Play interactive tourEdit tour

Windows Analysis Report
http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg

Overview

General Information

Sample URL:	http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg
Analysis ID:	1526102
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains obfuscated javascript

Performs DNS queries to domains with low reputation

Found iframes

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Suspicious form URL found

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

HTML page contains obfuscated javascript

Source: https://aqfer.lijit.com/samples/empty.js

HTTP Parser: (function(){})()

Found iframes

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=10401728060750FF13A5CAA71E77004B
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=10401728060750FF13A5CAA71E77004B
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.40497007869512736&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060753647&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=10401728060750FF13A5CAA71E77004B
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.40497007869512736&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060753647&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.13922402065348716&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060769303&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=10401728060750FF13A5CAA71E77004B
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.40497007869512736&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060753647&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Iframe src: https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.6403823838867404&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060777362&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.7304689290372415&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060796059&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.7304689290372415&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060796059&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.6403823838867404&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060777362&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=page_id%3D2&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=17	HTTP Parser: Iframe src: https://www.youtube.com/embed/J1zRwo_-LAk
Source: http://nirothniroth.site/?p=17	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D17&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/vvGk67y305g
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: https://www.youtube.com/embed/K9lf0UFwp6Y
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=22	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.6403823838867404&stid=ZHkABGcAHU8AAAAIbwOvAw%253D%253D&tt=t.dhj&dhjLcy=1728060777362&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=nirothniroth.site&pn=%2F&qs=p%3D22&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&cc=US&cont=NA&ipaddr=
Source: http://nirothniroth.site/?p=14	HTTP Parser: Iframe src: https://www.youtube.com/embed/J1zRwo_-LAk?feature=oembed
Source: http://nirothniroth.site/?p=14	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=nirothniroth.site&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=p%3D14&rdn=nirothniroth.site&rpn=%2F&rqs=p%3D17&cc=US&cont=NA&ipaddr=

HTML title does not match URL

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Title: Hollywood announced about the Legendary actor Sylvester Stallone, He has been confirm as See more1946_2024.,. - nirothniroth.site does not match URL
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Title: Hollywood announced about the Legendary actor Sylvester Stallone, He has been confirm as See more1946_2024.,. - nirothniroth.site does not match URL
Source: http://nirothniroth.site/?p=22	HTTP Parser: Title: Hollywood announced about the Legendary actor Sylvester Stallone, He has been confirm as See more1946_2024.,. - nirothniroth.site does not match URL
Source: http://nirothniroth.site/?p=17	HTTP Parser: Title: Hollywood Reports Very Sad News About Angelina Jolie, She Is Confirmed AsSee more - nirothniroth.site does not match URL
Source: http://nirothniroth.site/?p=14	HTTP Parser: Title: #1007Hollywood Reports Very Sad News About Angelina Jolie, She Is Confirmed AsSee More #14https://pulors.xyz/?p=31 - nirothniroth.site does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Has password / email / username input fields
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Has password / email / username input fields
Source: http://nirothniroth.site/?p=22	HTTP Parser: Has password / email / username input fields
Source: http://nirothniroth.site/?p=17	HTTP Parser: Has password / email / username input fields
Source: http://nirothniroth.site/?p=14	HTTP Parser: Has password / email / username input fields

Suspicious form URL found

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=17	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=22	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php
Source: http://nirothniroth.site/?p=14	HTTP Parser: Form action: http://nirothniroth.site/wp-comments-post.php

HTML page is missing a favicon

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?page_id=2	HTTP Parser: No favicon
Source: http://nirothniroth.site/?page_id=2	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?cat=1	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=17	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=22	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=14	HTTP Parser: No favicon
Source: http://nirothniroth.site/?p=14	HTTP Parser: No favicon

META copyright tag missing

Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22#respond	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=17	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=22	HTTP Parser: No <meta name="copyright".. found
Source: http://nirothniroth.site/?p=14	HTTP Parser: No <meta name="copyright".. found

Compliance

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50386 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: pulors.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: pulors.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: pulors.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: pulors.xyz

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.11.178
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.11.178
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Downloads compressed data via HTTP

