b f2 c9 47 aa 76 3b 92 a9 cf 33 3c f2 38 be fd 55 29 45 f2 89 aa b1 d3 c4 73 f2 65 6e 7b 63 99 d3 ca 6d e8 6c 7d 44 01 de 16 00 41 6f e4 3a a7 e0 be a7 79 52 66 68 99 18 4b f4 61 65 bc ac f3 80 a1 7f bb 1f c7 f1 f8 42 a6 9d 95 46 00 15 0b d4 b0 42 1f e9 42 0d 5d bc 7a e9 cf 91 1c 23 cc 05 35 84 01 7c 46 d2 c5 6e c7 48 4d f8 08 7f e4 82 0e 63 2d de 37 d1 9f 93 15 dd d1 15 07 f3 7c 48 f2 04 41 ef b2 8c 45 32 7a 8d cc da 6e d0 1e e9 08 a7 6e 84 51 5a 66 64 17 7e 39 72 6f cd c8 bd 7e cd 99 55 fa 9b fb Data Ascii: V]o6} -&]"h3kLzLw([$W8o^{KS&'wYO/j,n"7n7ce3M?hU,)ay2c"{4>FMHlJY|?UO:x`@M$I`(~4h/=T$t|Cn_iKOsUWIy@IGd7t~Q'u0g|{MJltX}E99|ff8fS`3y2.;.o<yW'9!BH)x490+Gv;3<8U)Esen{cml}DAo:yRfhKaeBFBB]z#5|FnHMc-7|HAE2znnQZf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-99c"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 670Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 55 4d 8f 9b 30 10 bd af b4 ff 61 ca 46 8b 91 8a db ad 7a 69 13 72 d9 de 7a aa b4 f7 95 03 66 71 43 00 d9 26 51 5a e5 bf 77 0c 01 8c 49 56 69 56 6b 29 22 8c c7 f3 f1 de f3 f0 fb 57 cd e5 9e 24 65 5c 6f 78 a1 03 2a 39 4b f6 24 ad 8b 58 8b b2 20 b3 00 fe de de dc de 00 ae 2d 93 a0 62 59 e6 39 44 30 23 3b 51 24 e5 2e a0 ad e9 a9 ac 48 30 07 70 5d eb aa 71 f6 e9 8a c5 6b 5d ea b2 f2 83 f9 e0 84 49 eb 67 5d be bc e4 fc e8 67 2c 61 6b 19 79 16 6c fb 6c f6 3a 37 26 8a 10 6d e2 85 99 42 a1 ce 29 be 85 c6 a3 39 d6 1e 74 ab 1c 1a c3 be 8c 43 eb f6 9f dd 99 25 52 20 47 f7 25 3c 34 28 81 b5 66 c4 bb db 30 a5 33 84 d3 0b 28 4b 92 c7 9c 29 45 3c 53 a4 ca a4 28 d6 5e d7 9d 59 87 e1 2f cf 15 77 c3 b9 f1 24 df 94 5b 7e 51 c8 c3 80 86 05 36 8d 73 11 af 2d 38 ac 84 1d d2 54 e5 22 e1 4f 8d 3f b1 23 cf 88 ce 84 0a 68 1b aa ad c2 67 18 68 3b 50 76 b0 49 98 d2 d5 93 05 2d e1 42 f3 4d 98 31 15 c6 99 c8 13 c9 0b 44 95 f9 08 5c aa b9 24 26 c4 62 55 6b 8d 27 63 93 2e f2 12 59 56 48 50 71 94 8a b7 5c 88 6e 2b 65 90 b2 90 15 68 0e 8d 0b ee 7d 12 f8 6b 03 2c fd 00 46 b5 b5 66 ea 04 c4 dc 2e 44 36 29 97 40 60 b9 55 0c 5b d2 24 a0 29 ca 0a e1 50 f5 ea 28 55 b4 48 65 76 4e 81 7d 04 b1 2b 56 a4 c4 52 e6 4e 24 3a c3 aa 16 f0 f0 f9 cb 57 70 ca f3 ef 2a 29 36 4c ee 87 3c 98 d9 cb 05 aa 07 ab 35 19 57 c6 02 fe 9a ef 4d df fe 47 e8 5b e5 13 3d 9b d4 1f 38 55 99 48 f5 4f be 87 fb 7b e0 74 97 89 38 83 28 8a e0 1b 4c 4e 34 52 a6 95 e4 5b ec fc 07 4f 59 9d eb 91 8a ec 5a 3b 69 fb 3d 42 a3 31 40 53 9c 4f 6a 72 da ba 34 87 1e b2 f6 e1 5e a2 d7 01 a9 8b 06 8b 1e 0a 2b 98 3b 47 24 57 e2 0f 3f a3 8a cb 09 7a 17 92 ae 27 ea 62 b2 de 46 98 43 da 88 38 67 ef d4 14 bc 8e 44 2b b0 3b 94 46 25 23 a4 27 60 06 07 67 f3 99 d0 6c 65 a0 c5 15 21 6a 78 e6 b1 Data Ascii: UM0aFzirzfqC&QZwIViVk)"W$e\ox*9K$X -bY9D0#;Q$.H0p]qk]Ig]g,akyll:7&mB)9tC%R G%<4(f03(K)E<S(^Y/w$[~Q6s-8T"O?#hgh;PvI-BM1D\$&bUk'c.YVHPq\n+eh}k,Ff.D6)@`U[$)P(UHevN}+VRN$:Wp*)6L<5WMG[=8UHO{t8(LN4R[OYZ;i=B1@SOjr4^+;G$W?z'bFC8gD+;F%#
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Mon, 28 Aug 2023 17:14:23 GMTetag: "64ecd5ef-15601"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 30419Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 79 77 db 46 b2 07 fa ff fb 14 22 c6 a3 01 cc 26 25 3a 93 dc 3b a0 10 1e 47 b6 13 cf 24 71 12 3b db 50 8c 0f 4c b6 24 c4 10 c0 00 a0 96 88 9c cf fe ea 57 bd a0 b1 50 4e e6 dc f7 32 63 11 4b a3 d7 ea ea da eb e8 f1 e0 e0 d7 6f 37 b2 b8 3b b8 fe 68 fc 3f e3 c9 c1 f6 c0 5f 06 07 af d6 32 fb e7 eb 83 17 f9 26 5b c5 55 92 67 07 71 b6 3a c8 ab 4b 59 1c 2c f3 ac 2a 92 77 9b 2a 2f 4a 2a fe eb 6f f8 7c 9c 17 17 47 69 b2 94 59 29 0f 1e 1f fd 3f 83 f3 4d b6 c4 87 be 14 55 70 ef 6d e8 71 49 9f 2d 2b 6f ea e5 ef 7e 95 74 11 45 d5 dd 5a e6 e7 07 57 f9 6a 93 ca c3 c3 3d 2f c6 f2 76 9d 17 55 39 6b de 46 72 bc ca 97 9b 2b 99 55 b3 8a 9a 19 1c 07 61 dd 6a 70 9f 9c fb 83 ba 48 50 5d 16 f9 cd 41 26 6f 0e 9e 17 45 5e f8 9e 1e 77 21 7f db 24 85 2c 0f e2 83 9b 24 5b 51 99 9b a4 ba a4 3b f3 a5 17 4c 0b 59 6d 8a ec 80 5a 09 76 21 ff f5 3d 9a 19 79 9e 64 72 e5 0d 4c 77 d5 f7 33 f5 13 56 97 49 29 6c 87 12 29 64 6b 1e ae e3 e2 20 97 d1 7c 21 8a e8 15 8f 7c 7c 21 ab 6f 8a bc ca 51 e1 ab 73 11 cb 28 97 e3 12 f3 2a 2e 70 79 9e c6 d5 cc 1d a4 ee 99 7e 35 5e c6 69 ca 9d ec 2f 43 4b b7 a4 52 f1 7a 9d de f9 d4 2e 95 14 25 ea 5d 6f ca 4b 51 72 6b d4 79 79 4b 6d 67 d1 fd 4e 24 51 36 ae f2 d7 d4 e1 ec 42 6c 24 dd 5d c6 e5 ab 9b 8c 3a b9 96 45 75 27 f2 68 23 eb 12 71 94 ab 2e a8 e1 04 22 95 a8 e5 3a ea 76 c7 33 8f ea d5 06 04 64 9b ab 77 b2 a8 a7 54 8e b3 7c 25 df d0 0d bd b4 9f 38 af 93 4a 5e ed c4 5d 4f 0b 07 d9 26 4d 07 11 7d 28 a3 88 80 45 2d cb 4e 9c 46 49 0d 16 62 13 dd a3 ae 70 70 2c ca 62 89 9f 8c 26 49 aa 8b af 18 e0 e8 7a 37 35 f5 1f 5c 01 a2 45 16 dc 63 f9 0a 91 d0 14 f8 59 94 6d b7 a7 c1 78 59 c8 b8 92 cf 53 89 aa 7d af 5c 16 c9 1a f0 43 a0 98 8f 2b 79 5b 45 d8 0d e7 04 7d c5 41 92 1d 6c 02 3f 89 aa 79 b1 d8 6e Data Ascii: ywF"&%:;G$q;PL$WPN2cKo7;h?_2&[Ugq:KY,*w*/J*o|GiY)?MUpmqI-+o~tEZWj=/vU9kFr+UajpHP]A&oE^w!$,$[Q;LYmZv!=ydrLw3VI)l)dk |!||!oQs(*.py~5^i/CKRz.%]oKQrkyyKmgN$Q6Bl$]:Eu'h#q.":v3dwT|%8J^]O&M}(E-NFIbpp,b&Iz75\EcYmxYS}\C+y[E}Al
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-2cc"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 424Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 92 dd 6a dc 30 10 85 af bd b0 ef 30 85 90 d8 db 58 4a 7a d7 0d a5 a4 90 d2 85 90 db 5e 94 b6 c8 d6 d8 9e ae 57 5a a4 f1 fe b4 ce bb 57 b6 36 6e 52 08 46 c6 d2 9c 39 f3 1d db 72 b1 98 cf 60 01 9f a9 45 f0 6b da e6 2d 99 75 5e d9 b2 f3 79 45 07 f1 cb 8b 41 30 8a be 60 bb f5 b0 27 6e 40 95 25 7a 4f 05 b5 c4 47 a8 ac 83 35 1e 0b ab 9c 06 6b da 23 74 1e dd b3 ce 7b 54 ce c0 c6 3a 5c 42 c3 bc f5 4b 29 6b 62 41 56 ee be 6a f7 6e 10 c9 f9 2c 85 aa 33 25 93 35 69 06 7f e6 b3 64 a7 1c 90 5f 21 7c 00 99 b2 23 8d 86 fb 8d 27 cc 24 09 46 cf 29 18 b5 a3 5a b1 75 62 98 79 5b 07 05 64 37 f3 59 e8 a6 0a d2 d8 7e 7e 0e 3a 44 da 84 a2 a8 91 ef 5a 1c 1e 3f 1d 57 7a 28 ed c9 68 bb 17 4a eb bb 5d 38 be 27 cf 68 d0 41 64 48 5e 29 a7 70 d1 28 df 94 8d 32 35 5e 5c fe 8f 9e 44 78 1d d0 5b 5b aa a1 22 06 bd f0 5d e1 43 14 53 a7 70 0d d9 e5 28 4d 30 12 45 ee 24 92 bf 09 4b fe f8 76 9b ff be ca df ff cc bf bf 3d 93 a7 cc c1 35 1b af 38 28 71 c8 9d 33 37 e3 e6 f1 64 71 72 0c e3 5f 49 1e 6d 5e 4c 7c ea 99 8c 9f 71 a4 1f 97 aa f7 41 51 72 4f 66 db 71 5f 74 cc d6 f4 8c 07 56 0e 55 76 36 7d 93 93 8f 60 55 3f a8 0d be 84 4d fe 55 8b 95 d1 78 08 88 f9 75 84 9f e8 27 d1 f8 27 a6 d9 94 2d dc c2 ab 56 ad c7 91 7d 38 7a 84 6c 14 fc 05 64 43 67 c5 cc 02 00 00 Data Ascii: uj00XJz^WZW6nRF9r`Ek-u^yEA0`'n@%zOG5k#t{T:\BK)kbAVjn,3%5id_!|#'$F)Zuby[d7Y~~:DZ?Wz(hJ]8'hAdH^)p(25^\Dx[["]CSp(M0E$Kv=58(q37dqr_Im^L|qAQrOfq_tVUv6}`U?MUxu''-V}8zldCg
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-b69"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 1055Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 56 4d 6f db 38 10 3d 2b 40 fe c3 f4 24 27 b1 e5 ee b9 eb 02 49 37 d9 2d 90 6d 0f c9 ad 28 52 46 1a d9 dc c8 94 97 a4 e2 1a 0b ff f7 9d e1 87 44 c7 76 d0 f4 52 db 9c 99 f7 f8 66 e6 31 d3 f3 f3 d3 13 38 87 1b d9 20 28 f1 2c e7 c2 ca 56 15 ff 98 82 7f 77 67 7f 09 55 35 68 c0 b6 f3 79 23 d5 1c ec 22 8d 85 25 aa 0e ea 56 83 59 8a a6 01 53 6a 44 65 80 b2 00 95 78 e4 d4 fb cb 2b 78 c2 8d 2b 97 64 9a 6e b5 6a b5 75 c9 95 6e 57 55 bb f6 e5 3c fa f4 f4 64 04 75 a7 4a 0e 1e 9d c1 7f a7 27 d9 b3 d0 50 b6 ca 0a a9 50 8f e1 b1 b3 b6 55 63 97 34 06 62 f7 64 c6 20 e9 13 aa 0f a7 27 14 df c7 c2 0c aa b6 ec 28 d0 16 73 b4 d7 0d f2 c7 ab cd e7 6a 04 b9 91 16 27 03 b1 1c ce 28 3b 93 35 8c e0 dd 00 07 9e 42 a6 d1 76 9a eb 67 5b 87 e1 49 10 40 1f 99 20 98 ab cd bd 98 7f 11 4b 24 1c 1f 49 e5 bf bd ff de 23 e4 9d aa b0 a6 b4 2a 87 d9 6c 06 76 b3 c2 b6 0e 57 3b 86 e9 44 ff 05 c4 ae e9 d1 fa bc c2 a0 bd b4 56 4b 82 e0 18 a1 a5 98 e0 cf 15 75 8c 38 8c 21 af 45 63 30 15 61 f2 9b 63 e6 92 cb 46 18 c3 d5 0b 49 f1 3f bf d6 54 81 a4 9b f0 21 e5 44 c2 bb b1 70 31 83 1c fa b0 97 da 15 ad 2a 1b 59 3e d1 8d 5e f4 bb c7 7f 37 4b 6f 7b 88 84 9b 4f 16 b1 e7 90 1d 48 80 c3 65 34 ae 1a 51 b2 1a 10 eb 90 10 41 83 2c d2 7c 8b 70 d9 db b5 ce b6 80 f4 ed 15 f2 4e c6 48 f0 4d d4 ac ee de c8 2c cd d8 72 c3 fc 46 4d a7 f0 27 5a e0 55 67 23 e0 9d 23 d6 7e f2 60 2d ed 42 2a 77 e0 30 28 de 2d 25 d0 bf 30 3f 47 06 55 78 28 0f 70 2d ca 05 58 49 17 16 de 5e 1c 8a 34 e4 14 65 67 b0 02 32 8c c7 a6 d3 1a ab 71 90 c3 1f 31 20 bb c9 08 24 e1 bd 77 46 40 1f 1c 87 82 3e cf ed e2 03 1d fd ee 0c 02 e4 c5 45 1c 15 17 f1 4d 7e 2f 44 55 5d 3f 13 b9 5b 69 2c 92 f8 44 cd 55 ce 23 d0 0d 7f a3 2f a4 4e 10 e7 b5 5c 66 79 3c d5 ef c0 94 4d 38 23 6b bc 43 92 90 d8 6b Data Ascii: VMo8=+@$'I7-m(RFDvRf18 (,VwgU5hy#"%VYSjDex+x+dnjunWU<duJ'PPUc4bd '(sj'(;5Bvg[I@ K$I#*lvW;DVKu8!Ec0acFI?T!Dp1*Y>^7Ko{OHe4QA,|pNHM,rFM'ZUg##~`-B*w0(-%0?GUx(p-XI^4eg2q1 $wF@>EM~/DU]?[i,DU#/N\f
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-99c"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63063accept-ranges: bytesx-cache: HITcontent-length: 670Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 55 4d 8f 9b 30 10 bd af b4 ff 61 ca 46 8b 91 8a db ad 7a 69 13 72 d9 de 7a aa b4 f7 95 03 66 71 43 00 d9 26 51 5a e5 bf 77 0c 01 8c 49 56 69 56 6b 29 22 8c c7 f3 f1 de f3 f0 fb 57 cd e5 9e 24 65 5c 6f 78 a1 03 2a 39 4b f6 24 ad 8b 58 8b b2 20 b3 00 fe de de dc de 00 ae 2d 93 a0 62 59 e6 39 44 30 23 3b 51 24 e5 2e a0 ad e9 a9 ac 48 30 07 70 5d eb aa 71 f6 e9 8a c5 6b 5d ea b2 f2 83 f9 e0 84 49 eb 67 5d be bc e4 fc e8 67 2c 61 6b 19 79 16 6c fb 6c f6 3a 37 26 8a 10 6d e2 85 99 42 a1 ce 29 be 85 c6 a3 39 d6 1e 74 ab 1c 1a c3 be 8c 43 eb f6 9f dd 99 25 52 20 47 f7 25 3c 34 28 81 b5 66 c4 bb db 30 a5 33 84 d3 0b 28 4b 92 c7 9c 29 45 3c 53 a4 ca a4 28 d6 5e d7 9d 59 87 e1 2f cf 15 77 c3 b9 f1 24 df 94 5b 7e 51 c8 c3 80 86 05 36 8d 73 11 af 2d 38 ac 84 1d d2 54 e5 22 e1 4f 8d 3f b1 23 cf 88 ce 84 0a 68 1b aa ad c2 67 18 68 3b 50 76 b0 49 98 d2 d5 93 05 2d e1 42 f3 4d 98 31 15 c6 99 c8 13 c9 0b 44 95 f9 08 5c aa b9 24 26 c4 62 55 6b 8d 27 63 93 2e f2 12 59 56 48 50 71 94 8a b7 5c 88 6e 2b 65 90 b2 90 15 68 0e 8d 0b ee 7d 12 f8 6b 03 2c fd 00 46 b5 b5 66 ea 04 c4 dc 2e 44 36 29 97 40 60 b9 55 0c 5b d2 24 a0 29 ca 0a e1 50 f5 ea 28 55 b4 48 65 76 4e 81 7d 04 b1 2b 56 a4 c4 52 e6 4e 24 3a c3 aa 16 f0 f0 f9 cb 57 70 ca f3 ef 2a 29 36 4c ee 87 3c 98 d9 cb 05 aa 07 ab 35 19 57 c6 02 fe 9a ef 4d df fe 47 e8 5b e5 13 3d 9b d4 1f 38 55 99 48 f5 4f be 87 fb 7b e0 74 97 89 38 83 28 8a e0 1b 4c 4e 34 52 a6 95 e4 5b ec fc 07 4f 59 9d eb 91 8a ec 5a 3b 69 fb 3d 42 a3 31 40 53 9c 4f 6a 72 da ba 34 87 1e b2 f6 e1 5e a2 d7 01 a9 8b 06 8b 1e 0a 2b 98 3b 47 24 57 e2 0f 3f a3 8a cb 09 7a 17 92 ae 27 ea 62 b2 de 46 98 43 da 88 38 67 ef d4 14 bc 8e 44 2b b0 3b 94 46 25 23 a4 27 60 06 07 67 f3 99 d0 6c 65 a0 c5 15 21 6a 78 e6 b1 Data Ascii: UM0aFzirzfqC&QZwIViVk)"W$e\ox*9K$X -bY9D0#;Q$.H0p]qk]Ig]g,akyll:7&mB)9tC%R G%<4(f03(K)E<S(^Y/w$[~Q6s-8T"O?#hgh;PvI-BM1D\$&bUk'c.YVHPq\n+eh}k,Ff.D6)@`U[$)P(UHevN}+VRN$:Wp*)6L<5WMG[=8UHO{t8(LN4R[OYZ;i=B1@SOjr4^+;G$W?z'bFC8gD+;F%#
