Windows Analysis Report
http://teaandrosemary.com

Overview

General Information

Sample URL: http://teaandrosemary.com
Analysis ID: 1560048
Infos:

Detection

Score: 2
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

Connects to several IPs in different countries
Executes massive DNS lookups (> 100)
HTML page contains hidden javascript code
Stores files to the Windows start menu directory
Suricata IDS alerts with low severity for network traffic

Classification

HTML page contains hidden javascript code
Source: https://teaandrosemary.com/ HTTP Parser: Base64 decoded: 986d5369-62a6-6aea-5993-2048c5fb4f77
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: https://teaandrosemary.com/ HTTP Parser: No favicon
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49836 version: TLS 1.2
Source: unknown HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:50311 version: TLS 1.2
Connects to several IPs in different countries
Source: unknown Network traffic detected: IP country count 10
Executes massive DNS lookups (> 100)
Source: global traffic DNS traffic detected: number of DNS queries: 170
Suricata IDS alerts with low severity for network traffic
Source: Network traffic Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50137 -> 34.111.113.62:443
Source: Network traffic Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50318 -> 47.253.61.56:443
Source: Network traffic Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50486 -> 18.197.30.174:443
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/css/dashicons.min.css?ver=6.1.7 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/css/jquery-ui-dialog.min.css?ver=6.1.7 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.2.1 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.7 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/convertkit/resources/frontend/css/broadcasts.css?ver=2.3.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/convertkit/resources/frontend/css/button.css?ver=2.3.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/social-pug/assets/dist/style-frontend-pro.1.20.3.css?ver=1.20.3 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/themes/fox/style.min.css?ver=6.1.7 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/themes/fox-child-theme/style.css?ver=4.6.8.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/themes/fox/css/lib/fontawesome-5.9.0/webfonts/fa-solid-900.woff2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://teaandrosemary.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://teaandrosemary.com/wp-content/themes/fox/style.min.css?ver=6.1.7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /universal.mjs?v=866091540 HTTP/1.1Host: assets.flodesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://teaandrosemary.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/themes/fox/css/lib/feather/feather.ttf?rny1sd HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://teaandrosemary.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://teaandrosemary.com/wp-content/themes/fox/style.min.css?ver=6.1.7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/themes/fox/css/lib/fontawesome-5.9.0/webfonts/fa-brands-400.woff2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://teaandrosemary.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://teaandrosemary.com/wp-content/themes/fox/style.min.css?ver=6.1.7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/10/basilandbella_old_church_that_looks_like_the_occult_f38e6142-2119-4522-a876-68a45c91dd4f-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/09/basilandbella_photo_of_Lughnasadh_Ancestral_Harvest_Ritual_329bfa3d-283c-457f-b047-fa066b42d721-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-1536x538.png.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=CExN7gXUYavBpNu&MD=h1SNtWRv HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /universal.mjs?v=866091540 HTTP/1.1Host: assets.flodesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/11/basilandbella_photo_of_persephone_holding_a_pomegranate_in_the__9185a329-9158-4a6a-800b-5902c7e651d2-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/instagram-feed/img/placeholder.png HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-1536x538.png.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/09/basilandbella_photo_of_Lughnasadh_Ancestral_Harvest_Ritual_329bfa3d-283c-457f-b047-fa066b42d721-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/resizable.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/10/basilandbella_old_church_that_looks_like_the_occult_f38e6142-2119-4522-a876-68a45c91dd4f-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/11/basilandbella_photo_of_persephone_holding_a_pomegranate_in_the__9185a329-9158-4a6a-800b-5902c7e651d2-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/instagram-feed/img/placeholder.png HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/checkboxradio.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/button.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/dialog.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/fox-framework/js/fox-elementor.js?ver=1.4.5 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/convertkit/resources/frontend/js/broadcasts.js?ver=2.3.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/resizable.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/convertkit/resources/frontend/js/convertkit.js?ver=2.3.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/checkboxradio.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/button.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/ui/dialog.min.js?ver=1.13.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/fox-framework/js/fox-elementor.js?ver=1.4.5 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/convertkit/resources/frontend/js/broadcasts.js?ver=2.3.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic HTTP traffic detected: GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.7 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.7 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}
Source: global traffic HTTP traffic detected: GET /wp-content/themes/fox/js/theme.min.js?ver=4.6.8.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.2.1 HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/09/basilandbella_aphrodite_standing_in_the_distance_on_the_sea_sho_d7ce2913-d586-4c63-8fcd-959256ee1863-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/convertkit/resources/frontend/js/convertkit.js?ver=2.3.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}
Source: global traffic HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.7 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}
Source: global traffic HTTP traffic detected: GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/09/basilandbella_photo_of_hecate_straight_on_to_the_camera_beckoni_7223af2c-31c3-4aeb-b635-c514c9046401-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/09/basilandbella_photo_of_the_demoness_lilith_vampiric_and_allurin_0b14a126-c197-4552-b109-0b6ef8cce073-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/09/basilandbella_realistic_photo_of_a_womanly_hooded_figure_holdin_d3416a3b-ad2f-4899-bb4f-fd12746dfa6c-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}
Source: global traffic HTTP traffic detected: GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.7 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/09/basilandbella_aphrodite_standing_in_the_distance_on_the_sea_sho_d7ce2913-d586-4c63-8fcd-959256ee1863-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.1.777433871.1732183161
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.2.1 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.1.777433871.1732183161
Source: global traffic HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/themes/fox/js/theme.min.js?ver=4.6.8.2 HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.1.777433871.1732183161
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/07/32210d6be77cfec56427fb36e962a9bc-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.1.777433871.1732183161
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2022/10/basilandbella_photo_of_woman_dressed_like_demeter_in_the_fall_3f0f5bde-7560-4c19-b3b8-8ae43a7937f9-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.1.777433871.1732183161
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/07/a7d472d912e46ac12a53c193af5b3395-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.1.777433871.1732183161
Source: global traffic HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/02/Depositphotos_170347730_XL-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.1.777433871.1732183161
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/09/basilandbella_photo_of_hecate_straight_on_to_the_camera_beckoni_7223af2c-31c3-4aeb-b635-c514c9046401-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/02/93939b947c27b5bfec4b71d436523cce-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.1.777433871.1732183161
Source: global traffic HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/09/basilandbella_photo_of_the_demoness_lilith_vampiric_and_allurin_0b14a126-c197-4552-b109-0b6ef8cce073-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/09/basilandbella_realistic_photo_of_a_womanly_hooded_figure_holdin_d3416a3b-ad2f-4899-bb4f-fd12746dfa6c-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/07/a7d472d912e46ac12a53c193af5b3395-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /usersync.min.js?s2sVersion=production HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/07/32210d6be77cfec56427fb36e962a9bc-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/467870704_18049895015001741_1675791445307522544_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/467651190_18049831349001741_5210491199902608146_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/466350968_18049204826001741_8899628850361867696_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2022/10/basilandbella_photo_of_woman_dressed_like_demeter_in_the_fall_3f0f5bde-7560-4c19-b3b8-8ae43a7937f9-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/02/Depositphotos_170347730_XL-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/466738467_18049122191001741_267930577184971942_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /usersync.min.js?s2sVersion=production HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/464207423_18047563928001741_8186304364996752814_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/464561257_769674975285396_2091215211303641646_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/2024/02/93939b947c27b5bfec4b71d436523cce-480x600.jpg.webp HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}}; _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1
Source: global traffic HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/467870704_18049895015001741_1675791445307522544_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; utm_source=; utm_campaign=
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/467651190_18049831349001741_5210491199902608146_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; utm_source=; utm_campaign=
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/464503602_18047027729001741_8568069576548420097_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; utm_source=; utm_campaign=
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/466350968_18049204826001741_8899628850361867696_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; utm_source=; utm_campaign=
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/464423623_1263198934822275_3845619286450297427_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; utm_source=; utm_campaign=
Source: global traffic HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/466738467_18049122191001741_267930577184971942_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; utm_source=; utm_campaign=; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/464207423_18047563928001741_8186304364996752814_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; utm_source=; utm_campaign=; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test
Source: global traffic HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/464561257_769674975285396_2091215211303641646_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; utm_source=; utm_campaign=; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test
Source: global traffic HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/464503602_18047027729001741_8568069576548420097_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; utm_source=; utm_campaign=; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/sb-instagram-feed-images/464423623_1263198934822275_3845619286450297427_nlow.jpg HTTP/1.1Host: teaandrosemary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_142FLFCZKM=GS1.1.1732183161.1.0.1732183161.0.0.0; _ga=GA1.2.777433871.1732183161; _gid=GA1.2.1777868493.1732183164; _gat_gtag_UA_157523010_1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.10.0%22%2C%22name%22:%223.10.0%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; utm_source=; utm_campaign=; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test
Source: global traffic HTTP traffic detected: GET /topics/ HTTP/1.1Host: sda.fyiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=9.8.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /api/identity/envelope?pid=2 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /usersync/sync?origin=https://teaandrosemary.com&src=//exchange.mediavine.com&s2sVersion=production&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22conversant%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22sharethrough%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22trustx%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%2C%22nativo%22%3Atrue%2C%22centro%22%3Atrue%7D HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=9.8.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=9.8.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: lexicon.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=cfdb3150-e19e-7882-afc0-2c478f105169#1732183180718#1
Source: global traffic HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fteaandrosemary.com%2F&domain=teaandrosemary.com&lsw=1&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f4c62db2-934b-4cab-a269-13e645c5c8ed
