Windows Analysis Report
http://filetickets.ca

Overview

General Information

Sample URL: http://filetickets.ca
Analysis ID: 1559458
Infos:

Detection

Score: 0
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Stores files to the Windows start menu directory

Classification

Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-T8WPBMH
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MMDSJH76
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-2MT152J7G8&gacid=27265383.1732111747&gtm=45je4bj0v9127172001za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&_ng=1&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102077855~102081485&z=281801476
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-T8WPBMH
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MMDSJH76
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/436330873?random=1732111763796&cv=11&fst=1732111763796&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&ct_cookie_present=0
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-T8WPBMH
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MMDSJH76
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/436330873?random=1732111763796&cv=11&fst=1732111763796&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&ct_cookie_present=0
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-T8WPBMH
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MMDSJH76
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/436330873?random=1732111782106&cv=11&fst=1732111782106&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&ct_cookie_present=0
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-T8WPBMH
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MMDSJH76
Source: https://filetickets.ca/ HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/436330873?random=1732111805860&cv=11&fst=1732111805860&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&ct_cookie_present=0
Source: https://filetickets.ca/ HTTP Parser: No favicon
Source: https://filetickets.ca/ HTTP Parser: No <meta name="author".. found
Source: https://filetickets.ca/ HTTP Parser: No <meta name="author".. found
Source: https://filetickets.ca/ HTTP Parser: No <meta name="author".. found
Source: https://filetickets.ca/ HTTP Parser: No <meta name="author".. found
Source: https://filetickets.ca/ HTTP Parser: No <meta name="author".. found
Source: https://filetickets.ca/ HTTP Parser: No <meta name="copyright".. found
Source: https://filetickets.ca/ HTTP Parser: No <meta name="copyright".. found
Source: https://filetickets.ca/ HTTP Parser: No <meta name="copyright".. found
Source: https://filetickets.ca/ HTTP Parser: No <meta name="copyright".. found
Source: https://filetickets.ca/ HTTP Parser: No <meta name="copyright".. found
Source: unknown HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:50012 version: TLS 1.2
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: filetickets.caConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure
Source: global traffic HTTP traffic detected: GET /web_assets/css/all.css HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /tabs/js/jquery-3.3.1.min.js HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/images/Pay-Tickets.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /web_assets/images/Pay-Tickets.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/webfonts/fa-solid-900.woff2 HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://filetickets.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://filetickets.ca/web_assets/css/all.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /tabs/js/jquery-3.3.1.min.js HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/webfonts/fa-brands-400.woff2 HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://filetickets.casec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://filetickets.ca/web_assets/css/all.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /web_assets/images/PPARKING-ICON-GREEN.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/images/12.jpg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/images/14.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/images/TRIAL-ICON-green.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/images/ER-ICON-GREEN.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/images/13.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/images/TICKET-ICON-GREEN.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/images/PPARKING-ICON-GREEN.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/14.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /tabs/js/popper.min.js HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/images/12.jpg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/TRIAL-ICON-green.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /tabs/js/bootstrap.min.js HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /tabs/js/owl.carousel.min.js HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /tabs/js/main.js HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/js/all-main.js HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /web_assets/images/ER-ICON-GREEN.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/service-traffic.svg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/13.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/TICKET-ICON-GREEN.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /tabs/js/popper.min.js HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/service-red-light.svg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /p/action/343054528.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /tabs/js/bootstrap.min.js HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/service-speed.svg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /tabs/js/owl.carousel.min.js HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/service-parking.svg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/service-early.svg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /tabs/js/main.js HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/service-traffic.svg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/service-red-light.svg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /web_assets/images/gavel.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /p/action/343054528.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /web_assets/images/service-parking.svg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/15.jpg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /uploads/blog/1676170424.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /uploads/blog/1676079797.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /uploads/blog/1654383735.jpg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/service-speed.svg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/js/all-main.js HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740