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Fri, 04 Oct 2024 16:50:48 GMTcontent-type: text/html; charset=UTF-8vary: Accept-Encodingx-pingback: http://nirothniroth.site/xmlrpc.phplink: <http://nirothniroth.site/index.php?rest_route=/>; rel="https://api.w.org/"link: <http://nirothniroth.site/index.php?rest_route=/wp/v2/posts/22>; rel="alternate"; title="JSON"; type="application/json"link: <http://nirothniroth.site/?p=22>; rel=shortlinkx-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockcache-control: publicreferrer-policy: strict-origin-when-cross-origincontent-encoding: gzipx-cacheable: YESage: 96accept-ranges: bytesx-cache: HITcontent-length: 40992Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd db 72 db 48 b2 28 fa 3c 8a 58 ff 00 a1 77 cb 44 0b a4 00 f0 4e 0a f2 a6 2e b6 d5 96 6c 8d 28 bb 3d a3 d6 52 80 00 48 a2 05 12 34 40 4a 62 8b 8a 58 ff 70 9e 76 c4 39 af 3b e2 7c c7 f9 93 f5 25 27 33 ab 0a 00 49 90 92 2f 3d 3d b3 63 1c 16 58 a8 ca ca ca ca ca ca ca ac 1b 76 37 9d c0 1e 4f 47 ae d4 1f 0f fc bd ff d8 d8 c5 5f c9 b7 86 3d 53 76 87 f9 0f 6d 99 22 5d cb 81 df bf ec 0e dc b1 25 d9 7d 2b 8c dc b1 29 7f b8 78 95 af c9 49 c2 d0 1a b8 a6 7c eb b9 77 a3 20 1c cb 92 1d 0c c7 ee 10 00 ef 3c 67 dc 37 1d f7 d6 b3 dd 3c bd a8 92 37 f4 c6 9e e5 e7 23 db f2 5d 53 67 68 7c 6f 78 23 85 ae 6f ca a3 30 e8 7a be 2b 4b fd d0 ed 9a 72 7f 3c 1e 45 8d 9d 9d de 60 d4 2b 04 61 6f e7 be 3b dc d1 29 d7 7c f1 2f c2 a0 13 8c a3 17 71 e1 2f bc a1 e3 de ab 52 37 f0 fd e0 4e 95 06 d6 7d de 1b 58 3d 37 3f 0a 5d a4 b5 e1 5b 61 cf 65 09 d1 d0 1b 8d dc 71 23 af b3 f7 5b cf 71 83 18 30 af bf 90 76 f6 36 a0 bc cd 7c 5e ba e8 7b 91 14 79 63 57 82 df 60 34 f6 06 de ef ae 23 dd 79 e3 be 34 ee bb d2 df 02 2b 1a 4b ed a3 f7 d2 c8 9f f4 bc a1 74 6b 14 0b 25 29 2f 89 ba 4c 11 a0 60 07 83 9d bb 20 74 a0 90 28 da 61 a0 d1 4e e4 06 3b 52 3e bf 07 65 8d bd b1 ef ee bd 01 f2 a7 77 41 e0 48 d6 70 18 4c 86 36 14 65 75 82 c9 98 ca 3a 71 7b ee d0 b1 c2 a9 64 d9 e3 20 94 da 53 ff d6 8d c6 2e 84 c6 16 d4 7b 08 f5 7b 03 8d 6c 45 52 c7 75 87 c8 9c ae 17 0e 24 2b fa ef ff fa df 52 db 75 a5 41 10 ba 7a bd 54 b9 36 34 a3 04 91 05 15 1f 40 ed d0 0b 83 71 9f 3d 0b 58 dd dd 1d 46 d1 5c 73 d9 d6 30 18 7a d0 94 e9 06 83 3a Data Ascii: rH(<XwDN.l(=RH4@JbXpv9;|%'3I/==cXv7OG_=Svm"]%}+)xI|w <g7<7#]Sgh|ox#o0z+Kr<E`+ao;)|/q/R7N}X=7?][aeq#[q0v6|^{ycW`4#y4+Ktk%)/L` t(aN;R>ewAHpL6eu:q{d S.{{lERu$+RuAzT64@q=XF\s0z:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Wed, 04 Sep 2024 16:49:19 GMTetag: "66d88f8f-1b72b"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: text/cssvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63061accept-ranges: bytesx-cache: HITcontent-length: 14841Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d db 8e e3 38 b2 e0 fb 7e 85 a6 1a 8d 93 ae 4e 65 fb 9e 4e 7b ba 30 d8 03 ec 17 ec 02 67 d1 28 24 64 89 4e 6b 4a b6 3c 92 9c 59 d9 46 9d df da f7 fd b2 e5 4d 12 2f 41 8a b2 a9 aa 9e d9 53 89 ca b4 25 32 22 18 0c 5e 22 18 8c f8 5b bc 8f 8a 12 55 c1 87 ff f5 3f ff 47 b8 fa b0 79 78 3b 85 db 2c 8f bf 84 51 11 ef d3 57 54 5e b6 f9 d7 b0 4c ff 48 8f 2f eb 6d 5e 24 a8 08 f1 93 6f 7a c1 30 29 f2 53 92 bf 1d 83 2c da a2 ec 92 a4 e5 29 8b de d7 b4 94 58 fe 35 aa a2 e2 92 a5 47 14 ee 51 fa b2 af d6 63 ed f5 bd fa 20 48 0f 2f dd a4 d0 a2 0f 51 96 be 1c 63 74 ac 50 71 a9 d0 d7 2a a4 0f d6 ec 89 58 fc 9c a4 79 37 50 52 2a 58 bf ed 51 81 ee 76 e9 4b 1c 9d aa 34 3f 8e 2e 87 a8 78 49 8f b8 74 55 e5 87 f5 04 1d 36 fc 49 95 9f d6 0f 0b 74 d0 80 30 84 07 5c e4 2d 4d aa fd 7a 36 1e 9f be 6e d8 e7 c9 78 fc b3 50 61 7b c6 50 8f cf cf 98 4d 5f 60 12 37 f1 b9 28 f3 62 7d ca 53 d2 ae 4d cd ef f4 48 59 4b c1 6c b4 e6 6f de 30 80 70 5b a0 e8 cb 9a fe 0e c9 03 03 62 67 4e ea 95 0a d2 b1 62 1d fa e0 1b 67 23 5c 73 74 e1 ad 2b a2 24 3d 97 eb 27 fc 0f f3 87 b6 7e 1f 61 d1 5a 1f f3 23 da 9c a2 24 21 ac 88 a3 2c be 7b 58 2e 1f d1 21 f8 25 98 9e be 8e 02 fa 68 f2 30 9b cd 9a 67 8c 05 09 8a f3 22 22 fd 46 61 68 a4 ff 5e 56 ef 19 fa f8 9b 52 f8 73 60 e8 11 15 68 7a c4 ed 4a 2b 0d 6e f9 49 7d f2 b0 8f ca 30 3e 97 58 66 98 14 60 39 fa ca e5 01 24 cd 01 84 89 4a 8b 64 d9 a1 ee f2 63 45 24 0e 99 20 37 05 fa b4 5c 03 45 e9 0b a7 0b 4e 28 ed bd e9 e2 e7 20 0c 5e a3 e2 2e 0c 71 85 90 76 4c c8 2b be 44 a7 fb 80 0c ad d1 c7 87 c7 c5 e8 06 a4 8b b1 88 74 31 76 44 7a 13 ce 47 a9 a1 8f ae 0d 9d de 84 14 f7 fe 65 97 a1 af e1 36 2a d3 92 0a 83 6d c6 29 1f d2 32 7c 45 45 95 62 22 fb 77 21 ee 3d 4f 20 9b 0e 5a 78 a3 b2 e1 ff 23 40 25 81 c8 ba a0 fc c7 39 2a 50 72 0f 8b 7e 67 3d Data Ascii: }8~NeN{0g($dNkJ<YFM/AS%2"^"[U?Gyx;,QWT^LH/m^$oz0)S,)X5GQc H/QctPq*Xy7PR*XQvK4?.xItU6It0\-Mz6nxPa{PM_`7(b}SMHYKlo0p[bgNbg#\st+$='~aZ#$!,{X.!%h0g""Fah^VRs`hzJ+nI}0>Xf`9$JdcE$ 7\EN( ^.qvL+Dt1vDzGe6*
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Fri, 09 Jun 2023 05:49:24 GMTetag: "6482bd64-3509"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63061accept-ranges: bytesx-cache: HITcontent-length: 4872Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 1b 6b 73 db b8 f1 7b 7f 05 8d cb c8 44 04 51 76 72 fd 22 85 d1 38 b1 5d e7 e6 9c 87 9d 6b 3a 23 2b 1e 9a 84 24 c6 14 a1 80 a0 25 9d a5 fe f6 ee 02 7c 4a 94 93 5e fb c5 02 40 60 77 b1 2f ec 2e e0 ee f3 03 eb db a7 94 cb 95 75 19 4e a4 a7 b8 f5 f0 d2 f9 d5 39 b6 d6 96 ed 53 eb c3 9c c7 bf 5d 5b e7 22 8d 03 4f 85 22 b6 bc 38 b0 84 9a 72 69 f9 22 56 32 bc 4b 95 90 09 4c ff f6 1d c1 38 42 4e ba 51 e8 f3 38 e1 d6 f3 ee df 08 2c e4 e3 30 e6 01 71 5d b5 9a 73 31 ce 10 3a 33 83 f0 32 55 bc d5 b2 77 07 dd 83 23 ca c6 69 ec 23 5e 5b d1 47 92 02 cc 04 70 fa 8a f4 49 fe a5 84 6b 10 b5 5a e6 d7 f1 66 c1 c0 34 ed 21 31 d4 91 51 09 90 d3 47 c9 55 2a 63 4b d9 9c 2d c2 38 10 0b ba a1 3d 22 ee be 71 c0 50 80 9d 89 20 8d 00 ac f9 75 f8 72 2e a4 4a 06 f5 ae ab 6c c9 bf a7 a1 e4 76 8e 8b e6 40 7b 2a db 5d 81 c5 2e a8 48 58 bc b5 b1 fc 93 c5 2b 24 1e bd 72 4b c2 19 f0 62 2c a4 fd e0 49 4b ba dd af f6 4d d0 a6 37 4e f5 a7 cb 62 57 02 6d dc 07 20 eb f5 70 c4 44 de 57 a6 ef b9 c7 7d ef 95 fb b2 ef b5 db f4 31 1c db 6d 31 f4 46 af da 31 fc a5 19 d6 e3 3e 8e c7 7a 5c 94 e3 9d e3 4d 4e d6 c6 4e 9c 71 ec 98 1d 33 4e 37 49 2e c1 7f 72 99 00 b5 2e d1 ea 44 fa 48 ac 72 3f 68 de 3a be e4 30 c5 8e d3 28 a2 fd 62 c9 69 98 78 77 11 ff e8 29 7f ca 93 72 c3 e5 6e b9 7b d4 e7 af 3c 39 49 67 3c 56 89 13 f1 78 a2 a6 7d 0e 5b 50 c3 62 78 c8 47 23 50 9e 0d 2b 20 9f c5 7f 1d 70 c0 23 0e 66 b1 05 bf 02 fc 5d a2 01 1b 1c 81 bb ab 60 07 0a 56 6c 58 ec 80 c5 24 02 55 a9 68 3a 91 98 80 f2 27 ad 16 e8 cd 4b e7 c8 39 22 b4 d5 3a 80 ce df 4d 67 bd ae cd b5 c9 6f 9f 2e df fd e3 ea e4 f3 59 2f 37 dc 97 ce b2 f3 ab b3 b4 ae ce 3e fd f1 ee ea ec 14 14 af a0 ed 8b 27 e3 30 9e 24 5b 28 6b 60 72 c3 9f 47 e9 24 8c ad 48 78 01 0f ac 59 1a a9 70 1e c1 c6 Data Ascii: ks{DQvr"8]k:#+$%|J^@`w/.uN9S]["O"8ri"V2KL8BNQ8,0q]s1:32Uw#i#^[GpIkZf4!1QGU*cK-8="qP ur.Jlv@{*].HX+$rKb,IKM7NbWm pDW}1m1F1>z\MNNq3N7I.r.DHr?h:0(bixw)rn{<9Ig<Vx}[PbxG#P+ p#f]`VlX$Uh:'K9":Mgo.Y/7>'0$[(k`rG$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-23954"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: text/cssvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63061accept-ranges: bytesx-cache: HITcontent-length: 21828Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd 5b 8f e4 38 96 26 f8 de 40 ff 07 df 1a 0c 26 73 36 94 a9 ab c9 2c 0b 58 74 56 56 25 d0 40 2f 76 80 99 7e 18 60 5f 28 89 32 53 b8 4c 52 ea e2 1e 16 83 f9 ef 4b 52 32 77 3b 14 f9 51 f2 ca aa 9e de 89 42 56 b8 bb d9 f9 78 78 e7 e1 e1 b9 fc f8 9f ff 8f 7f fc 87 a7 ff fc f4 6b db 8c 4f 3f bf f2 a1 bd f2 a7 5f 7b ce 9f 0e 3f 04 3f 04 4f d9 ed e9 9f 4a f1 1d 5b be f2 9e 2e e3 d8 0d 3f fd f8 e3 c3 a7 3f e4 ed 55 95 f2 2f 55 ce 9b 01 50 fd 58 cf 14 3f 96 92 c5 77 ff 9c b7 cd f0 d3 d3 2f bf 3c fd e9 bf 3f c5 3f f8 9f 54 3d c4 27 ff f5 9f ff e5 e9 ff f9 f5 5f 9e 44 15 3e 3d fd d2 16 fc a7 a7 ff fb 9f ff db bd fc ef 15 b3 5f da ee d6 57 e7 cb f8 14 fa 61 a8 90 95 2c ef d3 d3 3f 37 f9 0f 92 e4 c7 7f fc 87 1f 4a f6 f4 3f c4 ef 4f b2 22 5e c9 ae 55 7d fb e9 e9 85 f5 df 79 e2 2f 6f 18 6f 35 5f 3e fe f4 f4 07 d2 0b 07 d5 0f 7f f8 fe 8f 6f f0 57 2e d9 e9 f0 4f 4f 27 df ff fe 8f 4f ff f3 1f ff 41 f1 fb a4 fe 1d e6 1f de d0 d6 55 31 ff de 2f 1f f5 fc 3c d5 f7 bf ea e5 c3 5a 16 3d ff be fc f0 c6 4b d5 cc bf 2e 05 78 c5 d4 8e 6d c3 e7 bf b2 e5 c3 ac 67 4d 31 cc ad f4 ae ed 57 af 1d be 78 aa be c3 b5 6d 65 21 e7 9f 9e ce 3d bb 0d 39 ab b9 6a 8d 68 49 f6 5c 8d 2b 2a 26 ba 90 d5 15 1b 78 a1 e8 8a 6a e8 6a f6 d8 61 cb 27 9f 9e aa a6 ae 1a ee 65 75 9b 3f 3f 74 91 ea 91 9f 9e 9a b6 bf b2 fa fd 63 81 af 44 e1 e4 0b 85 bf 2c 5d 1a a8 8f 46 fe 65 14 dd d3 14 bc 9f eb 33 8d ed 7b c7 7a c1 97 87 b1 1c aa af 82 51 c0 af 0f 04 e1 9a 20 24 04 d1 9a 20 22 04 f1 9a 20 26 04 c9 9a 20 21 04 87 35 c1 81 10 a4 6b 82 94 10 1c d7 04 47 42 70 5a 13 9c 08 41 e0 1b 7a ca d7 ba 6a 58 91 f8 3f 1c 42 d9 98 d5 e8 f8 3f 04 cb c7 2f bc 17 ab 8c d5 9e 98 26 e7 46 7e 13 86 b4 fd c6 72 53 4b b1 fe 31 8a 22 6b d1 81 56 f4 70 35 14 7d b4 96 9d 06 b1 bd 6c 3f 89 12 da ed f5 79 dd 67 Data Ascii: [8&@&s6,XtVV%@/v~`_(2SLRKR2w;QBVxxkO?_{??OJ[.??U/UPX?w/<??T='_D>=_Wa,?7J?O"^U}y/oo5_>oW.OO'OAU1/<Z=K.xmgM1Wxme!=9jhI\+*&xjja'eu??tcD,]Fe3{zQ $ " & !5kGBpZAzjX?B?/
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-c6e5"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: text/cssvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63061accept-ranges: bytesx-cache: HITcontent-length: 10076Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d eb 8e db 46 96 f0 6f 1b f0 3b 70 6c 7c 88 ed 11 65 51 12 d5 17 63 82 cd c5 ce 66 90 d8 46 e2 ec 60 31 1b 8c 29 89 92 38 4d 91 5a 92 72 bb 93 0d f0 bd c6 be de 3e c9 9e 53 37 d6 e5 14 49 75 77 66 17 db 4e ec 56 5d 4e 9d aa 3a f7 3a 55 7a f1 fc 0f 8f 1e be df a5 fb 34 78 93 ec d3 cb e0 f5 b1 b8 ba 09 be cc cb ad 2c ff e9 87 6f 2f 83 5d d3 1c ea cb 17 2f ae af af c7 ab 2a db d7 65 d1 60 6d 3d 5e 95 fb 17 eb f2 ba c8 cb 64 5d bf d8 60 f7 70 c9 ba 7f 71 6c 76 65 75 19 7c c5 db 07 0c 5c 2d cb 87 c0 7d f4 f0 eb b4 86 e2 43 93 95 c5 25 00 c8 ea a0 6e 6e f2 ac de 05 49 b1 0e d2 3c dd 26 45 13 b0 2e c1 2e a9 83 65 9a 16 c1 3e 59 a7 c1 75 d6 60 a3 20 dd 1f a0 02 3a 02 06 cb 34 39 36 37 ac eb 26 a9 77 19 16 01 aa db ac d8 b2 c2 ac 09 ae 01 c8 3a ad b3 6d 91 ae 39 0c a3 65 5a d5 41 06 23 64 c5 7a 1c bc fa 98 56 37 65 91 06 2b 18 e7 df 8f d9 ea 2a e7 c0 53 18 10 7e ad d3 26 38 1e 10 bb ac 0a ae d3 65 9d 35 02 2f be ca 08 91 35 2a 37 41 d2 34 55 b2 6a b2 8f 30 8f 72 9f 1e 92 6d 5a 33 58 ab a4 4a 37 c7 1c c0 29 b4 78 3f 58 07 58 a6 71 bb 61 01 4c 32 09 56 79 0a d8 60 4f 40 32 db 27 39 6f ce 96 68 3c c6 4d 08 0e 69 b5 49 57 0d 02 6c b2 22 c1 c5 0d 36 b0 23 29 ce 27 38 54 e5 26 ad 6b 28 84 be c1 6b 3e fb 51 90 67 50 8a 63 8e 02 c0 f4 63 9a cb 05 61 63 f1 22 f8 00 38 ec d2 2a fd 83 46 48 e6 9a e2 40 49 9e 07 fb 72 9d 56 80 e8 fa 63 5a 34 c7 2a 15 20 00 c6 88 d5 37 37 07 58 01 58 19 b9 fe 38 0c df c0 51 70 bd 2b 83 22 05 68 4d 19 ac aa 34 69 d8 a4 6a 86 32 5f 1d 5c 6a 07 53 b6 f6 75 b6 3f e4 29 5f 5b ec 8a 4b be 81 7f 01 07 be e2 e9 06 57 a7 46 d8 fb e4 2a 0d a0 d1 1a f7 7d 93 02 a8 06 d7 0f 96 b8 46 94 01 3b ac 44 f2 61 a3 1e ca ba e1 30 92 aa c9 56 b8 3f c1 b7 9b e0 a6 3c 42 01 0c 49 2c 19 9b 2f 00 2d 80 f8 fe eb ff ff 27 ee a0 dc 9e d5 ae cc 56 Data Ascii: }Fo;pl|eQcfF`1)8MZr>S7IuwfNV]N::Uz4x,o/]/*e`m=^d]`pqlveu|\-}C%nnI<&E..e>Yu` :4967&w:m9eZA#dzV7e+*S~&8e5/5*7A4Uj0rmZ3XJ7)x?XXqaL2Vy`O@2'9oh<MiIWl"6#)'8T&k(k>QgPccac"8*FH@IrVcZ4* 77XX8Qp+"hM4ij2_\jSu?)_[KWF*}
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Mon, 28 Aug 2023 17:14:23 GMTetag: "64ecd5ef-15601"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63061accept-ranges: bytesx-cache: HITcontent-length: 30419Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 79 77 db 46 b2 07 fa ff fb 14 22 c6 a3 01 cc 26 25 3a 93 dc 3b a0 10 1e 47 b6 13 cf 24 71 12 3b db 50 8c 0f 4c b6 24 c4 10 c0 00 a0 96 88 9c cf fe ea 57 bd a0 b1 50 4e e6 dc f7 32 63 11 4b a3 d7 ea ea da eb e8 f1 e0 e0 d7 6f 37 b2 b8 3b b8 fe 68 fc 3f e3 c9 c1 f6 c0 5f 06 07 af d6 32 fb e7 eb 83 17 f9 26 5b c5 55 92 67 07 71 b6 3a c8 ab 4b 59 1c 2c f3 ac 2a 92 77 9b 2a 2f 4a 2a fe eb 6f f8 7c 9c 17 17 47 69 b2 94 59 29 0f 1e 1f fd 3f 83 f3 4d b6 c4 87 be 14 55 70 ef 6d e8 71 49 9f 2d 2b 6f ea e5 ef 7e 95 74 11 45 d5 dd 5a e6 e7 07 57 f9 6a 93 ca c3 c3 3d 2f c6 f2 76 9d 17 55 39 6b de 46 72 bc ca 97 9b 2b 99 55 b3 8a 9a 19 1c 07 61 dd 6a 70 9f 9c fb 83 ba 48 50 5d 16 f9 cd 41 26 6f 0e 9e 17 45 5e f8 9e 1e 77 21 7f db 24 85 2c 0f e2 83 9b 24 5b 51 99 9b a4 ba a4 3b f3 a5 17 4c 0b 59 6d 8a ec 80 5a 09 76 21 ff f5 3d 9a 19 79 9e 64 72 e5 0d 4c 77 d5 f7 33 f5 13 56 97 49 29 6c 87 12 29 64 6b 1e ae e3 e2 20 97 d1 7c 21 8a e8 15 8f 7c 7c 21 ab 6f 8a bc ca 51 e1 ab 73 11 cb 28 97 e3 12 f3 2a 2e 70 79 9e c6 d5 cc 1d a4 ee 99 7e 35 5e c6 69 ca 9d ec 2f 43 4b b7 a4 52 f1 7a 9d de f9 d4 2e 95 14 25 ea 5d 6f ca 4b 51 72 6b d4 79 79 4b 6d 67 d1 fd 4e 24 51 36 ae f2 d7 d4 e1 ec 42 6c 24 dd 5d c6 e5 ab 9b 8c 3a b9 96 45 75 27 f2 68 23 eb 12 71 94 ab 2e a8 e1 04 22 95 a8 e5 3a ea 76 c7 33 8f ea d5 06 04 64 9b ab 77 b2 a8 a7 54 8e b3 7c 25 df d0 0d bd b4 9f 38 af 93 4a 5e ed c4 5d 4f 0b 07 d9 26 4d 07 11 7d 28 a3 88 80 45 2d cb 4e 9c 46 49 0d 16 62 13 dd a3 ae 70 70 2c ca 62 89 9f 8c 26 49 aa 8b af 18 e0 e8 7a 37 35 f5 1f 5c 01 a2 45 16 dc 63 f9 0a 91 d0 14 f8 59 94 6d b7 a7 c1 78 59 c8 b8 92 cf 53 89 aa 7d af 5c 16 c9 1a f0 43 a0 98 8f 2b 79 5b 45 d8 0d e7 04 7d c5 41 92 1d 6c 02 3f 89 aa 79 b1 d8 6e Data Ascii: ywF"&%:;G$q;PL$WPN2cKo7;h?_2&[Ugq:KY,*w*/J*o|GiY)?MUpmqI-+o~tEZWj=/vU9kFr+UajpHP]A&oE^w!$,$[Q;LYmZv!=ydrLw3VI)l)dk |!||!oQs(*.py~5^i/CKRz.%]oKQrkyyKmgN$Q6Bl$]:Eu'h#q.":v3dwT|%8J^]O&M}(E-NFIbpp,b&Iz75\EcYmxYS}\C+y[E}Al
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-b69"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 1055Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 56 4d 6f db 38 10 3d 2b 40 fe c3 f4 24 27 b1 e5 ee b9 eb 02 49 37 d9 2d 90 6d 0f c9 ad 28 52 46 1a d9 dc c8 94 97 a4 e2 1a 0b ff f7 9d e1 87 44 c7 76 d0 f4 52 db 9c 99 f7 f8 66 e6 31 d3 f3 f3 d3 13 38 87 1b d9 20 28 f1 2c e7 c2 ca 56 15 ff 98 82 7f 77 67 7f 09 55 35 68 c0 b6 f3 79 23 d5 1c ec 22 8d 85 25 aa 0e ea 56 83 59 8a a6 01 53 6a 44 65 80 b2 00 95 78 e4 d4 fb cb 2b 78 c2 8d 2b 97 64 9a 6e b5 6a b5 75 c9 95 6e 57 55 bb f6 e5 3c fa f4 f4 64 04 75 a7 4a 0e 1e 9d c1 7f a7 27 d9 b3 d0 50 b6 ca 0a a9 50 8f e1 b1 b3 b6 55 63 97 34 06 62 f7 64 c6 20 e9 13 aa 0f a7 27 14 df c7 c2 0c aa b6 ec 28 d0 16 73 b4 d7 0d f2 c7 ab cd e7 6a 04 b9 91 16 27 03 b1 1c ce 28 3b 93 35 8c e0 dd 00 07 9e 42 a6 d1 76 9a eb 67 5b 87 e1 49 10 40 1f 99 20 98 ab cd bd 98 7f 11 4b 24 1c 1f 49 e5 bf bd ff de 23 e4 9d aa b0 a6 b4 2a 87 d9 6c 06 76 b3 c2 b6 0e 57 3b 86 e9 44 ff 05 c4 ae e9 d1 fa bc c2 a0 bd b4 56 4b 82 e0 18 a1 a5 98 e0 cf 15 75 8c 38 8c 21 af 45 63 30 15 61 f2 9b 63 e6 92 cb 46 18 c3 d5 0b 49 f1 3f bf d6 54 81 a4 9b f0 21 e5 44 c2 bb b1 70 31 83 1c fa b0 97 da 15 ad 2a 1b 59 3e d1 8d 5e f4 bb c7 7f 37 4b 6f 7b 88 84 9b 4f 16 b1 e7 90 1d 48 80 c3 65 34 ae 1a 51 b2 1a 10 eb 90 10 41 83 2c d2 7c 8b 70 d9 db b5 ce b6 80 f4 ed 15 f2 4e c6 48 f0 4d d4 ac ee de c8 2c cd d8 72 c3 fc 46 4d a7 f0 27 5a e0 55 67 23 e0 9d 23 d6 7e f2 60 2d ed 42 2a 77 e0 30 28 de 2d 25 d0 bf 30 3f 47 06 55 78 28 0f 70 2d ca 05 58 49 17 16 de 5e 1c 8a 34 e4 14 65 67 b0 02 32 8c c7 a6 d3 1a ab 71 90 c3 1f 31 20 bb c9 08 24 e1 bd 77 46 40 1f 1c 87 82 3e cf ed e2 03 1d fd ee 0c 02 e4 c5 45 1c 15 17 f1 4d 7e 2f 44 55 5d 3f 13 b9 5b 69 2c 92 f8 44 cd 55 ce 23 d0 0d 7f a3 2f a4 4e 10 e7 b5 5c 66 79 3c d5 ef c0 94 4d 38 23 6b bc 43 92 90 d8 6b Data Ascii: VMo8=+@$'I7-m(RFDvRf18 (,VwgU5hy#"%VYSjDex+x+dnjunWU<duJ'PPUc4bd '(sj'(;5Bvg[I@ K$I#*lvW;DVKu8!Ec0acFI?T!Dp1*Y>^7Ko{OHe4QA,|pNHM,rFM'ZUg##~`-B*w0(-%0?GUx(p-XI^4eg2q1 $wF@>EM~/DU]?[i,DU#/N\f
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-2cc"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 424Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 92 dd 6a dc 30 10 85 af bd b0 ef 30 85 90 d8 db 58 4a 7a d7 0d a5 a4 90 d2 85 90 db 5e 94 b6 c8 d6 d8 9e ae 57 5a a4 f1 fe b4 ce bb 57 b6 36 6e 52 08 46 c6 d2 9c 39 f3 1d db 72 b1 98 cf 60 01 9f a9 45 f0 6b da e6 2d 99 75 5e d9 b2 f3 79 45 07 f1 cb 8b 41 30 8a be 60 bb f5 b0 27 6e 40 95 25 7a 4f 05 b5 c4 47 a8 ac 83 35 1e 0b ab 9c 06 6b da 23 74 1e dd b3 ce 7b 54 ce c0 c6 3a 5c 42 c3 bc f5 4b 29 6b 62 41 56 ee be 6a f7 6e 10 c9 f9 2c 85 aa 33 25 93 35 69 06 7f e6 b3 64 a7 1c 90 5f 21 7c 00 99 b2 23 8d 86 fb 8d 27 cc 24 09 46 cf 29 18 b5 a3 5a b1 75 62 98 79 5b 07 05 64 37 f3 59 e8 a6 0a d2 d8 7e 7e 0e 3a 44 da 84 a2 a8 91 ef 5a 1c 1e 3f 1d 57 7a 28 ed c9 68 bb 17 4a eb bb 5d 38 be 27 cf 68 d0 41 64 48 5e 29 a7 70 d1 28 df 94 8d 32 35 5e 5c fe 8f 9e 44 78 1d d0 5b 5b aa a1 22 06 bd f0 5d e1 43 14 53 a7 70 0d d9 e5 28 4d 30 12 45 ee 24 92 bf 09 4b fe f8 76 9b ff be ca df ff cc bf bf 3d 93 a7 cc c1 35 1b af 38 28 71 c8 9d 33 37 e3 e6 f1 64 71 72 0c e3 5f 49 1e 6d 5e 4c 7c ea 99 8c 9f 71 a4 1f 97 aa f7 41 51 72 4f 66 db 71 5f 74 cc d6 f4 8c 07 56 0e 55 76 36 7d 93 93 8f 60 55 3f a8 0d be 84 4d fe 55 8b 95 d1 78 08 88 f9 75 84 9f e8 27 d1 f8 27 a6 d9 94 2d dc c2 ab 56 ad c7 91 7d 38 7a 84 6c 14 fc 05 64 43 67 c5 cc 02 00 00 Data Ascii: uj00XJz^WZW6nRF9r`Ek-u^yEA0`'n@%zOG5k#t{T:\BK)kbAVjn,3%5id_!|#'$F)Zuby[d7Y~~:DZ?Wz(hJ]8'hAdH^)p(25^\Dx[["]CSp(M0E$Kv=58(q37dqr_Im^L|qAQrOfq_tVUv6}`U?MUxu''-V}8zldCg