Source: global traffic HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /track/cmf/generic?ttd_pid=1mahn14&ttd_puid=53c22730-a7ef-11ef-9524-59b39092d66a&ttd_tpi=1&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthe_trade_desk%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%25%25TDID%25%25 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f4c62db2-934b-4cab-a269-13e645c5c8ed
Source: global traffic HTTP traffic detected: GET /usermatchredir?s=193478&cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId= HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /api/sync?external_reference=mediavine&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&redirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dchicory%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%25CHICORY_ID%25 HTTP/1.1Host: e.chicoryapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: eu-eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /user-sync/redirect?profile=319&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dcriteo%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24%7BCRITEO_USER_ID%7D HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=53c22730-a7ef-11ef-9524-59b39092d66a HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=53c22730-a7ef-11ef-9524-59b39092d66a HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /api/sync?callerId=8 HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /universal/v1?supply_id=47b99924&us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsharethrough%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cksync.php?cs=19&type=mdv&ovsid=53c22730-a7ef-11ef-9524-59b39092d66a&us_privacy=1---&redirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediadotnet%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%3Cvsid%3E HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D HTTP/1.1Host: sync.colossusssp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /userPixel/syncr?partnerid=62&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dundertone%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24UIDENC HTTP/1.1Host: usr.undertone.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /bh/rtset?pid=562036&ev=53c22730-a7ef-11ef-9524-59b39092d66a&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpulsepoint%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId={PUB_USER_ID} HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId= HTTP/1.1Host: u.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183
Source: global traffic HTTP traffic detected: GET /usermatchredir?cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D&s=193478&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zz8Ej0t3ua8AADO8AfNRiAAA; CMPS=1243; CMPRO=1243
Source: global traffic HTTP traffic detected: GET /getuid?https://exchange.mediavine.com/usersync/redirect?partner=appnexus&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: eu-eb2.3lift.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=1563905846808864353207; tluid=1563905846808864353207
Source: global traffic HTTP traffic detected: GET /usersync2/rmpssp?sub=mediavine&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dnexxen%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=9.8.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: lexicon.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ul_cb/check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=53c22730-a7ef-11ef-9524-59b39092d66a HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=ebc3c5ce-a61a-42be-b189-072ef8b39a4f; c=1732183184; tuuid_lu=1732183184
Source: global traffic HTTP traffic detected: GET /pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /api/v1/dsync/mediavine?exid=53c22730-a7ef-11ef-9524-59b39092d66aus_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJAEP2cCEKn0msENAfRmLD6OW_CKzEIFEgEBAQFWQGdIZ9xH0iMA_eMAAA&S=AQAAApb6IgOK-HLZASgBedb1F6w
Source: global traffic HTTP traffic detected: GET /ul_cb/server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=%7BPUB_USER_ID%7D HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=ef2917f3-b5b1-40d1-b35e-816b8aa04269; tuuid_lu=1732183184
Source: global traffic HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dappnexus%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=N2U9PkBYZw1LugSMrfTdcZNx2Hh13Uy6otcwYte6ugeO_8G4MNs0zkfOT8n4X6Lb1J1LT8vtBFrW2RTsO8e-lpta9vxtGCalSt9zRIPeOZM.; receive-cookie-deprecation=1; uuid2=3601273278595652539
Source: global traffic HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=122fa7ba-a605-7e3a-9140-c4c9a9a52101#1732183182365#1
Source: global traffic HTTP traffic detected: GET /usersync2/rmpssp?sub=mediavine&zcc=1&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dnexxen%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%5BRX_UUID%5D&cb=1732183184430 HTTP/1.1Host: sync.1rx.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5d069f25-5ea6-40f7-b32c-73b76d3a4f45-003%22%2C%22zdxidn%22%3A%222069.15%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dnexxen%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%5BRX_UUID%5D%22%7D
Source: global traffic HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fteaandrosemary.com%2F&domain=teaandrosemary.com&lsw=1&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=f4c62db2-934b-4cab-a269-13e645c5c8ed HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=chicory&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=AANJqU7OfgkAABYbyQOdXA HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=huddled_masses&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=6ff95537-f95f-4503-a806-489171ec4938 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ul_cb/sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=53c22730-a7ef-11ef-9524-59b39092d66a HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1732183184; tuuid_lu=1732183184; tuuid=3094c032-c6fa-4250-9b72-b5665ef8a65d
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=smartmedia&partnerId=2457032842308261723&gdpr=0&gdpr_consent= HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=146&p=319&dis=0&url=https%3a%2f%2fssp-sync.criteo.com%2fuser-sync%2fredirect%3fuid%3d%40%40CRITEO_USERID%40%40%26dised%3dtrue%26gdpr%3d%26gdprapplies%3dFalse%26ccpa%3d%26gpp%3dDBABzw%7e1---%7eBqgAAAAAAgA%26gpp_sid%3d-1%26profile%3d319%26redir%3dhttps%253A%252F%252Fexchange.mediavine.com%252Fusersync%252Fredirect%253Fpartner%253Dcriteo%2526uuid%253D53c22730-a7ef-11ef-9524-59b39092d66a%2526s2sVersion%253Dproduction%2526partnerId%253D%2524%7bCRITEO_USER_ID%7d&gdpr=&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=TzWpV18wRjlGNlU4S2NGeHFWQ0ElMkZsdEE2TnFFSG01ejFOJTJGVFQ2Rmc3JTJCN01VbmU5ZDNNMkpDZmphQXBuQ1BjcU1IZ2k4YXdFNVVFemdaYU9SaTdmYmVZYXNhRGllaGlGMlo0OGpuUyUyQjA0ZjdxWXdEJTJCTVZScGpZcnlndFdTaDVOVmdhUUM
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=pulsepoint&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=FwMgA7cd56BL&ev=53c22730-a7ef-11ef-9524-59b39092d66a&pid=562036 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=indexExchange&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=Zz8Ej0t3ua8AADO8AfNRiAAA%261243 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /idsync/ex/receive?partner_id=1955&partner_device_id=b27cf35f-f0d6-09c9-0692-e2273c95401b HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=undertone&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=5pf1gu7ghtt2xxravn2uhns8z HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=mediagrid&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=ebc3c5ce-a61a-42be-b189-072ef8b39a4f HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK
Source: global traffic HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=ecd4fcde-b77b-8fb4-8c7d-f866672a4af7 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /r/cs?pid=45&id=RX-5d069f25-5ea6-40f7-b32c-73b76d3a4f45-003&rndcb=6386830808 HTTP/1.1Host: ad.turn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=improvedigital&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=ef2917f3-b5b1-40d1-b35e-816b8aa04269 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=verizon&partnerId=y-EBLpI1BE2uJyiqWCbvPhd8eMsgo7Rms7~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/gumgum/?puid=e_d40d1578-b327-4db4-8691-eb2636444379&gdpr=&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=appnexus&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=3601273278595652539 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=ZV9kNDBkMTU3OC1iMzI3LTRkYjQtODY5MS1lYjI2MzY0NDQzNzk=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=e_d40d1578-b327-4db4-8691-eb2636444379&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1732183184; tuuid_lu=1732183184; tuuid=ebc3c5ce-a61a-42be-b189-072ef8b39a4f
Source: global traffic HTTP traffic detected: GET /getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=N2U9PkBYZw1LugSMrfTdcZNx2Hh13Uy6otcwYte6ugeO_8G4MNs0zkfOT8n4X6Lb1J1LT8vtBFrW2RTsO8e-lpta9vxtGCalSt9zRIPeOZM.; receive-cookie-deprecation=1; uuid2=3601273278595652539
Source: global traffic HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=FwMgA7cd56BL; VP=part_FwMgA7cd56BL; pb_rtb_ev=3-1uw4|88N.0.53c22730-a7ef-11ef-9524-59b39092d66a; pb_rtb_ev_part=3-1uw4|88N.0.53c22730-a7ef-11ef-9524-59b39092d66a; INGRESSCOOKIE=ac82e3e4a0072c50
Source: global traffic HTTP traffic detected: GET /r/cs?pid=9&gdpr=0 HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f4c62db2-934b-4cab-a269-13e645c5c8ed; TDCPM=CAEYASABKAIyCwiOg_bFvofFPRAFOAFaBzFtYWhuMTRgAg..
Source: global traffic HTTP traffic detected: GET /sync/gumgum?gdpr=&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJAEP2cCEKn0msENAfRmLD6OW_CKzEIFEgEBAQFWQGdIZ9xH0iMA_eMAAA&S=AQAAApb6IgOK-HLZASgBedb1F6w
Source: global traffic HTTP traffic detected: GET /sync/openx/20c5e6e7-3b7d-a607-7da4-6c04f04e4c5e?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJAEP2cCEKn0msENAfRmLD6OW_CKzEIFEgEBAQFWQGdIZ9xH0iMA_eMAAA&S=AQAAApb6IgOK-HLZASgBedb1F6w
Source: global traffic HTTP traffic detected: GET /sync?nid=1&gdpr=&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=N2U9PkBYZw1LugSMrfTdcZNx2Hh13Uy6otcwYte6ugeO_8G4MNs0zkfOT8n4X6Lb1J1LT8vtBFrW2RTsO8e-lpta9vxtGCalSt9zRIPeOZM.; receive-cookie-deprecation=1; uuid2=3601273278595652539
Source: global traffic HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /api/v1/dsync/mediavine?exid=53c22730-a7ef-11ef-9524-59b39092d66aus_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=7a0670ec-2c9c-0148-56ef-1236e2552bcb
Source: global traffic HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=69432591&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /usersync?b=pln&i=FwMgA7cd56BL&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /aux/idsync?proto=gumgum HTTP/1.1Host: tg.socdm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel.gif HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=mediadotnet&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=3751847846394721000V10 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 HTTP/1.1Host: hde.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=pniolmc/BJHtm6o8C//OnQ==
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=yieldmo&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=VFrrEM3vvQ3UAoW8us9K&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2457032842308261723
Source: global traffic HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=1955&partner_device_id=b27cf35f-f0d6-09c9-0692-e2273c95401b HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1732183186270; TapAd_DID=004092fe-2c40-41e4-a899-3a99c99c9672
Source: global traffic HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=triplelift&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=1563905846808864353207 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=146&p=319&dis=0&url=https%3a%2f%2fssp-sync.criteo.com%2fuser-sync%2fredirect%3fuid%3d%40%40CRITEO_USERID%40%40%26dised%3dtrue%26gdpr%3d%26gdprapplies%3dFalse%26ccpa%3d%26gpp%3dDBABzw~1---~BqgAAAAAAgA%26gpp_sid%3d-1%26profile%3d319%26redir%3dhttps%253A%252F%252Fexchange.mediavine.com%252Fusersync%252Fredirect%253Fpartner%253Dcriteo%2526uuid%253D53c22730-a7ef-11ef-9524-59b39092d66a%2526s2sVersion%253Dproduction%2526partnerId%253D%2524%7BCRITEO_USER_ID%7D&gdpr=&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1Host: widget.us.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=TzWpV18wRjlGNlU4S2NGeHFWQ0ElMkZsdEE2TnFFSG01ejFOJTJGVFQ2Rmc3JTJCN01VbmU5ZDNNMkpDZmphQXBuQ1BjcU1IZ2k4YXdFNVVFemdaYU9SaTdmYmVZYXNhRGllaGlGMlo0OGpuUyUyQjA0ZjdxWXdEJTJCTVZScGpZcnlndFdTaDVOVmdhUUM
Source: global traffic HTTP traffic detected: GET /sync?ssp=bidswitch&bidswitch_ssp_id=themediagrid&bsw_custom_parameter=3094c032-c6fa-4250-9b72-b5665ef8a65d HTTP/1.1Host: pool.admedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /464246.gif?partner_uid=e1c4ffc5-6696-022e-130a-fa023682e0cf HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=conversant&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=AQAJp8sg9Cj43AJz6U6xAQEBAQEBAQCSTyjV-wEBAJJPKNX7&expiration=1732269584 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=pubmatic&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=ecd4fcde-b77b-8fb4-8c7d-f866672a4af7&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4Oa7WiwCEfNhWpHl6dBScY|t
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=mediagrid&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=ebc3c5ce-a61a-42be-b189-072ef8b39a4f HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_8bc90264727940cfa885f; CDIPARTNERS=%7B%221%22%3A%2220241121%22%7D
Source: global traffic HTTP traffic detected: GET /user-sync/redirect?uid=ac6576fb-f62c-4338-9ee9-9483781829b4&dised=true&gdpr=&gdprapplies=False&ccpa=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1&profile=319&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dcriteo%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24{CRITEO_USER_ID}&gdpr=&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=TzWpV18wRjlGNlU4S2NGeHFWQ0ElMkZsdEE2TnFFSG01ejFOJTJGVFQ2Rmc3JTJCN01VbmU5ZDNNMkpDZmphQXBuQ1BjcU1IZ2k4YXdFNVVFemdaYU9SaTdmYmVZYXNhRGllaGlGMlo0OGpuUyUyQjA0ZjdxWXdEJTJCTVZScGpZcnlndFdTaDVOVmdhUUM; uid=ac6576fb-f62c-4338-9ee9-9483781829b4