Source: global traffic HTTP traffic detected: GET /web_assets/images/service-early.svg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4YfpkFTmOKVEMMF&MD=KNZSkHbd HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /web_assets/images/gavel.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.1.27265383.1732111747
Source: global traffic HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /td/ga/rul?tid=G-2MT152J7G8&gacid=27265383.1732111747&gtm=45je4bj0v9127172001za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&_ng=1&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102077855~102081485&z=281801476 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /uploads/blog/1676079797.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.1.27265383.1732111747
Source: global traffic HTTP traffic detected: GET /uploads/blog/1654383735.jpg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.1.27265383.1732111747
Source: global traffic HTTP traffic detected: GET /web_assets/images/15.jpg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.1.27265383.1732111747
Source: global traffic HTTP traffic detected: GET /uploads/blog/1654788798.jpg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.1.27265383.1732111747
Source: global traffic HTTP traffic detected: GET /uploads/blog/1654098619.jpg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.1.27265383.1732111747
Source: global traffic HTTP traffic detected: GET /uploads/blog/1654788838.jpg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.1.27265383.1732111747
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-5.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.1.27265383.1732111747
Source: global traffic HTTP traffic detected: GET /uploads/blog/1676170424.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.1.27265383.1732111747
Source: global traffic HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-12.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-6.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-9.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-4.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-5.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-13.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /uploads/blog/1654788838.jpg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /uploads/blog/1654788798.jpg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /uploads/blog/1654098619.jpg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-2.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-8.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-10.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-11.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-3.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-12.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /dash-assets/plugins/parsleyjs/parsley.min.js HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-6.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-4.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-9.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-13.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /blog-front/js/slick.min.js HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-2.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /blog-front/js/main.js HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/css/images/service-item-layer.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/web_assets/css/all.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-8.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-10.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-11.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/10.png HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/web_assets/css/all.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/client-3.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /dash-assets/plugins/parsleyjs/parsley.min.js HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/img/previous.svg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/web_assets/css/all.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /tag/uet/343054528 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /blog-front/js/slick.min.js HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/img/next.svg HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/web_assets/css/all.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /blog-front/js/main.js HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /web_assets/css/images/service-item-layer.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /action/0?ti=343054528&Ver=2&mid=f9db25be-df30-4a50-8368-a520f357af76&bo=1&sid=0143a200a74911efa1106f2698a50a6f&vid=0143c7c0a74911ef866cdf9c8a6b2a95&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&p=https%3A%2F%2Ffiletickets.ca%2F&r=&lt=14498&evt=pageLoad&sv=1&cdb=AQAQ&rn=723191 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /web_assets/img/previous.svg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /web_assets/images/10.png HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /td/rul/436330873?random=1732111757734&cv=11&fst=1732111757734&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic HTTP traffic detected: GET /web_assets/img/next.svg HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _ga=GA1.2.27265383.1732111747; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /tag/uet/343054528 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=70fd8b52083c46308ae17fbf7e0639a1.20241120.20251120
Source: global traffic HTTP traffic detected: GET /s/0.7.56/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=70fd8b52083c46308ae17fbf7e0639a1.20241120.20251120