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Thu, 27 Jun 2024 13:51:43 GMTetag: "667d6e6f-ba5"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63063accept-ranges: bytesx-cache: HITcontent-length: 1351Data Raw: 1f 8b 08 00 00 00 00 00 00 03 85 56 5d 6f db 36 14 7d df af b0 f5 20 90 2d cd 26 d8 9b 5d 22 68 1d 17 33 ba b6 c0 12 a0 03 8a a2 90 c5 6b 9b 88 4c 7a 12 e5 4c b3 fd df 77 28 c9 b1 ec da 5b 10 24 d2 bd 57 e4 fd 38 e7 90 6f 5e f5 7b 8f 4b 53 f4 e6 26 a3 1e fe 27 a5 77 83 05 59 ca 13 4f ba f7 ea cd 2f cf c6 6a f7 2c 13 ad c7 6e b5 22 eb d5 bc b4 a9 37 ce b2 0d df 6e 92 bc 37 15 63 b1 14 13 b5 91 da a5 65 08 11 33 b5 4d 9b e8 3f 68 9d 55 e3 2c 29 8a 61 d4 9a 06 79 b0 0d 32 63 9f 22 d1 0d 7b 34 3e a3 a9 1e 46 4d 80 0f af 88 48 6c 4a 59 1d 10 7c cd eb e0 3f d6 fa e0 f2 55 1d d9 bc ce f1 1a 09 4f ab b5 cb 93 bc 3a 78 9f d7 83 60 1b 04 f7 40 9b 4d 24 d6 49 8e f0 a9 fe 60 28 d3 9d 05 7e 34 0e 04 b8 e2 a2 1b e6 1f d3 fb 68 2f 08 3d f8 54 fa 24 74 e7 cb ac a0 7c 43 f9 6e b7 91 5f 69 f6 d1 f8 4b 9e 4f ee 9f 73 b3 c8 55 f4 57 49 79 f5 40 19 a5 de e5 91 b1 bd 49 1c 47 18 c1 64 83 0d 7f 37 85 0f 13 0a f6 8d b0 aa df 9f bc 74 7e 92 51 f8 27 75 e2 93 82 fc e8 30 ab 9e 67 7c ab 19 17 14 c7 96 9e 7b c4 1c 97 ae d9 91 4d e4 cc e9 4a 6c d3 a5 c9 74 58 7d d8 bf 11 45 39 f3 39 11 1e f7 7c ff b2 8c 66 c4 b7 66 ce f2 38 66 53 b5 60 33 79 32 1e 2e c6 8d b1 3b 09 2e a6 9c 6f a7 f2 3c 7f 16 79 57 a6 cb c2 27 39 9a 9b 21 ec 42 48 9a 99 f4 29 78 bb a5 34 39 30 92 2b f2 c9 47 aa 76 3b 92 a9 cf 33 3c f2 38 be fd 55 29 45 f2 89 aa b1 d3 c4 73 f2 65 6e 7b 63 99 d3 ca 6d e8 6c 7d 44 01 de 16 00 41 6f e4 3a a7 e0 be a7 79 52 66 68 99 18 4b f4 61 65 bc ac f3 80 a1 7f bb 1f c7 f1 f8 42 a6 9d 95 46 00 15 0b d4 b0 42 1f e9 42 0d 5d bc 7a e9 cf 91 1c 23 cc 05 35 84 01 7c 46 d2 c5 6e c7 48 4d f8 08 7f e4 82 0e 63 2d de 37 d1 9f 93 15 dd d1 15 07 f3 7c 48 f2 04 41 ef b2 8c 45 32 7a 8d cc da 6e d0 1e e9 08 a7 6e 84 51 5a 66 64 17 7e 39 72 6f cd c8 bd 7e cd 99 55 fa 9b fb Data Ascii: V]o6} -&]"h3kLzLw([$W8o^{KS&'wYO/j,n"7n7ce3M?hU,)ay2c"{4>FMHlJY|?UO:x`@M$I`(~4h/=T$t|Cn_iKOsUWIy@IGd7t~Q'u0g|{MJltX}E99|ff8fS`3y2.;.o<yW'9!BH)x490+Gv;3<8U)Esen{cml}DAo:yRfhKaeBFBB]z#5|FnHMc-7|HAE2znnQZf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:37:47 GMTlast-modified: Thu, 27 Jun 2024 13:51:43 GMTetag: "667d6e6f-4926"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 62082accept-ranges: bytesx-cache: HITcontent-length: 5056Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 3c 6b 77 a3 38 b2 df f7 57 24 cc 1e 37 4c 30 e6 61 83 71 c2 64 3b e9 ce 9c 39 77 e7 71 b6 7b e7 7e 48 b2 f7 08 49 38 ee 75 20 17 43 27 bd b1 ff fb 96 4a 80 85 5f 69 bb 33 f3 c1 85 d0 a3 aa 54 2a 55 95 e4 53 f4 be 3f 3e fa 78 37 99 1d 25 93 29 3f 82 27 29 8b ac 3b e6 29 cf 49 c1 d9 d1 f7 bd bf f4 7a 47 1f b2 32 a7 7c 74 f4 f8 d0 9d a4 74 5a 32 3e eb 7d 9a f5 8a 47 7e 9f 7d 9a 58 f7 93 d4 fa 34 fb cb 67 92 1f 55 55 51 52 a6 b4 98 64 a9 6e 3c 6b e5 8c 1f cd 8a 7c 42 0b ed 54 f4 b9 8b 9e 63 32 e3 23 ed ae 28 1e 66 a3 5e 8f 32 31 9e f1 e9 e4 73 6e a5 bc e8 8d ef 7a 9f 18 a7 ff e6 ac a6 f1 37 67 60 d9 96 d7 23 b3 19 2f 66 3d cd e4 4f c5 48 b3 1e d2 b1 66 ce 26 ff 01 64 81 fb 14 b8 9a 49 a7 d0 e5 17 72 0f 35 38 10 6a b2 f4 33 cf 8b d1 73 92 67 f7 97 19 e3 bf 65 93 b4 18 35 1c 32 e3 99 45 9a 60 10 90 45 51 f1 e5 81 67 c9 11 3b 7f 20 f9 8c ff 94 16 3a 33 1d df 18 b1 d3 49 a2 b3 33 7f 30 f0 7c 23 e7 45 99 a7 47 1c 06 9f 36 e5 c1 c0 0d fd 13 5d 67 dd 48 f6 fa e1 07 c7 36 cc 81 ef b9 f6 89 ee d8 ae d7 61 86 b1 30 8b 6c c9 45 b6 30 33 90 75 9e e5 23 45 64 05 ac 88 05 f4 79 5a fc 02 5d 3b 9d 95 0a 2b e7 0f 53 42 f9 e5 dd 64 ca f4 27 1d 9b c9 b4 30 8f 1d c3 14 2f 40 05 d9 57 66 69 96 c6 73 d9 e9 68 75 8d 76 5c 4f b5 9c cf f5 32 7a a6 64 3a 8d 09 fd f7 a8 5c 34 93 ba b3 58 f6 4b 56 fc 26 70 45 a5 f2 62 ea 1b 24 a6 10 23 c6 73 85 42 bc a9 b2 16 1a 50 9a 89 49 23 66 f2 e8 17 a8 32 e3 88 58 35 75 9d c3 58 21 6a 98 75 6c 3c 27 59 ae 27 47 93 f4 88 46 da d9 e4 7e 7c a4 59 b0 9e 94 14 fa 1b 5c e9 48 7b 63 c2 e0 7a d1 cd 37 da d1 1b f3 0d cb c9 78 4c e2 29 8f b4 84 4c 67 1c 2b 41 3e a2 37 83 3e f0 76 34 cb a9 78 8d c5 ab 61 96 c0 02 29 60 46 71 59 f0 19 b0 cc 0d a3 b4 ee c8 ec d7 c7 f4 b7 3c 7b 00 05 fa a2 27 46 a7 Data Ascii: <kw8W$7L0aqd;9wq{~HI8u C'J_i3T*US?>x7%)?');)IzG2|ttZ2>}G~}X4gUUQRdn<k|BTc2#(f^21snz7g`#/f=OHf&dIr58j3sge52E`EQg; :3I30|#EG6]gH6a0lE03u#EdyZ];+SBd'0/@Wfishuv\O2zd:\4XKV&pEb$#sBPI#f2X5uX!jul<'Y'GF~|Y\H{cz7xL)Lg+A>7>v4xa)`FqY
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:37:47 GMTlast-modified: Thu, 27 Jun 2024 13:51:43 GMTetag: "667d6e6f-4926"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 62083accept-ranges: bytesx-cache: HITcontent-length: 5056Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 3c 6b 77 a3 38 b2 df f7 57 24 cc 1e 37 4c 30 e6 61 83 71 c2 64 3b e9 ce 9c 39 77 e7 71 b6 7b e7 7e 48 b2 f7 08 49 38 ee 75 20 17 43 27 bd b1 ff fb 96 4a 80 85 5f 69 bb 33 f3 c1 85 d0 a3 aa 54 2a 55 95 e4 53 f4 be 3f 3e fa 78 37 99 1d 25 93 29 3f 82 27 29 8b ac 3b e6 29 cf 49 c1 d9 d1 f7 bd bf f4 7a 47 1f b2 32 a7 7c 74 f4 f8 d0 9d a4 74 5a 32 3e eb 7d 9a f5 8a 47 7e 9f 7d 9a 58 f7 93 d4 fa 34 fb cb 67 92 1f 55 55 51 52 a6 b4 98 64 a9 6e 3c 6b e5 8c 1f cd 8a 7c 42 0b ed 54 f4 b9 8b 9e 63 32 e3 23 ed ae 28 1e 66 a3 5e 8f 32 31 9e f1 e9 e4 73 6e a5 bc e8 8d ef 7a 9f 18 a7 ff e6 ac a6 f1 37 67 60 d9 96 d7 23 b3 19 2f 66 3d cd e4 4f c5 48 b3 1e d2 b1 66 ce 26 ff 01 64 81 fb 14 b8 9a 49 a7 d0 e5 17 72 0f 35 38 10 6a b2 f4 33 cf 8b d1 73 92 67 f7 97 19 e3 bf 65 93 b4 18 35 1c 32 e3 99 45 9a 60 10 90 45 51 f1 e5 81 67 c9 11 3b 7f 20 f9 8c ff 94 16 3a 33 1d df 18 b1 d3 49 a2 b3 33 7f 30 f0 7c 23 e7 45 99 a7 47 1c 06 9f 36 e5 c1 c0 0d fd 13 5d 67 dd 48 f6 fa e1 07 c7 36 cc 81 ef b9 f6 89 ee d8 ae d7 61 86 b1 30 8b 6c c9 45 b6 30 33 90 75 9e e5 23 45 64 05 ac 88 05 f4 79 5a fc 02 5d 3b 9d 95 0a 2b e7 0f 53 42 f9 e5 dd 64 ca f4 27 1d 9b c9 b4 30 8f 1d c3 14 2f 40 05 d9 57 66 69 96 c6 73 d9 e9 68 75 8d 76 5c 4f b5 9c cf f5 32 7a a6 64 3a 8d 09 fd f7 a8 5c 34 93 ba b3 58 f6 4b 56 fc 26 70 45 a5 f2 62 ea 1b 24 a6 10 23 c6 73 85 42 bc a9 b2 16 1a 50 9a 89 49 23 66 f2 e8 17 a8 32 e3 88 58 35 75 9d c3 58 21 6a 98 75 6c 3c 27 59 ae 27 47 93 f4 88 46 da d9 e4 7e 7c a4 59 b0 9e 94 14 fa 1b 5c e9 48 7b 63 c2 e0 7a d1 cd 37 da d1 1b f3 0d cb c9 78 4c e2 29 8f b4 84 4c 67 1c 2b 41 3e a2 37 83 3e f0 76 34 cb a9 78 8d c5 ab 61 96 c0 02 29 60 46 71 59 f0 19 b0 cc 0d a3 b4 ee c8 ec d7 c7 f4 b7 3c 7b 00 05 fa a2 27 46 a7 Data Ascii: <kw8W$7L0aqd;9wq{~HI8u C'J_i3T*US?>x7%)?');)IzG2|ttZ2>}G~}X4gUUQRdn<k|BTc2#(f^21snz7g`#/f=OHf&dIr58j3sge52E`EQg; :3I30|#EG6]gH6a0lE03u#EdyZ];+SBd'0/@Wfishuv\O2zd:\4XKV&pEb$#sBPI#f2X5uX!jul<'Y'GF~|Y\H{cz7xL)Lg+A>7>v4xa)`FqY

Source: global traffic	HTTP traffic detected: GET /d.js HTTP/1.1Host: waust.atConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/vvGk67y305g HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&j= HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /d.js HTTP/1.1Host: waust.atConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&y=&a=0&v=27&r=6191 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=6b3l&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1728060750; l=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /idg/?su=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1728060750; l=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&j= HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1728060750; l=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&y=&a=0&v=27&r=6191 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/vvGk67y305g/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060752392&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&event_source=dtscout&rnd=0.40497007869512736&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=6b3l&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=2; st=2
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R-Iwp_fcYXBvhfCw6zf8blC7vJ3yDdsPIjhAp6Mbp_O5clvT3XswqVzMDfFkZotJihM6-2kTuQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/vvGk67y305g/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060752392&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=CoIKR2cAHVFNwwtkEQYkAg==
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&event_source=dtscout&rnd=0.40497007869512736&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1728060754661%7D%5D
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060754661.1&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060754661.3&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R-Iwp_fcYXBvhfCw6zf8blC7vJ3yDdsPIjhAp6Mbp_O5clvT3XswqVzMDfFkZotJihM6-2kTuQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/16311/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn-tc.33across.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?ad6CiA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/optimus_rules.json HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: http://nirothniroth.siteSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /386076.gif?partner_uid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50131&et=13&cid=lr&fp=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fidsync.rlcdn.com%2F395886.gif%3Fpartner_uid%3D%5BPersonID%5D HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/16311/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/optimus_rules.json HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=sFwyuNYVfuaqdykYVAMl7m_hL1VMRsISKmpb9c6bmXnb2RilNE7gQhFsL2VUtuQB73Q7maL2I8YC9LoM2sJEaUmexTk3zccPy1VRyWvFoSbSxkwlQUnSiIy6hdpawPbF0ul_dVsgzsRXTtbDKyhccA1E8yy_cfJ06hLD9bwjUbPmj52zAA
Source: global traffic	HTTP traffic detected: GET /6/map HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157
Source: global traffic	HTTP traffic detected: GET /pixel?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=sFwyuNYVfuaqdykYVAMl7m_hL1VMRsISKmpb9c6bmXnb2RilNE7gQhFsL2VUtuQB73Q7maL2I8YC9LoM2sJEaUmexTk3zccPy1VRyWvFoSbSxkwlQUnSiIy6hdpawPbF0ul_dVsgzsRXTtbDKyhccA1E8yy_cfJ06hLD9bwjUbPmj52zAA
Source: global traffic	HTTP traffic detected: GET /lt/shared/2/lt.iframe.html?c=3825 HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btmov%2F%2F%2F%2F%2BdngAHeex8smT7KMvxnZNxeDyIZfmycwoIqsvxPIarAuaOHmFFFdu%2B7LIAqcnjxHDRj2tc95UYVafiviSrw5PFNQ1SRe11aqAKXTj1iQxV5twTdpjczDzChigAAf%2BdhnA%3D%3D"; _cc_aud="ABR4nGNgYGBIZ5CNYoABZgYGrhlg1qJWEMn4sB5IAgA8nwQM"
Source: global traffic	HTTP traffic detected: GET /395886.gif?partner_uid=3647472619353538569 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=be21c7ae-c478-4910-a1f5-36cf19986949; TDCPM=CAEYBSgCMgsI0ofPnfansj0QBTgB
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=sFwyuNYVfuaqdykYVAMl7m_hL1VMRsISKmpb9c6bmXnb2RilNE7gQhFsL2VUtuQB73Q7maL2I8YC9LoM2sJEaUmexTk3zccPy1VRyWvFoSbSxkwlQUnSiIy6hdpawPbF0ul_dVsgzsRXTtbDKyhccA1E8yy_cfJ06hLD9bwjUbPmj52zAA
Source: global traffic	HTTP traffic detected: GET /pixel/bounce/?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixels?src=LTJS&s=31%2C92%2C54%2C136%2C41%2C49%2C7%2C33%2C78%2C122%2C121%2C26%2C22%2C67%2C116%2C61%2C106%2C104%2C8%2C148%2C100%2C3%2C2&c=3825 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tags.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btmov%2F%2F%2F%2F%2BdngAHeex8smT7KMvxnZNxeDyIZfmycwoIqsvxPIarAuaOHmFFFdu%2B7LIAqcnjxHDRj2tc95UYVafiviSrw5PFNQ1SRe11aqAKXTj1iQxV5twTdpjczDzChigAAf%2BdhnA%3D%3D"; _cc_aud="ABR4nGNgYGBIZ5CNYoABZgYGrhlg1qJWEMn4sB5IAgA8nwQM"
Source: global traffic	HTTP traffic detected: GET /6/data HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btmov%2F%2F%2F%2F%2BdngAHeex8smT7KMvxnZNxeDyIZfmycwoIqsvxPIarAuaOHmFFFdu%2B7LIAqcnjxHDRj2tc95UYVafiviSrw5PFNQ1SRe11aqAKXTj1iQxV5twTdpjczDzChigAAf%2BdhnA%3D%3D"; _cc_aud="ABR4nGNgYGBIZ5CNYoABZgYGrhlg1qJWEMn4sB5IAgA8nwQM"