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Fri, 09 Jun 2023 05:49:24 GMTetag: "6482bd64-3509"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 4872Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 1b 6b 73 db b8 f1 7b 7f 05 8d cb c8 44 04 51 76 72 fd 22 85 d1 38 b1 5d e7 e6 9c 87 9d 6b 3a 23 2b 1e 9a 84 24 c6 14 a1 80 a0 25 9d a5 fe f6 ee 02 7c 4a 94 93 5e fb c5 02 40 60 77 b1 2f ec 2e e0 ee f3 03 eb db a7 94 cb 95 75 19 4e a4 a7 b8 f5 f0 d2 f9 d5 39 b6 d6 96 ed 53 eb c3 9c c7 bf 5d 5b e7 22 8d 03 4f 85 22 b6 bc 38 b0 84 9a 72 69 f9 22 56 32 bc 4b 95 90 09 4c ff f6 1d c1 38 42 4e ba 51 e8 f3 38 e1 d6 f3 ee df 08 2c e4 e3 30 e6 01 71 5d b5 9a 73 31 ce 10 3a 33 83 f0 32 55 bc d5 b2 77 07 dd 83 23 ca c6 69 ec 23 5e 5b d1 47 92 02 cc 04 70 fa 8a f4 49 fe a5 84 6b 10 b5 5a e6 d7 f1 66 c1 c0 34 ed 21 31 d4 91 51 09 90 d3 47 c9 55 2a 63 4b d9 9c 2d c2 38 10 0b ba a1 3d 22 ee be 71 c0 50 80 9d 89 20 8d 00 ac f9 75 f8 72 2e a4 4a 06 f5 ae ab 6c c9 bf a7 a1 e4 76 8e 8b e6 40 7b 2a db 5d 81 c5 2e a8 48 58 bc b5 b1 fc 93 c5 2b 24 1e bd 72 4b c2 19 f0 62 2c a4 fd e0 49 4b ba dd af f6 4d d0 a6 37 4e f5 a7 cb 62 57 02 6d dc 07 20 eb f5 70 c4 44 de 57 a6 ef b9 c7 7d ef 95 fb b2 ef b5 db f4 31 1c db 6d 31 f4 46 af da 31 fc a5 19 d6 e3 3e 8e c7 7a 5c 94 e3 9d e3 4d 4e d6 c6 4e 9c 71 ec 98 1d 33 4e 37 49 2e c1 7f 72 99 00 b5 2e d1 ea 44 fa 48 ac 72 3f 68 de 3a be e4 30 c5 8e d3 28 a2 fd 62 c9 69 98 78 77 11 ff e8 29 7f ca 93 72 c3 e5 6e b9 7b d4 e7 af 3c 39 49 67 3c 56 89 13 f1 78 a2 a6 7d 0e 5b 50 c3 62 78 c8 47 23 50 9e 0d 2b 20 9f c5 7f 1d 70 c0 23 0e 66 b1 05 bf 02 fc 5d a2 01 1b 1c 81 bb ab 60 07 0a 56 6c 58 ec 80 c5 24 02 55 a9 68 3a 91 98 80 f2 27 ad 16 e8 cd 4b e7 c8 39 22 b4 d5 3a 80 ce df 4d 67 bd ae cd b5 c9 6f 9f 2e df fd e3 ea e4 f3 59 2f 37 dc 97 ce b2 f3 ab b3 b4 ae ce 3e fd f1 ee ea ec 14 14 af a0 ed 8b 27 e3 30 9e 24 5b 28 6b 60 72 c3 9f 47 e9 24 8c ad 48 78 01 0f ac 59 1a a9 70 1e c1 c6 Data Ascii: ks{DQvr"8]k:#+$%|J^@`w/.uN9S]["O"8ri"V2KL8BNQ8,0q]s1:32Uw#i#^[GpIkZf4!1QGU*cK-8="qP ur.Jlv@{*].HX+$rKb,IKM7NbWm pDW}1m1F1>z\MNNq3N7I.r.DHr?h:0(bixw)rn{<9Ig<Vx}[PbxG#P+ p#f]`VlX$Uh:'K9":Mgo.Y/7>'0$[(k`rG$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Thu, 27 Jun 2024 13:51:43 GMTetag: "667d6e6f-ba5"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 1351Data Raw: 1f 8b 08 00 00 00 00 00 00 03 85 56 5d 6f db 36 14 7d df af b0 f5 20 90 2d cd 26 d8 9b 5d 22 68 1d 17 33 ba b6 c0 12 a0 03 8a a2 90 c5 6b 9b 88 4c 7a 12 e5 4c b3 fd df 77 28 c9 b1 ec da 5b 10 24 d2 bd 57 e4 fd 38 e7 90 6f 5e f5 7b 8f 4b 53 f4 e6 26 a3 1e fe 27 a5 77 83 05 59 ca 13 4f ba f7 ea cd 2f cf c6 6a f7 2c 13 ad c7 6e b5 22 eb d5 bc b4 a9 37 ce b2 0d df 6e 92 bc 37 15 63 b1 14 13 b5 91 da a5 65 08 11 33 b5 4d 9b e8 3f 68 9d 55 e3 2c 29 8a 61 d4 9a 06 79 b0 0d 32 63 9f 22 d1 0d 7b 34 3e a3 a9 1e 46 4d 80 0f af 88 48 6c 4a 59 1d 10 7c cd eb e0 3f d6 fa e0 f2 55 1d d9 bc ce f1 1a 09 4f ab b5 cb 93 bc 3a 78 9f d7 83 60 1b 04 f7 40 9b 4d 24 d6 49 8e f0 a9 fe 60 28 d3 9d 05 7e 34 0e 04 b8 e2 a2 1b e6 1f d3 fb 68 2f 08 3d f8 54 fa 24 74 e7 cb ac a0 7c 43 f9 6e b7 91 5f 69 f6 d1 f8 4b 9e 4f ee 9f 73 b3 c8 55 f4 57 49 79 f5 40 19 a5 de e5 91 b1 bd 49 1c 47 18 c1 64 83 0d 7f 37 85 0f 13 0a f6 8d b0 aa df 9f bc 74 7e 92 51 f8 27 75 e2 93 82 fc e8 30 ab 9e 67 7c ab 19 17 14 c7 96 9e 7b c4 1c 97 ae d9 91 4d e4 cc e9 4a 6c d3 a5 c9 74 58 7d d8 bf 11 45 39 f3 39 11 1e f7 7c ff b2 8c 66 c4 b7 66 ce f2 38 66 53 b5 60 33 79 32 1e 2e c6 8d b1 3b 09 2e a6 9c 6f a7 f2 3c 7f 16 79 57 a6 cb c2 27 39 9a 9b 21 ec 42 48 9a 99 f4 29 78 bb a5 34 39 30 92 2b f2 c9 47 aa 76 3b 92 a9 cf 33 3c f2 38 be fd 55 29 45 f2 89 aa b1 d3 c4 73 f2 65 6e 7b 63 99 d3 ca 6d e8 6c 7d 44 01 de 16 00 41 6f e4 3a a7 e0 be a7 79 52 66 68 99 18 4b f4 61 65 bc ac f3 80 a1 7f bb 1f c7 f1 f8 42 a6 9d 95 46 00 15 0b d4 b0 42 1f e9 42 0d 5d bc 7a e9 cf 91 1c 23 cc 05 35 84 01 7c 46 d2 c5 6e c7 48 4d f8 08 7f e4 82 0e 63 2d de 37 d1 9f 93 15 dd d1 15 07 f3 7c 48 f2 04 41 ef b2 8c 45 32 7a 8d cc da 6e d0 1e e9 08 a7 6e 84 51 5a 66 64 17 7e 39 72 6f cd c8 bd 7e cd 99 55 fa 9b fb Data Ascii: V]o6} -&]"h3kLzLw([$W8o^{KS&'wYO/j,n"7n7ce3M?hU,)ay2c"{4>FMHlJY|?UO:x`@M$I`(~4h/=T$t|Cn_iKOsUWIy@IGd7t~Q'u0g|{MJltX}E99|ff8fS`3y2.;.o<yW'9!BH)x490+Gv;3<8U)Esen{cml}DAo:yRfhKaeBFBB]z#5|FnHMc-7|HAE2znnQZf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-99c"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 670Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 55 4d 8f 9b 30 10 bd af b4 ff 61 ca 46 8b 91 8a db ad 7a 69 13 72 d9 de 7a aa b4 f7 95 03 66 71 43 00 d9 26 51 5a e5 bf 77 0c 01 8c 49 56 69 56 6b 29 22 8c c7 f3 f1 de f3 f0 fb 57 cd e5 9e 24 65 5c 6f 78 a1 03 2a 39 4b f6 24 ad 8b 58 8b b2 20 b3 00 fe de de dc de 00 ae 2d 93 a0 62 59 e6 39 44 30 23 3b 51 24 e5 2e a0 ad e9 a9 ac 48 30 07 70 5d eb aa 71 f6 e9 8a c5 6b 5d ea b2 f2 83 f9 e0 84 49 eb 67 5d be bc e4 fc e8 67 2c 61 6b 19 79 16 6c fb 6c f6 3a 37 26 8a 10 6d e2 85 99 42 a1 ce 29 be 85 c6 a3 39 d6 1e 74 ab 1c 1a c3 be 8c 43 eb f6 9f dd 99 25 52 20 47 f7 25 3c 34 28 81 b5 66 c4 bb db 30 a5 33 84 d3 0b 28 4b 92 c7 9c 29 45 3c 53 a4 ca a4 28 d6 5e d7 9d 59 87 e1 2f cf 15 77 c3 b9 f1 24 df 94 5b 7e 51 c8 c3 80 86 05 36 8d 73 11 af 2d 38 ac 84 1d d2 54 e5 22 e1 4f 8d 3f b1 23 cf 88 ce 84 0a 68 1b aa ad c2 67 18 68 3b 50 76 b0 49 98 d2 d5 93 05 2d e1 42 f3 4d 98 31 15 c6 99 c8 13 c9 0b 44 95 f9 08 5c aa b9 24 26 c4 62 55 6b 8d 27 63 93 2e f2 12 59 56 48 50 71 94 8a b7 5c 88 6e 2b 65 90 b2 90 15 68 0e 8d 0b ee 7d 12 f8 6b 03 2c fd 00 46 b5 b5 66 ea 04 c4 dc 2e 44 36 29 97 40 60 b9 55 0c 5b d2 24 a0 29 ca 0a e1 50 f5 ea 28 55 b4 48 65 76 4e 81 7d 04 b1 2b 56 a4 c4 52 e6 4e 24 3a c3 aa 16 f0 f0 f9 cb 57 70 ca f3 ef 2a 29 36 4c ee 87 3c 98 d9 cb 05 aa 07 ab 35 19 57 c6 02 fe 9a ef 4d df fe 47 e8 5b e5 13 3d 9b d4 1f 38 55 99 48 f5 4f be 87 fb 7b e0 74 97 89 38 83 28 8a e0 1b 4c 4e 34 52 a6 95 e4 5b ec fc 07 4f 59 9d eb 91 8a ec 5a 3b 69 fb 3d 42 a3 31 40 53 9c 4f 6a 72 da ba 34 87 1e b2 f6 e1 5e a2 d7 01 a9 8b 06 8b 1e 0a 2b 98 3b 47 24 57 e2 0f 3f a3 8a cb 09 7a 17 92 ae 27 ea 62 b2 de 46 98 43 da 88 38 67 ef d4 14 bc 8e 44 2b b0 3b 94 46 25 23 a4 27 60 06 07 67 f3 99 d0 6c 65 a0 c5 15 21 6a 78 e6 b1 Data Ascii: UM0aFzirzfqC&QZwIViVk)"W$e\ox*9K$X -bY9D0#;Q$.H0p]qk]Ig]g,akyll:7&mB)9tC%R G%<4(f03(K)E<S(^Y/w$[~Q6s-8T"O?#hgh;PvI-BM1D\$&bUk'c.YVHPq\n+eh}k,Ff.D6)@`U[$)P(UHevN}+VRN$:Wp*)6L<5WMG[=8UHO{t8(LN4R[OYZ;i=B1@SOjr4^+;G$W?z'bFC8gD+;F%#
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Mon, 28 Aug 2023 17:14:23 GMTetag: "64ecd5ef-15601"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 30419Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 79 77 db 46 b2 07 fa ff fb 14 22 c6 a3 01 cc 26 25 3a 93 dc 3b a0 10 1e 47 b6 13 cf 24 71 12 3b db 50 8c 0f 4c b6 24 c4 10 c0 00 a0 96 88 9c cf fe ea 57 bd a0 b1 50 4e e6 dc f7 32 63 11 4b a3 d7 ea ea da eb e8 f1 e0 e0 d7 6f 37 b2 b8 3b b8 fe 68 fc 3f e3 c9 c1 f6 c0 5f 06 07 af d6 32 fb e7 eb 83 17 f9 26 5b c5 55 92 67 07 71 b6 3a c8 ab 4b 59 1c 2c f3 ac 2a 92 77 9b 2a 2f 4a 2a fe eb 6f f8 7c 9c 17 17 47 69 b2 94 59 29 0f 1e 1f fd 3f 83 f3 4d b6 c4 87 be 14 55 70 ef 6d e8 71 49 9f 2d 2b 6f ea e5 ef 7e 95 74 11 45 d5 dd 5a e6 e7 07 57 f9 6a 93 ca c3 c3 3d 2f c6 f2 76 9d 17 55 39 6b de 46 72 bc ca 97 9b 2b 99 55 b3 8a 9a 19 1c 07 61 dd 6a 70 9f 9c fb 83 ba 48 50 5d 16 f9 cd 41 26 6f 0e 9e 17 45 5e f8 9e 1e 77 21 7f db 24 85 2c 0f e2 83 9b 24 5b 51 99 9b a4 ba a4 3b f3 a5 17 4c 0b 59 6d 8a ec 80 5a 09 76 21 ff f5 3d 9a 19 79 9e 64 72 e5 0d 4c 77 d5 f7 33 f5 13 56 97 49 29 6c 87 12 29 64 6b 1e ae e3 e2 20 97 d1 7c 21 8a e8 15 8f 7c 7c 21 ab 6f 8a bc ca 51 e1 ab 73 11 cb 28 97 e3 12 f3 2a 2e 70 79 9e c6 d5 cc 1d a4 ee 99 7e 35 5e c6 69 ca 9d ec 2f 43 4b b7 a4 52 f1 7a 9d de f9 d4 2e 95 14 25 ea 5d 6f ca 4b 51 72 6b d4 79 79 4b 6d 67 d1 fd 4e 24 51 36 ae f2 d7 d4 e1 ec 42 6c 24 dd 5d c6 e5 ab 9b 8c 3a b9 96 45 75 27 f2 68 23 eb 12 71 94 ab 2e a8 e1 04 22 95 a8 e5 3a ea 76 c7 33 8f ea d5 06 04 64 9b ab 77 b2 a8 a7 54 8e b3 7c 25 df d0 0d bd b4 9f 38 af 93 4a 5e ed c4 5d 4f 0b 07 d9 26 4d 07 11 7d 28 a3 88 80 45 2d cb 4e 9c 46 49 0d 16 62 13 dd a3 ae 70 70 2c ca 62 89 9f 8c 26 49 aa 8b af 18 e0 e8 7a 37 35 f5 1f 5c 01 a2 45 16 dc 63 f9 0a 91 d0 14 f8 59 94 6d b7 a7 c1 78 59 c8 b8 92 cf 53 89 aa 7d af 5c 16 c9 1a f0 43 a0 98 8f 2b 79 5b 45 d8 0d e7 04 7d c5 41 92 1d 6c 02 3f 89 aa 79 b1 d8 6e Data Ascii: ywF"&%:;G$q;PL$WPN2cKo7;h?_2&[Ugq:KY,*w*/J*o|GiY)?MUpmqI-+o~tEZWj=/vU9kFr+UajpHP]A&oE^w!$,$[Q;LYmZv!=ydrLw3VI)l)dk |!||!oQs(*.py~5^i/CKRz.%]oKQrkyyKmgN$Q6Bl$]:Eu'h#q.":v3dwT|%8J^]O&M}(E-NFIbpp,b&Iz75\EcYmxYS}\C+y[E}Al
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-2cc"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 424Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 92 dd 6a dc 30 10 85 af bd b0 ef 30 85 90 d8 db 58 4a 7a d7 0d a5 a4 90 d2 85 90 db 5e 94 b6 c8 d6 d8 9e ae 57 5a a4 f1 fe b4 ce bb 57 b6 36 6e 52 08 46 c6 d2 9c 39 f3 1d db 72 b1 98 cf 60 01 9f a9 45 f0 6b da e6 2d 99 75 5e d9 b2 f3 79 45 07 f1 cb 8b 41 30 8a be 60 bb f5 b0 27 6e 40 95 25 7a 4f 05 b5 c4 47 a8 ac 83 35 1e 0b ab 9c 06 6b da 23 74 1e dd b3 ce 7b 54 ce c0 c6 3a 5c 42 c3 bc f5 4b 29 6b 62 41 56 ee be 6a f7 6e 10 c9 f9 2c 85 aa 33 25 93 35 69 06 7f e6 b3 64 a7 1c 90 5f 21 7c 00 99 b2 23 8d 86 fb 8d 27 cc 24 09 46 cf 29 18 b5 a3 5a b1 75 62 98 79 5b 07 05 64 37 f3 59 e8 a6 0a d2 d8 7e 7e 0e 3a 44 da 84 a2 a8 91 ef 5a 1c 1e 3f 1d 57 7a 28 ed c9 68 bb 17 4a eb bb 5d 38 be 27 cf 68 d0 41 64 48 5e 29 a7 70 d1 28 df 94 8d 32 35 5e 5c fe 8f 9e 44 78 1d d0 5b 5b aa a1 22 06 bd f0 5d e1 43 14 53 a7 70 0d d9 e5 28 4d 30 12 45 ee 24 92 bf 09 4b fe f8 76 9b ff be ca df ff cc bf bf 3d 93 a7 cc c1 35 1b af 38 28 71 c8 9d 33 37 e3 e6 f1 64 71 72 0c e3 5f 49 1e 6d 5e 4c 7c ea 99 8c 9f 71 a4 1f 97 aa f7 41 51 72 4f 66 db 71 5f 74 cc d6 f4 8c 07 56 0e 55 76 36 7d 93 93 8f 60 55 3f a8 0d be 84 4d fe 55 8b 95 d1 78 08 88 f9 75 84 9f e8 27 d1 f8 27 a6 d9 94 2d dc c2 ab 56 ad c7 91 7d 38 7a 84 6c 14 fc 05 64 43 67 c5 cc 02 00 00 Data Ascii: uj00XJz^WZW6nRF9r`Ek-u^yEA0`'n@%zOG5k#t{T:\BK)kbAVjn,3%5id_!|#'$F)Zuby[d7Y~~:DZ?Wz(hJ]8'hAdH^)p(25^\Dx[["]CSp(M0E$Kv=58(q37dqr_Im^L|qAQrOfq_tVUv6}`U?MUxu''-V}8zldCg
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-b69"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63062accept-ranges: bytesx-cache: HITcontent-length: 1055Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 56 4d 6f db 38 10 3d 2b 40 fe c3 f4 24 27 b1 e5 ee b9 eb 02 49 37 d9 2d 90 6d 0f c9 ad 28 52 46 1a d9 dc c8 94 97 a4 e2 1a 0b ff f7 9d e1 87 44 c7 76 d0 f4 52 db 9c 99 f7 f8 66 e6 31 d3 f3 f3 d3 13 38 87 1b d9 20 28 f1 2c e7 c2 ca 56 15 ff 98 82 7f 77 67 7f 09 55 35 68 c0 b6 f3 79 23 d5 1c ec 22 8d 85 25 aa 0e ea 56 83 59 8a a6 01 53 6a 44 65 80 b2 00 95 78 e4 d4 fb cb 2b 78 c2 8d 2b 97 64 9a 6e b5 6a b5 75 c9 95 6e 57 55 bb f6 e5 3c fa f4 f4 64 04 75 a7 4a 0e 1e 9d c1 7f a7 27 d9 b3 d0 50 b6 ca 0a a9 50 8f e1 b1 b3 b6 55 63 97 34 06 62 f7 64 c6 20 e9 13 aa 0f a7 27 14 df c7 c2 0c aa b6 ec 28 d0 16 73 b4 d7 0d f2 c7 ab cd e7 6a 04 b9 91 16 27 03 b1 1c ce 28 3b 93 35 8c e0 dd 00 07 9e 42 a6 d1 76 9a eb 67 5b 87 e1 49 10 40 1f 99 20 98 ab cd bd 98 7f 11 4b 24 1c 1f 49 e5 bf bd ff de 23 e4 9d aa b0 a6 b4 2a 87 d9 6c 06 76 b3 c2 b6 0e 57 3b 86 e9 44 ff 05 c4 ae e9 d1 fa bc c2 a0 bd b4 56 4b 82 e0 18 a1 a5 98 e0 cf 15 75 8c 38 8c 21 af 45 63 30 15 61 f2 9b 63 e6 92 cb 46 18 c3 d5 0b 49 f1 3f bf d6 54 81 a4 9b f0 21 e5 44 c2 bb b1 70 31 83 1c fa b0 97 da 15 ad 2a 1b 59 3e d1 8d 5e f4 bb c7 7f 37 4b 6f 7b 88 84 9b 4f 16 b1 e7 90 1d 48 80 c3 65 34 ae 1a 51 b2 1a 10 eb 90 10 41 83 2c d2 7c 8b 70 d9 db b5 ce b6 80 f4 ed 15 f2 4e c6 48 f0 4d d4 ac ee de c8 2c cd d8 72 c3 fc 46 4d a7 f0 27 5a e0 55 67 23 e0 9d 23 d6 7e f2 60 2d ed 42 2a 77 e0 30 28 de 2d 25 d0 bf 30 3f 47 06 55 78 28 0f 70 2d ca 05 58 49 17 16 de 5e 1c 8a 34 e4 14 65 67 b0 02 32 8c c7 a6 d3 1a ab 71 90 c3 1f 31 20 bb c9 08 24 e1 bd 77 46 40 1f 1c 87 82 3e cf ed e2 03 1d fd ee 0c 02 e4 c5 45 1c 15 17 f1 4d 7e 2f 44 55 5d 3f 13 b9 5b 69 2c 92 f8 44 cd 55 ce 23 d0 0d 7f a3 2f a4 4e 10 e7 b5 5c 66 79 3c d5 ef c0 94 4d 38 23 6b bc 43 92 90 d8 6b Data Ascii: VMo8=+@$'I7-m(RFDvRf18 (,VwgU5hy#"%VYSjDex+x+dnjunWU<duJ'PPUc4bd '(sj'(;5Bvg[I@ K$I#*lvW;DVKu8!Ec0acFI?T!Dp1*Y>^7Ko{OHe4QA,|pNHM,rFM'ZUg##~`-B*w0(-%0?GUx(p-XI^4eg2q1 $wF@>EM~/DU]?[i,DU#/N\f
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Sun, 29 Sep 2024 03:07:12 GMTetag: "66f8c460-99c"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63063accept-ranges: bytesx-cache: HITcontent-length: 670Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 55 4d 8f 9b 30 10 bd af b4 ff 61 ca 46 8b 91 8a db ad 7a 69 13 72 d9 de 7a aa b4 f7 95 03 66 71 43 00 d9 26 51 5a e5 bf 77 0c 01 8c 49 56 69 56 6b 29 22 8c c7 f3 f1 de f3 f0 fb 57 cd e5 9e 24 65 5c 6f 78 a1 03 2a 39 4b f6 24 ad 8b 58 8b b2 20 b3 00 fe de de dc de 00 ae 2d 93 a0 62 59 e6 39 44 30 23 3b 51 24 e5 2e a0 ad e9 a9 ac 48 30 07 70 5d eb aa 71 f6 e9 8a c5 6b 5d ea b2 f2 83 f9 e0 84 49 eb 67 5d be bc e4 fc e8 67 2c 61 6b 19 79 16 6c fb 6c f6 3a 37 26 8a 10 6d e2 85 99 42 a1 ce 29 be 85 c6 a3 39 d6 1e 74 ab 1c 1a c3 be 8c 43 eb f6 9f dd 99 25 52 20 47 f7 25 3c 34 28 81 b5 66 c4 bb db 30 a5 33 84 d3 0b 28 4b 92 c7 9c 29 45 3c 53 a4 ca a4 28 d6 5e d7 9d 59 87 e1 2f cf 15 77 c3 b9 f1 24 df 94 5b 7e 51 c8 c3 80 86 05 36 8d 73 11 af 2d 38 ac 84 1d d2 54 e5 22 e1 4f 8d 3f b1 23 cf 88 ce 84 0a 68 1b aa ad c2 67 18 68 3b 50 76 b0 49 98 d2 d5 93 05 2d e1 42 f3 4d 98 31 15 c6 99 c8 13 c9 0b 44 95 f9 08 5c aa b9 24 26 c4 62 55 6b 8d 27 63 93 2e f2 12 59 56 48 50 71 94 8a b7 5c 88 6e 2b 65 90 b2 90 15 68 0e 8d 0b ee 7d 12 f8 6b 03 2c fd 00 46 b5 b5 66 ea 04 c4 dc 2e 44 36 29 97 40 60 b9 55 0c 5b d2 24 a0 29 ca 0a e1 50 f5 ea 28 55 b4 48 65 76 4e 81 7d 04 b1 2b 56 a4 c4 52 e6 4e 24 3a c3 aa 16 f0 f0 f9 cb 57 70 ca f3 ef 2a 29 36 4c ee 87 3c 98 d9 cb 05 aa 07 ab 35 19 57 c6 02 fe 9a ef 4d df fe 47 e8 5b e5 13 3d 9b d4 1f 38 55 99 48 f5 4f be 87 fb 7b e0 74 97 89 38 83 28 8a e0 1b 4c 4e 34 52 a6 95 e4 5b ec fc 07 4f 59 9d eb 91 8a ec 5a 3b 69 fb 3d 42 a3 31 40 53 9c 4f 6a 72 da ba 34 87 1e b2 f6 e1 5e a2 d7 01 a9 8b 06 8b 1e 0a 2b 98 3b 47 24 57 e2 0f 3f a3 8a cb 09 7a 17 92 ae 27 ea 62 b2 de 46 98 43 da 88 38 67 ef d4 14 bc 8e 44 2b b0 3b 94 46 25 23 a4 27 60 06 07 67 f3 99 d0 6c 65 a0 c5 15 21 6a 78 e6 b1 Data Ascii: UM0aFzirzfqC&QZwIViVk)"W$e\ox*9K$X -bY9D0#;Q$.H0p]qk]Ig]g,akyll:7&mB)9tC%R G%<4(f03(K)E<S(^Y/w$[~Q6s-8T"O?#hgh;PvI-BM1D\$&bUk'c.YVHPq\n+eh}k,Ff.D6)@`U[$)P(UHevN}+VRN$:Wp*)6L<5WMG[=8UHO{t8(LN4R[OYZ;i=B1@SOjr4^+;G$W?z'bFC8gD+;F%#
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:21:24 GMTlast-modified: Thu, 27 Jun 2024 13:51:43 GMTetag: "667d6e6f-ba5"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 63063accept-ranges: bytesx-cache: HITcontent-length: 1351Data Raw: 1f 8b 08 00 00 00 00 00 00 03 85 56 5d 6f db 36 14 7d df af b0 f5 20 90 2d cd 26 d8 9b 5d 22 68 1d 17 33 ba b6 c0 12 a0 03 8a a2 90 c5 6b 9b 88 4c 7a 12 e5 4c b3 fd df 77 28 c9 b1 ec da 5b 10 24 d2 bd 57 e4 fd 38 e7 90 6f 5e f5 7b 8f 4b 53 f4 e6 26 a3 1e fe 27 a5 77 83 05 59 ca 13 4f ba f7 ea cd 2f cf c6 6a f7 2c 13 ad c7 6e b5 22 eb d5 bc b4 a9 37 ce b2 0d df 6e 92 bc 37 15 63 b1 14 13 b5 91 da a5 65 08 11 33 b5 4d 9b e8 3f 68 9d 55 e3 2c 29 8a 61 d4 9a 06 79 b0 0d 32 63 9f 22 d1 0d 7b 34 3e a3 a9 1e 46 4d 80 0f af 88 48 6c 4a 59 1d 10 7c cd eb e0 3f d6 fa e0 f2 55 1d d9 bc ce f1 1a 09 4f ab b5 cb 93 bc 3a 78 9f d7 83 60 1b 04 f7 40 9b 4d 24 d6 49 8e f0 a9 fe 60 28 d3 9d 05 7e 34 0e 04 b8 e2 a2 1b e6 1f d3 fb 68 2f 08 3d f8 54 fa 24 74 e7 cb ac a0 7c 43 f9 6e b7 91 5f 69 f6 d1 f8 4b 9e 4f ee 9f 73 b3 c8 55 f4 57 49 79 f5 40 19 a5 de e5 91 b1 bd 49 1c 47 18 c1 64 83 0d 7f 37 85 0f 13 0a f6 8d b0 aa df 9f bc 74 7e 92 51 f8 27 75 e2 93 82 fc e8 30 ab 9e 67 7c ab 19 17 14 c7 96 9e 7b c4 1c 97 ae d9 91 4d e4 cc e9 4a 6c d3 a5 c9 74 58 7d d8 bf 11 45 39 f3 39 11 1e f7 7c ff b2 8c 66 c4 b7 66 ce f2 38 66 53 b5 60 33 79 32 1e 2e c6 8d b1 3b 09 2e a6 9c 6f a7 f2 3c 7f 16 79 57 a6 cb c2 27 39 9a 9b 21 ec 42 48 9a 99 f4 29 78 bb a5 34 39 30 92 2b f2 c9 47 aa 76 3b 92 a9 cf 33 3c f2 38 be fd 55 29 45 f2 89 aa b1 d3 c4 73 f2 65 6e 7b 63 99 d3 ca 6d e8 6c 7d 44 01 de 16 00 41 6f e4 3a a7 e0 be a7 79 52 66 68 99 18 4b f4 61 65 bc ac f3 80 a1 7f bb 1f c7 f1 f8 42 a6 9d 95 46 00 15 0b d4 b0 42 1f e9 42 0d 5d bc 7a e9 cf 91 1c 23 cc 05 35 84 01 7c 46 d2 c5 6e c7 48 4d f8 08 7f e4 82 0e 63 2d de 37 d1 9f 93 15 dd d1 15 07 f3 7c 48 f2 04 41 ef b2 8c 45 32 7a 8d cc da 6e d0 1e e9 08 a7 6e 84 51 5a 66 64 17 7e 39 72 6f cd c8 bd 7e cd 99 55 fa 9b fb Data Ascii: V]o6} -&]"h3kLzLw([$W8o^{KS&'wYO/j,n"7n7ce3M?hU,)ay2c"{4>FMHlJY|?UO:x`@M$I`(~4h/=T$t|Cn_iKOsUWIy@IGd7t~Q'u0g|{MJltX}E99|ff8fS`3y2.;.o<yW'9!BH)x490+Gv;3<8U)Esen{cml}DAo:yRfhKaeBFBB]z#5|FnHMc-7|HAE2znnQZf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:37:47 GMTlast-modified: Thu, 27 Jun 2024 13:51:43 GMTetag: "667d6e6f-4926"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 62082accept-ranges: bytesx-cache: HITcontent-length: 5056Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 3c 6b 77 a3 38 b2 df f7 57 24 cc 1e 37 4c 30 e6 61 83 71 c2 64 3b e9 ce 9c 39 77 e7 71 b6 7b e7 7e 48 b2 f7 08 49 38 ee 75 20 17 43 27 bd b1 ff fb 96 4a 80 85 5f 69 bb 33 f3 c1 85 d0 a3 aa 54 2a 55 95 e4 53 f4 be 3f 3e fa 78 37 99 1d 25 93 29 3f 82 27 29 8b ac 3b e6 29 cf 49 c1 d9 d1 f7 bd bf f4 7a 47 1f b2 32 a7 7c 74 f4 f8 d0 9d a4 74 5a 32 3e eb 7d 9a f5 8a 47 7e 9f 7d 9a 58 f7 93 d4 fa 34 fb cb 67 92 1f 55 55 51 52 a6 b4 98 64 a9 6e 3c 6b e5 8c 1f cd 8a 7c 42 0b ed 54 f4 b9 8b 9e 63 32 e3 23 ed ae 28 1e 66 a3 5e 8f 32 31 9e f1 e9 e4 73 6e a5 bc e8 8d ef 7a 9f 18 a7 ff e6 ac a6 f1 37 67 60 d9 96 d7 23 b3 19 2f 66 3d cd e4 4f c5 48 b3 1e d2 b1 66 ce 26 ff 01 64 81 fb 14 b8 9a 49 a7 d0 e5 17 72 0f 35 38 10 6a b2 f4 33 cf 8b d1 73 92 67 f7 97 19 e3 bf 65 93 b4 18 35 1c 32 e3 99 45 9a 60 10 90 45 51 f1 e5 81 67 c9 11 3b 7f 20 f9 8c ff 94 16 3a 33 1d df 18 b1 d3 49 a2 b3 33 7f 30 f0 7c 23 e7 45 99 a7 47 1c 06 9f 36 e5 c1 c0 0d fd 13 5d 67 dd 48 f6 fa e1 07 c7 36 cc 81 ef b9 f6 89 ee d8 ae d7 61 86 b1 30 8b 6c c9 45 b6 30 33 90 75 9e e5 23 45 64 05 ac 88 05 f4 79 5a fc 02 5d 3b 9d 95 0a 2b e7 0f 53 42 f9 e5 dd 64 ca f4 27 1d 9b c9 b4 30 8f 1d c3 14 2f 40 05 d9 57 66 69 96 c6 73 d9 e9 68 75 8d 76 5c 4f b5 9c cf f5 32 7a a6 64 3a 8d 09 fd f7 a8 5c 34 93 ba b3 58 f6 4b 56 fc 26 70 45 a5 f2 62 ea 1b 24 a6 10 23 c6 73 85 42 bc a9 b2 16 1a 50 9a 89 49 23 66 f2 e8 17 a8 32 e3 88 58 35 75 9d c3 58 21 6a 98 75 6c 3c 27 59 ae 27 47 93 f4 88 46 da d9 e4 7e 7c a4 59 b0 9e 94 14 fa 1b 5c e9 48 7b 63 c2 e0 7a d1 cd 37 da d1 1b f3 0d cb c9 78 4c e2 29 8f b4 84 4c 67 1c 2b 41 3e a2 37 83 3e f0 76 34 cb a9 78 8d c5 ab 61 96 c0 02 29 60 46 71 59 f0 19 b0 cc 0d a3 b4 ee c8 ec d7 c7 f4 b7 3c 7b 00 05 fa a2 27 46 a7 Data Ascii: <kw8W$7L0aqd;9wq{~HI8u C'J_i3T*US?>x7%)?');)IzG2|ttZ2>}G~}X4gUUQRdn<k|BTc2#(f^21snz7g`#/f=OHf&dIr58j3sge52E`EQg; :3I30|#EG6]gH6a0lE03u#EdyZ];+SBd'0/@Wfishuv\O2zd:\4XKV&pEb$#sBPI#f2X5uX!jul<'Y'GF~|Y\H{cz7xL)Lg+A>7>v4xa)`FqY
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKserver: nginxdate: Thu, 03 Oct 2024 23:37:47 GMTlast-modified: Thu, 27 Jun 2024 13:51:43 GMTetag: "667d6e6f-4926"expires: Thu, 31 Dec 2037 23:55:55 GMTcache-control: max-age=315360000x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockaccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUTaccess-control-allow-credentials: trueaccess-control-allow-headers: User-Agent,Keep-Alive,Content-Typecontent-type: application/javascriptvary: Accept-Encodingcontent-encoding: gzipx-cacheable: YESage: 62083accept-ranges: bytesx-cache: HITcontent-length: 5056Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 3c 6b 77 a3 38 b2 df f7 57 24 cc 1e 37 4c 30 e6 61 83 71 c2 64 3b e9 ce 9c 39 77 e7 71 b6 7b e7 7e 48 b2 f7 08 49 38 ee 75 20 17 43 27 bd b1 ff fb 96 4a 80 85 5f 69 bb 33 f3 c1 85 d0 a3 aa 54 2a 55 95 e4 53 f4 be 3f 3e fa 78 37 99 1d 25 93 29 3f 82 27 29 8b ac 3b e6 29 cf 49 c1 d9 d1 f7 bd bf f4 7a 47 1f b2 32 a7 7c 74 f4 f8 d0 9d a4 74 5a 32 3e eb 7d 9a f5 8a 47 7e 9f 7d 9a 58 f7 93 d4 fa 34 fb cb 67 92 1f 55 55 51 52 a6 b4 98 64 a9 6e 3c 6b e5 8c 1f cd 8a 7c 42 0b ed 54 f4 b9 8b 9e 63 32 e3 23 ed ae 28 1e 66 a3 5e 8f 32 31 9e f1 e9 e4 73 6e a5 bc e8 8d ef 7a 9f 18 a7 ff e6 ac a6 f1 37 67 60 d9 96 d7 23 b3 19 2f 66 3d cd e4 4f c5 48 b3 1e d2 b1 66 ce 26 ff 01 64 81 fb 14 b8 9a 49 a7 d0 e5 17 72 0f 35 38 10 6a b2 f4 33 cf 8b d1 73 92 67 f7 97 19 e3 bf 65 93 b4 18 35 1c 32 e3 99 45 9a 60 10 90 45 51 f1 e5 81 67 c9 11 3b 7f 20 f9 8c ff 94 16 3a 33 1d df 18 b1 d3 49 a2 b3 33 7f 30 f0 7c 23 e7 45 99 a7 47 1c 06 9f 36 e5 c1 c0 0d fd 13 5d 67 dd 48 f6 fa e1 07 c7 36 cc 81 ef b9 f6 89 ee d8 ae d7 61 86 b1 30 8b 6c c9 45 b6 30 33 90 75 9e e5 23 45 64 05 ac 88 05 f4 79 5a fc 02 5d 3b 9d 95 0a 2b e7 0f 53 42 f9 e5 dd 64 ca f4 27 1d 9b c9 b4 30 8f 1d c3 14 2f 40 05 d9 57 66 69 96 c6 73 d9 e9 68 75 8d 76 5c 4f b5 9c cf f5 32 7a a6 64 3a 8d 09 fd f7 a8 5c 34 93 ba b3 58 f6 4b 56 fc 26 70 45 a5 f2 62 ea 1b 24 a6 10 23 c6 73 85 42 bc a9 b2 16 1a 50 9a 89 49 23 66 f2 e8 17 a8 32 e3 88 58 35 75 9d c3 58 21 6a 98 75 6c 3c 27 59 ae 27 47 93 f4 88 46 da d9 e4 7e 7c a4 59 b0 9e 94 14 fa 1b 5c e9 48 7b 63 c2 e0 7a d1 cd 37 da d1 1b f3 0d cb c9 78 4c e2 29 8f b4 84 4c 67 1c 2b 41 3e a2 37 83 3e f0 76 34 cb a9 78 8d c5 ab 61 96 c0 02 29 60 46 71 59 f0 19 b0 cc 0d a3 b4 ee c8 ec d7 c7 f4 b7 3c 7b 00 05 fa a2 27 46 a7 Data Ascii: <kw8W$7L0aqd;9wq{~HI8u C'J_i3T*US?>x7%)?');)IzG2|ttZ2>}G~}X4gUUQRdn<k|BTc2#(f^21snz7g`#/f=OHf&dIr58j3sge52E`EQg; :3I30|#EG6]gH6a0lE03u#EdyZ];+SBd'0/@Wfishuv\O2zd:\4XKV&pEb$#sBPI#f2X5uX!jul<'Y'GF~|Y\H{cz7xL)Lg+A>7>v4xa)`FqY