Source: global traffic HTTP traffic detected: GET /td/ga/rul?tid=G-6G3RK3EYKR&gacid=27265383.1732111747&gtm=45je4bj0v875816394z8890156251za200zb890156251&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102077855~102081485&z=1482380054 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; XSRF-TOKEN=eyJpdiI6ImFxOU5xWXl5RUh0YmFjL3RpeWZHbmc9PSIsInZhbHVlIjoiYXNHcGl4YkR6cEJCZHczYUorYU9mNW1yTkM0TFdhcFcwVGJKUXpPUWxCZm9mM2F3bG5EWmRaU3BNSm14ODFmVC9iSVoveFQrNTArMTVVMEpkRFJ6Q1YrS0hITFZLa1ZBUzNMTjB2c1BRRFFYSjJCd0pqSUdmUnVSeXBXakd3ZUkiLCJtYWMiOiJjMjAwNmJkMDQ1MTdmZjY5OTRlNzAwYTdiNjYxYWQzMjY1MWVhMjJiYTA2OTA1ZTgzYzY4MTZkMGI4OTdkOWZmIiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6Ik1FNDhMVkNONTZXckpwcVA3c2ZTQlE9PSIsInZhbHVlIjoiTGtNNTgyZGl4VkNsYVFSVHZrbmZiYTUvRTM0UzZGQ1dmUVhHbkdNbUpJZmFMWHU4RElKWmhCNnVmOWhsSEdFU28vU1R4bDVmZ2tCWHJPMG1DNi9MVkFWREtXQjR3bGhPUWpnTWFDN1JNSm9tWVlGeUhlWUs1REFFcGZHWDlicUgiLCJtYWMiOiJjMWIwMjRiNTE1YzhkNTljYjU4YmFjOTNlZTNlMzQ0ZTVlYjQ1OTFhNzhhMDVhNDY1MTYzNjhhYjk4NmMyODc4IiwidGFnIjoiIn0%3D; _gcl_au=1.1.1656204704.1732111740; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _ga_2MT152J7G8=GS1.1.1732111747.1.0.1732111747.60.0.0; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1; _ga_6G3RK3EYKR=GS1.1.1732111759.1.0.1732111759.60.0.0; _ga=GA1.1.27265383.1732111747; _clck=huck42%7C2%7Cfr1%7C0%7C1785
Source: global traffic HTTP traffic detected: GET /s/0.7.56/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=70fd8b52083c46308ae17fbf7e0639a1.20241120.20251120
Source: global traffic HTTP traffic detected: GET /pagead/viewthroughconversion/436330873/?random=1035758706&cv=11&fst=1732111757734&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQII08WxAiIBAUABSidldmVudC1zb3VyY2U7bmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&eitems=ChAIgK72uQYQmOOe_P6C3sR8Eh0AVyOIN5Kci9JU9HUx5Y-L6kCzIsSs4k3QvYWWSg&pscrd=CMji_PzUob_SeSITCI3r8ZGL64kDFQdBpAQd4f04AjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoXaHR0cHM6Ly9maWxldGlja2V0cy5jYS9CVkNoQUlnSzcydVFZUTBiend0THJ1aWRwUkVpd0FIdDRKb1U1Q2ZPMkJwUlFBWEJXSzVjVEFWZzFBZ2VxNWQzQnlrZkZwc0JMWGl6THBGZ2JlaFBMVXl3 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnCMbICIAesiryZrFIJZxbfQfOVsYLDW0gyUL4vmAGKdWn1y84ffnHbCh0F
Source: global traffic HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /action/0?ti=343054528&Ver=2&mid=16e2829a-8d66-49af-9248-0279d142352b&bo=1&sid=0143a200a74911efa1106f2698a50a6f&vid=0143c7c0a74911ef866cdf9c8a6b2a95&vids=0&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&p=https%3A%2F%2Ffiletickets.ca%2F&r=https%3A%2F%2Ffiletickets.ca%2F&lt=2668&evt=pageLoad&sv=1&cdb=AQAQ&rn=464512 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=23C8B1C3CED763DC04D5A4FECFA56291; MR=0
Source: global traffic HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /td/rul/436330873?random=1732111763796&cv=11&fst=1732111763796&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk--Pg6ieKfrXs-L-FfgnJnxhAP5d9AR1-BHm9Na1Xgq1vqOPdCA70VTFnr
Source: global traffic HTTP traffic detected: GET /tag/uet/343054528 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=70fd8b52083c46308ae17fbf7e0639a1.20241120.20251120
Source: global traffic HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/viewthroughconversion/436330873/?random=2138401058&cv=11&fst=1732111763796&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQII08WxAiIBAUABShV0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&eitems=ChAIgK72uQYQmOOe_P6C3sR8Eh0AVyOIN6Jo2vbsZ7xRHMBDtGg-1ZQojoCy--hqpA&pscrd=CN6hwLPAktjnuwEiEwix6sCUi-uJAxUgnCcCHYEZALsyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vZmlsZXRpY2tldHMuY2EvQlZDaEFJZ0s3MnVRWVEwYnp3dExydWlkcFJFaXdBSHQ0Sm9ZejhiclJBUWl1N1JFM0pEQzVFS0Y4YVdwUW4ydF9CYWF3ejB0bGFQcjhpTmpSbDlZejdnUQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk--Pg6ieKfrXs-L-FfgnJnxhAP5d9AR1-BHm9Na1Xgq1vqOPdCA70VTFnr
Source: global traffic HTTP traffic detected: GET /tag/uet/343054528 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=70fd8b52083c46308ae17fbf7e0639a1.20241120.20251120
Source: global traffic HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/1p-conversion/436330873/?random=2138401058&cv=11&fst=1732111763796&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQII08WxAiIBAUABShV0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CN6hwLPAktjnuwEiEwix6sCUi-uJAxUgnCcCHYEZALsyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vZmlsZXRpY2tldHMuY2EvQlZDaEFJZ0s3MnVRWVEwYnp3dExydWlkcFJFaXdBSHQ0Sm9ZejhiclJBUWl1N1JFM0pEQzVFS0Y4YVdwUW4ydF9CYWF3ejB0bGFQcjhpTmpSbDlZejdnUQ&is_vtc=1&cid=CAQSKQCa7L7dItWuEVLxRo2GeAt9FTz04S_H60UDnuw2P6Ai-vxHYTOZ5P7c&eitems=ChAIgK72uQYQmOOe_P6C3sR8Eh0AVyOIN_XiVUn0ew18aT-Q0ugLPD16Cn0MHgjUNg&random=1103890865 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /web_assets/images/favicon.ico HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; _gcl_au=1.1.1656204704.1732111740; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1; _clck=huck42%7C2%7Cfr1%7C0%7C1785; XSRF-TOKEN=eyJpdiI6ImxBMlp4dk4xUG5HTmhabXpZekl2WFE9PSIsInZhbHVlIjoicEhoWENyamZObFNHYkNTeDh2ZkNJUnVpc2JZRFhkOFF6SDZ6ZTdpMXdMY2MrSnd3d25RNGtVc3hkQ0tEbWNpZW9IMG9xRE05SUVxWXpBS1ZYTk5hQUtWaThOMURMTVlXcEgvU1VkaWVMa2pJMk9tMXJ5a1ZPOXlCVkExUTErZnciLCJtYWMiOiJlMzZjODc3YTBlZmRjNmQ3YzI4MTE5MmU1MGQwNTkwNjg5YWI1NmY1ZjAyNzg4ZTY4YjdjNzAzNGRmY2E4Njk2IiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6IjV4NUJpT3VXa1BOcjJkUjJJVGppMGc9PSIsInZhbHVlIjoibEhkQnpGajk5alhNcVplbXp2YnFSS3R5SXo5ZWdkSWNTVXQzMzRGWG12ZE1DZ2kyOGhlTkJCSXdPMVdZQU4xZHVmS2U3eWVybC9IRUE1ZFlEa3VNU0N6YldCY2Izd0doTjVPbk9DZmZYQjJkNnArTVFSMFJiNWZtcE5EZDFqMjgiLCJtYWMiOiI0MDdiYjBiYjAzNjhkMWFiOGVlNTAxMTg4MjA2YjBmZDRjOTkxNTcyNzJkYWVlNTBiZDEzNmY3NzY3ZWExNzUwIiwidGFnIjoiIn0%3D; _ga_6G3RK3EYKR=GS1.1.1732111759.1.1.1732111763.56.0.0; _ga=GA1.1.27265383.1732111747; _ga_2MT152J7G8=GS1.1.1732111747.1.1.1732111763.44.0.0; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _clsk=en4foh%7C1732111767248%7C1%7C1%7Cx.clarity.ms%2Fcollect