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0NzQ3MjYxOTM1MzUzODU2ORAAGg0I3bqAuAYSBQjoBxAAQgBKAA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=Lix5m1SIAc4v2QrDk0Ko4R+AuiaLJCZnC3wkA9zPDVQ=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /ttd?uid=be21c7ae-c478-4910-a1f5-36cf19986949&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58736/cms?partner_id=LOTME&gdpr=0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=43c6a60b4a751c4e740466424c3454a6e8eb284fbc165ea7acbf98c9c6da167af4cb09cee1a4f8eb&person_id=3647472619353538569&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3647472619353538569
Source: global traffic	HTTP traffic detected: GET /adscores/g.json?sid=9202507693 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=lotame&gdpr=0 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eyeota?uid=2aypPnC1W4jBJ6UYn0XYk3uGdfA_Wy-jcq4O0XlngMhk&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/vvGk67y305g HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=43c6a60b4a751c4e740466424c3454a6e8eb284fbc165ea7acbf98c9c6da167af4cb09cee1a4f8eb&person_id=3647472619353538569&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3647472619353538569
Source: global traffic	HTTP traffic detected: GET /ttd?uid=be21c7ae-c478-4910-a1f5-36cf19986949&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&j= HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=2; st=2
Source: global traffic	HTTP traffic detected: GET /connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/c=5436/tp=SVRN/tpid=na/pv=y?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D5001%263pid%3D%24%7Bprofile_id%7D HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btmov%2F%2F%2F%2F%2BdngAHeex8smT7KMvxnZNxeDyIZfmycwoIqsvxPIarAuaOHmFFFdu%2B7LIAqcnjxHDRj2tc95UYVafiviSrw5PFNQ1SRe11aqAKXTj1iQxV5twTdpjczDzChigAAf%2BdhnA%3D%3D"; _cc_aud="ABR4nGNgYGBIZ5CNYoABZgYGrhlg1qJWEMn4sB5IAgA8nwQM"
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0&rdf=1 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /eyeota?uid=2aypPnC1W4jBJ6UYn0XYk3uGdfA_Wy-jcq4O0XlngMhk&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /match?bid=51mdg9u&uid=af47c46d5a39f249ad744e970df11157&gdpr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /adscores/g.json?sid=9202507693 HTTP/1.1Host: aa.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3AJYufjDomSbOkNB7WjZzO0TGOGvTFoNgn
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotameddp&google_hm=YWY0N2M0NmQ1YTM5ZjI0OWFkNzQ0ZTk3MGRmMTExNTc&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728060765904 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/41715?bidder_id=127211&bidder_uuid=af47c46d5a39f249ad744e970df11157 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image.sbxx?go=262106&pid=420&xid=af47c46d5a39f249ad744e970df11157 HTTP/1.1Host: global.ib-ibi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btmov%2F%2F%2F%2F%2BdngAHeex8smT7KMvxnZNxeDyIZfmycwoIqsvxPIarAuaOHmFFFdu%2B7LIAqcnjxHDRj2tc95UYVafiviSrw5PFNQ1SRe11aqAKXTj1iQxV5twTdpjczDzChigAAf%2BdhnA%3D%3D"; _cc_aud="ABR4nGNgYGBIZ5CNYoABZgYGrhlg1qJWEMn4sB5IAgA8nwQM"
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/K9lf0UFwp6Y HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&y=&a=0&v=27&r=5183 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /ups/58736/cms?partner_id=LOTME&gdpr=0&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF4dAGcCEE8wPAsBj9cCQNL1kONtvYoFEgEBAQFuAWcKZ9xA0iMA_eMAAA&S=AQAAAou9ft8ityRCwhS7T5jVurg
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=2&_ls=17&_cc=us&_pl=d&_b=chrome%40117&_cbid=ua0j&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1728060765949 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&j= HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=na HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=7a1cf28e-0c02-47bb-a88d-bb58acbad6d7#1728060767376
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=na HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=00l1nct72u0mk&us_privacy=$(US_PRIVACY) HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=af47c46d5a39f249ad744e970df11157 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060767537&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A3%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A2%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A4%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /generate_204?bRdoCQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /cookie-sync/lotame?gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/K9lf0UFwp6Y/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A3%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A2%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A4%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&event_source=dtscout&rnd=0.13922402065348716&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&y=&a=0&v=27&r=5183 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060769600.4&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_kTBZSGKEAheYsTKn4afVEwgqvCdN3xf1wRiQqkT8iMIBWaKzUggCo0tbCy2a1UTpRsTg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060769600.7&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&us_privacy=&cache_buster=1728060769600.3 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060769600.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=75d2904d-9861-4a17-9dab-cb1f40374b37&vxii_rmax=2 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6Ijc1ZDI5MDRkLTk4NjEtNGExNy05ZGFiLWNiMWY0MDM3NGIzNyIsImwiOjE3MjgwNjA3Njg5MDksInQiOjF9
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1728060765949&_li_chk=true&previous_uuid=3a760c9a35324f3eaa4acaf38196495f HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /s/41715?bidder_id=127211&bidder_uuid=af47c46d5a39f249ad744e970df11157&_li_chk=true&previous_uuid=348dc49a774941bfac870668a1421294 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060769600.5 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&us_privacy=&cache_buster=1728060769600.6 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=2&_ls=17&_cc=us&_pl=d&_b=chrome%40117&_cbid=ua0j&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=4; st=4
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A8%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=61e7296121adcddf HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=na HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=D90AAAEE-B744-4BF2-957E-3A5D817DFE99&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /cookie-sync/lotame?gdpr=0&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-tYjDlz9E2py_pgG9eo3mzHWmeYNjybd4HpA-~A&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotameddp&google_hm=YWY0N2M0NmQ1YTM5ZjI0OWFkNzQ0ZTk3MGRmMTExNTc&gdpr=0&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /map/c=1389/tp=STSC/tpid=7a1cf28e-0c02-47bb-a88d-bb58acbad6d7-67001d5f-5553/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=eye&google_cm&google_sc&google_hm=MjNjTVlXcnRzcy00QllILS1VTGEtSGZ3OURYYUFUYlN6OVg5RDRLWnZKZXM&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u& HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=af47c46d5a39f249ad744e970df11157&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=00l1nct72u0mk&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp
Source: global traffic	HTTP traffic detected: GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060767537&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A8%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A8%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /image.sbxx?go=262106&pid=420&xid=af47c46d5a39f249ad744e970df11157 HTTP/1.1Host: ib.mookie1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/K9lf0UFwp6Y/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&event_source=dtscout&rnd=0.13922402065348716&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7006&vxii_pdid=3a760c9a-3532-4f3e-aa4a-caf38196495f&us_privacy=1YN- HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6Ijc1ZDI5MDRkLTk4NjEtNGExNy05ZGFiLWNiMWY0MDM3NGIzNyIsImwiOjE3MjgwNjA3NzA4MDIsInQiOjF9; sc=eyJpIjoiNzVkMjkwNGQtOTg2MS00YTE3LTlkYWItY2IxZjQwMzc0YjM3Iiwic2lkIjoic2lkLTE3NzFkMjU2LTgyNzEtMTFlZi05MGFiLTAyNDIwYTAwMDQxMCIsIm1zIjoyLCJ0cyI6MSwicHMiOjEsInNwIjo1MDA3LCJwcCI6MSwidHNlIjoxLCJpciI6dHJ1ZSwibHRzZSI6MTcyODA2MDc3MDgwMywiXyI6dHJ1ZX0=
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060769600.8 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /generate_204?Hi2b-A HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/K9lf0UFwp6YAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=be21c7ae-c478-4910-a1f5-36cf19986949; TDCPM=CAEYBSABKAIyCwjSh8-d9qeyPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&us_privacy=&cache_buster=1728060769600.9 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060769600.10 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_kTBZSGKEAheYsTKn4afVEwgqvCdN3xf1wRiQqkT8iMIBWaKzUggCo0tbCy2a1UTpRsTg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=1133&j=0 HTTP/1.1Host: loadm.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: d.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26dc_rc%3D1%26dc_mr%3D1%26dc_orig%3Dgdomg51%26%26referrer_pid%3Dgdomg51 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?uid=be21c7ae-c478-4910-a1f5-36cf19986949&bid=1e2n4ou HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A13%2C%22ts%22%3A1728060771068%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A11%2C%22ts%22%3A1728060771068%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A8%2C%22ts%22%3A1728060771068%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /image.sbxx?go=262106&pid=420&xid=af47c46d5a39f249ad744e970df11157 HTTP/1.1Host: ib.mookie1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=amc40omeseoymyw1c1hhrvz2; ibkukiuno=s=13b9cb41-41ae-4937-8317-d0804c35ba90&h=&v=0&l=-8584735461143615928&op=&hl=0&vlu=0&tcs=1&dcc=-8584735461143615928; ibkukinet=137263905=-8584735461143615928
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=D90AAAEE-B744-4BF2-957E-3A5D817DFE99&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF4dAGcCEE8wPAsBj9cCQNL1kONtvYoFEgEBAQFuAWcKZ9xA0iMA_eMAAA&S=AQAAAou9ft8ityRCwhS7T5jVurg; IDSYNC=19bk~2l2g
Source: global traffic	HTTP traffic detected: GET /qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-tYjDlz9E2py_pgG9eo3mzHWmeYNjybd4HpA-~A&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /map/c=1389/tp=STSC/tpid=7a1cf28e-0c02-47bb-a88d-bb58acbad6d7-67001d5f-5553/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=af47c46d5a39f249ad744e970df11157&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotameddp&google_hm=YWY0N2M0NmQ1YTM5ZjI0OWFkNzQ0ZTk3MGRmMTExNTc&gdpr=0&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=00l1nct72u0mk&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk
Source: global traffic	HTTP traffic detected: GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /embed/vvGk67y305g HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fps.eyeota.net%252Fmatch%253Fuid%253D%2524UID%2526bid%253D2cr76e1%2526dc_rc%253D1%2526dc_mr%253D1%2526dc_orig%253Dgdomg51%2526%2526referrer_pid%253Dgdomg51 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=nvflvgCqkyw-vp-wOskloKuBWZTCXo_NKt9TRGf2DS_-xcEbww6sAvfGV1HKtluzpYgwpGHx-AfK3S9YIpi7pqIQlTwJXqvzFjcUebZxKzo.; receive-cookie-deprecation=1; uuid2=4583622392117192460