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /d.js HTTP/1.1Host: waust.atConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/vvGk67y305g HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&j= HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /d.js HTTP/1.1Host: waust.atConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&y=&a=0&v=27&r=6191 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=6b3l&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1728060750; l=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /idg/?su=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1728060750; l=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&j= HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1728060750; l=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&y=&a=0&v=27&r=6191 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/vvGk67y305g/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060752392&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&event_source=dtscout&rnd=0.40497007869512736&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=6b3l&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=2; st=2
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R-Iwp_fcYXBvhfCw6zf8blC7vJ3yDdsPIjhAp6Mbp_O5clvT3XswqVzMDfFkZotJihM6-2kTuQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/vvGk67y305g/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060752392&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=CoIKR2cAHVFNwwtkEQYkAg==
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&event_source=dtscout&rnd=0.40497007869512736&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1728060754661%7D%5D
Source: global traffic	HTTP traffic detected: GET /s/player/96d06116/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060754661.1&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060754661.3&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R-Iwp_fcYXBvhfCw6zf8blC7vJ3yDdsPIjhAp6Mbp_O5clvT3XswqVzMDfFkZotJihM6-2kTuQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/16311/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn-tc.33across.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?ad6CiA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/optimus_rules.json HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: http://nirothniroth.siteSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /386076.gif?partner_uid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50131&et=13&cid=lr&fp=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fidsync.rlcdn.com%2F395886.gif%3Fpartner_uid%3D%5BPersonID%5D HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/16311/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/optimus_rules.json HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=sFwyuNYVfuaqdykYVAMl7m_hL1VMRsISKmpb9c6bmXnb2RilNE7gQhFsL2VUtuQB73Q7maL2I8YC9LoM2sJEaUmexTk3zccPy1VRyWvFoSbSxkwlQUnSiIy6hdpawPbF0ul_dVsgzsRXTtbDKyhccA1E8yy_cfJ06hLD9bwjUbPmj52zAA
Source: global traffic	HTTP traffic detected: GET /6/map HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157
Source: global traffic	HTTP traffic detected: GET /pixel?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=sFwyuNYVfuaqdykYVAMl7m_hL1VMRsISKmpb9c6bmXnb2RilNE7gQhFsL2VUtuQB73Q7maL2I8YC9LoM2sJEaUmexTk3zccPy1VRyWvFoSbSxkwlQUnSiIy6hdpawPbF0ul_dVsgzsRXTtbDKyhccA1E8yy_cfJ06hLD9bwjUbPmj52zAA
Source: global traffic	HTTP traffic detected: GET /lt/shared/2/lt.iframe.html?c=3825 HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btmov%2F%2F%2F%2F%2BdngAHeex8smT7KMvxnZNxeDyIZfmycwoIqsvxPIarAuaOHmFFFdu%2B7LIAqcnjxHDRj2tc95UYVafiviSrw5PFNQ1SRe11aqAKXTj1iQxV5twTdpjczDzChigAAf%2BdhnA%3D%3D"; _cc_aud="ABR4nGNgYGBIZ5CNYoABZgYGrhlg1qJWEMn4sB5IAgA8nwQM"
Source: global traffic	HTTP traffic detected: GET /395886.gif?partner_uid=3647472619353538569 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=be21c7ae-c478-4910-a1f5-36cf19986949; TDCPM=CAEYBSgCMgsI0ofPnfansj0QBTgB
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=sFwyuNYVfuaqdykYVAMl7m_hL1VMRsISKmpb9c6bmXnb2RilNE7gQhFsL2VUtuQB73Q7maL2I8YC9LoM2sJEaUmexTk3zccPy1VRyWvFoSbSxkwlQUnSiIy6hdpawPbF0ul_dVsgzsRXTtbDKyhccA1E8yy_cfJ06hLD9bwjUbPmj52zAA
Source: global traffic	HTTP traffic detected: GET /pixel/bounce/?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixels?src=LTJS&s=31%2C92%2C54%2C136%2C41%2C49%2C7%2C33%2C78%2C122%2C121%2C26%2C22%2C67%2C116%2C61%2C106%2C104%2C8%2C148%2C100%2C3%2C2&c=3825 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tags.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btmov%2F%2F%2F%2F%2BdngAHeex8smT7KMvxnZNxeDyIZfmycwoIqsvxPIarAuaOHmFFFdu%2B7LIAqcnjxHDRj2tc95UYVafiviSrw5PFNQ1SRe11aqAKXTj1iQxV5twTdpjczDzChigAAf%2BdhnA%3D%3D"; _cc_aud="ABR4nGNgYGBIZ5CNYoABZgYGrhlg1qJWEMn4sB5IAgA8nwQM"
Source: global traffic	HTTP traffic detected: GET /6/data HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btmov%2F%2F%2F%2F%2BdngAHeex8smT7KMvxnZNxeDyIZfmycwoIqsvxPIarAuaOHmFFFdu%2B7LIAqcnjxHDRj2tc95UYVafiviSrw5PFNQ1SRe11aqAKXTj1iQxV5twTdpjczDzChigAAf%2BdhnA%3D%3D"; _cc_aud="ABR4nGNgYGBIZ5CNYoABZgYGrhlg1qJWEMn4sB5IAgA8nwQM"
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0NzQ3MjYxOTM1MzUzODU2ORAAGg0I3bqAuAYSBQjoBxAAQgBKAA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=Lix5m1SIAc4v2QrDk0Ko4R+AuiaLJCZnC3wkA9zPDVQ=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /ttd?uid=be21c7ae-c478-4910-a1f5-36cf19986949&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58736/cms?partner_id=LOTME&gdpr=0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=43c6a60b4a751c4e740466424c3454a6e8eb284fbc165ea7acbf98c9c6da167af4cb09cee1a4f8eb&person_id=3647472619353538569&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3647472619353538569
Source: global traffic	HTTP traffic detected: GET /adscores/g.json?sid=9202507693 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=lotame&gdpr=0 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eyeota?uid=2aypPnC1W4jBJ6UYn0XYk3uGdfA_Wy-jcq4O0XlngMhk&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/vvGk67y305g HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=43c6a60b4a751c4e740466424c3454a6e8eb284fbc165ea7acbf98c9c6da167af4cb09cee1a4f8eb&person_id=3647472619353538569&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3647472619353538569
Source: global traffic	HTTP traffic detected: GET /ttd?uid=be21c7ae-c478-4910-a1f5-36cf19986949&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&j= HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=2; st=2
Source: global traffic	HTTP traffic detected: GET /connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/c=5436/tp=SVRN/tpid=na/pv=y?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D5001%263pid%3D%24%7Bprofile_id%7D HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btmov%2F%2F%2F%2F%2BdngAHeex8smT7KMvxnZNxeDyIZfmycwoIqsvxPIarAuaOHmFFFdu%2B7LIAqcnjxHDRj2tc95UYVafiviSrw5PFNQ1SRe11aqAKXTj1iQxV5twTdpjczDzChigAAf%2BdhnA%3D%3D"; _cc_aud="ABR4nGNgYGBIZ5CNYoABZgYGrhlg1qJWEMn4sB5IAgA8nwQM"
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0&rdf=1 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /eyeota?uid=2aypPnC1W4jBJ6UYn0XYk3uGdfA_Wy-jcq4O0XlngMhk&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /match?bid=51mdg9u&uid=af47c46d5a39f249ad744e970df11157&gdpr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /adscores/g.json?sid=9202507693 HTTP/1.1Host: aa.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3AJYufjDomSbOkNB7WjZzO0TGOGvTFoNgn
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotameddp&google_hm=YWY0N2M0NmQ1YTM5ZjI0OWFkNzQ0ZTk3MGRmMTExNTc&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728060765904 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/41715?bidder_id=127211&bidder_uuid=af47c46d5a39f249ad744e970df11157 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image.sbxx?go=262106&pid=420&xid=af47c46d5a39f249ad744e970df11157 HTTP/1.1Host: global.ib-ibi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btmov%2F%2F%2F%2F%2BdngAHeex8smT7KMvxnZNxeDyIZfmycwoIqsvxPIarAuaOHmFFFdu%2B7LIAqcnjxHDRj2tc95UYVafiviSrw5PFNQ1SRe11aqAKXTj1iQxV5twTdpjczDzChigAAf%2BdhnA%3D%3D"; _cc_aud="ABR4nGNgYGBIZ5CNYoABZgYGrhlg1qJWEMn4sB5IAgA8nwQM"
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/K9lf0UFwp6Y HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&y=&a=0&v=27&r=5183 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /ups/58736/cms?partner_id=LOTME&gdpr=0&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF4dAGcCEE8wPAsBj9cCQNL1kONtvYoFEgEBAQFuAWcKZ9xA0iMA_eMAAA&S=AQAAAou9ft8ityRCwhS7T5jVurg
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=2&_ls=17&_cc=us&_pl=d&_b=chrome%40117&_cbid=ua0j&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1728060765949 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&j= HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=na HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=7a1cf28e-0c02-47bb-a88d-bb58acbad6d7#1728060767376
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=na HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=00l1nct72u0mk&us_privacy=$(US_PRIVACY) HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=af47c46d5a39f249ad744e970df11157 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060767537&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A3%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A2%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A4%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /generate_204?bRdoCQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /cookie-sync/lotame?gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/K9lf0UFwp6Y/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A3%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A2%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A4%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&event_source=dtscout&rnd=0.13922402065348716&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&y=&a=0&v=27&r=5183 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060769600.4&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_kTBZSGKEAheYsTKn4afVEwgqvCdN3xf1wRiQqkT8iMIBWaKzUggCo0tbCy2a1UTpRsTg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060769600.7&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&us_privacy=&cache_buster=1728060769600.3 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060769600.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=75d2904d-9861-4a17-9dab-cb1f40374b37&vxii_rmax=2 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6Ijc1ZDI5MDRkLTk4NjEtNGExNy05ZGFiLWNiMWY0MDM3NGIzNyIsImwiOjE3MjgwNjA3Njg5MDksInQiOjF9
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1728060765949&_li_chk=true&previous_uuid=3a760c9a35324f3eaa4acaf38196495f HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /s/41715?bidder_id=127211&bidder_uuid=af47c46d5a39f249ad744e970df11157&_li_chk=true&previous_uuid=348dc49a774941bfac870668a1421294 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060769600.5 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&us_privacy=&cache_buster=1728060769600.6 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=2&_ls=17&_cc=us&_pl=d&_b=chrome%40117&_cbid=ua0j&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=4; st=4
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A8%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=61e7296121adcddf HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=na HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=D90AAAEE-B744-4BF2-957E-3A5D817DFE99&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /cookie-sync/lotame?gdpr=0&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-tYjDlz9E2py_pgG9eo3mzHWmeYNjybd4HpA-~A&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotameddp&google_hm=YWY0N2M0NmQ1YTM5ZjI0OWFkNzQ0ZTk3MGRmMTExNTc&gdpr=0&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /map/c=1389/tp=STSC/tpid=7a1cf28e-0c02-47bb-a88d-bb58acbad6d7-67001d5f-5553/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=eye&google_cm&google_sc&google_hm=MjNjTVlXcnRzcy00QllILS1VTGEtSGZ3OURYYUFUYlN6OVg5RDRLWnZKZXM&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u& HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=af47c46d5a39f249ad744e970df11157&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=00l1nct72u0mk&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp
Source: global traffic	HTTP traffic detected: GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060767537&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A8%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A8%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A6%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /image.sbxx?go=262106&pid=420&xid=af47c46d5a39f249ad744e970df11157 HTTP/1.1Host: ib.mookie1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/K9lf0UFwp6Y/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&event_source=dtscout&rnd=0.13922402065348716&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7006&vxii_pdid=3a760c9a-3532-4f3e-aa4a-caf38196495f&us_privacy=1YN- HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6Ijc1ZDI5MDRkLTk4NjEtNGExNy05ZGFiLWNiMWY0MDM3NGIzNyIsImwiOjE3MjgwNjA3NzA4MDIsInQiOjF9; sc=eyJpIjoiNzVkMjkwNGQtOTg2MS00YTE3LTlkYWItY2IxZjQwMzc0YjM3Iiwic2lkIjoic2lkLTE3NzFkMjU2LTgyNzEtMTFlZi05MGFiLTAyNDIwYTAwMDQxMCIsIm1zIjoyLCJ0cyI6MSwicHMiOjEsInNwIjo1MDA3LCJwcCI6MSwidHNlIjoxLCJpciI6dHJ1ZSwibHRzZSI6MTcyODA2MDc3MDgwMywiXyI6dHJ1ZX0=
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060769600.8 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /generate_204?Hi2b-A HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/K9lf0UFwp6YAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=be21c7ae-c478-4910-a1f5-36cf19986949; TDCPM=CAEYBSABKAIyCwjSh8-d9qeyPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&us_privacy=&cache_buster=1728060769600.9 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060769600.10 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_kTBZSGKEAheYsTKn4afVEwgqvCdN3xf1wRiQqkT8iMIBWaKzUggCo0tbCy2a1UTpRsTg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=1133&j=0 HTTP/1.1Host: loadm.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: d.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26dc_rc%3D1%26dc_mr%3D1%26dc_orig%3Dgdomg51%26%26referrer_pid%3Dgdomg51 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?uid=be21c7ae-c478-4910-a1f5-36cf19986949&bid=1e2n4ou HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A13%2C%22ts%22%3A1728060771068%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A11%2C%22ts%22%3A1728060771068%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A8%2C%22ts%22%3A1728060771068%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /image.sbxx?go=262106&pid=420&xid=af47c46d5a39f249ad744e970df11157 HTTP/1.1Host: ib.mookie1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=amc40omeseoymyw1c1hhrvz2; ibkukiuno=s=13b9cb41-41ae-4937-8317-d0804c35ba90&h=&v=0&l=-8584735461143615928&op=&hl=0&vlu=0&tcs=1&dcc=-8584735461143615928; ibkukinet=137263905=-8584735461143615928
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=D90AAAEE-B744-4BF2-957E-3A5D817DFE99&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF4dAGcCEE8wPAsBj9cCQNL1kONtvYoFEgEBAQFuAWcKZ9xA0iMA_eMAAA&S=AQAAAou9ft8ityRCwhS7T5jVurg; IDSYNC=19bk~2l2g
Source: global traffic	HTTP traffic detected: GET /qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-tYjDlz9E2py_pgG9eo3mzHWmeYNjybd4HpA-~A&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /map/c=1389/tp=STSC/tpid=7a1cf28e-0c02-47bb-a88d-bb58acbad6d7-67001d5f-5553/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=af47c46d5a39f249ad744e970df11157; _cc_cc="ACZ4nGNQSEwzMU82MUsxTTS2TDMysUxMMTcxSbU0N0hJMzQ0NDVnAIJ0Btn4H%2F%2F%2F%2F%2BdngAHeex8smfdoMfxnZPwoCyK314NIhh8bp7BgE1%2F%2BpxCb8Lmjh5ixie%2Fed1kAm%2FjhxXOwGt%2B%2B7ik3NvGG%2F5rYhJ88vmmITfxelxY24UunHrFhE3%2B3BLtr3sw8wIRNHACZf3pk"; _cc_aud="ABR4nGNgYGBIZ5CNZ4ABdgYGrhlg1qJWEMmoNRtCzQJRfO4OYN7DehDFr7MfSAIAzlIHLw%3D%3D"
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=af47c46d5a39f249ad744e970df11157&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotameddp&google_hm=YWY0N2M0NmQ1YTM5ZjI0OWFkNzQ0ZTk3MGRmMTExNTc&gdpr=0&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=00l1nct72u0mk&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk
Source: global traffic	HTTP traffic detected: GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /embed/vvGk67y305g HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/10-300x300.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/2-300x225.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fps.eyeota.net%252Fmatch%253Fuid%253D%2524UID%2526bid%253D2cr76e1%2526dc_rc%253D1%2526dc_mr%253D1%2526dc_orig%253Dgdomg51%2526%2526referrer_pid%253Dgdomg51 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=nvflvgCqkyw-vp-wOskloKuBWZTCXo_NKt9TRGf2DS_-xcEbww6sAvfGV1HKtluzpYgwpGHx-AfK3S9YIpi7pqIQlTwJXqvzFjcUebZxKzo.; receive-cookie-deprecation=1; uuid2=4583622392117192460
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30064&dpuuid=1925872aa52-6d770000010f52b2&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6j5b2cv%26uid%3D%24%7BDD_UUID%7D%26dc_rc%3D1%26dc_mr%3D1%26dc_orig%3Dgdomg51%26%26referrer_pid%3Dgdomg51 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=1mpjpn0&turn_id=3464331471461820661&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329533131466058&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3Dfbfadd72-26a0-4e48-b15b-c5f5f430ed0a%253A1728060770.8957946%26pid%3D500040%26it%3D1%26iv%3Dfbfadd72-26a0-4e48-b15b-c5f5f430ed0a%253A1728060770.8957946%26_%3D1728060770.8977344 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiZTNkMTdmYWUtNmEzYS00NWI4LTkyMGUtZDE4MzdkYzk3Zjk5OjE3MjgwNjA3NzEuODM1ODU2NyJ9.ZwAdYw.tKeq4pgiGi6Y3WdB2JRQCkLu1q8
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5133329533131466086&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3Dca1d8a13-bc2e-4b6b-9e39-3f9620befaab%253A1728060771.0288334%26pid%3D500040%26it%3D1%26iv%3Dca1d8a13-bc2e-4b6b-9e39-3f9620befaab%253A1728060771.0288334%26_%3D1728060771.031011 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiZTNkMTdmYWUtNmEzYS00NWI4LTkyMGUtZDE4MzdkYzk3Zjk5OjE3MjgwNjA3NzEuODM1ODU2NyJ9.ZwAdYw.tKeq4pgiGi6Y3WdB2JRQCkLu1q8
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%23respond&us_privacy=&cache_buster=1728060769600.11 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiZTNkMTdmYWUtNmEzYS00NWI4LTkyMGUtZDE4MzdkYzk3Zjk5OjE3MjgwNjA3NzEuODM1ODU2NyJ9.ZwAdYw.tKeq4pgiGi6Y3WdB2JRQCkLu1q8
Source: global traffic	HTTP traffic detected: GET /match?uid=be21c7ae-c478-4910-a1f5-36cf19986949&bid=1e2n4ou HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-PyA9QC1E2pWA6mOzdORL9O1p9z0pNpnB6zs-~A&gdpr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30064&dpuuid=1925872aa52-6d770000010f52b2&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6j5b2cv%26uid%3D%24%7BDD_UUID%7D%26dc_rc%3D1%26dc_mr%3D1%26dc_orig%3Dgdomg51%26%26referrer_pid%3Dgdomg51 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=48890197052314257843416482000257548153
Source: global traffic	HTTP traffic detected: GET /match?uid=4583622392117192460&bid=2cr76e1&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060771.8378935 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiZTNkMTdmYWUtNmEzYS00NWI4LTkyMGUtZDE4MzdkYzk3Zjk5OjE3MjgwNjA3NzEuODM1ODU2NyJ9.ZwAdYw.tKeq4pgiGi6Y3WdB2JRQCkLu1q8
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /generate_204?Va57TQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D2%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: i.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=fbfadd72-26a0-4e48-b15b-c5f5f430ed0a%3A1728060770.8957946&pid=500040&it=1&iv=fbfadd72-26a0-4e48-b15b-c5f5f430ed0a%3A1728060770.8957946&_=1728060770.8977344 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=ca1d8a13-bc2e-4b6b-9e39-3f9620befaab%3A1728060771.0288334&pid=500040&it=1&iv=ca1d8a13-bc2e-4b6b-9e39-3f9620befaab%3A1728060771.0288334&_=1728060771.031011 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060769600.12 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=6j5b2cv&uid=48890197052314257843416482000257548153&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&j=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=4; st=4
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /embed/K9lf0UFwp6Y HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-PyA9QC1E2pWA6mOzdORL9O1p9z0pNpnB6zs-~A&gdpr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060771.8378935 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060771.031011&iv=ca1d8a13-bc2e-4b6b-9e39-3f9620befaab:1728060771.0288334 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060770.8977344&iv=fbfadd72-26a0-4e48-b15b-c5f5f430ed0a:1728060770.8957946 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D2%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=thEeZGQ81SWLxY5
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&y=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&a=0&v=27&r=8317 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060771.8378935&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060773.6456807 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdZg.cV38Ep4xaWbhjSSbaZsCyjdeF88
Source: global traffic	HTTP traffic detected: GET /vi/K9lf0UFwp6Y/default.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /match?uid=4583622392117192460&bid=2cr76e1&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /match?bid=9sn4omv&uid=thEeZGQ81SWLxY5&newuser=1&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=3&_ls=25&_cc=us&_pl=d&_b=chrome%40117&_cbid=5koj&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=5
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&j=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=5
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060773.6456807 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/256451122802702538-300x157.jpg HTTP/1.1Host: thestalls168.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b; parking_session=c0f38a44-e927-45bd-b855-8cd29adf7b2b
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&y=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&a=0&v=27&r=8317 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060770.8977344&iv=fbfadd72-26a0-4e48-b15b-c5f5f430ed0a:1728060770.8957946 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060771.031011&iv=ca1d8a13-bc2e-4b6b-9e39-3f9620befaab:1728060771.0288334 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060771.8378935&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060775544&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A18%2C%22ts%22%3A1728060772386%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A17%2C%22ts%22%3A1728060772386%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A8%2C%22ts%22%3A1728060771068%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /match?bid=6j5b2cv&uid=48890197052314257843416482000257548153&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /vi/K9lf0UFwp6Y/default.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=3&_ls=25&_cc=us&_pl=d&_b=chrome%40117&_cbid=5koj&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=5
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A18%2C%22ts%22%3A1728060772386%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A17%2C%22ts%22%3A1728060772386%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A8%2C%22ts%22%3A1728060771068%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&event_source=dtscout&rnd=0.6403823838867404&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /generate_204?mVmfpA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/K9lf0UFwp6YAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50052&et=0&fp=2YndIG7n5I5DPKlZgr5U6-PEOUebBldO4xmqYjQ7qrQg&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dr8hrb20%26uid%3Dnil%26dc_rc%3D3%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3647472619353538569
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060773.6456807&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /?zdid=1332&zcluid=5afe2df1505ad0a6 HTTP/1.1Host: spl.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A23%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A22%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A10%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060773.6456807&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060775544&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A23%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A22%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A10%2C%22ts%22%3A1728060777802%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060777801.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=48b5b3ea-5f5d-4526-583c-75509e909c7f&reqId=a9ffdc2d-cdc2-43b8-7e87-16bdabb27ee7&zcluid=5afe2df1505ad0a6&zdid=1332 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&event_source=dtscout&rnd=0.6403823838867404&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060777801.2 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdaA.ldBnlFybnTRYkRfwFw19ApLFcBk
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060777801.4 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&j=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=6
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Uncategorized%20Archives%20-%20nirothniroth.site&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&y=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&a=0&v=27&r=2291 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw?google_gid=CAESEOxonk22oLKNOiX2sYbf0nk&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=48b5b3ea-5f5d-4526-583c-75509e909c7f&reqId=a9ffdc2d-cdc2-43b8-7e87-16bdabb27ee7&zcluid=5afe2df1505ad0a6&zdid=1332 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=48b5b3ea-5f5d-4526-583c-75509e909c7f; zsc=+r%3D%5E%BA%D5%CC%CC%5D%F1%91%C3%83%AB%13Y%A3o%0E%26%9E%04GW%97%29%1A%EFak%AB%C6%F2o%AC%DBg%8A%81%9BU%A3%D4%BC%88%D7%2Ac%9C%1DT%F3R%98%9E%DCw%D4%B7%BF3y%05%08%3B%D9%B6%85%D7%AD%3Fs%F3%88%BAX%F9%BC%CC%0E%16%DE+
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060777801.3&ref=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060777801.6&ref=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060777801.7 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /dcm?pid=05d425ec-398a-44ad-b86d-773a0766ce18&id=2aWj_8te6zHKvWYlvaLMto-jLy3DeT0i_kqCWdY5erWM HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060777801.5 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdaA.ldBnlFybnTRYkRfwFw19ApLFcBk
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=4&_ls=29&_cc=us&_pl=d&_b=chrome%40117&_cbid=tkvt&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=7
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Eyeota?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D63ri0ru%26uid%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060778717&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&t=Uncategorized%20Archives%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A28%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A27%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A12%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1; done_redirects219=1
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1 HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A28%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A27%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A12%2C%22ts%22%3A1728060778635%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060777801.8 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdaw.htHfHqJU2GsnRLLR1CwjemF6zto
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060777801.9 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060777801.10 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdaw.htHfHqJU2GsnRLLR1CwjemF6zto
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060777801.11 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /?partner=282&icm&cver&gdpr=0&smartmap=1&redirect=stags.bluekai.com%2Fsite%2F52799%3Fid%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1; done_redirects219=1; done_redirects282=1
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&j=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=7
Source: global traffic	HTTP traffic detected: GET /dcm?pid=05d425ec-398a-44ad-b86d-773a0766ce18&id=2aWj_8te6zHKvWYlvaLMto-jLy3DeT0i_kqCWdY5erWM&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A8Xh3yBNWEFArUqB7sGHdR8|t
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Uncategorized%20Archives%20-%20nirothniroth.site&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&y=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&a=0&v=27&r=2291 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060780383.3&ref=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&event_source=dtscout&rnd=0.03389110325984945&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /s/123/9.gif?puid=1925872aa52-6d770000010f52b2&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060780383.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060780383.4 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&us_privacy=&cache_buster=1728060780383.2 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbA.qF9sNfKlyqEIuoUL6e8B_xinJc8
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&us_privacy=&cache_buster=1728060780383.5 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbA.qF9sNfKlyqEIuoUL6e8B_xinJc8
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060779.0707035 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbA.qF9sNfKlyqEIuoUL6e8B_xinJc8
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=4&_ls=29&_cc=us&_pl=d&_b=chrome%40117&_cbid=tkvt&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=7
Source: global traffic	HTTP traffic detected: GET /mw?google_gid=CAESEOxonk22oLKNOiX2sYbf0nk&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=48b5b3ea-5f5d-4526-583c-75509e909c7f&reqId=a9ffdc2d-cdc2-43b8-7e87-16bdabb27ee7&zcluid=5afe2df1505ad0a6&zdid=1332 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=48b5b3ea-5f5d-4526-583c-75509e909c7f; zsc=+r%3D%5E%BA%D5%CC%CC%5D%F1%91%C3%83%AB%13Y%A3o%0E%26%9E%04GW%97%29%1A%EFak%AB%C6%F2o%AC%DBg%8A%81%9BU%A3%D4%BC%88%D7%2Ac%9C%1DT%F3R%98%9E%DCw%D4%B7%BF3y%05%08%3B%D9%B6%85%D7%AD%3Fs%F3%88%BAX%F9%BC%CC%0E%16%DE+
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Eyeota?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D63ri0ru%26uid%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=a6c76b70-57a3-0c7a-56a7-51e8bbc66cbe
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060778717&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&t=Uncategorized%20Archives%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A33%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A32%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A14%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A33%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A32%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A14%2C%22ts%22%3A1728060780383%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /dcm?pid=05d425ec-398a-44ad-b86d-773a0766ce18&id=2aWj_8te6zHKvWYlvaLMto-jLy3DeT0i_kqCWdY5erWM&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A8Xh3yBNWEFArUqB7sGHdR8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /merge?pid=5039&3pid=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; ljtrtb=eJwNyrsRgEAIBcBeXmwAJ8hgN8xxJH4ijRx71433gRIxVkSJdVlSY%2FZq4pEmMtwoi5nVMEH%2FRrTz2S9rNx0b3g%2F79hBo
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060777801.12 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060780383.6&ref=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/123/123/9/1.gif?puid=1925872aa52-6d770000010f52b2&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#1
Source: global traffic	HTTP traffic detected: GET /tum?umid=72&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dbcgd9g1%26uid%3D___AUID___ HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060780383.7 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060780.0905974 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060779.0707035 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&gdpr_consent=&url=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Ddn4m51u%26uid%3D[sas_uid] HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b?c1=9&c2=16937916&c3=2&cs_xi=27LSrgxdErHxi84ruSWCyzobQPczoh8BdoCotB3PEROc HTTP/1.1Host: ads.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&us_privacy=&cache_buster=1728060780383.8 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&event_source=dtscout&rnd=0.03389110325984945&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060781.0271933 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /merge?pid=5039&3pid=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; ljtrtb=eJwNyrsRgEAIBcBeXmwAJ8hgN8xxJH4ijRx71433gRIxVkSJdVlSY%2FZq4pEmMtwoi5nVMEH%2FRrTz2S9rNx0b3g%2F79hBo; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060781.1099029 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060780383.9 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /vdm677.gif?gdpr=%7BGDPR%7D&gdpr_consent=%7BGDPR_CONSENT%7D&redir=https://ps.eyeota.net/match?bid=4o6e2ru&uid=%7B$UID%7D HTTP/1.1Host: eyeota.ck-ie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060779.0707035&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&us_privacy=&cache_buster=1728060780383.10 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbQ.hiaCLh-xFT48GwpfvJoc9C2mpWU
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060780.0905974 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&gdpr_consent=&url=https://ps.eyeota.net/match?bid=dn4m51u&uid=[sas_uid]&cklb=1 HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=id5&cspid=18&cb=&redirect=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F796%2F8%2F2.gif%3Fpuid%3D%24%7BADELPHIC_CUID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2?c1=9&c2=16937916&c3=2&cs_xi=27LSrgxdErHxi84ruSWCyzobQPczoh8BdoCotB3PEROc HTTP/1.1Host: ads.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1BD63854e5a82eedc8634101728060782; XID=1BD63854e5a82eedc8634101728060782
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060781.6817832 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbg.4BaR1Gvy9ioyYHUveNvBNoV-kak
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060781.671499 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbg.4BaR1Gvy9ioyYHUveNvBNoV-kak
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060781.0271933 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=4o6e2ru&uid=2ee61b55a871190dacb5338779ddf9240ec5b68b HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3081&partner_device_id=27TyT3p88SiUi6ju7u5FyztY_urOrsX-An_1j7EEc_hI HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060780.0905974&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060781.1099029 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060779.0707035&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060780383.11 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&gdpr_consent=&url=https://ps.eyeota.net/match?bid=dn4m51u&uid=[sas_uid]&cklb=1 HTTP/1.1Host: sync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100; pid=3687183077264864653
Source: global traffic	HTTP traffic detected: GET /c/123/796/8/2.gif?puid=2182b3be-f5c1-42ac-9a1c-918372a8865c&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=123#1728060782401#-108999558
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060781.6817832 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060781.671499 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.0271933&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060782.393186 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbw.YTR7TMfb9x80Fxte_1lsZKDZOt8
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1&us_privacy=&cache_buster=1728060780383.12 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbw.YTR7TMfb9x80Fxte_1lsZKDZOt8
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060782.74287 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbw.YTR7TMfb9x80Fxte_1lsZKDZOt8
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3081&partner_device_id=27TyT3p88SiUi6ju7u5FyztY_urOrsX-An_1j7EEc_hI HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1728060784123; TapAd_DID=0621d620-5787-4810-86a0-18b64d1b363a
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060780.0905974&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.1099029&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.6817832&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.671499&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.0271933&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9202273308&_puid=2fW6Jb_SsGvLqOLlD9QniA4odBVOH0oa-exjO-wLnu4Q&_redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D4o6e2ru%26%26uid%3D HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3AJYufjDomSbOkNB7WjZzO0TGOGvTFoNgn
Source: global traffic	HTTP traffic detected: GET /getuid?https://id5-sync.com/c/123/2/7/3.gif?puid=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=nvflvgCqkyw-vp-wOskloKuBWZTCXo_NKt9TRGf2DS_-xcEbww6sAvfGV1HKtluzpYgwpGHx-AfK3S9YIpi7pqIQlTwJXqvzFjcUebZxKzo.; receive-cookie-deprecation=1; uuid2=4583622392117192460
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060783.5042324 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdbw.YTR7TMfb9x80Fxte_1lsZKDZOt8
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060782.393186 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=0621d620-5787-4810-86a0-18b64d1b363a%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=be21c7ae-c478-4910-a1f5-36cf19986949; TDCPM=CAEYASABKAIyCwic-sbz9qeyPRAFOAFaBmV5ZW90YWAC
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.1099029&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060782.74287 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.6817832&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060781.671499&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060782.393186&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=be21c7ae-c478-4910-a1f5-36cf19986949&ttd_puid=0621d620-5787-4810-86a0-18b64d1b363a%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1728060784123; TapAd_DID=0621d620-5787-4810-86a0-18b64d1b363a; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060782.74287&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060783.5042324 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /c/123/2/7/3.gif?puid=4583622392117192460&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=123#1728060782401#-108999558|796#1728060784544#788199015
Source: global traffic	HTTP traffic detected: GET /pixel/10751/?che=&ip=8.46.123.33&l1=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26uid%3D216783105025002984207 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3AJYufjDomSbOkNB7WjZzO0TGOGvTFoNgn
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060784.7552915 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdcQ.-A8A1Wr-q4zWg8KHHtRG95NzUyw
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060782.74287&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=be21c7ae-c478-4910-a1f5-36cf19986949&ttd_puid=0621d620-5787-4810-86a0-18b64d1b363a%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1728060784123; TapAd_DID=0621d620-5787-4810-86a0-18b64d1b363a; TapAd_3WAY_SYNCS=1!6688
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060782.393186&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /match?bid=r852b20&uid=nil&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060783.5042324&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F429%2F6%2F4.gif%3Fpuid%3D%23PM_USER_ID%26gdpr%3D0%26gdpr_consent%3D&gdpr_consent=&gdpr=0 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; KADUSERCOOKIE=D90AAAEE-B744-4BF2-957E-3A5D817DFE99
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6Ijc1ZDI5MDRkLTk4NjEtNGExNy05ZGFiLWNiMWY0MDM3NGIzNyIsImwiOjE3MjgwNjA3NzEzOTYsInQiOjJ9; sc=eyJpIjoiNzVkMjkwNGQtOTg2MS00YTE3LTlkYWItY2IxZjQwMzc0YjM3Iiwic2lkIjoic2lkLTE3NzFkMjU2LTgyNzEtMTFlZi05MGFiLTAyNDIwYTAwMDQxMCIsIm1zIjoyLCJ0cyI6MiwicHMiOjIsInNwIjo1MDQ0LCJwcCI6MiwidHNlIjoyLCJpciI6dHJ1ZSwibHRzZSI6MTcyODA2MDc3MTM5N30=
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=JcO0AQZHJIjSt-KITeuUGOwp&rnd=1728060785879 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /match?bid=c9gd69u&uid=216783105025002984207 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728060785849 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060783.5042324&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060784.7552915 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /lj_match?r=1728060785849 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=r852b20&uid=nil&dc_rc=1&dc_mr=1&dc_orig=gdomg51&&referrer_pid=gdomg51 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/123/429/6/4.gif?puid=D90AAAEE-B744-4BF2-957E-3A5D817DFE99&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=2#1728060786422#308420009#4583622392117192460|123#1728060782401#-108999558|796#1728060784544#788199015
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=3a760c9a-3532-4f3e-aa4a-caf38196495f HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdcg.ITHYwJ5o2qkv9MYaW3gNSIzzcMo
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060784.7552915&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /match?bid=c9gd69u&uid=216783105025002984207 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=9826AC8C9481453CA0CCB86472583A83 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk; ljtrtb=eJwVyrEOgjAQANB%2FudnhrvS81M1EYDCiUSE6NpRjKHUgNA7GfxfXl%2FcBRiTYgVcrvd0G9oVTY50PYu3gBIMSEQtsgNeGONGrX8RkTPFvWLiVDe2bhcruqt1ct1V7w%2FOU0yWXj8N9FE6nMQ71%2B3mUqBG%2BPwLoIMM%3D
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060784.7552915&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=60b8cfa7-4a30-f9b2-2802-065555e8bf08&iiqpciddate=1728060787349&tsrnd=629_1728060787350&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=0 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.intentiq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=58&3pid=D90AAAEE-B744-4BF2-957E-3A5D817DFE99&us_privacy=&gdpr=0&gdpr_consent=&location=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F1242%2F5%2F5.gif%3Fpuid%3D%5BSOVRNID%5D%26gdpr%3D0%26gdpr_consent%3D&s=id5 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk; ljtrtb=eJwVyrEOgjAQANB%2FudnhrvS81M1EYDCiUSE6NpRjKHUgNA7GfxfXl%2FcBRiTYgVcrvd0G9oVTY50PYu3gBIMSEQtsgNeGONGrX8RkTPFvWLiVDe2bhcruqt1ct1V7w%2FOU0yWXj8N9FE6nMQ71%2B3mUqBG%2BPwLoIMM%3D
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=9826AC8C9481453CA0CCB86472583A83 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk; ljtrtb=eJwVyrEOgjAQANB%2FudnhrvS81M1EYDCiUSE6NpRjKHUgNA7GfxfXl%2FcBRiTYgVcrvd0G9oVTY50PYu3gBIMSEQtsgNeGONGrX8RkTPFvWLiVDe2bhcruqt1ct1V7w%2FOU0yWXj8N9FE6nMQ71%2B3mUqBG%2BPwLoIMM%3D; _ljtrtb_2=9826AC8C9481453CA0CCB86472583A83
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=60b8cfa7-4a30-f9b2-2802-065555e8bf08&iiqpciddate=1728060787349&tsrnd=629_1728060787350&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=&ckls=true&ci=LMBXu5KOzK&nc=false&trid=-601619654 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.intentiq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=LMBXu5KOzK
Source: global traffic	HTTP traffic detected: GET /c/123/1242/5/5.gif?puid=JcO0AQZHJIjSt-KITeuUGOwp&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=2#1728060786422#308420009#4583622392117192460|123#1728060782401#-108999558|796#1728060784544#788199015|429#1728060788158#-385382141#D90AAAEE-B744-4BF2-957E-3A5D817DFE99
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060788.2608335 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAddA.bA-cTv-AQDiqpWyULSppKDjstJE
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push?partner_id=2922&partner_url=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F108%2F4%2F6.gif%3Fpuid%3D%24%7BTA_DEVICE_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1728060784123; TapAd_DID=0621d620-5787-4810-86a0-18b64d1b363a; TapAd_3WAY_SYNCS=1!6688
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060788.2608335 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /lj_match?r=1728060789863 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=9826AC8C9481453CA0CCB86472583A83
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=60b8cfa7-4a30-f9b2-2802-065555e8bf08&iiqpciddate=1728060787349&tsrnd=629_1728060787350&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=&ckls=true&ci=LMBXu5KOzK&nc=false&trid=-601619654 HTTP/1.1Host: sync.intentiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=LMBXu5KOzK; IQPData=137263905#1728060790370#0#1728060790370; ASDT=0; intentIQCDate=1728060790374; IQadv=1728060790375; CSDT=UEQ6MTEzMDRfMCZVUUZxeTdy; IQMID=137263905#1728060790375
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1728060789863 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=LMBXu5KOzK; IQPData=137263905#1728060790370#0#1728060790370; ASDT=0; intentIQCDate=1728060790374; IQadv=1728060790375; CSDT=UEQ6MTEzMDRfMCZVUUZxeTdy; IQMID=137263905#1728060790375
Source: global traffic	HTTP traffic detected: GET /embed/vvGk67y305g HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6Ijc1ZDI5MDRkLTk4NjEtNGExNy05ZGFiLWNiMWY0MDM3NGIzNyIsImwiOjE3MjgwNjA3ODcxODQsInQiOjN9; sc=eyJpIjoiNzVkMjkwNGQtOTg2MS00YTE3LTlkYWItY2IxZjQwMzc0YjM3Iiwic2lkIjoic2lkLTIxMzU3YjJkLTgyNzEtMTFlZi04Y2JiLTAyNDIwYWZmMDUxNiIsIm1zIjoyLCJwcyI6Miwic3AiOjUwNDQsInBwIjoyLCJ0c2UiOjIsImx0c2UiOjE3MjgwNjA3NzEzOTd9
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=JcO0AQZHJIjSt-KITeuUGOwp&rnd=1728060789917 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARCEGQ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /generate_204?2ACsOA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A38%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A37%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /c/123/108/4/6.gif?puid=0621d620-5787-4810-86a0-18b64d1b363a&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=2#1728060786422#308420009#4583622392117192460|1242#1728060790318#144248393|123#1728060782401#-108999558|796#1728060784544#788199015|429#1728060788158#-385382141#D90AAAEE-B744-4BF2-957E-3A5D817DFE99
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060788.2608335&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&j= HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=8
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JcO0AQZHJIjSt-KITeuUGOwp HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/throtle? HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAC1VE7OADsAABdC3efg2g; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=9826AC8C9481453CA0CCB86472583A83 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk; _ljtrtb_2=9826AC8C9481453CA0CCB86472583A83; _ljtrtb_58=D90AAAEE-B744-4BF2-957E-3A5D817DFE99; ljtrtb=eJwdy70OgjAUQOF36exwb3vLbd1qRQbjT1SIjA1QhoKDgTgY3110PfnOW0ixFtbIzHnjLRkkrbwD7zcmI5baKGeUWAkNgIsMkbihrNVB2SjJhpaJOsvQRkTU%2FJMLAxjw0UwsZxjT%2F1Z2yRLdccK8usTqWZS78gqnYR7Pc37f3nrW46FPXfGq95xiEp8vdNIpAA%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=3a760c9a-3532-4f3e-aa4a-caf38196495f HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAddg.qrg0mCDeCWLjnTsjI3LQo9ZU3Cs
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&y=&a=0&v=27&r=7837 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=5&_ls=44&_cc=us&_pl=d&_b=chrome%40117&_cbid=74jp&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=9
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060793739&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A43%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A42%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060793391.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060793391.2 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAddg.qrg0mCDeCWLjnTsjI3LQo9ZU3Cs
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401728060750FF13A5CAA71E77004B HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1; done_redirects219=1; done_redirects282=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /match?publisher_dsp_id=313&dsp_callback=1&external_user_id=ID5-333fxi5yj1M1ubhexUUpDr2wTSTyMeBelTLXB3lPxQ&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F123%2F124%2F3%2F7.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/?l=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&j= HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=9
Source: global traffic	HTTP traffic detected: GET /pingjs/?k=vp0x95jnmo&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20co&c=d&x=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&y=&a=0&v=27&r=7837 HTTP/1.1Host: whos.amung.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1728060788.2608335&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: didts=1728060775; nnls=; pxrc=CAA=; did=9RsKRLFLsqEWHUU6
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22%26fbclid%3DIwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A43%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A42%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A43%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A42%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060793391.3 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060793391.5 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmYR4zo_U35VDdKfv05BB2vRgk4AqsJk8fD15I6SCWSHo51Vpw2x-80ro0xANc
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060793391.7 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060793391.4 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdeg.Ga_dJaSN69He3SSDWkMgjzcwcA8
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060793391.9 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=9826AC8C9481453CA0CCB86472583A83 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JcO0AQZHJIjSt-KITeuUGOwp; _ljtrtb_5001=af47c46d5a39f249ad744e970df11157; _ljtrtb_5=00l1nct72u0mk; _ljtrtb_5039=21ANt1EVRfVrGUFUS0OlumPuEXDTg75mMgkeGwYK7kfk; _ljtrtb_2=9826AC8C9481453CA0CCB86472583A83; _ljtrtb_58=D90AAAEE-B744-4BF2-957E-3A5D817DFE99; ljtrtb=eJwdy7sOwjAMQNF%2FyUwlO3HqmC1NUwbEQ7wEY0UJQykDomJA%2FDuB9erct9JqqsTp0gcXhBySNcFDCJUribV1xjujJsq67GoB732MRcVEBVWNLsRyLIy3tUOumyjyswCYdZuIz1R2tjWSNEnb5esiDF1CRMs%2FmRnADe%2FnJ%2BsRhv5%2FG8lZo18%2BMR426fCY7Zv9Fla3cViP8VjvrmyHxbW%2FzF6nOfepV58vHsAykA%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060793391.6 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdeg.Ga_dJaSN69He3SSDWkMgjzcwcA8
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060793391.8 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdeg.Ga_dJaSN69He3SSDWkMgjzcwcA8
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=be21c7ae-c478-4910-a1f5-36cf19986949; TDCPM=CAESFAoFdGFwYWQSCwjiuq_K4aeyPRAFGAEgASgCMgsIqLGy9_ensj0QBTgBWgV0YXBhZGAC
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1 HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nirothniroth.site/?cat=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A43%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A42%2C%22ts%22%3A1728060793391%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&event_source=dtscout&rnd=0.7304689290372415&exptid=ZHkABGcAHU8AAAAIbwOvAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10005&vxii_pdid=2KNRXgjbVumBOCYEyzVhhBdWSOv62CWwgOpdzy0Ug5VI HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6Ijc1ZDI5MDRkLTk4NjEtNGExNy05ZGFiLWNiMWY0MDM3NGIzNyIsImwiOjE3MjgwNjA3OTE0MTIsInQiOjR9; sc=eyJpIjoiNzVkMjkwNGQtOTg2MS00YTE3LTlkYWItY2IxZjQwMzc0YjM3Iiwic2lkIjoic2lkLTIxMzU3YjJkLTgyNzEtMTFlZi04Y2JiLTAyNDIwYWZmMDUxNiIsIm1zIjoyLCJ0cyI6MSwicHMiOjMsInNwIjo1MDM3LCJwcCI6MywidHNlIjozLCJpciI6dHJ1ZSwibHRzZSI6MTcyODA2MDc5MTQxM30=
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/match?publisher_dsp_id=313&dsp_callback=1&external_user_id=ID5-333fxi5yj1M1ubhexUUpDr2wTSTyMeBelTLXB3lPxQ&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F123%2F124%2F3%2F7.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=150b273d-17b2-43a7-9ebc-3b0e5e51544e; tuuid_lu=1728060795
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /b/p?id=w!vp0x95jnmo&lm=0&ts=1728060793739&dn=TC&iso=0&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&t=Hollywood%20announced%20about%20the%20Legendary%20actor%20Sylvester%20Stallone%2C%20He%20has%20been%20confirm%20as%E2%80%A6%20See%20more1946_2024%E2%80%A6.%2C%E2%80%A6.%20-%20nirothniroth.site HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A48%2C%22ts%22%3A1728060796073%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A47%2C%22ts%22%3A1728060796073%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A18%2C%22ts%22%3A1728060796073%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=nirothniroth.site&_ss=44zrflu1ba&_pv=5&_ls=44&_cc=us&_pl=d&_b=chrome%40117&_cbid=74jp&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1728060750; l=10401728060750FF13A5CAA71E77004B; m=5; st=10
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060796073.3&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=9826AC8C9481453CA0CCB86472583A83
Source: global traffic	HTTP traffic detected: GET /s/59742?bidder_id=220889&bidder_uuid=2bTZ-XLf1j4VpqMQv8AmydUAp-234ohjro6HXY-pKZs8 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChAKBgj1ARCEGQoGCKIBEIQZ; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060796073.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGcAHU8AAAAIbwOvAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /getuid?p=1625&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6bqoi0v%26referrer_pid%3Dgdomg51%26uid%3D%25rlid%25 HTTP/1.1Host: api.retargetly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060796073.2 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdew.5VnxF7Qk0ilYDNzxGUc7Vpaaj8A
Source: global traffic	HTTP traffic detected: GET /?partner=147&mapped=be21c7ae-c478-4910-a1f5-36cf19986949&icm&gdpr=0&gdpr_consent=&cver HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=5afe2df1505ad0a6; done_redirects109=1; done_redirects236=1; done_redirects219=1; done_redirects282=1; done_redirects147=1
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1728060796073.6&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=9826AC8C9481453CA0CCB86472583A83
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060796073.4 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060796073.5 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdew.5VnxF7Qk0ilYDNzxGUc7Vpaaj8A
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060793391.10 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdew.5VnxF7Qk0ilYDNzxGUc7Vpaaj8A
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060796073.7 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=150&cm=2OWliCrjsb7pGe0jUgVyn14cC6KaJmeViBn6EriDIKcE HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=BGOkuTi3WUhJWgjhBBTrSA0cWPxq6lCuFReF4NFBU-Pmqi11ttdTWrv-3DOBRDs8tWvY8G-3X6htUm5xIkJ21Pz3rpuLRuzs84dc1-F420h_qN2AFy5w8rUa42D6hTaxooYm8sOa9_GNS0YcCUI6T7CHpUjdKw6HlhP-kF5SJWQWRCaIKeNSSibMyA
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060796073.8 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfA.o9o6Kt8633h008qDZ1rAYN44tlk
Source: global traffic	HTTP traffic detected: GET /getuid?p=1625&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6bqoi0v%26referrer_pid%3Dgdomg51%26uid%3D%25rlid%25&_rlid=4b516ec7-30ad-45dd-b590-1aedbf0d63a3 HTTP/1.1Host: api.retargetly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rlid=4b516ec7-30ad-45dd-b590-1aedbf0d63a3
Source: global traffic	HTTP traffic detected: GET /cq/123/124/3/7.gif?puid=150b273d-17b2-43a7-9ebc-3b0e5e51544e&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=01c91573-50c3-71ea-8023-3d37f7c9d28f#1728060781498#2; 3pi=2#1728060786422#308420009#4583622392117192460|1242#1728060790318#144248393|123#1728060782401#-108999558|796#1728060784544#788199015|108#1728060793567#-1177914473|429#1728060788158#-385382141#D90AAAEE-B744-4BF2-957E-3A5D817DFE99
Source: global traffic	HTTP traffic detected: GET /s/59742?bidder_id=220889&bidder_uuid=2bTZ-XLf1j4VpqMQv8AmydUAp-234ohjro6HXY-pKZs8 HTTP/1.1Host: i6.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060796073.9 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060795.6292577 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfA.o9o6Kt8633h008qDZ1rAYN44tlk
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF4dAGcCEE8wPAsBj9cCQNL1kONtvYoFEgEBAQFuAWcKZ9xA0iMA_eMAAA&S=AQAAAou9ft8ityRCwhS7T5jVurg; IDSYNC="19bk~2l2g:19cl~2l2g"
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1728060796073.11 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /pushpull?pid=6b6d3924-92d3-4998-bf20-3f75688546c0&dmp=6b6d3924-92d3-4998-bf20-3f75688546c0&uid=2I-ioy5vngYdyvzKCtshnW7-Y9jkQZlEzztWW3mKpSlE&cb=1728060797&src=www&type=100&return-unstable=true&g=1&redirect=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dm5ri0ru%26uid%3D%24BROWSER_ID HTTP/1.1Host: ws.rqtrk.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060796073.10 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfA.o9o6Kt8633h008qDZ1rAYN44tlk
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=OTTukGcAHVLEI2Pjf2hmKg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&us_privacy=&cache_buster=1728060796073.12 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfQ.R4DJ0PMwK_SUsqLG7oWR3zhZvZM
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ups/58679/cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF4dAGcCEE8wPAsBj9cCQNL1kONtvYoFEgEBAQFuAWcKZ9xA0iMA_eMAAA&S=AQAAAou9ft8ityRCwhS7T5jVurg; IDSYNC="19bk~2l2g:19cl~2l2g"
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060794.3741665 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfg.hsZWvaJ87NFlv3Ry_TXz4eq_d4c
Source: global traffic	HTTP traffic detected: GET /match?bid=m5ri0ru&uid=260ac813-b367-4125-97c9-1aede9aac5d9 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&pid=500040&it=1&iv=e3d17fae-6a3a-45b8-920e-d1837dc97f99%3A1728060771.8358567&_=1728060795.6292577 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChsKBgj1ARCEGQoGCKIBEIQZCgkI_____wcQjhk; lidid=3a760c9a-3532-4f3e-aa4a-caf38196495f
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060797.4318159 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfg.hsZWvaJ87NFlv3Ry_TXz4eq_d4c
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=1&r=&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A48%2C%22ts%22%3A1728060796339%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A47%2C%22ts%22%3A1728060796339%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=w!vp0x95jnmo&dn=TC&cc=2&r=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&pu=http%3A%2F%2Fnirothniroth.site%2F%3Fcat%3D1 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGcAHVLEI2Pjf2hmKg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1728060769600%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1728060754661%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A48%2C%22ts%22%3A1728060796339%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A47%2C%22ts%22%3A1728060796339%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A16%2C%22ts%22%3A1728060781938%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1728060755390%7D%5D
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336730705620564&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26pid%3D500040%26it%3D1%26iv%3De3d17fae-6a3a-45b8-920e-d1837dc97f99%253A1728060771.8358567%26_%3D1728060797.425818 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=e3d17fae-6a3a-45b8-920e-d1837dc97f99:1728060771.8358567; sd-session-id=.eJwNykEOgyAQQNG7zFoaYIABLmOojAlppY2jmxrvXhZ_8ZJ_wfzlfSud-wH52E-eYHm3IYF8gbTfxi_I4I2ziIFQk_bBjhzcEwiLtE-fWx0PYzW0FlahYFHOP6NKVrOqJiLVJdGaUjZkow6ayDwi-ugDwf0HvTgl3Q.ZwAdfg.hsZWvaJ87NFlv3Ry_TXz4eq_d4c
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=30&p=59&cp=id5&cu=1&url=https%3A%2F%2Fid5-sync.com%2Fc%2F123%2F203%2F2%2F8.gif%3Fpuid%3D%40%40CRITEO_USERID%40%40%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: dis.eu.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=6bqoi0v&referrer_pid=gdomg51&uid=4b516ec7-30ad-45dd-b590-1aedbf0d63a3 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://nirothniroth.site/?p=22Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=1925872aa52-6d770000010f52b2; SERVERID=21170~DM
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401728060750FF13A5CAA71E77004B&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fnirothniroth.site%2F%3Fp%3D22&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401728060750FF13A5CAA71E77004B
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Found strings which match to known social media urls

Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: (g.sk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.sk(c,"www.youtube.com"),d=c.toString()):(c=nwa(d),xE(c)&&(d=c));c=new g.kM(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=wE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)||"")||wE(this.nf)||this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"||this.N?d=xs(d,h,MJa):h&&(d="embedded");this.Ja=d;Vqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(NJa,d);!d||f&&!this.N||(h=d);this.playerStyle=h;this.K=g.Vb(NJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: Jo.prototype.Ia=function(){return this.C};var pna=(new Date).getTime();var ula="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),vla=/\bocr\b/;var xla=/(?:\[|%5B)([a-zA-Z0-9_]+)(?:\]|%5D)/g;var abb=0,bbb=0,cbb=0;var So;g.Lo=null;g.No=!1;g.To=1;So=Symbol("SIGNAL");g.Uo={version:0,r_:0,Qm:!1,fg:void 0,Ry:void 0,Dn:void 0,KL:0,ij:void 0,Ru:void 0,ZE:!1,oP:!1,O1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: RIa=function(a,b){if(!a.j["0"]){var c=new iG("0","fakesb",{video:new eG(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new CN(new g.kM("http://www.youtube.com/videoplayback"),c,"fake"):new TN(new g.kM("http://www.youtube.com/videoplayback"),c,new nN(0,0),new nN(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Vi(a,{hl:d})),this.Dd(DY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.BY(a.errorMessage)):this.Dd(DY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Vi(c, equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,RF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Gd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Wt)(),uT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Gd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: a.ismb);this.cq?(r=a.vss_host||"s.youtube.com",r==="s.youtube.com"&&(r=GP(this.Ca)||"www.youtube.com")):r="video.google.com";this.Tn=r;HP(this,a,!0);this.La=new bP;g.P(this,this.La);q=b?b.innertubeApiKey:zs("",a.innertube_api_key);p=b?b.innertubeApiVersion:zs("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:zs("",a.innertube_context_client_version);q=g.nr("INNERTUBE_API_KEY")||q;p=g.nr("INNERTUBE_API_VERSION")||p;l=g.nr("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=VO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C||(b=g.LP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.RR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.OE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: g.LP=function(a){a=GP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: g.YP=function(a){var b=g.LP(a);XJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.LP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.CP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),ou&&(a=fna())&&(b.ebc=a));return g.Vi(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)||(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV|STB|GAME|OTT|ATV|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(XO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.zO(this.B)?yO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: var Q2={};var beb={Gs:[{Fs:/Unable to load player module/,weight:20},{Fs:/Failed to fetch/,weight:500},{Fs:/XHR API fetch failed/,weight:10},{Fs:/JSON parsing failed after XHR fetch/,weight:10},{Fs:/Retrying OnePlatform request/,weight:10},{Fs:/CSN Missing or undefined during playback association/,weight:100},{Fs:/Non-recoverable error. Do not retry./,weight:0},{Fs:/Internal Error. Retry with an exponential backoff./,weight:0},{Fs:/API disabled by application./,weight:0}],Mr:[{callback:U7a,weight:500}]};var g8a=/[&\?]action_proxy=1/,f8a=/[&\?]token=([\w-]*)/,h8a=/[&\?]video_id=([\w-]*)/,i8a=/[&\?]index=([\d-]*)/,j8a=/[&\?]m_pos_ms=([\d-]*)/,l8a=/[&\?]vvt=([\w-]*)/,Y7a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),k8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),a8a={android:"ANDROID", equals www.youtube.com (Youtube)