Source: global traffic HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/1p-conversion/436330873/?random=2138401058&cv=11&fst=1732111763796&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQII08WxAiIBAUABShV0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CN6hwLPAktjnuwEiEwix6sCUi-uJAxUgnCcCHYEZALsyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vZmlsZXRpY2tldHMuY2EvQlZDaEFJZ0s3MnVRWVEwYnp3dExydWlkcFJFaXdBSHQ0Sm9ZejhiclJBUWl1N1JFM0pEQzVFS0Y4YVdwUW4ydF9CYWF3ejB0bGFQcjhpTmpSbDlZejdnUQ&is_vtc=1&cid=CAQSKQCa7L7dItWuEVLxRo2GeAt9FTz04S_H60UDnuw2P6Ai-vxHYTOZ5P7c&eitems=ChAIgK72uQYQmOOe_P6C3sR8Eh0AVyOIN_XiVUn0ew18aT-Q0ugLPD16Cn0MHgjUNg&random=1103890865 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /web_assets/images/favicon.ico HTTP/1.1Host: filetickets.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; secure; _gcl_au=1.1.1656204704.1732111740; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1; _clck=huck42%7C2%7Cfr1%7C0%7C1785; XSRF-TOKEN=eyJpdiI6ImxBMlp4dk4xUG5HTmhabXpZekl2WFE9PSIsInZhbHVlIjoicEhoWENyamZObFNHYkNTeDh2ZkNJUnVpc2JZRFhkOFF6SDZ6ZTdpMXdMY2MrSnd3d25RNGtVc3hkQ0tEbWNpZW9IMG9xRE05SUVxWXpBS1ZYTk5hQUtWaThOMURMTVlXcEgvU1VkaWVMa2pJMk9tMXJ5a1ZPOXlCVkExUTErZnciLCJtYWMiOiJlMzZjODc3YTBlZmRjNmQ3YzI4MTE5MmU1MGQwNTkwNjg5YWI1NmY1ZjAyNzg4ZTY4YjdjNzAzNGRmY2E4Njk2IiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6IjV4NUJpT3VXa1BOcjJkUjJJVGppMGc9PSIsInZhbHVlIjoibEhkQnpGajk5alhNcVplbXp2YnFSS3R5SXo5ZWdkSWNTVXQzMzRGWG12ZE1DZ2kyOGhlTkJCSXdPMVdZQU4xZHVmS2U3eWVybC9IRUE1ZFlEa3VNU0N6YldCY2Izd0doTjVPbk9DZmZYQjJkNnArTVFSMFJiNWZtcE5EZDFqMjgiLCJtYWMiOiI0MDdiYjBiYjAzNjhkMWFiOGVlNTAxMTg4MjA2YjBmZDRjOTkxNTcyNzJkYWVlNTBiZDEzNmY3NzY3ZWExNzUwIiwidGFnIjoiIn0%3D; _ga_6G3RK3EYKR=GS1.1.1732111759.1.1.1732111763.56.0.0; _ga=GA1.1.27265383.1732111747; _ga_2MT152J7G8=GS1.1.1732111747.1.1.1732111763.44.0.0; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _clsk=en4foh%7C1732111767248%7C1%7C1%7Cx.clarity.ms%2Fcollect
Source: global traffic HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; _gcl_au=1.1.1656204704.1732111740; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1; _clck=huck42%7C2%7Cfr1%7C0%7C1785; XSRF-TOKEN=eyJpdiI6ImxBMlp4dk4xUG5HTmhabXpZekl2WFE9PSIsInZhbHVlIjoicEhoWENyamZObFNHYkNTeDh2ZkNJUnVpc2JZRFhkOFF6SDZ6ZTdpMXdMY2MrSnd3d25RNGtVc3hkQ0tEbWNpZW9IMG9xRE05SUVxWXpBS1ZYTk5hQUtWaThOMURMTVlXcEgvU1VkaWVMa2pJMk9tMXJ5a1ZPOXlCVkExUTErZnciLCJtYWMiOiJlMzZjODc3YTBlZmRjNmQ3YzI4MTE5MmU1MGQwNTkwNjg5YWI1NmY1ZjAyNzg4ZTY4YjdjNzAzNGRmY2E4Njk2IiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6IjV4NUJpT3VXa1BOcjJkUjJJVGppMGc9PSIsInZhbHVlIjoibEhkQnpGajk5alhNcVplbXp2YnFSS3R5SXo5ZWdkSWNTVXQzMzRGWG12ZE1DZ2kyOGhlTkJCSXdPMVdZQU4xZHVmS2U3eWVybC9IRUE1ZFlEa3VNU0N6YldCY2Izd0doTjVPbk9DZmZYQjJkNnArTVFSMFJiNWZtcE5EZDFqMjgiLCJtYWMiOiI0MDdiYjBiYjAzNjhkMWFiOGVlNTAxMTg4MjA2YjBmZDRjOTkxNTcyNzJkYWVlNTBiZDEzNmY3NzY3ZWExNzUwIiwidGFnIjoiIn0%3D; _ga_6G3RK3EYKR=GS1.1.1732111759.1.1.1732111763.56.0.0; _ga=GA1.1.27265383.1732111747; _ga_2MT152J7G8=GS1.1.1732111747.1.1.1732111763.44.0.0; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _clsk=en4foh%7C1732111767248%7C1%7C1%7Cx.clarity.ms%2Fcollect
Source: global traffic HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /action/0?ti=343054528&Ver=2&mid=8ff68986-c42c-4cfc-8ca6-ca797b942da7&bo=1&sid=0143a200a74911efa1106f2698a50a6f&vid=0143c7c0a74911ef866cdf9c8a6b2a95&vids=0&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&p=https%3A%2F%2Ffiletickets.ca%2F&r=https%3A%2F%2Ffiletickets.ca%2F&lt=2687&evt=pageLoad&sv=1&cdb=AQAQ&rn=353675 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=23C8B1C3CED763DC04D5A4FECFA56291; MR=0; MSPTC=_8CwK-eKHBM1TSpKCv-lpVB4pbHi-2TEPasXBQOjGw8
Source: global traffic HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /tag/uet/343054528 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=70fd8b52083c46308ae17fbf7e0639a1.20241120.20251120; MUID=23C8B1C3CED763DC04D5A4FECFA56291
Source: global traffic HTTP traffic detected: GET /td/rul/436330873?random=1732111782106&cv=11&fst=1732111782106&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk--Pg6ieKfrXs-L-FfgnJnxhAP5d9AR1-BHm9Na1Xgq1vqOPdCA70VTFnr
Source: global traffic HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /tag/uet/343054528 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=70fd8b52083c46308ae17fbf7e0639a1.20241120.20251120; MUID=23C8B1C3CED763DC04D5A4FECFA56291
Source: global traffic HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/viewthroughconversion/436330873/?random=1260905896&cv=11&fst=1732111782106&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQII08WxAiIBAUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&eitems=ChAIgK72uQYQmOOe_P6C3sR8Eh0AVyOIN9JW9mLX0m6dHwTl-1yjHX4smeXevijd9w&pscrd=CP_QtrqZmIPjggEiEwjJvJKdi-uJAxWrQaQEHdIsF4IyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vZmlsZXRpY2tldHMuY2EvQlZDaEFJZ0s3MnVRWVEwYnp3dExydWlkcFJFaXdBSHQ0Sm9kR3NkYkZTbldHRUM3TzBYTUZrNTJvdDFZb01rOWJjLXFBa2RxU3oxRGs0SC1JQWpieGUyZw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk--Pg6ieKfrXs-L-FfgnJnxhAP5d9AR1-BHm9Na1Xgq1vqOPdCA70VTFnr
Source: global traffic HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/1p-conversion/436330873/?random=1260905896&cv=11&fst=1732111782106&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQII08WxAiIBAUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CP_QtrqZmIPjggEiEwjJvJKdi-uJAxWrQaQEHdIsF4IyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vZmlsZXRpY2tldHMuY2EvQlZDaEFJZ0s3MnVRWVEwYnp3dExydWlkcFJFaXdBSHQ0Sm9kR3NkYkZTbldHRUM3TzBYTUZrNTJvdDFZb01rOWJjLXFBa2RxU3oxRGs0SC1JQWpieGUyZw&is_vtc=1&cid=CAQSKQCa7L7dZKNNLKBotlhFeLK9dwWHsq_pOEhQtS3g0wqrkq5CTl9sRnSK&eitems=ChAIgK72uQYQmOOe_P6C3sR8Eh0AVyOIN8ahtTNABtMdudBk6ykqzIN6bbAEyAMGuw&random=858485445 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4YfpkFTmOKVEMMF&MD=KNZSkHbd HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/1p-conversion/436330873/?random=1260905896&cv=11&fst=1732111782106&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQII08WxAiIBAUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CP_QtrqZmIPjggEiEwjJvJKdi-uJAxWrQaQEHdIsF4IyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vZmlsZXRpY2tldHMuY2EvQlZDaEFJZ0s3MnVRWVEwYnp3dExydWlkcFJFaXdBSHQ0Sm9kR3NkYkZTbldHRUM3TzBYTUZrNTJvdDFZb01rOWJjLXFBa2RxU3oxRGs0SC1JQWpieGUyZw&is_vtc=1&cid=CAQSKQCa7L7dZKNNLKBotlhFeLK9dwWHsq_pOEhQtS3g0wqrkq5CTl9sRnSK&eitems=ChAIgK72uQYQmOOe_P6C3sR8Eh0AVyOIN8ahtTNABtMdudBk6ykqzIN6bbAEyAMGuw&random=858485445 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: filetickets.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: secure; _gcl_au=1.1.1656204704.1732111740; _gid=GA1.2.2120463448.1732111750; _gat_gtag_UA_182191795_1=1; _clck=huck42%7C2%7Cfr1%7C0%7C1785; XSRF-TOKEN=eyJpdiI6Inh5TkhOSVhvTFhieU9STC9WbjdtaHc9PSIsInZhbHVlIjoiczZodjRSeDB0L2lucTZJSEZrczFHeXBZclFJVjNGWDRXNDFxcytsUHh5TW9md29CZ001Tnl1UXhFRE5KU2hMRGNzNyt2SG5vaWFReHl1V0puRkZaUzhLdHU5aDdCRkpLTGVQMEdIeWJ2bS9kb1oxdm9wbkNFcXF5YTQwYnd5L3AiLCJtYWMiOiI1MzM5Y2NhMjU5MzVmODlhYjNmMDJmZTMxZmQzZjMzYjVkZjliYzI2YTVlMDQwMmRkMzNjNjQwZmVmMWU0ZmQ1IiwidGFnIjoiIn0%3D; fileticketsca_session=eyJpdiI6IjB1Zm5md0FzNHZjeisrUURCdGs3L1E9PSIsInZhbHVlIjoiclVYdWNjTktLWWt2V2pZTlRkWVdOTGkzanhqWDRVcnViTzY4YWdLN2ZvNS9wZjRQQjh0N1I0a0tWUEhvZjlRSGVSa2gvREM2K3RWbTdEeDZrZmcxK0hKTzdXVlIwR1EyOWwxcG04Z3hsMlMrT2V1bXZFSHozRGtpcDdxWGFkeWMiLCJtYWMiOiJkZDlkYjcyM2E3NTNhNzU3YWRhMGIxMTQ2OTg1YzcyM2Q4YTg2YzRkMGQzZDViMjkzOWY0ZWU0ZTI4MDk0YmJhIiwidGFnIjoiIn0%3D; _ga_2MT152J7G8=GS1.1.1732111747.1.1.1732111781.26.0.0; _ga=GA1.1.27265383.1732111747; _ga_6G3RK3EYKR=GS1.1.1732111759.1.1.1732111782.37.0.0; _uetsid=0143a200a74911efa1106f2698a50a6f; _uetvid=0143c7c0a74911ef866cdf9c8a6b2a95; _clsk=en4foh%7C1732111785264%7C2%7C1%7Cx.clarity.ms%2Fcollect