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30064&dpuuid=1925872aa52-6d770000010f52b2&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6j5b2cv%26uid%3D%24%7BDD_UUID%7D%26dc_rc%3D1%26dc_mr%3D1%26dc_orig%3Dgdomg51%26%26referrer_pid%3Dgdomg51 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=1mpjpn0&turn_id=3464331471461820661&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329533131466058&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3Dfbfadd72-26a0-4e48-b15b-c5f5f430ed0a%253A1728060770.8957946%26pid%3D500040%26it%3D1%26iv%3Dfbfadd72-26a0-4e48-b15b-c5f5f430ed0a%253A1728060770.8957946%26_%3D1728060770.8977344 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiZTNkMTdmYWUtNmEzYS00NWI4LTkyMGUtZDE4MzdkYzk3Zjk5OjE3MjgwNjA3NzEuODM1ODU2NyJ9.ZwAdYw.tKeq4pgiGi6Y3WdB2JRQCkLu1q8
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329533131466086&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3Dca1d8a13-bc2e-4b6b-9e39-3f9620befaab%253A1728060771.0288334%26pid%3D500040%26it%3D1%26iv%3Dca1d8a13-bc2e-4b6b-9e39-3f9620befaab%253A1728060771.0288334%26_%3D1728060771.031011 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiZTNkMTdmYWUtNmEzYS00NWI4LTkyMGUtZDE4MzdkYzk3Zjk5OjE3MjgwNjA3NzEuODM1ODU2NyJ9.ZwAdYw.tKeq4pgiGi6Y3WdB2JRQCkLu1q8
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&us_privacy=&cache_buster=1728060769600.11 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiZTNkMTdmYWUtNmEzYS00NWI4LTkyMGUtZDE4MzdkYzk3Zjk5OjE3MjgwNjA3NzEuODM1ODU2NyJ9.ZwAdYw.tKeq4pgiGi6Y3WdB2JRQCkLu1q8
Source: global traffic	HTTP traffic detected: GET /match?uid=be21c7ae-c478-4910-a1f5-36cf19986949&bid=1e2n4ou HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-PyA9QC1E2pWA6mOzdORL9O1p9z0pNpnB6zs-~A&gdpr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30064&dpuuid=1925872aa52-6d770000010f52b2&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6j5b2cv%26uid%3D%24%7BDD_UUID%7D%26dc_rc%3D1%26dc_mr%3D1%26dc_orig%3Dgdomg51%26%26referrer_pid%3Dgdomg51 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=48890197052314257843416482000257548153
Source: global traffic	HTTP traffic detected: GET /match?uid=4583622392117192460&bid=2cr76e1&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060771.8378935 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiZTNkMTdmYWUtNmEzYS00NWI4LTkyMGUtZDE4MzdkYzk3Zjk5OjE3MjgwNjA3NzEuODM1ODU2NyJ9.ZwAdYw.tKeq4pgiGi6Y3WdB2JRQCkLu1q8
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /generate_204?Va57TQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D2%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: i.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=fbfadd72-26a0-4e48-b15b-c5f5f430ed0a%3A1728060770.8957946&pid=500040&it=1&iv=fbfadd72-26a0-4e48-b15b-c5f5f430ed0a%3A1728060770.8957946&_=1728060770.8977344 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=ca1d8a13-bc2e-4b6b-9e39-3f9620befaab%3A1728060771.0288334&pid=500040&it=1&iv=ca1d8a13-bc2e-4b6b-9e39-3f9620befaab%3A1728060771.0288334&_=1728060771.031011 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060769600.12 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=6j5b2cv&uid=48890197052314257843416482000257548153&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&j=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=4; st=4
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /embed/K9lf0UFwp6Y HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-PyA9QC1E2pWA6mOzdORL9O1p9z0pNpnB6zs-~A&gdpr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060771.8378935 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060771.031011&iv=ca1d8a13-bc2e-4b6b-9e39-3f9620befaab:1728060771.0288334 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060770.8977344&iv=fbfadd72-26a0-4e48-b15b-c5f5f430ed0a:1728060770.8957946 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D2%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=thEeZGQ81SWLxY5
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&y=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&a=0&v=27&r=8317 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060771.8378935&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060773.6456807 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdZg.cV38Ep4xaWbhjSSbaZsCyjdeF88
Source: global traffic	HTTP traffic detected: GET /vi/K9lf0UFwp6Y/default.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /match?uid=4583622392117192460&bid=2cr76e1&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /match?bid=9sn4omv&uid=thEeZGQ81SWLxY5&newuser=1&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=3&_ls=25&_cc=us&_pl=d&_b=chrome%40117&_cbid=5koj&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=5
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&j=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=5
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060773.6456807 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&y=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&a=0&v=27&r=8317 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060770.8977344&iv=fbfadd72-26a0-4e48-b15b-c5f5f430ed0a:1728060770.8957946 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060771.031011&iv=ca1d8a13-bc2e-4b6b-9e39-3f9620befaab:1728060771.0288334 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060771.8378935&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060775544&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A18%2C%22ts%22%3A1728060772386%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A17%2C%22ts%22%3A1728060772386%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A8%2C%22ts%22%3A1728060771068%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /match?bid=6j5b2cv&uid=48890197052314257843416482000257548153&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /vi/K9lf0UFwp6Y/default.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=3&_ls=25&_cc=us&_pl=d&_b=chrome%40117&_cbid=5koj&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=5
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A18%2C%22ts%22%3A1728060772386%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A17%2C%22ts%22%3A1728060772386%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A8%2C%22ts%22%3A1728060771068%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&event_source=dtscout&rnd=0.6403823838867404&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /generate_204?mVmfpA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/K9lf0UFwp6YAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50052&et=0&fp=2YndIG7n5I5DPKlZgr5U6-PEOUebBldO4xmqYjQ7qrQg&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dr8hrb20%26uid%3Dnil%26dc_rc%3D3%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3647472619353538569
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060773.6456807&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /?zdid=1332&zcluid=5afe2df1505ad0a6 HTTP/1.1Host: spl.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A23%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A22%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A10%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060773.6456807&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060775544&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A23%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A22%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A10%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060777801.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=48b5b3ea-5f5d-4526-583c-75509e909c7f&reqId=a9ffdc2d-cdc2-43b8-7e87-16bdabb27ee7&zcluid=5afe2df1505ad0a6&zdid=1332 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&event_source=dtscout&rnd=0.6403823838867404&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060777801.2 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdaA.ldBnlFybnTRYkRfwFw19ApLFcBk
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060777801.4 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&j=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=6
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Uncategorized%20Archives%20-%20nirothniroth.site&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&y=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&a=0&v=27&r=2291 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw?google_gid=CAESEOxonk22oLKNOiX2sYbf0nk&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=48b5b3ea-5f5d-4526-583c-75509e909c7f&reqId=a9ffdc2d-cdc2-43b8-7e87-16bdabb27ee7&zcluid=5afe2df1505ad0a6&zdid=1332 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=48b5b3ea-5f5d-4526-583c-75509e909c7f; zsc=+r%3D%5E%BA%D5%CC%CC%5D%F1%91%C3%83%AB%13Y%A3o%0E%26%9E%04GW%97%29%1A%EFak%AB%C6%F2o%AC%DBg%8A%81%9BU%A3%D4%BC%88%D7%2Ac%9C%1DT%F3R%98%9E%DCw%D4%B7%BF3y%05%08%3B%D9%B6%85%D7%AD%3Fs%F3%88%BAX%F9%BC%CC%0E%16%DE+
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060777801.3&ref=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060777801.6&ref=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060777801.7 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /dcm?pid=05d425ec-398a-44ad-b86d-773a0766ce18&id=2aWj_8te6zHKvWYlvaLMto-jLy3DeT0i_kqCWdY5erWM HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060777801.5 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdaA.ldBnlFybnTRYkRfwFw19ApLFcBk
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=4&_ls=29&_cc=us&_pl=d&_b=chrome%40117&_cbid=tkvt&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=7
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Eyeota?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D63ri0ru%26uid%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060778717&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&t=Uncategorized%20Archives%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A28%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A27%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A12%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1; done_redirects219=1
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1 HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A28%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A27%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A12%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060777801.8 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdaw.htHfHqJU2GsnRLLR1CwjemF6zto
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060777801.9 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060777801.10 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdaw.htHfHqJU2GsnRLLR1CwjemF6zto
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060777801.11 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /?partner=282&icm&cver&gdpr=0&smartmap=1&redirect=stags.bluekai.com%2Fsite%2F52799%3Fid%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1; done_redirects219=1; done_redirects282=1
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&j=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=7
Source: global traffic	HTTP traffic detected: GET /dcm?pid=05d425ec-398a-44ad-b86d-773a0766ce18&id=2aWj_8te6zHKvWYlvaLMto-jLy3DeT0i_kqCWdY5erWM&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A8Xh3yBNWEFArUqB7sGHdR8|t