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: nirothniroth.site
Source: global traffic	DNS traffic detected: DNS query: obliquecensortend.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: waust.at
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: thestalls168.store
Source: global traffic	DNS traffic detected: DNS query: t.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: whos.amung.us
Source: global traffic	DNS traffic detected: DNS query: pxdrop.lijit.com
Source: global traffic	DNS traffic detected: DNS query: pd.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: cdn.tynt.com
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: t.dtscdn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: t.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ic.tynt.com
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: cdn-tc.33across.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: a.dtssrv.com
Source: global traffic	DNS traffic detected: DNS query: sync.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: c.cintnetworks.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: api.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: aqfer.lijit.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: global.ib-ibi.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: track2.securedvisit.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: agent.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: ib.mookie1.com
Source: global traffic	DNS traffic detected: DNS query: loadm.exelator.com
Source: global traffic	DNS traffic detected: DNS query: i6.liadm.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: sync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: loadus.exelator.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: i.w55c.net
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: spl.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: stags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: ums.acuityplatform.com
Source: global traffic	DNS traffic detected: DNS query: ads.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: eyeota.ck-ie.com
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: secure.insightexpressai.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: ice.360yield.com
Source: global traffic	DNS traffic detected: DNS query: api.retargetly.com
Source: global traffic	DNS traffic detected: DNS query: aorta.clickagy.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ws.rqtrk.eu
Source: global traffic	DNS traffic detected: DNS query: dis.eu.criteo.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: pixel.nordicdataresources.net
Source: global traffic	DNS traffic detected: DNS query: sync.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: abcusanews.com
Source: global traffic	DNS traffic detected: DNS query: ustalknews.store
Source: global traffic	DNS traffic detected: DNS query: pulors.xyz
Source: global traffic	DNS traffic detected: DNS query: anotherniv.store