Source: global traffic HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /p/action/343054528.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=23C8B1C3CED763DC04D5A4FECFA56291; MR=0; MSPTC=_8CwK-eKHBM1TSpKCv-lpVB4pbHi-2TEPasXBQOjGw8
Source: global traffic HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /action/0?ti=343054528&Ver=2&mid=5e14bda5-8c5e-438a-963c-08d0ce744209&bo=1&sid=0143a200a74911efa1106f2698a50a6f&vid=0143c7c0a74911ef866cdf9c8a6b2a95&vids=0&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&p=https%3A%2F%2Ffiletickets.ca%2F&r=https%3A%2F%2Ffiletickets.ca%2F&lt=1111&evt=pageLoad&sv=1&cdb=AQAA&rn=928515 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=23C8B1C3CED763DC04D5A4FECFA56291; MR=0; MSPTC=_8CwK-eKHBM1TSpKCv-lpVB4pbHi-2TEPasXBQOjGw8
Source: global traffic HTTP traffic detected: GET /td/rul/436330873?random=1732111805860&cv=11&fst=1732111805860&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk--Pg6ieKfrXs-L-FfgnJnxhAP5d9AR1-BHm9Na1Xgq1vqOPdCA70VTFnr
Source: global traffic HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /p/action/343054528.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=23C8B1C3CED763DC04D5A4FECFA56291; MR=0
Source: global traffic HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /tag/uet/343054528 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=70fd8b52083c46308ae17fbf7e0639a1.20241120.20251120; MUID=23C8B1C3CED763DC04D5A4FECFA56291
Source: global traffic HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/viewthroughconversion/436330873/?random=253242930&cv=11&fst=1732111805860&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQII08WxAiIBAUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&eitems=ChAIgK72uQYQmOOe_P6C3sR8Eh0AVyOINywI5T2wS1FDoVXgGdrqxUW-T1tG5t6YzA&pscrd=CJexwoCGuoHlYSITCM3ut6iL64kDFfBdpAQdai8EvTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoXaHR0cHM6Ly9maWxldGlja2V0cy5jYS9CVkNoQUlnSzcydVFZUTBiend0THJ1aWRwUkVpd0FIdDRKb2J2dy14eVlyREx5a1pxaHN0MUxHWHFqQUtHZE5TYWxLdlFxSWV3VkxOcmQxeFFGeHJoUXlB HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk--Pg6ieKfrXs-L-FfgnJnxhAP5d9AR1-BHm9Na1Xgq1vqOPdCA70VTFnr
Source: global traffic HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /tag/uet/343054528 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=70fd8b52083c46308ae17fbf7e0639a1.20241120.20251120; MUID=23C8B1C3CED763DC04D5A4FECFA56291
Source: global traffic HTTP traffic detected: GET /pagead/1p-conversion/436330873/?random=253242930&cv=11&fst=1732111805860&bg=ffffff&guid=ON&async=1&gtm=45be4bj0v9119679773z89198132295za201zb9198132295&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ffiletickets.ca%2F&ref=https%3A%2F%2Ffiletickets.ca%2F&label=NewcCO_0oOMZEPnCh9AB&hn=www.googleadservices.com&frm=0&tiba=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&value=0&npa=0&pscdl=noapi&auid=1656204704.1732111740&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&fledge=1&capi=1&em=tv.1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQII08WxAiIBAUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CJexwoCGuoHlYSITCM3ut6iL64kDFfBdpAQdai8EvTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoXaHR0cHM6Ly9maWxldGlja2V0cy5jYS9CVkNoQUlnSzcydVFZUTBiend0THJ1aWRwUkVpd0FIdDRKb2J2dy14eVlyREx5a1pxaHN0MUxHWHFqQUtHZE5TYWxLdlFxSWV3VkxOcmQxeFFGeHJoUXlB&is_vtc=1&cid=CAQSKQCa7L7dKveUd-s6irLSc7nWYeYnz42z5ZnTFIYU6L6t2soGMjmuP7dA&eitems=ChAIgK72uQYQmOOe_P6C3sR8Eh0AVyOINzSy-thxZXWA6lWGD5Qp7kcXsFGTXO9L-w&random=3916541712 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: filetickets.caConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: chromecache_281.2.dr String found in binary or memory: href="https://www.facebook.com/FileTickets.ca" equals www.facebook.com (Facebook)
Source: chromecache_281.2.dr String found in binary or memory: href="https://www.youtube.com/channel/UCaJnGQ-buWYvzOBKPyHJIig" equals www.youtube.com (Youtube)
Source: chromecache_217.2.dr, chromecache_212.2.dr String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Ak:function(){e=qb()},zd:function(){d()}}};var Zb=wa(["data-gtm-yt-inspected-"]),ID=["www.youtube.com","www.youtube-nocookie.com"],JD,KD=!1; equals www.youtube.com (Youtube)
Source: chromecache_243.2.dr, chromecache_173.2.dr String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=oB(a,c,e);V(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return V(122),!0;if(d&&f){for(var m=Bb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},rB=function(){var a=[],b=function(c){return eb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_217.2.dr, chromecache_212.2.dr String found in binary or memory: if(!(e||f||g||k.length||m.length))return;var p={Dh:e,Bh:f,Ch:g,ji:k,ki:m,Re:n,Ib:b},q=B.YT;if(q)return q.ready&&q.ready(d),b;var r=B.onYouTubeIframeAPIReady;B.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(TD(w,"iframe_api")||TD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!KD&&RD(x[A],p.Re))return qc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_243.2.dr, chromecache_146.2.dr, chromecache_278.2.dr, chromecache_221.2.dr, chromecache_167.2.dr, chromecache_173.2.dr, chromecache_250.2.dr, chromecache_202.2.dr, chromecache_195.2.dr, chromecache_242.2.dr String found in binary or memory: return b}GD.F="internal.enableAutoEventOnTimer";var Zb=wa(["data-gtm-yt-inspected-"]),ID=["www.youtube.com","www.youtube-nocookie.com"],JD,KD=!1; equals www.youtube.com (Youtube)