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Uncategorized%20Archives%20-%20nirothniroth.site&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&y=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&a=0&v=27&r=2291 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060780383.3&ref=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&event_source=dtscout&rnd=0.03389110325984945&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /s/123/9.gif?puid=1925872aa52-6d770000010f52b2&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060780383.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060780383.4 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&us_privacy=&cache_buster=1728060780383.2 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbA.qF9sNfKlyqEIuoUL6e8B_xinJc8
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&us_privacy=&cache_buster=1728060780383.5 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbA.qF9sNfKlyqEIuoUL6e8B_xinJc8
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060779.0707035 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbA.qF9sNfKlyqEIuoUL6e8B_xinJc8
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=4&_ls=29&_cc=us&_pl=d&_b=chrome%40117&_cbid=tkvt&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=7
Source: global traffic	HTTP traffic detected: GET /mw?google_gid=CAESEOxonk22oLKNOiX2sYbf0nk&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=48b5b3ea-5f5d-4526-583c-75509e909c7f&reqId=a9ffdc2d-cdc2-43b8-7e87-16bdabb27ee7&zcluid=5afe2df1505ad0a6&zdid=1332 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=48b5b3ea-5f5d-4526-583c-75509e909c7f; zsc=+r%3D%5E%BA%D5%CC%CC%5D%F1%91%C3%83%AB%13Y%A3o%0E%26%9E%04GW%97%29%1A%EFak%AB%C6%F2o%AC%DBg%8A%81%9BU%A3%D4%BC%88%D7%2Ac%9C%1DT%F3R%98%9E%DCw%D4%B7%BF3y%05%08%3B%D9%B6%85%D7%AD%3Fs%F3%88%BAX%F9%BC%CC%0E%16%DE+
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Eyeota?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D63ri0ru%26uid%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=a6c76b70-57a3-0c7a-56a7-51e8bbc66cbe
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060778717&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&t=Uncategorized%20Archives%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A33%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A32%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A14%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A33%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A32%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A14%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /dcm?pid=05d425ec-398a-44ad-b86d-773a0766ce18&id=2aWj_8te6zHKvWYlvaLMto-jLy3DeT0i_kqCWdY5erWM&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A8Xh3yBNWEFArUqB7sGHdR8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /merge?pid=5039&3pid=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; ljtrtb=eJwNyrsRgEAIBcBeXmwAJ8hgN8xxJH4ijRx71433gRIxVkSJdVlSY%2FZq4pEmMtwoi5nVMEH%2FRrTz2S9rNx0b3g%2F79hBo
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060777801.12 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060780383.6&ref=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/123/123/9/1.gif?puid=1925872aa52-6d770000010f52b2&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#1
Source: global traffic	HTTP traffic detected: GET /tum?umid=72&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dbcgd9g1%26uid%3D___AUID___ HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060780383.7 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060780.0905974 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060779.0707035 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&gdpr_consent=&url=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Ddn4m51u%26uid%3D[sas_uid] HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b?c1=9&c2=16937916&c3=2&cs_xi=27LSrgxdErHxi84ruSWCyzobQPczoh8BdoCotB3PEROc HTTP/1.1Host: ads.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&us_privacy=&cache_buster=1728060780383.8 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&event_source=dtscout&rnd=0.03389110325984945&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060781.0271933 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /merge?pid=5039&3pid=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; ljtrtb=eJwNyrsRgEAIBcBeXmwAJ8hgN8xxJH4ijRx71433gRIxVkSJdVlSY%2FZq4pEmMtwoi5nVMEH%2FRrTz2S9rNx0b3g%2F79hBo; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060781.1099029 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060780383.9 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /vdm677.gif?gdpr=%7BGDPR%7D&gdpr_consent=%7BGDPR_CONSENT%7D&redir=https://ps.eyeota.net/match?bid=4o6e2ru&uid=%7B$UID%7D HTTP/1.1Host: eyeota.ck-ie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060779.0707035&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&us_privacy=&cache_buster=1728060780383.10 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060780.0905974 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&gdpr_consent=&url=https://ps.eyeota.net/match?bid=dn4m51u&uid=[sas_uid]&cklb=1 HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=id5&cspid=18&cb=&redirect=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F796%2F8%2F2.gif%3Fpuid%3D%24%7BADELPHIC_CUID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2?c1=9&c2=16937916&c3=2&cs_xi=27LSrgxdErHxi84ruSWCyzobQPczoh8BdoCotB3PEROc HTTP/1.1Host: ads.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1BD63854e5a82eedc8634101728060782; XID=1BD63854e5a82eedc8634101728060782
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060781.6817832 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbg.4BaR1Gvy9ioyYHUveNvBNoV-kak
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060781.671499 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbg.4BaR1Gvy9ioyYHUveNvBNoV-kak
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060781.0271933 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=4o6e2ru&uid=2ee61b55a871190dacb5338779ddf9240ec5b68b HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3081&partner_device_id=27TyT3p88SiUi6ju7u5FyztY_urOrsX-An_1j7EEc_hI HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060780.0905974&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060781.1099029 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060779.0707035&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060780383.11 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&gdpr_consent=&url=https://ps.eyeota.net/match?bid=dn4m51u&uid=[sas_uid]&cklb=1 HTTP/1.1Host: sync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100; pid=3687183077264864653
Source: global traffic	HTTP traffic detected: GET /c/123/796/8/2.gif?puid=2182b3be-f5c1-42ac-9a1c-918372a8865c&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=123#1728060782401#-108999558
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060781.6817832 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060781.671499 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.0271933&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060782.393186 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbw.YTR7TMfb9x80Fxte_1lsZKDZOt8
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&us_privacy=&cache_buster=1728060780383.12 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbw.YTR7TMfb9x80Fxte_1lsZKDZOt8
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060782.74287 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbw.YTR7TMfb9x80Fxte_1lsZKDZOt8
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3081&partner_device_id=27TyT3p88SiUi6ju7u5FyztY_urOrsX-An_1j7EEc_hI HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1728060784123; TapAd_DID=0621d620-5787-4810-86a0-18b64d1b363a
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060780.0905974&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.1099029&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.6817832&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.671499&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.0271933&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9202273308&_puid=2fW6Jb_SsGvLqOLlD9QniA4odBVOH0oa-exjO-wLnu4Q&_redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D4o6e2ru%26%26uid%3D HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3AJYufjDomSbOkNB7WjZzO0TGOGvTFoNgn
Source: global traffic	HTTP traffic detected: GET /getuid?https://id5-sync.com/c/123/2/7/3.gif?puid=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=nvflvgCqkyw-vp-wOskloKuBWZTCXo_NKt9TRGf2DS_-xcEbww6sAvfGV1HKtluzpYgwpGHx-AfK3S9YIpi7pqIQlTwJXqvzFjcUebZxKzo.; receive-cookie-deprecation=1; uuid2=4583622392117192460
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060783.5042324 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbw.YTR7TMfb9x80Fxte_1lsZKDZOt8
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060782.393186 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=0621d620-5787-4810-86a0-18b64d1b363a%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=be21c7ae-c478-4910-a1f5-36cf19986949; TDCPM=CAEYASABKAIyCwic-sbz9qeyPRAFOAFaBmV5ZW90YWAC
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.1099029&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060782.74287 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.6817832&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.671499&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060782.393186&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=be21c7ae-c478-4910-a1f5-36cf19986949&ttd_puid=0621d620-5787-4810-86a0-18b64d1b363a%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1728060784123; TapAd_DID=0621d620-5787-4810-86a0-18b64d1b363a; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060782.74287&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060783.5042324 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /c/123/2/7/3.gif?puid=4583622392117192460&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=123#1728060782401#-108999558|796#1728060784544#788199015
Source: global traffic	HTTP traffic detected: GET /pixel/10751/?che=&ip=8.46.123.33&l1=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26uid%3D216783105025002984207 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3AJYufjDomSbOkNB7WjZzO0TGOGvTFoNgn
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060784.7552915 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdcQ.-A8A1Wr-q4zWg8KHHtRG95NzUyw
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060782.74287&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=be21c7ae-c478-4910-a1f5-36cf19986949&ttd_puid=0621d620-5787-4810-86a0-18b64d1b363a%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1728060784123; TapAd_DID=0621d620-5787-4810-86a0-18b64d1b363a; TapAd_3WAY_SYNCS=1!6688
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060782.393186&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /match?bid=r852b20&uid=nil&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060783.5042324&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F429%2F6%2F4.gif%3Fpuid%3D%23PM_USER_ID%26gdpr%3D0%26gdpr_consent%3D&gdpr_consent=&gdpr=0 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; KADUSERCOOKIE=D90AAAEE-B744-4BF2-957E-3A5D817DFE99