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveContent-Length: 10459sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1728060750039&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C800%2C637&vis=1&wgl=true&ca_type=imagesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Goog-Request-Time: 1728060754853Content-Type: application/jsonX-Goog-Event-Time: 1728060754852X-YouTube-Utc-Offset: -240X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20241001.01.00X-YouTube-Time-Zone: America/New_YorkX-Goog-Visitor-Id: CgsxQVV1S0U2bFEyUSjMuoC4BjIKCgJVUxIEGgAgPA%3D%3Dsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/vvGk67y305gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Mgx6VEV6QEI; VISITOR_INFO1_LIVE=1AUuKE6lQ2Q; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPA%3D%3D

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundserver: nginxdate: Fri, 04 Oct 2024 16:53:41 GMTcontent-type: text/htmlvary: Accept-Encodingage: 0x-cache: MISStransfer-encoding: chunkedstrict-transport-security: max-age=15768000connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundserver: nginxdate: Fri, 04 Oct 2024 16:53:42 GMTcontent-type: text/htmlvary: Accept-Encodingage: 0x-cache: MISScontent-length: 548strict-transport-security: max-age=15768000connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:26 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:26 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:26 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:26 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:27 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:27 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:27 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:28 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:28 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:29 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:51 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:51 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:52 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:52 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:52 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:52 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:53 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:53 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:53 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:52:54 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:10 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:10 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:10 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:10 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:11 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:11 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:11 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:11 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:12 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:13 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:37 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:38 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:38 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:38 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:40 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:40 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:40 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:44 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:44 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:44 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:44 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 04 Oct 2024 16:53:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: keep-aliveP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: obliquecensortend.com