Source: chromecache_243.2.dr, chromecache_167.2.dr, chromecache_173.2.dr, chromecache_242.2.dr String found in binary or memory: var VC=function(a,b,c,d,e){var f=MA("fsl",c?"nv.mwt":"mwt",0),g;g=c?MA("fsl","nv.ids",[]):MA("fsl","ids",[]);if(!g.length)return!0;var k=RA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);V(121);if(m==="https://www.facebook.com/tr/")return V(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!xz(k,zz(b, equals www.facebook.com (Facebook)
Source: global traffic DNS traffic detected: DNS query: filetickets.ca
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic DNS traffic detected: DNS query: analytics.google.com
Source: global traffic DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic DNS traffic detected: DNS query: x.clarity.ms
Source: global traffic DNS traffic detected: DNS query: c.clarity.ms
Source: unknown HTTP traffic detected: POST /g/collect?v=2&tid=G-2MT152J7G8&gtm=45je4bj0v9127172001za200&_p=1732111736614&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&cid=27265383.1732111747&ul=en-us&sr=1280x1024&_ng=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AAAI&_s=1&sid=1732111747&sct=1&seg=0&dl=https%3A%2F%2Ffiletickets.ca%2F&dt=Pay%20Tickets%20Online%20%7C%20File%20Ontario%20Traffic%20Tickets%20For%20Court&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=15414 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://filetickets.caX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://filetickets.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: chromecache_161.2.dr, chromecache_210.2.dr, chromecache_180.2.dr, chromecache_232.2.dr String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_161.2.dr, chromecache_154.2.dr, chromecache_224.2.dr, chromecache_232.2.dr String found in binary or memory: http://parsleyjs.org
Source: chromecache_161.2.dr, chromecache_171.2.dr, chromecache_232.2.dr String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: chromecache_242.2.dr String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_218.2.dr, chromecache_204.2.dr String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_243.2.dr, chromecache_217.2.dr, chromecache_212.2.dr, chromecache_146.2.dr, chromecache_278.2.dr, chromecache_221.2.dr, chromecache_167.2.dr, chromecache_173.2.dr, chromecache_250.2.dr, chromecache_202.2.dr, chromecache_195.2.dr, chromecache_242.2.dr String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_161.2.dr, chromecache_232.2.dr String found in binary or memory: https://feross.org
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca#aboutus-section
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca#contactSectiontop
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca#testimonial-area
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/blog-front/js/main.js
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/blog-front/js/slick.min.js
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/blog/careless-driving-ontario
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/blog/drivers-licence-suspension-for-unpaid-fines
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/blog/how-to-make-an-online-payment-for-a-traffic-ticket
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/blog/pay-traffic-tickets-online
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/blog/red-light-camera-tickets
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/blog/toronto-parking-tickets
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/blogs
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/dash-assets/plugins/parsleyjs/parsley.min.js
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/early-resolution
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/faq
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/manual/pay-ticket
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/pay-ticket
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/pay-ticket/municiplaity
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/pay-ticket/parking
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/pay-ticket/red-light-camera
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/pay-ticket/speed-camera
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/pay-ticket/traffic
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/privacy
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/tabs/js/bootstrap.min.js
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/tabs/js/jquery-3.3.1.min.js
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/tabs/js/main.js
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/tabs/js/owl.carousel.min.js
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/tabs/js/popper.min.js
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/terms-and-conditions
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/trial-request
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/uploads/blog/1654098619.jpg
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/uploads/blog/1654383735.jpg
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/uploads/blog/1654788798.jpg
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/uploads/blog/1654788838.jpg
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/uploads/blog/1676079797.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/uploads/blog/1676170424.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/css/all.css
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/12.jpg
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/13.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/14.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/15.jpg
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/ER-ICON-GREEN.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/PPARKING-ICON-GREEN.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/Pay-Tickets.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/TICKET-ICON-GREEN.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/TRIAL-ICON-green.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/client-10.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/client-11.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/client-12.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/client-13.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/client-2.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/client-3.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/client-4.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/client-5.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/client-6.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/client-8.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/client-9.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/favicon.ico