Source: global traffic HTTP traffic detected: GET /ps/?us_privacy=1---&ts=1732183187908.2&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=improvedigital&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=ef2917f3-b5b1-40d1-b35e-816b8aa04269 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=verizon&partnerId=y-EBLpI1BE2uJyiqWCbvPhd8eMsgo7Rms7~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/turn/3401281489091757236?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5d069f25-5ea6-40f7-b32c-73b76d3a4f45-003%22%2C%22zdxidn%22%3A%222069.15%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dnexxen%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%5BRX_UUID%5D%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=appnexus&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=3601273278595652539 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=N2U9PkBYZw1LugSMrfTdcZNx2Hh13Uy6otcwYte6ugeO_8G4MNs0zkfOT8n4X6Lb1J1LT8vtBFrW2RTsO8e-lpta9vxtGCalSt9zRIPeOZM.; uuid2=3601273278595652539
Source: global traffic HTTP traffic detected: GET /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=&gdpr_consent=&puid=e_d40d1578-b327-4db4-8691-eb2636444379&s=2&us_privacy=1--- HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=GGC9q9qJE4uP2EF5dzGL
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=ZV9kNDBkMTU3OC1iMzI3LTRkYjQtODY5MS1lYjI2MzY0NDQzNzk=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537073061&val=3700136482230454526&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK
Source: global traffic HTTP traffic detected: GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=iIA0fISk3Q7WMXdawiXt_1732183187029; ts=1732183187
Source: global traffic HTTP traffic detected: GET /usersync?b=ttd&i=f4c62db2-934b-4cab-a269-13e645c5c8ed HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync?b=sus&i=Zz8Ek8Co5ucAAOQb4dQAAAAA HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync?b=opx&i=433f24d3-83c4-0c18-2b08-6a1cc7498051 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /bidswitch/sync?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=ebc3c5ce-a61a-42be-b189-072ef8b39a4f&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy=1--- HTTP/1.1Host: dsp.nrich.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /usersync?b=sta&i=wB1fVgw9W8BApkqAIhwrAAgue0s HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync?b=oth&i=y-fNoxFSRE2peVxqjwJ2GMyh7NknUbHBg6HZyn~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync?b=apn&i=3601273278595652539 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /track/cmf/openx?oxid=b40280a3-abd1-344e-4c73-7af10f198117&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f4c62db2-934b-4cab-a269-13e645c5c8ed; TDCPM=CAEYASABKAIyCwiwqL3kvofFPRAFOAFaBmd1bWd1bWAC
Source: global traffic HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537072399%26val%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=20UXFJgG5rPh3IpXRQJ_JFwdNBwebE7rUb7043wXDWlPWRb7XomdY9Zxp7Ji4Xjew7aI179iMcJaG6J7cUJhjZDBE0YRoCUi7Zx1ZElXH_U.; uuid2=6584676363640427219
Source: global traffic HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3601273278595652539
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=OEMwRDlEREEtMEFFQS00QTIyLTk2RjgtRkE5QzU1MUQ3MjRC&gdpr=0&gdpr_consent=&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=69432591&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=1; pi=157108:2; DPSync4=1733356800%3A197_219_226_227; SyncRTB4=1733356800%3A8_201_56_251_3_220_21_13_54_71%7C1733443200%3A35%7C1732752000%3A223
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=openx&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=7a4b10c6-1d02-0322-2c6c-9cd2bd4decaa HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=jA2d2grqSiKW-PqcVR1ySw%3D%3D&gdpr=0&gdpr_consent=&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel.gif HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4Oa7WiwCEfNhWpHl6dBScY|t
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=TzWpV18wRjlGNlU4S2NGeHFWQ0ElMkZsdEE2TnFFSG01ejFOJTJGVFQ2Rmc3JTJCN01VbmU5ZDNNMkpDZmphQXBuQ1BjcU1IZ2k4YXdFNVVFemdaYU9SaTdmYmVZYXNhRGllaGlGMlo0OGpuUyUyQjA0ZjdxWXdEJTJCTVZScGpZcnlndFdTaDVOVmdhUUM
Source: global traffic HTTP traffic detected: GET /sync/openx/20c5e6e7-3b7d-a607-7da4-6c04f04e4c5e?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJAEP2cCEKn0msENAfRmLD6OW_CKzEIFEgEBAQFWQGdIZ9xH0iMA_eMAAA&S=AQAAApb6IgOK-HLZASgBedb1F6w
Source: global traffic HTTP traffic detected: GET /?partner=214&mapped=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ps/?_=1732183187908.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /usersync?b=pln&i=FwMgA7cd56BL&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1Host: rtb.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /ps/?ts=1732183187908.6&ri=129&us_privacy=1---&gpp_sid=&gpp=&ru=https%3A%2F%2Ft.adx.opera.com%2Fpub%2Fsync%3Fpubid%3Dpub11169426274368%26coppa%3D%26us_privacy%3D1--- HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=1955&partner_device_id=b27cf35f-f0d6-09c9-0692-e2273c95401b HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1732183186270; TapAd_DID=004092fe-2c40-41e4-a899-3a99c99c9672; TapAd_3WAY_SYNCS=
Source: global traffic HTTP traffic detected: GET /1000.gif?memo=CPaqHBIvCisIARCUaxokZTFjNGZmYzUtNjY5Ni0wMjJlLTEzMGEtZmEwMjM2ODJlMGNmEAAaDQiUify5BhIFCOgHEABCAEoA HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=mwOt1ueSamRk/dYUqP/U79ra57iFIfNxEZltIn+PMkg=; pxrc=CAA=
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=OTg2ZDUzNjktNjJhNi02YWVhLTU5OTMtMjA0OGM1ZmI0Zjc3 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537072399&val=6584676363640427219 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK
Source: global traffic HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sync?dsp_id=283&user_id=43cb337d-0843-41a6-816b-98ba96d32fb3&expires=1&user_group=5&ssp=gumgum2&bsw_param=ebc3c5ce-a61a-42be-b189-072ef8b39a4f&gdpr=&gdpr_consent=&gdpr_pd= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1732183184; tuuid=3094c032-c6fa-4250-9b72-b5665ef8a65d; tuuid_lu=1732183186
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic HTTP traffic detected: GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=themediagrid&bsw_custom_parameter=3094c032-c6fa-4250-9b72-b5665ef8a65d HTTP/1.1Host: pool.admedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=28d38152-2c3b-450e-a0b8-e139be31619c; c=1732183188; tuuid_lu=1732183188
Source: global traffic HTTP traffic detected: GET /api/1.0/id5PrebidModule.js HTTP/1.1Host: cdn.id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=122fa7ba-a605-7e3a-9140-c4c9a9a52101#1732183182365#1
Source: global traffic HTTP traffic detected: GET /ups/58350/sync?redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJAEP2cCEKn0msENAfRmLD6OW_CKzEIFEgEBAQFWQGdIZ9xH0iMA_eMAAA&S=AQAAApb6IgOK-HLZASgBedb1F6w; IDSYNC=19bx~2ly9
Source: global traffic HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=ecd4fcde-b77b-8fb4-8c7d-f866672a4af7&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4Oa7WiwCEfNhWpHl6dBScY; ad-privacy=0
Source: global traffic HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /sync?ssp=criteo&custom_data=ZFfkGF9PSkx0dGlyVk9pbE1ZdkJkY2Mzcm1nQ2pVNkZzMXFITXU5YmIxbFJxUlJ5YUVUbW1ycGRjUkdWJTJCYyUyQm9oNGJ5biUyRnlYYXl0aHFvcmtXM1M5RjZta3J0eFlpTDJvZlIza0N4TDIxYU9valBqNnVrS2Q5aXAwcm5KMmkzWGNsblNlVCUyRldpVyUyRmxjcUFGcmwlMkJnQVF5U0J5bTUxbUl1UUlGUEE1MXNPeUFRT0xvd2ZWTmEyWVNEU0RZYVRDbyUyQldVNHJSJTJCcWFvaHRMdnlkckg3NEc3NmhucjkzUXdnWUQ0VjFZVFp6STVSRk15Z0puZW4ySWU3WVBid0w3ZHdCVVkzbUNtaFpJUzU4MyUyRkF2MWh3RTBnSnJmNUxQMTVLMiUyQjVBY0prVm5rUFFjOHNZbkpFJTNE&gpp=DBABzw%7e1---%7eBqgAAAAAAgA&gpp_sid=-1&gdpr=0&gdpr_consent=&us_privacy=&cr_user_id=k-i9I2nwx-dSfYnD0gPqVmP-6FH3B7uwAfN3zc9g HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1732183184; tuuid=3094c032-c6fa-4250-9b72-b5665ef8a65d; tuuid_lu=1732183186
Source: global traffic HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=7929857&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=1; DPSync4=1733356800%3A197_219_226_227; SyncRTB4=1733356800%3A8_201_56_251_3_220_21_13_54_71%7C1733443200%3A35%7C1732752000%3A223
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Zz8EkgAGkCPfTwAZ&_test=Zz8EkgAGkCPfTwAZ HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537073061&val=3700136482230454526&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK
Source: global traffic HTTP traffic detected: GET /4d6ff4b39a6da63948bf15a61ab8f452.gif?puid=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fxi%3D131%26us_privacy%3D1---%26xu%3D%5BUID%5D HTTP/1.1Host: cs.krushmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=gumgum&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=e_d40d1578-b327-4db4-8691-eb2636444379 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync?b=rth&i=n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&pi=gumgum&tc=1 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /sync?ssp=the33across&us_privacy=1--- HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1732183184; tuuid=3094c032-c6fa-4250-9b72-b5665ef8a65d; tuuid_lu=1732183186
Source: global traffic HTTP traffic detected: GET /usersync?b=adf&i=3748698755824998627&gdpr=&gdpr_consent= HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3601273278595652539&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=1; DPSync4=1733356800%3A197_219_226_227; SyncRTB4=1733356800%3A8_201_56_251_3_220_21_13_54_71%7C1733443200%3A35%7C1732752000%3A223
Source: global traffic HTTP traffic detected: GET /usersync?b=dit&i=di_8bc90264727940cfa885f HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync?b=opx&i=433f24d3-83c4-0c18-2b08-6a1cc7498051 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync?b=bsw&i=3094c032-c6fa-4250-9b72-b5665ef8a65d&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=f4c62db2-934b-4cab-a269-13e645c5c8ed&ttd_puid=b40280a3-abd1-344e-4c73-7af10f198117&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK
Source: global traffic HTTP traffic detected: GET /usersync?b=sta&i=wB1fVgw9W8BApkqAIhwrAAgue0s HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync?b=vnt&i=53c91046-f3d9-4353-8f6c-7940f5201c90 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync?b=apn&i=3601273278595652539 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync?b=oth&i=y-fNoxFSRE2peVxqjwJ2GMyh7NknUbHBg6HZyn~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync?b=sad&i=2457032842308261723 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=openx&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=7a4b10c6-1d02-0322-2c6c-9cd2bd4decaa HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /csync/RX-5d069f25-5ea6-40f7-b32c-73b76d3a4f45-003?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dnexxen%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3DRX-5d069f25-5ea6-40f7-b32c-73b76d3a4f45-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=57c087d8-38ba-4759-5590-b34610914443
Source: global traffic HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f4c62db2-934b-4cab-a269-13e645c5c8ed; TDCPM=CAEYASACKAIyCwiwqL3kvofFPRAFOAFaBmd1bWd1bWAC
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=2; pi=157108:3; DPSync4=1733356800%3A197_219_226_227_245; SyncRTB4=1733356800%3A54_266_55_22_233_3_21_81_249_201_220_13_71_271_270_8_251_264_203_56%7C1732752000%3A15_223%7C1733011200%3A63%7C1733443200%3A35
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=TzWpV18wRjlGNlU4S2NGeHFWQ0ElMkZsdEE2TnFFSG01ejFOJTJGVFQ2Rmc3JTJCN01VbmU5ZDNNMkpDZmphQXBuQ1BjcU1IZ2k4YXdFNVVFemdaYU9SaTdmYmVZYXNhRGllaGlGMlo0OGpuUyUyQjA0ZjdxWXdEJTJCTVZScGpZcnlndFdTaDVOVmdhUUM; uid=ac6576fb-f62c-4338-9ee9-9483781829b4
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEHm6C1wnwcN4MUW3xE3ymmU&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=1; DPSync4=1733356800%3A197_219_226_227; SyncRTB4=1733356800%3A8_201_56_251_3_220_21_13_54_71%7C1733443200%3A35%7C1732752000%3A223
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=3289131403829705961 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=2; pi=157108:3; DPSync4=1733356800%3A197_219_226_227_245; SyncRTB4=1733356800%3A54_266_55_22_233_3_21_81_249_201_220_13_71_271_270_8_251_264_203_56%7C1732752000%3A15_223%7C1733011200%3A63%7C1733443200%3A35
Source: global traffic HTTP traffic detected: GET /track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f4c62db2-934b-4cab-a269-13e645c5c8ed; TDCPM=CAEYASACKAIyCwiwqL3kvofFPRAFOAFaBmd1bWd1bWAC
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=thirty_three_across&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=212888925253522 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEMCoy5WkKFJ-n6z3RN5CuHc&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=2; pi=157108:3; DPSync4=1733356800%3A197_219_226_227_245; SyncRTB4=1733356800%3A54_266_55_22_233_3_21_81_249_201_220_13_71_271_270_8_251_264_203_56%7C1732752000%3A15_223%7C1733011200%3A63%7C1733443200%3A35
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537072399&val=6584676363640427219 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK
Source: global traffic HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEHFlkdFHKfNhFGjvpu970aQ&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK
Source: global traffic HTTP traffic detected: GET /api/sync?pid=5324&it=1&iv=aff9a569ab9b525bd26618e909f117512695aa642c546870077e8e6537735e48791426b5417dce21&_=2 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=OTg2ZDUzNjktNjJhNi02YWVhLTU5OTMtMjA0OGM1ZmI0Zjc3 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmrLg3-mUHodbtRvjhH7O_OKPK1KavVbti5NY1JgF8BRDN9zZBcvMxk5KdqYXw
Source: global traffic HTTP traffic detected: GET /sync?dsp_id=23&expires=14&user_id=28d38152-2c3b-450e-a0b8-e139be31619c&user_group=1&ssp=themediagrid&bsw_param=3094c032-c6fa-4250-9b72-b5665ef8a65d HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1732183184; tuuid=3094c032-c6fa-4250-9b72-b5665ef8a65d; tuuid_lu=1732183186
Source: global traffic HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJAEP2cCEKn0msENAfRmLD6OW_CKzEIFEgEBAQFWQGdIZ9xH0iMA_eMAAA&S=AQAAApb6IgOK-HLZASgBedb1F6w; IDSYNC=19bx~2ly9
Source: global traffic HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=9.8.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /usersync?b=pbm&i=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pub/sync?pubid=pub8730968190912&gdpr=0&gdpr_consent= HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ps/?xi=99&us_privacy=&xu=y-PztaGyZE2uFNKbMoMnKGFVlpfhSIf6Te~A HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=7929857&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=2; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; SyncRTB4=1733011200%3A63%7C1733356800%3A203_251_220_13_264_56_54_270_8_21_55_22_271_233_201_3_71_266%7C1733443200%3A35%7C1732752000%3A15_223