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6Ijc1ZDI5MDRkLTk4NjEtNGExNy05ZGFiLWNiMWY0MDM3NGIzNyIsImwiOjE3MjgwNjA3NzEzOTYsInQiOjJ9; sc=eyJpIjoiNzVkMjkwNGQtOTg2MS00YTE3LTlkYWItY2IxZjQwMzc0YjM3Iiwic2lkIjoic2lkLTE3NzFkMjU2LTgyNzEtMTFlZi05MGFiLTAyNDIwYTAwMDQxMCIsIm1zIjoyLCJ0cyI6MiwicHMiOjIsInNwIjo1MDQ0LCJwcCI6MiwidHNlIjoyLCJpciI6dHJ1ZSwibHRzZSI6MTcyODA2MDc3MTM5N30=
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=JcO0AQZHJIjSt-KITeuUGOwp&rnd=1728060785879 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /match?bid=c9gd69u&uid=216783105025002984207 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728060785849 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060783.5042324&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060784.7552915 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /lj_match?r=1728060785849 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=r852b20&uid=nil&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/123/429/6/4.gif?puid=D90AAAEE-B744-4BF2-957E-3A5D817DFE99&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=2#1728060786422#308420009#4583622392117192460|123#1728060782401#-108999558|796#1728060784544#788199015
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=3a760c9a-3532-4f3e-aa4a-caf38196495f HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdcg.ITHYwJ5o2qkv9MYaW3gNSIzzcMo
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060784.7552915&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /match?bid=c9gd69u&uid=216783105025002984207 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=9826AC8C9481453CA0CCB86472583A83 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk; ljtrtb=eJwVyrEOgjAQANB%2FudnhrvS81M1EYDCiUSE6NpRjKHUgNA7GfxfXl%2FcBRiTYgVcrvd0G9oVTY50PYu3gBIMSEQtsgNeGONGrX8RkTPFvWLiVDe2bhcruqt1ct1V7w%2FOU0yWXj8N9FE6nMQ71%2B3mUqBG%2BPwLoIMM%3D
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060784.7552915&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=60b8cfa7-4a30-f9b2-2802-065555e8bf08&iiqpciddate=1728060787349&tsrnd=629_1728060787350&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=0 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.intentiq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=58&3pid=D90AAAEE-B744-4BF2-957E-3A5D817DFE99&us_privacy=&gdpr=0&gdpr_consent=&location=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F1242%2F5%2F5.gif%3Fpuid%3D%5BSOVRNID%5D%26gdpr%3D0%26gdpr_consent%3D&s=id5 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk; ljtrtb=eJwVyrEOgjAQANB%2FudnhrvS81M1EYDCiUSE6NpRjKHUgNA7GfxfXl%2FcBRiTYgVcrvd0G9oVTY50PYu3gBIMSEQtsgNeGONGrX8RkTPFvWLiVDe2bhcruqt1ct1V7w%2FOU0yWXj8N9FE6nMQ71%2B3mUqBG%2BPwLoIMM%3D
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=9826AC8C9481453CA0CCB86472583A83 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk; ljtrtb=eJwVyrEOgjAQANB%2FudnhrvS81M1EYDCiUSE6NpRjKHUgNA7GfxfXl%2FcBRiTYgVcrvd0G9oVTY50PYu3gBIMSEQtsgNeGONGrX8RkTPFvWLiVDe2bhcruqt1ct1V7w%2FOU0yWXj8N9FE6nMQ71%2B3mUqBG%2BPwLoIMM%3D; _ljtrtb_2=9826AC8C9481453CA0CCB86472583A83
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=60b8cfa7-4a30-f9b2-2802-065555e8bf08&iiqpciddate=1728060787349&tsrnd=629_1728060787350&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=&ckls=true&ci=LMBXu5KOzK&nc=false&trid=-601619654 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.intentiq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=LMBXu5KOzK
Source: global traffic	HTTP traffic detected: GET /c/123/1242/5/5.gif?puid=JcO0AQZHJIjSt-KITeuUGOwp&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=2#1728060786422#308420009#4583622392117192460|123#1728060782401#-108999558|796#1728060784544#788199015|429#1728060788158#-385382141#D90AAAEE-B744-4BF2-957E-3A5D817DFE99
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060788.2608335 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAddA.bA-cTv-AQDiqpWyULSppKDjstJE
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push?partner_id=2922&partner_url=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F108%2F4%2F6.gif%3Fpuid%3D%24%7BTA_DEVICE_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1728060784123; TapAd_DID=0621d620-5787-4810-86a0-18b64d1b363a; TapAd_3WAY_SYNCS=1!6688
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060788.2608335 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /lj_match?r=1728060789863 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=9826AC8C9481453CA0CCB86472583A83
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=60b8cfa7-4a30-f9b2-2802-065555e8bf08&iiqpciddate=1728060787349&tsrnd=629_1728060787350&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=&ckls=true&ci=LMBXu5KOzK&nc=false&trid=-601619654 HTTP/1.1Host: sync.intentiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=LMBXu5KOzK; IQPData=137263905#1728060790370#0#1728060790370; ASDT=0; intentIQCDate=1728060790374; IQadv=1728060790375; CSDT=UEQ6MTEzMDRfMCZVUUZxeTdy; IQMID=137263905#1728060790375
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728060789863 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=LMBXu5KOzK; IQPData=137263905#1728060790370#0#1728060790370; ASDT=0; intentIQCDate=1728060790374; IQadv=1728060790375; CSDT=UEQ6MTEzMDRfMCZVUUZxeTdy; IQMID=137263905#1728060790375
Source: global traffic	HTTP traffic detected: GET /embed/vvGk67y305g HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6Ijc1ZDI5MDRkLTk4NjEtNGExNy05ZGFiLWNiMWY0MDM3NGIzNyIsImwiOjE3MjgwNjA3ODcxODQsInQiOjN9; sc=eyJpIjoiNzVkMjkwNGQtOTg2MS00YTE3LTlkYWItY2IxZjQwMzc0YjM3Iiwic2lkIjoic2lkLTIxMzU3YjJkLTgyNzEtMTFlZi04Y2JiLTAyNDIwYWZmMDUxNiIsIm1zIjoyLCJwcyI6Miwic3AiOjUwNDQsInBwIjoyLCJ0c2UiOjIsImx0c2UiOjE3MjgwNjA3NzEzOTd9
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=JcO0AQZHJIjSt-KITeuUGOwp&rnd=1728060789917 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /generate_204?2ACsOA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A38%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A37%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /c/123/108/4/6.gif?puid=0621d620-5787-4810-86a0-18b64d1b363a&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=2#1728060786422#308420009#4583622392117192460|1242#1728060790318#144248393|123#1728060782401#-108999558|796#1728060784544#788199015|429#1728060788158#-385382141#D90AAAEE-B744-4BF2-957E-3A5D817DFE99
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060788.2608335&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&j= HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=8
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/throtle? HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAC1VE7OADsAABdC3efg2g; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=9826AC8C9481453CA0CCB86472583A83 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk; _ljtrtb_2=9826AC8C9481453CA0CCB86472583A83; _ljtrtb_58=D90AAAEE-B744-4BF2-957E-3A5D817DFE99; ljtrtb=eJwdy70OgjAUQOF36exwb3vLbd1qRQbjT1SIjA1QhoKDgTgY3110PfnOW0ixFtbIzHnjLRkkrbwD7zcmI5baKGeUWAkNgIsMkbihrNVB2SjJhpaJOsvQRkTU%2FJMLAxjw0UwsZxjT%2F1Z2yRLdccK8usTqWZS78gqnYR7Pc37f3nrW46FPXfGq95xiEp8vdNIpAA%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=3a760c9a-3532-4f3e-aa4a-caf38196495f HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAddg.qrg0mCDeCWLjnTsjI3LQo9ZU3Cs
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&y=&a=0&v=27&r=7837 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=5&_ls=44&_cc=us&_pl=d&_b=chrome%40117&_cbid=74jp&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=9
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060793739&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A43%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A42%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060793391.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060793391.2 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAddg.qrg0mCDeCWLjnTsjI3LQo9ZU3Cs
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1; done_redirects219=1; done_redirects282=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /match?publisher_dsp_id=313&dsp_callback=1&external_user_id=ID5-333fxi5yj1M1ubhexUUpDr2wTSTyMeBelTLXB3lPxQ&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F123%2F124%2F3%2F7.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&j= HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=9
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&y=&a=0&v=27&r=7837 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060788.2608335&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A43%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A42%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A43%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A42%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060793391.3 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060793391.5 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060793391.7 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060793391.4 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdeg.Ga_dJaSN69He3SSDWkMgjzcwcA8
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060793391.9 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=9826AC8C9481453CA0CCB86472583A83 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk; _ljtrtb_2=9826AC8C9481453CA0CCB86472583A83; _ljtrtb_58=D90AAAEE-B744-4BF2-957E-3A5D817DFE99; ljtrtb=eJwdy7sOwjAMQNF%2FyUwlO3HqmC1NUwbEQ7wEY0UJQykDomJA%2FDuB9erct9JqqsTp0gcXhBySNcFDCJUribV1xjujJsq67GoB732MRcVEBVWNLsRyLIy3tUOumyjyswCYdZuIz1R2tjWSNEnb5esiDF1CRMs%2FmRnADe%2FnJ%2BsRhv5%2FG8lZo18%2BMR426fCY7Zv9Fla3cViP8VjvrmyHxbW%2FzF6nOfepV58vHsAykA%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060793391.6 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdeg.Ga_dJaSN69He3SSDWkMgjzcwcA8
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060793391.8 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdeg.Ga_dJaSN69He3SSDWkMgjzcwcA8
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=be21c7ae-c478-4910-a1f5-36cf19986949; TDCPM=CAESFAoFdGFwYWQSCwjiuq_K4aeyPRAFGAEgASgCMgsIqLGy9_ensj0QBTgBWgV0YXBhZGAC
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1 HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A43%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A42%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&event_source=dtscout&rnd=0.7304689290372415&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10005&vxii_pdid=2KNRXgjbVumBOCYEyzVhhBdWSOv62CWwgOpdzy0Ug5VI HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6Ijc1ZDI5MDRkLTk4NjEtNGExNy05ZGFiLWNiMWY0MDM3NGIzNyIsImwiOjE3MjgwNjA3OTE0MTIsInQiOjR9; sc=eyJpIjoiNzVkMjkwNGQtOTg2MS00YTE3LTlkYWItY2IxZjQwMzc0YjM3Iiwic2lkIjoic2lkLTIxMzU3YjJkLTgyNzEtMTFlZi04Y2JiLTAyNDIwYWZmMDUxNiIsIm1zIjoyLCJ0cyI6MSwicHMiOjMsInNwIjo1MDM3LCJwcCI6MywidHNlIjozLCJpciI6dHJ1ZSwibHRzZSI6MTcyODA2MDc5MTQxM30=
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/match?publisher_dsp_id=313&dsp_callback=1&external_user_id=ID5-333fxi5yj1M1ubhexUUpDr2wTSTyMeBelTLXB3lPxQ&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F123%2F124%2F3%2F7.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=150b273d-17b2-43a7-9ebc-3b0e5e51544e; tuuid_lu=1728060795