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/gavel.png
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/service-early.svg
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/service-parking.svg
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/service-red-light.svg
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/service-speed.svg
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/images/service-traffic.svg
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.ca/web_assets/js/all-main.js
Source: chromecache_281.2.dr String found in binary or memory: https://filetickets.caundefined
Source: chromecache_156.2.dr, chromecache_171.2.dr, chromecache_240.2.dr, chromecache_150.2.dr, chromecache_279.2.dr, chromecache_181.2.dr, chromecache_253.2.dr String found in binary or memory: https://fontawesome.com
Source: chromecache_156.2.dr, chromecache_171.2.dr, chromecache_240.2.dr, chromecache_150.2.dr, chromecache_279.2.dr, chromecache_181.2.dr, chromecache_253.2.dr String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_171.2.dr String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_222.2.dr, chromecache_161.2.dr, chromecache_159.2.dr, chromecache_232.2.dr String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_161.2.dr, chromecache_171.2.dr, chromecache_232.2.dr, chromecache_152.2.dr, chromecache_192.2.dr String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: chromecache_161.2.dr, chromecache_171.2.dr, chromecache_232.2.dr String found in binary or memory: https://github.com/eternicode/bootstrap-datepicker)
Source: chromecache_161.2.dr, chromecache_154.2.dr, chromecache_224.2.dr, chromecache_232.2.dr String found in binary or memory: https://github.com/marcandre/inputevent
Source: chromecache_213.2.dr, chromecache_219.2.dr String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_222.2.dr, chromecache_159.2.dr String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_161.2.dr, chromecache_232.2.dr String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_222.2.dr, chromecache_161.2.dr, chromecache_159.2.dr, chromecache_232.2.dr String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_242.2.dr String found in binary or memory: https://google.com
Source: chromecache_242.2.dr String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_161.2.dr, chromecache_232.2.dr String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_161.2.dr, chromecache_232.2.dr String found in binary or memory: https://kit.fontawesome.com
Source: chromecache_242.2.dr String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_243.2.dr, chromecache_217.2.dr, chromecache_212.2.dr, chromecache_146.2.dr, chromecache_278.2.dr, chromecache_221.2.dr, chromecache_167.2.dr, chromecache_173.2.dr, chromecache_250.2.dr, chromecache_202.2.dr, chromecache_195.2.dr, chromecache_242.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_281.2.dr String found in binary or memory: https://schema.org/
Source: chromecache_217.2.dr, chromecache_212.2.dr, chromecache_202.2.dr, chromecache_195.2.dr String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_204.2.dr String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_218.2.dr, chromecache_204.2.dr String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_243.2.dr, chromecache_217.2.dr, chromecache_212.2.dr, chromecache_146.2.dr, chromecache_278.2.dr, chromecache_221.2.dr, chromecache_167.2.dr, chromecache_173.2.dr, chromecache_250.2.dr, chromecache_202.2.dr, chromecache_195.2.dr, chromecache_242.2.dr String found in binary or memory: https://td.doubleclick.net
Source: chromecache_182.2.dr, chromecache_164.2.dr String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_146.2.dr, chromecache_278.2.dr String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_218.2.dr, chromecache_204.2.dr String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_218.2.dr, chromecache_204.2.dr String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_218.2.dr, chromecache_204.2.dr String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_242.2.dr String found in binary or memory: https://www.google.com
Source: chromecache_218.2.dr, chromecache_204.2.dr String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_242.2.dr String found in binary or memory: https://www.googleadservices.com
Source: chromecache_242.2.dr String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_243.2.dr, chromecache_221.2.dr, chromecache_167.2.dr, chromecache_173.2.dr, chromecache_250.2.dr, chromecache_242.2.dr String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_218.2.dr, chromecache_204.2.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_281.2.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-182191795-1
Source: chromecache_281.2.dr String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_281.2.dr String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-MMDSJH76
Source: chromecache_281.2.dr String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-T8WPBMH
Source: chromecache_243.2.dr, chromecache_221.2.dr, chromecache_167.2.dr, chromecache_173.2.dr, chromecache_250.2.dr, chromecache_242.2.dr String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_217.2.dr, chromecache_212.2.dr, chromecache_202.2.dr, chromecache_195.2.dr String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_281.2.dr String found in binary or memory: https://www.ontariocourts.ca/ocj/files/guides/guide-provincial-offences.pdf
Source: chromecache_281.2.dr String found in binary or memory: https://www.youtube.com/channel/UCaJnGQ-buWYvzOBKPyHJIig
Source: chromecache_217.2.dr, chromecache_212.2.dr String found in binary or memory: https://www.youtube.com/iframe_api
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:50012 version: TLS 1.2
Source: classification engine Classification label: clean0.win@19/222@36/12