Source: global traffic HTTP traffic detected: GET /ps/?xi=131&us_privacy=1---&xu=218bc427-6caa-5b35-b93d-41563ee978df HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=25&p=52&dis=0&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D462%26ssp%3Dcriteo%26user_id%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=TzWpV18wRjlGNlU4S2NGeHFWQ0ElMkZsdEE2TnFFSG01ejFOJTJGVFQ2Rmc3JTJCN01VbmU5ZDNNMkpDZmphQXBuQ1BjcU1IZ2k4YXdFNVVFemdaYU9SaTdmYmVZYXNhRGllaGlGMlo0OGpuUyUyQjA0ZjdxWXdEJTJCTVZScGpZcnlndFdTaDVOVmdhUUM; uid=ac6576fb-f62c-4338-9ee9-9483781829b4
Source: global traffic HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=90F74B949C774FEC9DC80CE7046890D7
Source: global traffic HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1732183184; tuuid=3094c032-c6fa-4250-9b72-b5665ef8a65d; tuuid_lu=1732183186; custom_data=ZFfkGF9PSkx0dGlyVk9pbE1ZdkJkY2Mzcm1nQ2pVNkZzMXFITXU5YmIxbFJxUlJ5YUVUbW1ycGRjUkdWJTJCYyUyQm9oNGJ5biUyRnlYYXl0aHFvcmtXM1M5RjZta3J0eFlpTDJvZlIza0N4TDIxYU9valBqNnVrS2Q5aXAwcm5KMmkzWGNsblNlVCUyRldpVyUyRmxjcUFGcmwlMkJnQVF5U0J5bTUxbUl1UUlGUEE1MXNPeUFRT0xvd2ZWTmEyWVNEU0RZYVRDbyUyQldVNHJSJTJCcWFvaHRMdnlkckg3NEc3NmhucjkzUXdnWUQ0VjFZVFp6STVSRk15Z0puZW4ySWU3WVBid0w3ZHdCVVkzbUNtaFpJUzU4MyUyRkF2MWh3RTBnSnJmNUxQMTVLMiUyQjVBY0prVm5rUFFjOHNZbkpFJTNE
Source: global traffic HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=CExN7gXUYavBpNu&MD=h1SNtWRv HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-c01d5f56-0c3d-5bc0-40a6-4a80221c2b00.XuzUC4uf5%2BgEEgOxdJ%2B9MM%2BnjbnMLmOyOOeuAk5gBfI; sa-user-id=s%3A0-c01d5f56-0c3d-5bc0-40a6-4a80221c2b00.XuzUC4uf5%2BgEEgOxdJ%2B9MM%2BnjbnMLmOyOOeuAk5gBfI; sa-user-id-v2=s%3AwB1fVgw9W8BApkqAIhwrAAgue0s.MRvtkVlz5O7Y2dOfQCUZNjtUWcuI4kQ66a2kY%2BKfr%2Fs; sa-user-id-v2=s%3AwB1fVgw9W8BApkqAIhwrAAgue0s.MRvtkVlz5O7Y2dOfQCUZNjtUWcuI4kQ66a2kY%2BKfr%2Fs; sa-user-id-v3=s%3AAQAKIHk3K5R5_kJWRkdiUn3hFp88RJWC7HYlwteh9vt9S2L5EHwYBCCTify5BjABOgT87-jmQgT8XEF3.s29Yn1jU1Iyw1tfjh%2Bv21Njj2cVf9p96ISVsXauZH7A; sa-user-id-v3=s%3AAQAKIHk3K5R5_kJWRkdiUn3hFp88RJWC7HYlwteh9vt9S2L5EHwYBCCTify5BjABOgT87-jmQgT8XEF3.s29Yn1jU1Iyw1tfjh%2Bv21Njj2cVf9p96ISVsXauZH7A
Source: global traffic HTTP traffic detected: GET /pub/sync?pubid=pub11169426274368&coppa=&us_privacy=1--- HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /adx/user/sync?pubid=eWg=&gdpr=&gdpr_consent=&us_privacy=1---&bidswitch_ssp_id=the33across&bsw_custom_parameter=3094c032-c6fa-4250-9b72-b5665ef8a65d&callback=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D257 HTTP/1.1Host: gw-iad-bid.ymmobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /?ssp=9&gdpr=0&gdpr_consent= HTTP/1.1Host: dsp-cookie.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /bounce HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=122fa7ba-a605-7e3a-9140-c4c9a9a52101#1732183182365#1
Source: global traffic HTTP traffic detected: GET /usersync?b=zem&i=GGC9q9qJE4uP2EF5dzGL&us_privacy=1--- HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=iIA0fISk3Q7WMXdawiXt_1732183187029; ts=1732183187
Source: global traffic HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4Oa7WiwCEfNhWpHl6dBScY; ad-privacy=0
Source: global traffic HTTP traffic detected: GET /sync/pubmatic/8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJAEP2cCEKn0msENAfRmLD6OW_CKzEIFEgEBAQFWQGdIZ9xH0iMA_eMAAA&S=AQAAApb6IgOK-HLZASgBedb1F6w
Source: global traffic HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmR4eeZd9_ZjppGeEYmiVUAP-znRAPi2RdB_9A9KqWyH9F_mjfaXc-Cjb50nbk
Source: global traffic HTTP traffic detected: GET /dsp_match/275?ssp=76&gdpr=0&gdpr_consent=&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MzUmdGw9MTI5NjAw&piggybackCookie={DSP_USER_ID} HTTP/1.1Host: dsp.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=ef2917f3-b5b1-40d1-b35e-816b8aa04269; tuuid_lu=1732183184
Source: global traffic HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=nexxen&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=RX-5d069f25-5ea6-40f7-b32c-73b76d3a4f45-003 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /track/cmf/rubicon HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f4c62db2-934b-4cab-a269-13e645c5c8ed; TDCPM=CAEYASACKAIyCwiwqL3kvofFPRAFOAFaBmd1bWd1bWAC
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=2; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; SyncRTB4=1733011200%3A63%7C1733356800%3A203_251_220_13_264_56_54_270_8_21_55_22_271_233_201_3_71_266%7C1733443200%3A35%7C1732752000%3A15_223; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191
Source: global traffic HTTP traffic detected: GET /pixelGet?ex=50&gdpr={gdpr}&gdpr_consent={gdpr_consent}&dest=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA=&piggybackCookie={dmp_id}&gdpr={gdpr}&gdpr_consent={gdpr_consent} HTTP/1.1Host: dsp-ap.eskimi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /AdServer/SPug?partnerID=157108&gdpr=0&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=2; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; SyncRTB4=1733011200%3A63%7C1733356800%3A203_251_220_13_264_56_54_270_8_21_55_22_271_233_201_3_71_266%7C1733443200%3A35%7C1732752000%3A15_223; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Zz8EkgAGkCPfTwAZ&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15
Source: global traffic HTTP traffic detected: GET /?partner=147&mapped=f4c62db2-934b-4cab-a269-13e645c5c8ed&icm&gdpr=0&gdpr_consent=&cver HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=405bae52fd0e6123; done_redirects147=1
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU8c47d055a02d4ef9872467e7f14d49f8 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=2; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; SyncRTB4=1733011200%3A63%7C1733356800%3A203_251_220_13_264_56_54_270_8_21_55_22_271_233_201_3_71_266%7C1733443200%3A35%7C1732752000%3A15_223; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191
Source: global traffic HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=25&p=52&dis=0&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D462%26ssp%3Dcriteo%26user_id%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: widget.us.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=TzWpV18wRjlGNlU4S2NGeHFWQ0ElMkZsdEE2TnFFSG01ejFOJTJGVFQ2Rmc3JTJCN01VbmU5ZDNNMkpDZmphQXBuQ1BjcU1IZ2k4YXdFNVVFemdaYU9SaTdmYmVZYXNhRGllaGlGMlo0OGpuUyUyQjA0ZjdxWXdEJTJCTVZScGpZcnlndFdTaDVOVmdhUUM; uid=ac6576fb-f62c-4338-9ee9-9483781829b4
Source: global traffic HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=C4869E24F150A519
Source: global traffic HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=553a17f7-535b-48bd-9842-1402c74045d9#1732183194264
Source: global traffic HTTP traffic detected: GET /match?bidder_id=99&external_user_id=y-PztaGyZE2uFNKbMoMnKGFVlpfhSIf6Te%7EA&ts=1732183192&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /match?bidder_id=131&external_user_id=218bc427-6caa-5b35-b93d-41563ee978df&ts=1732183192&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /match?bidder_id=129&coppa=&external_user_id=OPU844e6c9765564e35b00af5cc01ac8ffc&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /idex/did-004m/any?duid=62c2d43f0c0b--01jd72kvtja3dbvf02ntrr7vv4&us_privacy=1---&did=did-004m&cd=.teaandrosemary.com&resolve=nonId&resolve=uid2&resolve=pubmatic HTTP/1.1Host: idx.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&gdpr=0&gdpr_consent=&ct=y HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-J8wmffxE2uXbkv8FVGTO1z4.vmrolbY-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=wB1fVgw9W8BApkqAIhwrAAgue0s&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15
Source: global traffic HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7439670164659829102&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15
Source: global traffic HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /j?dtstmp=1732183191888&did=did-004m&se=e30&duid=62c2d43f0c0b--01jd72kvtja3dbvf02ntrr7vv4&tv=8.43.0&pu=https%3A%2F%2Fteaandrosemary.com%2F&us_privacy=1---&wpn=prebid&cd=.teaandrosemary.com HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Zz8EkgAGkCPfTwAZ&_test=Zz8EkgAGkCPfTwAZ HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK; univ_id=537072971|f4c62db2-934b-4cab-a269-13e645c5c8ed|1732183191308611
Source: global traffic HTTP traffic detected: GET /pagead/managed/js/gpt/m202411180101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmR4eeZd9_ZjppGeEYmiVUAP-znRAPi2RdB_9A9KqWyH9F_mjfaXc-Cjb50nbk
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=f4c62db2-934b-4cab-a269-13e645c5c8ed&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; chkChromeAb67Sec=2; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; SyncRTB4=1733011200%3A63%7C1733356800%3A203_251_220_13_264_56_54_270_8_21_55_22_271_233_201_3_71_266%7C1733443200%3A35%7C1732752000%3A15_223; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191
Source: global traffic HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=47030715&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15
Source: global traffic HTTP traffic detected: GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15
Source: global traffic HTTP traffic detected: GET /sync?dsp_id=257&ssp=the33across&user_id=ym_user_019bfcd3-4dcf-44e5-8f71-5e3b954933d8&bsw_param=3094c032-c6fa-4250-9b72-b5665ef8a65d HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1732183184; tuuid=3094c032-c6fa-4250-9b72-b5665ef8a65d; tuuid_lu=1732183186; custom_data=ZFfkGF9PSkx0dGlyVk9pbE1ZdkJkY2Mzcm1nQ2pVNkZzMXFITXU5YmIxbFJxUlJ5YUVUbW1ycGRjUkdWJTJCYyUyQm9oNGJ5biUyRnlYYXl0aHFvcmtXM1M5RjZta3J0eFlpTDJvZlIza0N4TDIxYU9valBqNnVrS2Q5aXAwcm5KMmkzWGNsblNlVCUyRldpVyUyRmxjcUFGcmwlMkJnQVF5U0J5bTUxbUl1UUlGUEE1MXNPeUFRT0xvd2ZWTmEyWVNEU0RZYVRDbyUyQldVNHJSJTJCcWFvaHRMdnlkckg3NEc3NmhucjkzUXdnWUQ0VjFZVFp6STVSRk15Z0puZW4ySWU3WVBid0w3ZHdCVVkzbUNtaFpJUzU4MyUyRkF2MWh3RTBnSnJmNUxQMTVLMiUyQjVBY0prVm5rUFFjOHNZbkpFJTNE
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=rp&google_cm&google_hm=TTNSNTVDTEctMTctMVBaMQ== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmR4eeZd9_ZjppGeEYmiVUAP-znRAPi2RdB_9A9KqWyH9F_mjfaXc-Cjb50nbk
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=f4c62db2-934b-4cab-a269-13e645c5c8ed&ttd_puid=b40280a3-abd1-344e-4c73-7af10f198117&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK; univ_id=537072971|f4c62db2-934b-4cab-a269-13e645c5c8ed|1732183191308611
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=NzgyMWY5ZTMyMGNiNjUyYzYxMTAyMjAxZTA4ZjVkZmI0NzQwMWRmZQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmR4eeZd9_ZjppGeEYmiVUAP-znRAPi2RdB_9A9KqWyH9F_mjfaXc-Cjb50nbk
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=gumgum&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=e_d40d1578-b327-4db4-8691-eb2636444379 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=thirty_three_across&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=212888925253522 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /api/1.0/id5PrebidModule.js HTTP/1.1Host: cdn.id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=122fa7ba-a605-7e3a-9140-c4c9a9a52101#1732183182365#1
Source: global traffic HTTP traffic detected: GET /ecm3?id=M3R55CLG-17-1PZ1&ex=d-rubiconproject.com&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4Oa7WiwCEfNhWpHl6dBScY; ad-privacy=0
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEHFlkdFHKfNhFGjvpu970aQ&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=67aebffa-0256-0bb9-16a5-b2196b3eb2ea|1732183183; pd=v2|1732183184|vMbwuYgag2hEvPkWgyiK; univ_id=537072971|f4c62db2-934b-4cab-a269-13e645c5c8ed|1732183191308611
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15; SPugT=1732183192; KRTBCOOKIE_218=22978-Zz8EkgAGkCPfTwAZ&KRTB&23194-Zz8EkgAGkCPfTwAZ&KRTB&23209-Zz8EkgAGkCPfTwAZ&KRTB&23244-Zz8EkgAGkCPfTwAZ; KRTBCOOKIE_1323=23480-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23485-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23524-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23575-OPU8c47d055a02d4ef9872467e7f14d49f8; PugT=1732183194
Source: global traffic HTTP traffic detected: GET /sync?dsp_id=462&ssp=criteo&user_id=k-i9I2nwx-dSfYnD0gPqVmP-6FH3B7uwAfN3zc9g&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1732183184; tuuid=3094c032-c6fa-4250-9b72-b5665ef8a65d; tuuid_lu=1732183186; custom_data=ZFfkGF9PSkx0dGlyVk9pbE1ZdkJkY2Mzcm1nQ2pVNkZzMXFITXU5YmIxbFJxUlJ5YUVUbW1ycGRjUkdWJTJCYyUyQm9oNGJ5biUyRnlYYXl0aHFvcmtXM1M5RjZta3J0eFlpTDJvZlIza0N4TDIxYU9valBqNnVrS2Q5aXAwcm5KMmkzWGNsblNlVCUyRldpVyUyRmxjcUFGcmwlMkJnQVF5U0J5bTUxbUl1UUlGUEE1MXNPeUFRT0xvd2ZWTmEyWVNEU0RZYVRDbyUyQldVNHJSJTJCcWFvaHRMdnlkckg3NEc3NmhucjkzUXdnWUQ0VjFZVFp6STVSRk15Z0puZW4ySWU3WVBid0w3ZHdCVVkzbUNtaFpJUzU4MyUyRkF2MWh3RTBnSnJmNUxQMTVLMiUyQjVBY0prVm5rUFFjOHNZbkpFJTNE
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEHm6C1wnwcN4MUW3xE3ymmU&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15; SPugT=1732183192
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEMCoy5WkKFJ-n6z3RN5CuHc&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15; SPugT=1732183192
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=3289131403829705961 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; PugT=1732183191; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15; SPugT=1732183192
Source: global traffic HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=9.8.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1Host: lexicon.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /usersync?b=bsw&i=3094c032-c6fa-4250-9b72-b5665ef8a65d&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /usersync?b=vnt&i=53c91046-f3d9-4353-8f6c-7940f5201c90 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&expiration=1732269594&nuid=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15; SPugT=1732183192; KRTBCOOKIE_218=22978-Zz8EkgAGkCPfTwAZ&KRTB&23194-Zz8EkgAGkCPfTwAZ&KRTB&23209-Zz8EkgAGkCPfTwAZ&KRTB&23244-Zz8EkgAGkCPfTwAZ; KRTBCOOKIE_1323=23480-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23485-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23524-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23575-OPU8c47d055a02d4ef9872467e7f14d49f8; PugT=1732183194
Source: global traffic HTTP traffic detected: GET /usersync?b=sad&i=2457032842308261723 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=122fa7ba-a605-7e3a-9140-c4c9a9a52101#1732183182365#1
Source: global traffic HTTP traffic detected: GET /bounce HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=122fa7ba-a605-7e3a-9140-c4c9a9a52101#1732183182365#1