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060793739&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A48%2C%22ts%22%3A1728060796073%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A47%2C%22ts%22%3A1728060796073%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A18%2C%22ts%22%3A1728060796073%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=5&_ls=44&_cc=us&_pl=d&_b=chrome%40117&_cbid=74jp&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=10
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060796073.3&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=9826AC8C9481453CA0CCB86472583A83
Source: global traffic	HTTP traffic detected: GET /s/59742?bidder_id=220889&bidder_uuid=2bTZ-XLf1j4VpqMQv8AmydUAp-234ohjro6HXY-pKZs8 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChAKBgj1ARCEGQoGCKIBEIQZ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060796073.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /getuid?p=1625&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6bqoi0v%26referrer_pid%3Dgdomg51%26uid%3D%25rlid%25 HTTP/1.1Host: api.retargetly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060796073.2 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdew.5VnxF7Qk0ilYDNzxGUc7Vpaaj8A
Source: global traffic	HTTP traffic detected: GET /?partner=147&mapped=be21c7ae-c478-4910-a1f5-36cf19986949&icm&gdpr=0&gdpr_consent=&cver HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1; done_redirects219=1; done_redirects282=1; done_redirects147=1
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060796073.6&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=9826AC8C9481453CA0CCB86472583A83
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060796073.4 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060796073.5 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdew.5VnxF7Qk0ilYDNzxGUc7Vpaaj8A
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060793391.10 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdew.5VnxF7Qk0ilYDNzxGUc7Vpaaj8A
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060796073.7 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=150&cm=2OWliCrjsb7pGe0jUgVyn14cC6KaJmeViBn6EriDIKcE HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060796073.8 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfA.o9o6Kt8633h008qDZ1rAYN44tlk
Source: global traffic	HTTP traffic detected: GET /getuid?p=1625&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6bqoi0v%26referrer_pid%3Dgdomg51%26uid%3D%25rlid%25&_rlid=4b516ec7-30ad-45dd-b590-1aedbf0d63a3 HTTP/1.1Host: api.retargetly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rlid=4b516ec7-30ad-45dd-b590-1aedbf0d63a3
Source: global traffic	HTTP traffic detected: GET /cq/123/124/3/7.gif?puid=150b273d-17b2-43a7-9ebc-3b0e5e51544e&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=2#1728060786422#308420009#4583622392117192460|1242#1728060790318#144248393|123#1728060782401#-108999558|796#1728060784544#788199015|108#1728060793567#-1177914473|429#1728060788158#-385382141#D90AAAEE-B744-4BF2-957E-3A5D817DFE99
Source: global traffic	HTTP traffic detected: GET /s/59742?bidder_id=220889&bidder_uuid=2bTZ-XLf1j4VpqMQv8AmydUAp-234ohjro6HXY-pKZs8 HTTP/1.1Host: i6.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060796073.9 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060795.6292577 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfA.o9o6Kt8633h008qDZ1rAYN44tlk
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF4dAGcCEE8wPAsBj9cCQNL1kONtvYoFEgEBAQFuAWcKZ9xA0iMA_eMAAA&S=AQAAAou9ft8ityRCwhS7T5jVurg; IDSYNC="19bk~2l2g:19cl~2l2g"
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060796073.11 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pushpull?pid=6b6d3924-92d3-4998-bf20-3f75688546c0&dmp=6b6d3924-92d3-4998-bf20-3f75688546c0&uid=2I-ioy5vngYdyvzKCtshnW7-Y9jkQZlEzztWW3mKpSlE&cb=1728060797&src=www&type=100&return-unstable=true&g=1&redirect=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dm5ri0ru%26uid%3D%24BROWSER_ID HTTP/1.1Host: ws.rqtrk.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060796073.10 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfA.o9o6Kt8633h008qDZ1rAYN44tlk
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060796073.12 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfQ.R4DJ0PMwK_SUsqLG7oWR3zhZvZM
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ups/58679/cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF4dAGcCEE8wPAsBj9cCQNL1kONtvYoFEgEBAQFuAWcKZ9xA0iMA_eMAAA&S=AQAAAou9ft8ityRCwhS7T5jVurg; IDSYNC="19bk~2l2g:19cl~2l2g"
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060794.3741665 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfg.hsZWvaJ87NFlv3Ry_TXz4eq_d4c
Source: global traffic	HTTP traffic detected: GET /match?bid=m5ri0ru&uid=260ac813-b367-4125-97c9-1aede9aac5d9 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060795.6292577 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChsKBgj1ARCEGQoGCKIBEIQZCgkI_____wcQjhk; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060797.4318159 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfg.hsZWvaJ87NFlv3Ry_TXz4eq_d4c
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A48%2C%22ts%22%3A1728060796339%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A47%2C%22ts%22%3A1728060796339%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A48%2C%22ts%22%3A1728060796339%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A47%2C%22ts%22%3A1728060796339%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060797.425818 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfg.hsZWvaJ87NFlv3Ry_TXz4eq_d4c
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=30&p=59&cp=id5&cu=1&url=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F203%2F2%2F8.gif%3Fpuid%3D%40%40CRITEO_USERID%40%40%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: dis.eu.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=6bqoi0v&referrer_pid=gdomg51&uid=4b516ec7-30ad-45dd-b590-1aedbf0d63a3 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: (g.sk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.sk(c,"www.youtube.com"),d=c.toString()):(c=nwa(d),xE(c)&&(d=c));c=new g.kM(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=wE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)||"")||wE(this.nf)||this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"||this.N?d=xs(d,h,MJa):h&&(d="embedded");this.Ja=d;Vqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(NJa,d);!d||f&&!this.N||(h=d);this.playerStyle=h;this.K=g.Vb(NJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: Jo.prototype.Ia=function(){return this.C};var pna=(new Date).getTime();var ula="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),vla=/\bocr\b/;var xla=/(?:\[|%5B)([a-zA-Z0-9_]+)(?:\]|%5D)/g;var abb=0,bbb=0,cbb=0;var So;g.Lo=null;g.No=!1;g.To=1;So=Symbol("SIGNAL");g.Uo={version:0,r_:0,Qm:!1,fg:void 0,Ry:void 0,Dn:void 0,KL:0,ij:void 0,Ru:void 0,ZE:!1,oP:!1,O1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: RIa=function(a,b){if(!a.j["0"]){var c=new iG("0","fakesb",{video:new eG(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new CN(new g.kM("http://www.youtube.com/videoplayback"),c,"fake"):new TN(new g.kM("http://www.youtube.com/videoplayback"),c,new nN(0,0),new nN(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Vi(a,{hl:d})),this.Dd(DY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.BY(a.errorMessage)):this.Dd(DY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Vi(c, equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,RF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Gd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Wt)(),uT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Gd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: a.ismb);this.cq?(r=a.vss_host||"s.youtube.com",r==="s.youtube.com"&&(r=GP(this.Ca)||"www.youtube.com")):r="video.google.com";this.Tn=r;HP(this,a,!0);this.La=new bP;g.P(this,this.La);q=b?b.innertubeApiKey:zs("",a.innertube_api_key);p=b?b.innertubeApiVersion:zs("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:zs("",a.innertube_context_client_version);q=g.nr("INNERTUBE_API_KEY")||q;p=g.nr("INNERTUBE_API_VERSION")||p;l=g.nr("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=VO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C||(b=g.LP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.RR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.OE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: g.LP=function(a){a=GP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: g.YP=function(a){var b=g.LP(a);XJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.LP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.CP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),ou&&(a=fna())&&(b.ebc=a));return g.Vi(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)||(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV|STB|GAME|OTT|ATV|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(XO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.zO(this.B)?yO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: var Q2={};var beb={Gs:[{Fs:/Unable to load player module/,weight:20},{Fs:/Failed to fetch/,weight:500},{Fs:/XHR API fetch failed/,weight:10},{Fs:/JSON parsing failed after XHR fetch/,weight:10},{Fs:/Retrying OnePlatform request/,weight:10},{Fs:/CSN Missing or undefined during playback association/,weight:100},{Fs:/Non-recoverable error. Do not retry./,weight:0},{Fs:/Internal Error. Retry with an exponential backoff./,weight:0},{Fs:/API disabled by application./,weight:0}],Mr:[{callback:U7a,weight:500}]};var g8a=/[&\?]action_proxy=1/,f8a=/[&\?]token=([\w-]*)/,h8a=/[&\?]video_id=([\w-]*)/,i8a=/[&\?]index=([\d-]*)/,j8a=/[&\?]m_pos_ms=([\d-]*)/,l8a=/[&\?]vvt=([\w-]*)/,Y7a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),k8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),a8a={android:"ANDROID", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: nirothniroth.site
Source: global traffic	DNS traffic detected: DNS query: obliquecensortend.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: waust.at
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: thestalls168.store
Source: global traffic	DNS traffic detected: DNS query: t.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: whos.amung.us
Source: global traffic	DNS traffic detected: DNS query: pxdrop.lijit.com
Source: global traffic	DNS traffic detected: DNS query: pd.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: cdn.tynt.com
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: t.dtscdn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: t.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ic.tynt.com
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: cdn-tc.33across.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: a.dtssrv.com
Source: global traffic	DNS traffic detected: DNS query: sync.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: c.cintnetworks.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: api.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: aqfer.lijit.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: global.ib-ibi.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: track2.securedvisit.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: agent.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: ib.mookie1.com
Source: global traffic	DNS traffic detected: DNS query: loadm.exelator.com