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2192,i,5431199868520291171,15811596784627717085,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://filetickets.ca"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2192,i,5431199868520291171,15811596784627717085,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Google Drive.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Stores files to the Windows start menu directory
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 1559458 URL: http://filetickets.ca Startdate: 20/11/2024 Architecture: WINDOWS Score: 0 5 chrome.exe 9 2->5         started        8 chrome.exe 2->8         started        dnsIp3 13 192.168.2.5, 443, 49319, 49703 unknown unknown 5->13 15 239.255.255.250 unknown Reserved 5->15 10 chrome.exe 5->10         started        process4 dnsIp5 17 filetickets.ca 66.175.232.81, 443, 49709, 49710 ONEANDONE-ASBrauerstrasse48DE United States 10->17 19 s-part-0035.t-0009.t-msedge.net 13.107.246.63, 443, 49750, 49769 MICROSOFT-CORP-MSN-AS-BLOCKUS United States 10->19 21 17 other IPs or domains 10->21
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
13.107.246.63
 s-part-0035.t-0009.t-msedge.net United States
8068 MICROSOFT-CORP-MSN-AS-BLOCKUS false
216.239.38.181
 analytics-alv.google.com United States
15169 GOOGLEUS false
66.175.232.81
 filetickets.ca United States
8560 ONEANDONE-ASBrauerstrasse48DE false
66.102.1.157
 stats.g.doubleclick.net United States
15169 GOOGLEUS false
172.217.19.194
 googleads.g.doubleclick.net United States
15169 GOOGLEUS false
150.171.28.10
 ax-0001.ax-msedge.net United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
172.217.21.34
 td.doubleclick.net United States
15169 GOOGLEUS false
142.250.181.68
 www.google.com United States
15169 GOOGLEUS false
172.217.21.36
 unknown United States
15169 GOOGLEUS false
150.171.27.10
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
239.255.255.250
 unknown Reserved
unknown unknown false

Private

IP
192.168.2.5

Contacted Domains

Name IP Active
filetickets.ca 66.175.232.81 true
analytics-alv.google.com 216.239.38.181 true
googleads.g.doubleclick.net 172.217.19.194 true
www.google.com 142.250.181.68 true
td.doubleclick.net 172.217.21.34 true
analytics.google.com 172.217.19.238 true
s-part-0035.t-0009.t-msedge.net 13.107.246.63 true
ax-0001.ax-msedge.net 150.171.28.10 true
stats.g.doubleclick.net 66.102.1.157 true
ka-f.fontawesome.com unknown unknown
x.clarity.ms unknown unknown
www.clarity.ms unknown unknown
c.clarity.ms unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://filetickets.ca/uploads/blog/1654788838.jpg false
  • Avira URL Cloud: safe
 unknown
https://filetickets.ca/web_assets/images/Pay-Tickets.png false
  • Avira URL Cloud: safe
 unknown
https://filetickets.ca/uploads/blog/1654383735.jpg false
  • Avira URL Cloud: safe
 unknown
https://www.clarity.ms/s/0.7.56/clarity.js false
    		high
    https://filetickets.ca/tabs/js/owl.carousel.min.js false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/client-12.png false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/TICKET-ICON-GREEN.png false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/client-2.png false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/js/all-main.js false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/tabs/js/bootstrap.min.js false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/client-4.png false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/blog-front/js/slick.min.js false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/service-traffic.svg false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/client-10.png false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/img/previous.svg false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/favicon.ico false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/tabs/js/main.js false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/client-6.png false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/12.jpg false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/client-8.png false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/img/next.svg false
    • Avira URL Cloud: safe
    		 unknown
    http://filetickets.ca/ false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/service-parking.svg false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/13.png false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/webfonts/fa-solid-900.woff2 false
    • Avira URL Cloud: safe
    		 unknown
    https://filetickets.ca/web_assets/images/client-11.png false
    • Avira URL Cloud: safe
    		 unknown
    https://www.clarity.ms/tag/uet/343054528 false
      		high
      https://filetickets.ca/web_assets/images/service-early.svg false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/dash-assets/plugins/parsleyjs/parsley.min.js false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/web_assets/images/15.jpg false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/web_assets/images/10.png false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/uploads/blog/1676079797.png false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/uploads/blog/1676170424.png false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/web_assets/images/service-red-light.svg false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/web_assets/css/images/service-item-layer.png false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/web_assets/images/client-3.png false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/web_assets/images/TRIAL-ICON-green.png false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/web_assets/images/ER-ICON-GREEN.png false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/blog-front/js/main.js false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/web_assets/images/PPARKING-ICON-GREEN.png false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/web_assets/images/client-5.png false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/uploads/blog/1654098619.jpg false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/tabs/js/popper.min.js false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/web_assets/images/service-speed.svg false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/uploads/blog/1654788798.jpg false
      • Avira URL Cloud: safe
      		 unknown
      https://filetickets.ca/tabs/js/jquery-3.3.1.min.js false
      • Avira URL Cloud: safe
      		 unknown