URLs found in memory or binary data

Source: chromecache_381.2.dr, chromecache_207.2.dr, chromecache_269.2.dr, chromecache_347.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_269.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_224.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_187.2.dr	String found in binary or memory: https://a.dtssrv.com/a?i=
Source: chromecache_293.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.json?sid=9202507693
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_258.2.dr, chromecache_398.2.dr, chromecache_291.2.dr, chromecache_421.2.dr	String found in binary or memory: https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_293.2.dr	String found in binary or memory: https://c.cintnetworks.com/identity?a=5461&gdpr=0&id=Lotame:af47c46d5a39f249ad744e970df11157
Source: chromecache_293.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=YWY0N2M0NmQ1YTM5ZjI0OWFkNzQ0ZTk3M
Source: chromecache_293.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=YWY0N2M0NmQ1YTM5ZjI0OWFkNzQ0ZTk3MG
Source: chromecache_293.2.dr	String found in binary or memory: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/af47c46d5a39f249ad744e970df11157/ur
Source: chromecache_293.2.dr	String found in binary or memory: https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fm
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_381.2.dr, chromecache_207.2.dr, chromecache_269.2.dr, chromecache_347.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_293.2.dr	String found in binary or memory: https://global.ib-ibi.com/image.sbxx?go=262106&pid=420&xid=af47c46d5a39f249ad744e970df11157
Source: chromecache_293.2.dr	String found in binary or memory: https://i.liadm.com/s/41715?bidder_id=127211&bidder_uuid=af47c46d5a39f249ad744e970df11157
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_293.2.dr	String found in binary or memory: https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_293.2.dr	String found in binary or memory: https://loadus.exelator.com/load/?p=204&g=260&buid=af47c46d5a39f249ad744e970df11157&j=0&gdpr=0
Source: chromecache_293.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0
Source: chromecache_293.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0
Source: chromecache_293.2.dr	String found in binary or memory: https://ml314.com/utsync.ashx?eid=50146&et=0&fp=af47c46d5a39f249ad744e970df11157&gdpr=0
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_187.2.dr, chromecache_192.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout
Source: chromecache_402.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout?_t_=px&url=
Source: chromecache_402.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/error?e=
Source: chromecache_293.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntr
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_297.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_338.2.dr, chromecache_187.2.dr, chromecache_192.2.dr, chromecache_371.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=137085098&mapped=
Source: chromecache_293.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=af47c46d5a39f249ad744e
Source: chromecache_347.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_293.2.dr	String found in binary or memory: https://ps.eyeota.net/match?bid=51mdg9u&uid=af47c46d5a39f249ad744e970df11157&gdpr=0
Source: chromecache_269.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_293.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%
Source: chromecache_293.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/ium?sourceid=11&uid=af47c46d5a39f249ad744e970df11157&gdpr=0
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_269.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_293.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/bsTd8NdE?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap
Source: chromecache_293.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/
Source: chromecache_293.2.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%
Source: chromecache_293.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_297.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_338.2.dr, chromecache_187.2.dr, chromecache_192.2.dr, chromecache_371.2.dr	String found in binary or memory: https://t.dtscdn.com/widget/?d=
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_297.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_338.2.dr, chromecache_187.2.dr, chromecache_192.2.dr, chromecache_371.2.dr	String found in binary or memory: https://t.dtscout.com/idg/?su=
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_297.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_338.2.dr, chromecache_187.2.dr, chromecache_192.2.dr, chromecache_371.2.dr	String found in binary or memory: https://t.dtscout.com/pv/
Source: chromecache_185.2.dr, chromecache_299.2.dr, chromecache_392.2.dr, chromecache_297.2.dr, chromecache_369.2.dr, chromecache_280.2.dr, chromecache_224.2.dr, chromecache_153.2.dr, chromecache_219.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_338.2.dr, chromecache_187.2.dr, chromecache_192.2.dr, chromecache_371.2.dr	String found in binary or memory: https://t.dtscout.com/udg/?su=
Source: chromecache_402.2.dr	String found in binary or memory: https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=
Source: chromecache_372.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/16311/sync.min.js
Source: chromecache_224.2.dr, chromecache_351.2.dr, chromecache_260.2.dr, chromecache_232.2.dr, chromecache_187.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/3825/lt.min.js
Source: chromecache_293.2.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=7&puid=af47c46d5a39f249ad744e970df11157&gdpr=0
Source: chromecache_293.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_357.2.dr, chromecache_174.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_269.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_207.2.dr, chromecache_269.2.dr	String found in binary or memory: https://yurt.corp.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 50992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 50964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 50893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 50799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50386 version: TLS 1.2

System Summary

Classification label

Source: classification engine

Classification label: mal48.phis.troj.win@42/425@406/100

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2620 --field-trial-handle=2244,i,17838629162654032124,6020297460358612302,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://nirothniroth.site/?p=22&fbclid=IwY2xjawFs_DdleHRuA2FlbQIxMQABHTdgZU6ok722L5RxKPR-zh7Gkm6BqZ8BcT950y1bxf6l0LKz0zslg7KJHw_aem__ldVm1UUndXAkwYRakjBzg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2620 --field-trial-handle=2244,i,17838629162654032124,6020297460358612302,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found GUI installer (many successful clicks)

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)

Source: chromecache_238.2.dr, chromecache_246.2.dr

Binary or memory string: QeMU5V<