Source: global traffic HTTP traffic detected: GET /usersync?b=mag&i=M3R55CLG-17-1PZ1 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /sync/pubmatic/8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJAEP2cCEKn0msENAfRmLD6OW_CKzEIFEgEBAQFWQGdIZ9xH0iMA_eMAAA&S=AQAAApb6IgOK-HLZASgBedb1F6w
Source: global traffic HTTP traffic detected: GET /match?bidder_id=99&external_user_id=y-PztaGyZE2uFNKbMoMnKGFVlpfhSIf6Te%7EA&ts=1732183192&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /match?bidder_id=129&coppa=&external_user_id=OPU844e6c9765564e35b00af5cc01ac8ffc&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /usersync?b=zem&i=GGC9q9qJE4uP2EF5dzGL&us_privacy=1--- HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_d40d1578-b327-4db4-8691-eb2636444379
Source: global traffic HTTP traffic detected: GET /AdServer/SPug?partnerID=157108&gdpr=0&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15; SPugT=1732183192; KRTBCOOKIE_218=22978-Zz8EkgAGkCPfTwAZ&KRTB&23194-Zz8EkgAGkCPfTwAZ&KRTB&23209-Zz8EkgAGkCPfTwAZ&KRTB&23244-Zz8EkgAGkCPfTwAZ; KRTBCOOKIE_1323=23480-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23485-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23524-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23575-OPU8c47d055a02d4ef9872467e7f14d49f8; PugT=1732183194
Source: global traffic HTTP traffic detected: GET /sync?dsp_id=23&expires=14&user_id=28d38152-2c3b-450e-a0b8-e139be31619c&user_group=1&ssp=themediagrid&bsw_param=3094c032-c6fa-4250-9b72-b5665ef8a65d HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1732183184; tuuid=3094c032-c6fa-4250-9b72-b5665ef8a65d; tuuid_lu=1732183186; custom_data=ZFfkGF9PSkx0dGlyVk9pbE1ZdkJkY2Mzcm1nQ2pVNkZzMXFITXU5YmIxbFJxUlJ5YUVUbW1ycGRjUkdWJTJCYyUyQm9oNGJ5biUyRnlYYXl0aHFvcmtXM1M5RjZta3J0eFlpTDJvZlIza0N4TDIxYU9valBqNnVrS2Q5aXAwcm5KMmkzWGNsblNlVCUyRldpVyUyRmxjcUFGcmwlMkJnQVF5U0J5bTUxbUl1UUlGUEE1MXNPeUFRT0xvd2ZWTmEyWVNEU0RZYVRDbyUyQldVNHJSJTJCcWFvaHRMdnlkckg3NEc3NmhucjkzUXdnWUQ0VjFZVFp6STVSRk15Z0puZW4ySWU3WVBid0w3ZHdCVVkzbUNtaFpJUzU4MyUyRkF2MWh3RTBnSnJmNUxQMTVLMiUyQjVBY0prVm5rUFFjOHNZbkpFJTNE
Source: global traffic HTTP traffic detected: GET /match?bidder_id=131&external_user_id=218bc427-6caa-5b35-b93d-41563ee978df&ts=1732183192&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=JYaa8IIEQy6U-BjmzCYZNA HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4Oa7WiwCEfNhWpHl6dBScY; ad-privacy=0
Source: global traffic HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=C4869E24F150A519
Source: global traffic HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4Oa7WiwCEfNhWpHl6dBScY; ad-privacy=0
Source: global traffic HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wl?pubid=157108 HTTP/1.1Host: t.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15; SPugT=1732183192; KRTBCOOKIE_218=22978-Zz8EkgAGkCPfTwAZ&KRTB&23194-Zz8EkgAGkCPfTwAZ&KRTB&23209-Zz8EkgAGkCPfTwAZ&KRTB&23244-Zz8EkgAGkCPfTwAZ; KRTBCOOKIE_1323=23480-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23485-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23524-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23575-OPU8c47d055a02d4ef9872467e7f14d49f8; PugT=1732183194
Source: global traffic HTTP traffic detected: GET /usersync/redirect?partner=rubicon&partnerId=M3R55DF2-A-IRMZ HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D; am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2253c22730-a7ef-11ef-9524-59b39092d66a%22%2C%22version%22%3A%22eu-v1%22%7D
Source: global traffic HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-J8wmffxE2uXbkv8FVGTO1z4.vmrolbY-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15; KRTBCOOKIE_218=22978-Zz8EkgAGkCPfTwAZ&KRTB&23194-Zz8EkgAGkCPfTwAZ&KRTB&23209-Zz8EkgAGkCPfTwAZ&KRTB&23244-Zz8EkgAGkCPfTwAZ; KRTBCOOKIE_1323=23480-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23485-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23524-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23575-OPU8c47d055a02d4ef9872467e7f14d49f8; PugT=1732183194; SPugT=1732183194
Source: global traffic HTTP traffic detected: GET /j?dtstmp=1732183191888&did=did-004m&se=e30&duid=62c2d43f0c0b--01jd72kvtja3dbvf02ntrr7vv4&tv=8.43.0&pu=https%3A%2F%2Fteaandrosemary.com%2F&us_privacy=1---&wpn=prebid&cd=.teaandrosemary.com&n3pc=true HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=7c36b299-758e-435b-8352-c08991c80bb1
Source: global traffic HTTP traffic detected: GET /cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJAEP2cCEKn0msENAfRmLD6OW_CKzEIFEgEBAQFWQGdIZ9xH0iMA_eMAAA&S=AQAAApb6IgOK-HLZASgBedb1F6w; IDSYNC="19bx~2ly9:18z8~2ly9"
Source: global traffic HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=47030715&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1Host: image6.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; KRTBCOOKIE_218=22978-Zz8EkgAGkCPfTwAZ&KRTB&23194-Zz8EkgAGkCPfTwAZ&KRTB&23209-Zz8EkgAGkCPfTwAZ&KRTB&23244-Zz8EkgAGkCPfTwAZ; KRTBCOOKIE_1323=23480-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23485-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23524-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23575-OPU8c47d055a02d4ef9872467e7f14d49f8; SPugT=1732183194; KRTBCOOKIE_860=16335-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23334-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23417-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23426-wB1fVgw9W8BApkqAIhwrAAgue0s; KRTBCOOKIE_1101=23040-7439670164659829102&KRTB&23369-7439670164659829102; PugT=1732183194; KRTBCOOKIE_377=6810-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22918-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22926-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&23031-f4c62db2-934b-4cab-a269-13e645c5c8ed; chkChromeAb67Sec=4; pi=156423:3; SyncRTB4=1733356800%3A3_165_88_201_203_254_238_271_270_81_166_249_233_266_22_99_220_56_71_8_234_13_21_161_54_55_46_264_251_214_176%7C1732752000%3A15_2_223%7C1733443200%3A35%7C1733011200%3A63%7C1737331200%3A69
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=f4c62db2-934b-4cab-a269-13e645c5c8ed&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; pi=0:4; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_80=22987-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&16514-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23025-CAESEMCoy5WkKFJ-n6z3RN5CuHc&KRTB&23386-CAESEMCoy5WkKFJ-n6z3RN5CuHc; chkChromeAb67Sec=3; SyncRTB4=1733356800%3A220_270_55_81_166_56_266_46_264_201_71_238_161_8_234_251_13_249_54_22_271_3_203_233_99_21_214%7C1733443200%3A35%7C1733011200%3A63%7C1732752000%3A223_2_15; KRTBCOOKIE_218=22978-Zz8EkgAGkCPfTwAZ&KRTB&23194-Zz8EkgAGkCPfTwAZ&KRTB&23209-Zz8EkgAGkCPfTwAZ&KRTB&23244-Zz8EkgAGkCPfTwAZ; KRTBCOOKIE_1323=23480-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23485-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23524-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23575-OPU8c47d055a02d4ef9872467e7f14d49f8; SPugT=1732183194; KRTBCOOKIE_860=16335-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23334-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23417-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23426-wB1fVgw9W8BApkqAIhwrAAgue0s; KRTBCOOKIE_1101=23040-7439670164659829102&KRTB&23369-7439670164659829102; PugT=1732183194; KRTBCOOKIE_377=6810-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22918-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22926-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&23031-f4c62db2-934b-4cab-a269-13e645c5c8ed
Source: global traffic HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&gdpr=0&gdpr_consent=&ct=y HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=258c3c68402899419c257bf5186f243f
Source: global traffic HTTP traffic detected: GET /match?liv=h&us_privacy=1---&bidder_id=25&external_user_id=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /mediavine-prod/detailviews/?frontend_timestamp=1732183192&frontend_sign=d2bb5d33da7f18f276fcc871f259a04ee4600aea HTTP/1.1Host: client-rapi-mediavine.recombee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /user-sync/match?p=ZFfkGF9PSkx0dGlyVk9pbE1ZdkJkY2Mzcm1nQ2pVNkZzMXFITXU5YmIxbFJxUlJ5YUVUbW1ycGRjUkdWJTJCYyUyQm9oNGJ5biUyRnlYYXl0aHFvcmtXM1M5RjZta3J0eFlpTDJvZlIza0N4TDIxYU9valBqNnVrS2Q5aXAwcm5KMmkzWGNsblNlVCUyRldpVyUyRmxjcUFGcmwlMkJnQVF5U0J5bTUxbUl1UUlGUEE1MXNPeUFRT0xvd2ZWTmEyWVNEU0RZYVRDbyUyQldVNHJSJTJCcWFvaHRMdnlkckg3NEc3NmhucjkzUXdnWUQ0VjFZVFp6STVSRk15Z0puZW4ySWU3WVBid0w3ZHdCVVkzbUNtaFpJUzU4MyUyRkF2MWh3RTBnSnJmNUxQMTVLMiUyQjVBY0prVm5rUFFjOHNZbkpFJTNE&u=3094c032-c6fa-4250-9b72-b5665ef8a65d HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cto_bundle=TzWpV18wRjlGNlU4S2NGeHFWQ0ElMkZsdEE2TnFFSG01ejFOJTJGVFQ2Rmc3JTJCN01VbmU5ZDNNMkpDZmphQXBuQ1BjcU1IZ2k4YXdFNVVFemdaYU9SaTdmYmVZYXNhRGllaGlGMlo0OGpuUyUyQjA0ZjdxWXdEJTJCTVZScGpZcnlndFdTaDVOVmdhUUM; uid=ac6576fb-f62c-4338-9ee9-9483781829b4
Source: global traffic HTTP traffic detected: GET /sync?dsp_id=119&user_id=5141210833143233341&expires=30&ssp=pubmatic HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1732183184; tuuid=3094c032-c6fa-4250-9b72-b5665ef8a65d; tuuid_lu=1732183186
Source: global traffic HTTP traffic detected: GET /ps/?xi=10&us_privacy=&xu=3094c032-c6fa-4250-9b72-b5665ef8a65d HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /sync/rubicon/tcH-hXBwpYFwbugqTXCWRw?csrc= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJAEP2cCEKn0msENAfRmLD6OW_CKzEIFEgEBAQFWQGdIZ9xH0iMA_eMAAA&S=AQAAApb6IgOK-HLZASgBedb1F6w
Source: global traffic HTTP traffic detected: GET /bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.adgrx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=90F74B949C774FEC9DC80CE7046890D7
Source: global traffic HTTP traffic detected: GET /pubmatic/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: green.erne.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ups/58679/cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJAEP2cCEKn0msENAfRmLD6OW_CKzEIFEgEBAQFWQGdIZ9xH0iMA_eMAAA&S=AQAAApb6IgOK-HLZASgBedb1F6w; IDSYNC="19bx~2ly9:18z8~2ly9"
Source: global traffic HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /ps/?xi=1&xu=M3R55CLG-17-1PZ1&us_privacy=1--- HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212888925253522%3As1%3D1732183183903%3Ats%3D1732183183903
Source: global traffic HTTP traffic detected: GET /prebid/setuid?bidder=rubicon&uid=M3R55DF2-A-IRMZ HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=20UXFJgG5rPh3IpXRQJ_JFwdNBwebE7rUb7043wXDWlPWRb7XomdY9Zxp7Ji4Xjew7aI179iMcJaG6J7cUJhjZDBE0YRoCUi7Zx1ZElXH_U.; uuid2=6584676363640427219
Source: global traffic HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=rp&google_hm=TTNSNTVERjItQS1JUk1a&google_push= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmR4eeZd9_ZjppGeEYmiVUAP-znRAPi2RdB_9A9KqWyH9F_mjfaXc-Cjb50nbk
Source: global traffic HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /ecm3?id=M3R55CLG-17-1PZ1&ex=d-rubiconproject.com&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4Oa7WiwCEfNhWpHl6dBScY; ad-privacy=0
Source: global traffic HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4Oa7WiwCEfNhWpHl6dBScY; ad-privacy=0
Source: global traffic HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=JYaa8IIEQy6U-BjmzCYZNA HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4Oa7WiwCEfNhWpHl6dBScY; ad-privacy=0
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_218=22978-Zz8EkgAGkCPfTwAZ&KRTB&23194-Zz8EkgAGkCPfTwAZ&KRTB&23209-Zz8EkgAGkCPfTwAZ&KRTB&23244-Zz8EkgAGkCPfTwAZ; KRTBCOOKIE_1323=23480-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23485-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23524-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23575-OPU8c47d055a02d4ef9872467e7f14d49f8; KRTBCOOKIE_860=16335-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23334-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23417-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23426-wB1fVgw9W8BApkqAIhwrAAgue0s; KRTBCOOKIE_1101=23040-7439670164659829102&KRTB&23369-7439670164659829102; KRTBCOOKIE_377=6810-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22918-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22926-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&23031-f4c62db2-934b-4cab-a269-13e645c5c8ed; pi=156423:3; SyncRTB4=1733356800%3A3_165_88_201_203_254_238_271_270_81_166_249_233_266_22_99_220_56_71_8_234_13_21_161_54_55_46_264_251_214_176%7C1732752000%3A15_2_223%7C1733443200%3A35%7C1733011200%3A63%7C1737331200%3A69; KRTBCOOKIE_632=23041-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23047-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23234-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23361-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k; KRTBCOOKIE_188=3189-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553&KRTB&23418-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553&KRTB&23634-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553; KRTBCOOKIE_80=22987-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&16514-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&23025-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&23386-CAESEHm6C1wnwcN4MUW3xE3ymmU; KRTBCOOKIE_32=11175-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&22715-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&23519-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&23632-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U; SPugT=1732183196; chkChromeAb67Sec=5; PugT=1732183197
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&expiration=1732269594&nuid=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_218=22978-Zz8EkgAGkCPfTwAZ&KRTB&23194-Zz8EkgAGkCPfTwAZ&KRTB&23209-Zz8EkgAGkCPfTwAZ&KRTB&23244-Zz8EkgAGkCPfTwAZ; KRTBCOOKIE_1323=23480-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23485-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23524-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23575-OPU8c47d055a02d4ef9872467e7f14d49f8; KRTBCOOKIE_860=16335-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23334-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23417-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23426-wB1fVgw9W8BApkqAIhwrAAgue0s; KRTBCOOKIE_1101=23040-7439670164659829102&KRTB&23369-7439670164659829102; KRTBCOOKIE_377=6810-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22918-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22926-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&23031-f4c62db2-934b-4cab-a269-13e645c5c8ed; pi=156423:3; SyncRTB4=1733356800%3A3_165_88_201_203_254_238_271_270_81_166_249_233_266_22_99_220_56_71_8_234_13_21_161_54_55_46_264_251_214_176%7C1732752000%3A15_2_223%7C1733443200%3A35%7C1733011200%3A63%7C1737331200%3A69; KRTBCOOKIE_632=23041-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23047-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23234-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23361-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k; KRTBCOOKIE_188=3189-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553&KRTB&23418-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553&KRTB&23634-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553; KRTBCOOKIE_80=22987-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&16514-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&23025-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&23386-CAESEHm6C1wnwcN4MUW3xE3ymmU; KRTBCOOKIE_32=11175-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&22715-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&23519-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&23632-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U; SPugT=1732183196; chkChromeAb67Sec=5; PugT=1732183197