Source: global traffic	DNS traffic detected: DNS query: i6.liadm.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: sync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: loadus.exelator.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: i.w55c.net
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: spl.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: stags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: ums.acuityplatform.com
Source: global traffic	DNS traffic detected: DNS query: ads.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: eyeota.ck-ie.com
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: secure.insightexpressai.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: ice.360yield.com
Source: global traffic	DNS traffic detected: DNS query: api.retargetly.com
Source: global traffic	DNS traffic detected: DNS query: aorta.clickagy.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ws.rqtrk.eu
Source: global traffic	DNS traffic detected: DNS query: dis.eu.criteo.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: pixel.nordicdataresources.net
Source: global traffic	DNS traffic detected: DNS query: sync.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: abcusanews.com
Source: global traffic	DNS traffic detected: DNS query: ustalknews.store
Source: global traffic	DNS traffic detected: DNS query: pulors.xyz
Source: global traffic	DNS traffic detected: DNS query: anotherniv.store

Source: unknown

HTTP traffic detected: POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveContent-Length: 10459sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1728060750039&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C800%2C637&vis=1&wgl=true&ca_type=imagesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Goog-Request-Time: 1728060754853Content-Type: application/jsonX-Goog-Event-Time: 1728060754852X-YouTube-Utc-Offset: -240X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20241001.01.00X-YouTube-Time-Zone: America/New_YorkX-Goog-Visitor-Id: CgsxQVV1S0U2bFEyUSjMuoC4BjIKCgJVUxIEGgAgPA%3D%3Dsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundserver: nginxdate: Fri, 04 Oct 2024 16:53:41 GMTcontent-type: text/htmlvary: Accept-Encodingage: 0x-cache: MISStransfer-encoding: chunkedstrict-transport-security: max-age=15768000connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundserver: nginxdate: Fri, 04 Oct 2024 16:53:42 GMTcontent-type: text/htmlvary: Accept-Encodingage: 0x-cache: MISScontent-length: 548strict-transport-security: max-age=15768000connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:26 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:26 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:26 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:26 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:27 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:27 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:27 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:28 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:28 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:29 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:51 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:51 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:52 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:52 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:52 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:52 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:53 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:53 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:53 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:54 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:10 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:10 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:10 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:10 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:11 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:11 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:11 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:11 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:12 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:13 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:38 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:38 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:38 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:40 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:40 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:40 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:44 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:44 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:44 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:44 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com

Source: chromecache_381.2.dr, chromecache_207.2.dr, chromecache_269.2.dr, chromecache_347.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_269.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_224.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_187.2.dr	String found in binary or memory: https://a.dtssrv.com/a?i=
Source: chromecache_293.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.json?sid=9202507693
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_258.2.dr, chromecache_398.2.dr, chromecache_291.2.dr, chromecache_421.2.dr	String found in binary or memory: https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_293.2.dr	String found in binary or memory: https://c.cintnetworks.com/identity?a=5461&gdpr=0&id=Lotame:af47c46d5a39f249ad744e970df11157
Source: chromecache_293.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=YWY0N2M0NmQ1YTM5ZjI0OWFkNzQ0ZTk3M
Source: chromecache_293.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=YWY0N2M0NmQ1YTM5ZjI0OWFkNzQ0ZTk3MG
Source: chromecache_293.2.dr	String found in binary or memory: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/af47c46d5a39f249ad744e970df11157/ur
Source: chromecache_293.2.dr	String found in binary or memory: https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fm
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_381.2.dr, chromecache_207.2.dr, chromecache_269.2.dr, chromecache_347.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_293.2.dr	String found in binary or memory: https://global.ib-ibi.com/image.sbxx?go=262106&pid=420&xid=af47c46d5a39f249ad744e970df11157
Source: chromecache_293.2.dr	String found in binary or memory: https://i.liadm.com/s/41715?bidder_id=127211&bidder_uuid=af47c46d5a39f249ad744e970df11157
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_293.2.dr	String found in binary or memory: https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_293.2.dr	String found in binary or memory: https://loadus.exelator.com/load/?p=204&g=260&buid=af47c46d5a39f249ad744e970df11157&j=0&gdpr=0
Source: chromecache_293.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0
Source: chromecache_293.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0
Source: chromecache_293.2.dr	String found in binary or memory: https://ml314.com/utsync.ashx?eid=50146&et=0&fp=af47c46d5a39f249ad744e970df11157&gdpr=0
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_187.2.dr, chromecache_192.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout
Source: chromecache_402.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout?_t_=px&url=
Source: chromecache_402.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/error?e=
Source: chromecache_293.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntr
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_297.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_338.2.dr, chromecache_187.2.dr, chromecache_192.2.dr, chromecache_371.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=137085098&mapped=
Source: chromecache_293.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=af47c46d5a39f249ad744e
Source: chromecache_347.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_293.2.dr	String found in binary or memory: https://ps.eyeota.net/match?bid=51mdg9u&uid=af47c46d5a39f249ad744e970df11157&gdpr=0
Source: chromecache_269.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_293.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%
Source: chromecache_293.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/ium?sourceid=11&uid=af47c46d5a39f249ad744e970df11157&gdpr=0
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_269.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_293.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/bsTd8NdE?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap
Source: chromecache_293.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/
Source: chromecache_293.2.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%
Source: chromecache_293.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_297.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_338.2.dr, chromecache_187.2.dr, chromecache_192.2.dr, chromecache_371.2.dr	String found in binary or memory: https://t.dtscdn.com/widget/?d=
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_297.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_338.2.dr, chromecache_187.2.dr, chromecache_192.2.dr, chromecache_371.2.dr	String found in binary or memory: https://t.dtscout.com/idg/?su=
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_297.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_338.2.dr, chromecache_187.2.dr, chromecache_192.2.dr, chromecache_371.2.dr	String found in binary or memory: https://t.dtscout.com/pv/
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_297.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_338.2.dr, chromecache_187.2.dr, chromecache_192.2.dr, chromecache_371.2.dr	String found in binary or memory: https://t.dtscout.com/udg/?su=
Source: chromecache_402.2.dr	String found in binary or memory: https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=
Source: chromecache_372.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/16311/sync.min.js
Source: chromecache_224.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_187.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/3825/lt.min.js
Source: chromecache_293.2.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=7&puid=af47c46d5a39f249ad744e970df11157&gdpr=0
Source: chromecache_293.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_357.2.dr, chromecache_174.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_269.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 50992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 50964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 50893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 50799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50386 version: TLS 1.2

System Summary

Source: classification engine

Classification label: mal48.phis.troj.win@42/425@406/100

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2620 --field-trial-handle=2244,i,17838629162654032124,6020297460358612302,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2620 --field-trial-handle=2244,i,17838629162654032124,6020297460358612302,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Source: chromecache_238.2.dr, chromecache_246.2.dr

Binary or memory string: QeMU5V<