Source: global traffic HTTP traffic detected: GET /setuid/magnite?uid=M3R55DF2-A-IRMZ HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /gm/v3 HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=122fa7ba-a605-7e3a-9140-c4c9a9a52101#1732183182365#2
Source: global traffic HTTP traffic detected: GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_218=22978-Zz8EkgAGkCPfTwAZ&KRTB&23194-Zz8EkgAGkCPfTwAZ&KRTB&23209-Zz8EkgAGkCPfTwAZ&KRTB&23244-Zz8EkgAGkCPfTwAZ; KRTBCOOKIE_1323=23480-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23485-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23524-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23575-OPU8c47d055a02d4ef9872467e7f14d49f8; KRTBCOOKIE_860=16335-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23334-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23417-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23426-wB1fVgw9W8BApkqAIhwrAAgue0s; KRTBCOOKIE_1101=23040-7439670164659829102&KRTB&23369-7439670164659829102; KRTBCOOKIE_377=6810-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22918-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22926-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&23031-f4c62db2-934b-4cab-a269-13e645c5c8ed; pi=156423:3; SyncRTB4=1733356800%3A3_165_88_201_203_254_238_271_270_81_166_249_233_266_22_99_220_56_71_8_234_13_21_161_54_55_46_264_251_214_176%7C1732752000%3A15_2_223%7C1733443200%3A35%7C1733011200%3A63%7C1737331200%3A69; KRTBCOOKIE_632=23041-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23047-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23234-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23361-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k; KRTBCOOKIE_188=3189-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553&KRTB&23418-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553&KRTB&23634-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553; KRTBCOOKIE_80=22987-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&16514-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&23025-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&23386-CAESEHm6C1wnwcN4MUW3xE3ymmU; KRTBCOOKIE_32=11175-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&22715-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&23519-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&23632-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U; SPugT=1732183196; chkChromeAb67Sec=5; PugT=1732183197
Source: global traffic HTTP traffic detected: GET /mediavine-prod/recomms/users/61bdbd9b-653a-4aa6-bf13-030c3a2dc6b3/items/?frontend_timestamp=1732183192&frontend_sign=d8289950c520f8fbce7dcd279ef1d84e0711da45 HTTP/1.1Host: client-rapi-mediavine.recombee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B; DPSync4=1733356800%3A245_197_219_226_227; KRTBCOOKIE_57=22776-3601273278595652539&KRTB&23339-3601273278595652539; KRTBCOOKIE_153=19420-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&22979-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj&KRTB&23462-kD7lMZY972GLO-Jiw2v7MZds5WGLOrU2xDq9T6oj; KRTBCOOKIE_391=22924-3289131403829705961&KRTB&23231-3289131403829705961&KRTB&23263-3289131403829705961&KRTB&23481-3289131403829705961; KRTBCOOKIE_218=22978-Zz8EkgAGkCPfTwAZ&KRTB&23194-Zz8EkgAGkCPfTwAZ&KRTB&23209-Zz8EkgAGkCPfTwAZ&KRTB&23244-Zz8EkgAGkCPfTwAZ; KRTBCOOKIE_1323=23480-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23485-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23524-OPU8c47d055a02d4ef9872467e7f14d49f8&KRTB&23575-OPU8c47d055a02d4ef9872467e7f14d49f8; KRTBCOOKIE_860=16335-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23334-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23417-wB1fVgw9W8BApkqAIhwrAAgue0s&KRTB&23426-wB1fVgw9W8BApkqAIhwrAAgue0s; KRTBCOOKIE_1101=23040-7439670164659829102&KRTB&23369-7439670164659829102; KRTBCOOKIE_377=6810-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22918-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&22926-f4c62db2-934b-4cab-a269-13e645c5c8ed&KRTB&23031-f4c62db2-934b-4cab-a269-13e645c5c8ed; pi=156423:3; SyncRTB4=1733356800%3A3_165_88_201_203_254_238_271_270_81_166_249_233_266_22_99_220_56_71_8_234_13_21_161_54_55_46_264_251_214_176%7C1732752000%3A15_2_223%7C1733443200%3A35%7C1733011200%3A63%7C1737331200%3A69; KRTBCOOKIE_632=23041-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23047-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23234-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&KRTB&23361-n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k; KRTBCOOKIE_188=3189-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553&KRTB&23418-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553&KRTB&23634-553a17f7-535b-48bd-9842-1402c74045d9-673f049a-5553; KRTBCOOKIE_80=22987-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&16514-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&23025-CAESEHm6C1wnwcN4MUW3xE3ymmU&KRTB&23386-CAESEHm6C1wnwcN4MUW3xE3ymmU; KRTBCOOKIE_32=11175-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&22715-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&23519-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U&KRTB&23632-AQAJ8a6eQKQh-AJwE2qbAQEBAQEBAQCSTyj9VAEBAJJPKP1U; SPugT=1732183196; chkChromeAb67Sec=5; PugT=1732183197
Source: chromecache_480.2.dr, chromecache_493.2.dr, chromecache_512.2.dr, chromecache_325.2.dr String found in binary or memory: return b}GD.F="internal.enableAutoEventOnTimer";var Zb=wa(["data-gtm-yt-inspected-"]),ID=["www.youtube.com","www.youtube-nocookie.com"],JD,KD=!1; equals www.youtube.com (Youtube)
Source: global traffic DNS traffic detected: DNS query: teaandrosemary.com
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: scripts.mediavine.com
Source: global traffic DNS traffic detected: DNS query: 1.gravatar.com
Source: global traffic DNS traffic detected: DNS query: 2.gravatar.com
Source: global traffic DNS traffic detected: DNS query: 0.gravatar.com
Source: global traffic DNS traffic detected: DNS query: s.gravatar.com
Source: global traffic DNS traffic detected: DNS query: pixel.wp.com
Source: global traffic DNS traffic detected: DNS query: stats.wp.com
Source: global traffic DNS traffic detected: DNS query: i2.wp.com
Source: global traffic DNS traffic detected: DNS query: i1.wp.com
Source: global traffic DNS traffic detected: DNS query: i0.wp.com
Source: global traffic DNS traffic detected: DNS query: w.sharethis.com
Source: global traffic DNS traffic detected: DNS query: platform.linkedin.com
Source: global traffic DNS traffic detected: DNS query: s7.addthis.com
Source: global traffic DNS traffic detected: DNS query: sitename.disqus.com
Source: global traffic DNS traffic detected: DNS query: disqus.com
Source: global traffic DNS traffic detected: DNS query: platform.instagram.com
Source: global traffic DNS traffic detected: DNS query: syndication.twitter.com
Source: global traffic DNS traffic detected: DNS query: platform.twitter.com
Source: global traffic DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic DNS traffic detected: DNS query: api.pinterest.com
Source: global traffic DNS traffic detected: DNS query: youtube.com
Source: global traffic DNS traffic detected: DNS query: apis.google.com
Source: global traffic DNS traffic detected: DNS query: assets.flodesk.com
Source: global traffic DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic DNS traffic detected: DNS query: privacy-center.fides.mediavine.com
Source: global traffic DNS traffic detected: DNS query: exchange.mediavine.com
Source: global traffic DNS traffic detected: DNS query: keywords.mediavine.com
Source: global traffic DNS traffic detected: DNS query: faves.grow.me
Source: global traffic DNS traffic detected: DNS query: api.grow.me
Source: global traffic DNS traffic detected: DNS query: sda.fyi
Source: global traffic DNS traffic detected: DNS query: imp-dev.mediavine.com
Source: global traffic DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic DNS traffic detected: DNS query: id5-sync.com
Source: global traffic DNS traffic detected: DNS query: api.rlcdn.com
Source: global traffic DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic DNS traffic detected: DNS query: lexicon.33across.com
Source: global traffic DNS traffic detected: DNS query: app.grow.me
Source: global traffic DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic DNS traffic detected: DNS query: bh.contextweb.com
Source: global traffic DNS traffic detected: DNS query: acdn.adnxs.com
Source: global traffic DNS traffic detected: DNS query: u.openx.net
Source: global traffic DNS traffic detected: DNS query: secure-assets.rubiconproject.com
Source: global traffic DNS traffic detected: DNS query: rtb.gumgum.com
Source: global traffic DNS traffic detected: DNS query: usr.undertone.com
Source: global traffic DNS traffic detected: DNS query: ads.yieldmo.com
Source: global traffic DNS traffic detected: DNS query: eu-eb2.3lift.com
Source: global traffic DNS traffic detected: DNS query: prebid-match.dotomi.com
Source: global traffic DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic DNS traffic detected: DNS query: ssbsync.smartadserver.com
Source: global traffic DNS traffic detected: DNS query: contextual.media.net
Source: global traffic DNS traffic detected: DNS query: sync.colossusssp.com
Source: global traffic DNS traffic detected: DNS query: match.sharethrough.com
Source: global traffic DNS traffic detected: DNS query: jadserve.postrelease.com
Source: global traffic DNS traffic detected: DNS query: ssc-cms.33across.com
Source: global traffic DNS traffic detected: DNS query: e.chicoryapp.com
Source: global traffic DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic DNS traffic detected: DNS query: ice.360yield.com
Source: global traffic DNS traffic detected: DNS query: ssp-sync.criteo.com
Source: global traffic DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic DNS traffic detected: DNS query: de.tynt.com
Source: global traffic DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic DNS traffic detected: DNS query: ad.turn.com
Source: global traffic DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic DNS traffic detected: DNS query: match.deepintent.com
Source: global traffic DNS traffic detected: DNS query: b1sync.zemanta.com
Source: global traffic DNS traffic detected: DNS query: c1.adform.net
Source: global traffic DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic DNS traffic detected: DNS query: tg.socdm.com
Source: global traffic DNS traffic detected: DNS query: creativecdn.com
Source: global traffic DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic DNS traffic detected: DNS query: hde.tynt.com
Source: global traffic DNS traffic detected: DNS query: pool.admedo.com
Source: global traffic DNS traffic detected: DNS query: widget.us.criteo.com
Source: global traffic DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic DNS traffic detected: DNS query: usersync.gumgum.com
Source: global traffic DNS traffic detected: DNS query: dsp.nrich.ai
Source: global traffic DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic DNS traffic detected: DNS query: cs.krushmedia.com
Source: global traffic DNS traffic detected: DNS query: cdn.id5-sync.com
Source: global traffic DNS traffic detected: DNS query: sync.targeting.unrulymedia.com
Source: unknown HTTP traffic detected: POST /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveContent-Length: 241sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://teaandrosemary.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teaandrosemary.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plainDate: Thu, 21 Nov 2024 10:00:10 GMTContent-Length: 18Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plainDate: Thu, 21 Nov 2024 10:00:11 GMTContent-Length: 18Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plainDate: Thu, 21 Nov 2024 10:00:12 GMTContent-Length: 18Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 21 Nov 2024 10:00:19 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: chromecache_515.2.dr String found in binary or memory: http://api.jqueryui.com/category/theming/
Source: chromecache_335.2.dr, chromecache_318.2.dr String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_267.2.dr, chromecache_278.2.dr String found in binary or memory: http://j.hn/)
Source: chromecache_367.2.dr, chromecache_392.2.dr, chromecache_266.2.dr, chromecache_335.2.dr, chromecache_224.2.dr, chromecache_259.2.dr, chromecache_318.2.dr, chromecache_496.2.dr, chromecache_417.2.dr, chromecache_515.2.dr, chromecache_374.2.dr, chromecache_530.2.dr, chromecache_411.2.dr, chromecache_245.2.dr, chromecache_308.2.dr, chromecache_371.2.dr, chromecache_298.2.dr String found in binary or memory: http://jquery.org/license
Source: chromecache_318.2.dr, chromecache_496.2.dr, chromecache_417.2.dr, chromecache_515.2.dr, chromecache_374.2.dr, chromecache_530.2.dr, chromecache_411.2.dr, chromecache_245.2.dr, chromecache_308.2.dr, chromecache_371.2.dr, chromecache_298.2.dr String found in binary or memory: http://jqueryui.com
Source: chromecache_217.2.dr, chromecache_398.2.dr String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_217.2.dr, chromecache_398.2.dr String found in binary or memory: http://www.broofa.com
Source: chromecache_267.2.dr, chromecache_278.2.dr String found in binary or memory: http://www.mediaelementjs.com/
Source: chromecache_317.2.dr String found in binary or memory: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcod
Source: chromecache_344.2.dr String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=8C0D9DDA-0AEA-4
Source: chromecache_467.2.dr, chromecache_274.2.dr String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_467.2.dr String found in binary or memory: https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=
Source: chromecache_339.2.dr String found in binary or memory: https://ad.turn.com/r/cs?pid=9&gdpr=0
Source: chromecache_428.2.dr String found in binary or memory: https://admin.fides.mediavine.com/api/v1
Source: chromecache_243.2.dr, chromecache_454.2.dr String found in binary or memory: https://ads.optable.co/ca/paapi/v1/dsp/ig/join?origin=d46c6a60-5e3d-4723-a51e-261fef9f4449
Source: chromecache_262.2.dr, chromecache_419.2.dr String found in binary or memory: https://ads.optable.co/ca/topics/v1/get?origin=07352e57-b656-4898-b23b-5bbe2d9cf95f
Source: chromecache_242.2.dr, chromecache_457.2.dr String found in binary or memory: https://ads.optable.co/ca/topics/v1/get?origin=8a83645c-06d8-4267-a169-7293ba027585
Source: chromecache_243.2.dr, chromecache_454.2.dr String found in binary or memory: https://ads.optable.co/ca/topics/v1/get?origin=d46c6a60-5e3d-4723-a51e-261fef9f4449
Source: chromecache_485.2.dr String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fus
Source: chromecache_325.2.dr String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_358.2.dr, chromecache_389.2.dr String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_440.2.dr String found in binary or memory: https://api.grow.me
Source: chromecache_394.2.dr String found in binary or memory: https://api.w.org/
Source: chromecache_394.2.dr String found in binary or memory: https://assets.flodesk.com
Source: chromecache_485.2.dr String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=e_d40d1578-b327-4db4-8691-eb2636444379&gdpr=&gdpr_c
Source: chromecache_485.2.dr String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&us_privacy=$
Source: chromecache_485.2.dr String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1301&gdpr=&gdpr_consent=
Source: chromecache_344.2.dr String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&cid=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&gdpr=0&
Source: chromecache_344.2.dr String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P
Source: chromecache_480.2.dr, chromecache_493.2.dr, chromecache_512.2.dr, chromecache_325.2.dr String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_428.2.dr String found in binary or memory: https://cdn-api.ethyca.com/location
Source: chromecache_317.2.dr String found in binary or memory: https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel
Source: chromecache_317.2.dr String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_485.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV9kNDBkMTU3OC1iMzI3LTRkYjQtODY5M
Source: chromecache_339.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_339.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=OTg2ZDUzNjktNjJhNi02YWVhLTU5OTMtMjA0OG
Source: chromecache_344.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=jA2d2grqSiKW-PqcVR1ySw%3D%3
Source: chromecache_344.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_344.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=OEMwRDlEREEtMEFFQS00QTIyLTk2RjgtRkE
Source: chromecache_344.2.dr String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_467.2.dr String found in binary or memory: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Source: chromecache_485.2.dr String found in binary or memory: https://creativecdn.com/cm-notify?pi=gumgum
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_467.2.dr String found in binary or memory: https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJn
Source: chromecache_467.2.dr String found in binary or memory: https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZ
Source: chromecache_344.2.dr String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https:
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://dsp-ap.eskimi.com/pixelGet?ex=50&gdpr=
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://dsp-cookie.adfarm1.adition.com/?ssp=9&gdpr=0&gdpr_consent=
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://dsp.360yield.com/dsp_match/275?ssp=76&gdpr=0&gdpr_consent=&r=https://image2.pubmatic.com/AdS
Source: chromecache_435.2.dr, chromecache_519.2.dr String found in binary or memory: https://esp.rtbhouse.com/encrypt
Source: chromecache_485.2.dr String found in binary or memory: https://exchange.mediavine.com/usersync/redirect?partner=gumgum&uuid=53c22730-a7ef-11ef-9524-59b3909
Source: chromecache_339.2.dr String found in binary or memory: https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=53c22730-a7ef-11ef-9524-59b39092
Source: chromecache_232.2.dr String found in binary or memory: https://fontawesome.com
Source: chromecache_232.2.dr String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_394.2.dr String found in binary or memory: https://fonts.googleapis.com/css?family=Nunito
Source: chromecache_394.2.dr String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/dmserifdisplay/v15/-nFnOHM81r4j6k0gjAW3mujVU2B2G_5x0ujy.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/dmserifdisplay/v15/-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/dmseriftext/v12/rnCu-xZa_krGokauCeNq1wWyWfSFXQ.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/dmseriftext/v12/rnCu-xZa_krGokauCeNq1wWyWfqFXUIJ.woff2)
Source: chromecache_300.2.dr String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)
Source: chromecache_300.2.dr String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)
Source: chromecache_300.2.dr String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_300.2.dr String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_300.2.dr String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_300.2.dr String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw0aXpsog.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw2aXpsog.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw3aXpsog.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw9aXpsog.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v15/pe1mMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8u
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQrbh3o1vLImiwAVvYawgcf2eVWEX-tRFZfX80.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQrbh3o1vLImiwAVvYawgcf2eVWEX-tRVZfX80.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQrbh3o1vLImiwAVvYawgcf2eVWEX-tRlZfX80.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQrbh3o1vLImiwAVvYawgcf2eVWEX-tS1Zf.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQrbh3o1vLImiwAVvYawgcf2eVWEX-tT1ZfX80.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVep1q4dHc.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepFq4dHc.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepVq4dHc.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVerlq4dHc.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/tinos/v24/buE4poGnedXvwjX0fmRR8Q.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/tinos/v24/buE4poGnedXvwjX1fmRR8Q.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/tinos/v24/buE4poGnedXvwjX2fmRR8Q.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/tinos/v24/buE4poGnedXvwjX3fmRR8Q.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/tinos/v24/buE4poGnedXvwjX4fmRR8Q.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/tinos/v24/buE4poGnedXvwjX5fmRR8Q.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/tinos/v24/buE4poGnedXvwjX7fmQ.woff2)
Source: chromecache_219.2.dr String found in binary or memory: https://fonts.gstatic.com/s/tinos/v24/buE4poGnedXvwjX_fmRR8Q.woff2)
Source: chromecache_227.2.dr, chromecache_343.2.dr String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_227.2.dr, chromecache_343.2.dr String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.36.0/LICENSE
Source: chromecache_394.2.dr String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_317.2.dr String found in binary or memory: https://green.erne.co/pubmatic/cm?gdpr=0&gdpr_consent=
Source: chromecache_344.2.dr String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_339.2.dr String found in binary or memory: https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID
Source: chromecache_326.2.dr, chromecache_342.2.dr String found in binary or memory: https://id5.io/
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA=&piggybackCoo
Source: chromecache_394.2.dr String found in binary or memory: https://instagram.com/teaandrosemary
Source: chromecache_467.2.dr String found in binary or memory: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR
Source: chromecache_467.2.dr, chromecache_274.2.dr String found in binary or memory: https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_485.2.dr String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent=
Source: chromecache_344.2.dr String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_339.2.dr String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=b40280a3-abd1-344e-4c73-7af10f198117&gdpr=0
Source: chromecache_485.2.dr String found in binary or memory: https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dd
Source: chromecache_467.2.dr String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_362.2.dr, chromecache_255.2.dr String found in binary or memory: https://mediavine-res.cloudinary.com/v1612197439/k4hpblizdzx4jckhy73t.jpg
Source: chromecache_344.2.dr String found in binary or memory: https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=8C0D9DDA-0AEA-4A22-96
Source: chromecache_467.2.dr String found in binary or memory: https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0
Source: chromecache_325.2.dr String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_480.2.dr, chromecache_493.2.dr, chromecache_512.2.dr, chromecache_325.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_394.2.dr String found in binary or memory: https://pinterest.com/teaandrosemary
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_344.2.dr String found in binary or memory: https://pixel.onaudience.com/?partner=214&mapped=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&gdpr=0&gdpr_co
Source: chromecache_339.2.dr String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=b27cf35f-f0d6-09c9-0692-
Source: chromecache_485.2.dr String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=&gdpr_consent=
Source: chromecache_339.2.dr String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/20c5e6e7-3b7d-a607-7da4-6c04f04e4c5e?gdpr=0
Source: chromecache_344.2.dr String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B?gdpr=0&gdpr_consent=
Source: chromecache_428.2.dr String found in binary or memory: https://privacy-center.fides.mediavine.com
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=8C0D9DDA-0AEA-
Source: chromecache_339.2.dr String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=ecd4fcde-b77b-8fb4-8c7
Source: chromecache_394.2.dr String found in binary or memory: https://schema.org
Source: chromecache_394.2.dr String found in binary or memory: https://schema.org/CreativeWork
Source: chromecache_394.2.dr String found in binary or memory: https://schema.org/ImageObject
Source: chromecache_394.2.dr String found in binary or memory: https://schema.org/SearchAction
Source: chromecache_394.2.dr String found in binary or memory: https://schema.org/SiteNavigationElement
Source: chromecache_394.2.dr String found in binary or memory: https://schema.org/WPFooter
Source: chromecache_394.2.dr String found in binary or memory: https://schema.org/WPHeader
Source: chromecache_394.2.dr String found in binary or memory: https://schema.org/WebPage
Source: chromecache_394.2.dr String found in binary or memory: https://scontent-ord5-1.cdninstagram.com/v/t51.29350-15/464561257_769674975285396_209121521130364164
Source: chromecache_394.2.dr String found in binary or memory: https://scontent-ord5-1.cdninstagram.com/v/t51.75761-15/464207423_18047563928001741_8186304364996752
Source: chromecache_394.2.dr String found in binary or memory: https://scontent-ord5-2.cdninstagram.com/v/t51.75761-15/464503602_18047027729001741_8568069576548420
Source: chromecache_394.2.dr String found in binary or memory: https://scontent-ord5-2.cdninstagram.com/v/t51.75761-15/466350968_18049204826001741_8899628850361867
Source: chromecache_394.2.dr String found in binary or memory: https://scontent-ord5-2.cdninstagram.com/v/t51.75761-15/467651190_18049831349001741_5210491199902608
Source: chromecache_394.2.dr String found in binary or memory: https://scontent-ord5-2.cdninstagram.com/v/t51.75761-15/467870704_18049895015001741_1675791445307522
Source: chromecache_394.2.dr String found in binary or memory: https://scontent-ord5-3.cdninstagram.com/v/t51.29350-15/464423623_1263198934822275_38456192864502974
Source: chromecache_394.2.dr String found in binary or memory: https://scontent-ord5-3.cdninstagram.com/v/t51.75761-15/466738467_18049122191001741_2679305771849719
Source: chromecache_394.2.dr String found in binary or memory: https://scripts.mediavine.com/tags/tea-and-rosemary.js?ver=6.1.7
Source: chromecache_485.2.dr String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum
Source: chromecache_485.2.dr String found in binary or memory: https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID
Source: chromecache_440.2.dr String found in binary or memory: https://some.growplow.events/com.snowplowanalytics.snowplow/tp2
Source: chromecache_485.2.dr String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com
Source: chromecache_480.2.dr, chromecache_325.2.dr String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_389.2.dr String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_339.2.dr String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3
Source: chromecache_467.2.dr String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&gdpr=0&gdpr_
Source: chromecache_485.2.dr String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=$
Source: chromecache_485.2.dr String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub8730968190912&gdpr=0&gdpr_consent=
Source: chromecache_358.2.dr, chromecache_389.2.dr String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_480.2.dr, chromecache_493.2.dr, chromecache_512.2.dr, chromecache_325.2.dr String found in binary or memory: https://td.doubleclick.net
Source: chromecache_394.2.dr, chromecache_341.2.dr String found in binary or memory: https://teaandrosemary.com
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/#/schema/logo/image/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/#breadcrumb
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/#organization
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/#website
Source: chromecache_510.2.dr, chromecache_408.2.dr String found in binary or memory: https://teaandrosemary.com/16018-2/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/3-different-ways-to-work-with-deities/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/4-signs-hecate-might-be-calling/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/4-ways-to-work-with-persephone/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/5-signs-youre-ready-to-start-working-with-a-deity/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/5-ways-to-work-with-lilith/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/6-things-you-absolutely-dont-need-to-work-with-a-deity/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/?s=
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/angel-number-777/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/astrological-aspects/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/bibliomancy/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/black-mirror-scrying/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/cancer-in-the-1st-house/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/astrology/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/astrology/asteroids/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/astrology/houses/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/astrology/learning/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/astrology/planets/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/astrology/synastry/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/spirituality/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/spirituality/divination/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/spirituality/inner-work/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/spirituality/manifestation/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/spirituality/starseeds/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/spirituality/symbolism/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/witchcraft/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/witchcraft/deities/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/witchcraft/learning-witchcraft/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/witchcraft/occult/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/witchcraft/spells/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/witchcraft/spirits/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/category/witchcraft/tools/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/comments/feed/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/contact-us/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/disclaimer/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/feed/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/gods-goddesses-of-autumn-the-harvest-samhain/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/how-to-build-confidence-in-your-magical-abilities/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/how-to-read-tea-leaves-tasseography/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/libra-in-the-7th-house/
Source: chromecache_510.2.dr, chromecache_408.2.dr String found in binary or memory: https://teaandrosemary.com/moon-moon-aspects-in-synastry/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/our-privacy-policy/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/page/2/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/page/3/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/page/31/
Source: chromecache_510.2.dr, chromecache_408.2.dr String found in binary or memory: https://teaandrosemary.com/plant-magic-witchs-garden/
Source: chromecache_510.2.dr, chromecache_408.2.dr String found in binary or memory: https://teaandrosemary.com/pluto-in-the-8th-house/
Source: chromecache_510.2.dr, chromecache_408.2.dr String found in binary or memory: https://teaandrosemary.com/pluto-in-the-9th-house/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/poppets-witchcraft/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/readings/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/sagittarius-in-the-7th-house/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/scorpio-in-the-7th-house/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/tarot-2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/venus-uranus-aspects-synastry/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/what-is-a-servitor/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/what-is-the-occult/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-admin/admin-ajax.php
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/plugins/convertkit/resources/frontend/css/broadcasts.css?ver=2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/plugins/convertkit/resources/frontend/css/button.css?ver=2.3.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/plugins/convertkit/resources/frontend/js/broadcasts.js?ver=2.3
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/plugins/convertkit/resources/frontend/js/convertkit.js?ver=2.3
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/plugins/fox-framework/js/fox-elementor.js?ver=1.4.5
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.2.1
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/plugins/instagram-feed/img/placeholder.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.2.1
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/plugins/social-pug/assets/dist/style-frontend-pro.1.20.3.css?v
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/themes/fox-child-theme/style.css?ver=4.6.8.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/themes/fox/js/html5.js
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/themes/fox/js/theme.min.js?ver=4.6.8.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/themes/fox/style.min.css?ver=6.1.7
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/04/cropped-Untitled-design-1-180x180.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/04/cropped-Untitled-design-1-192x192.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/04/cropped-Untitled-design-1-270x270.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/04/cropped-Untitled-design-1-32x32.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-1024x358.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-1024x358.png.webp
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-1536x538.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-1536x538.png.webp
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-300x105.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-300x105.png.webp
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-480x168.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-480x168.png.webp
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-768x269.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6-768x269.png.webp
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2021/08/Copy-of-Copy-of-Tea-6.png.webp
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2022/10/basilandbella_photo_of_woman_dressed_like_deme
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2023/07/Copy-of-Copy-of-Copy-of-Copy-of-Copy-of-Copy-o
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2023/07/chantal-garnier-fXy6ULUQZIw-unsplash-480x600.j
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2023/08/Copy-of-Copy-of-Copy-of-Copy-of-Copy-of-Copy-o
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2023/09/Copy-of-Copy-of-Copy-of-Copy-of-Copy-of-Copy-o
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2023/09/Copy-of-Copy-of-Tea-6.png
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2023/09/il_1588xN.4018514081_ibws-480x600.webp
Source: chromecache_510.2.dr, chromecache_408.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2023/10/5f4066b9a4db6bc2af6fb33c2bc7abe3.jpg
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2023/12/prchi-palwe-lZnjX8kA9dY-unsplash-480x600.jpg
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2023/12/prchi-palwe-lZnjX8kA9dY-unsplash-480x600.jpg.w
Source: chromecache_408.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/01/Copy-of-Copy-of-Copy-of-Copy-of-Copy-of-Copy-o
Source: chromecache_510.2.dr, chromecache_408.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/01/nasa-pd4lo70LdbI-unsplash.jpg
Source: chromecache_510.2.dr, chromecache_408.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/01/tim-cooper-XfqGuWevmvs-unsplash.jpg
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/02/93939b947c27b5bfec4b71d436523cce-480x600.jpg
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/02/93939b947c27b5bfec4b71d436523cce-480x600.jpg.w
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/02/Depositphotos_170347730_XL-480x600.jpg
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/02/Depositphotos_170347730_XL-480x600.jpg.webp
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/07/32210d6be77cfec56427fb36e962a9bc-480x600.jpg
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/07/32210d6be77cfec56427fb36e962a9bc-480x600.jpg.w
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/07/a7d472d912e46ac12a53c193af5b3395-480x600.jpg
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/07/a7d472d912e46ac12a53c193af5b3395-480x600.jpg.w
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/09/basilandbella_aphrodite_standing_in_the_distan
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/09/basilandbella_photo_of_Lughnasadh_Ancestral_Ha
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/09/basilandbella_photo_of_hecate_straight_on_to_t
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/09/basilandbella_photo_of_the_demoness_lilith_vam
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/09/basilandbella_realistic_photo_of_a_womanly_hoo
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/10/basilandbella_old_church_that_looks_like_the_o
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-content/uploads/2024/11/basilandbella_photo_of_persephone_holding_a_po
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/css/classic-themes.min.css?ver=1
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/css/dashicons.min.css?ver=6.1.7
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.7
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/css/jquery-ui-dialog.min.css?ver=6.1.7
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/jquery/ui/button.min.js?ver=1.13.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/jquery/ui/checkboxradio.min.js?ver=1.13.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/jquery/ui/dialog.min.js?ver=1.13.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/jquery/ui/resizable.min.js?ver=1.13.2
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.7
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.7
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-includes/wlwmanifest.xml
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/wp-json/
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.com/xmlrpc.php?rsd
Source: chromecache_394.2.dr String found in binary or memory: https://teaandrosemary.thrivecart.com/members-corner/
Source: chromecache_485.2.dr String found in binary or memory: https://tg.socdm.com/aux/idsync?proto=gumgum
Source: chromecache_344.2.dr String found in binary or memory: https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=8C0D9DDA-0AEA-4A22-96F8-FA9C551D
Source: chromecache_317.2.dr String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_344.2.dr String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_344.2.dr String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&re
Source: chromecache_488.2.dr, chromecache_233.2.dr String found in binary or memory: https://urls.grow.me/kazEwgYeJ
Source: chromecache_485.2.dr String found in binary or memory: https://us-u.openx.net/w/1.0/cm?_=
Source: chromecache_339.2.dr String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com
Source: chromecache_394.2.dr String found in binary or memory: https://view.flodesk.com/pages/61b781103d946afb20c71973
Source: chromecache_394.2.dr String found in binary or memory: https://wp-rocket.me
Source: chromecache_493.2.dr, chromecache_512.2.dr String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_358.2.dr, chromecache_389.2.dr String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_358.2.dr, chromecache_389.2.dr String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_358.2.dr, chromecache_389.2.dr String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_325.2.dr String found in binary or memory: https://www.google.com
Source: chromecache_358.2.dr, chromecache_389.2.dr String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_480.2.dr, chromecache_493.2.dr, chromecache_512.2.dr, chromecache_325.2.dr String found in binary or memory: https://www.googleadservices.com
Source: chromecache_325.2.dr String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_358.2.dr, chromecache_389.2.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_394.2.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-157523010-1
Source: chromecache_394.2.dr String found in binary or memory: https://www.instagram.com/p/DBe25cYSjeD/
Source: chromecache_394.2.dr String found in binary or memory: https://www.instagram.com/p/DBry1CiSxDC/
Source: chromecache_394.2.dr String found in binary or memory: https://www.instagram.com/p/DCUnitXpZZ9/
Source: chromecache_394.2.dr String found in binary or memory: https://www.instagram.com/p/DCmmyD7JT2O/
Source: chromecache_394.2.dr String found in binary or memory: https://www.instagram.com/reel/DBcPHRvSaFY/
Source: chromecache_394.2.dr String found in binary or memory: https://www.instagram.com/reel/DBjvwdyy1YN/
Source: chromecache_394.2.dr String found in binary or memory: https://www.instagram.com/reel/DCSaqeuh46g/
Source: chromecache_394.2.dr String found in binary or memory: https://www.instagram.com/reel/DClFDiwOCgS/
Source: chromecache_480.2.dr, chromecache_325.2.dr String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_394.2.dr String found in binary or memory: https://www.pinterest.com/teaandrosemary/
Source: chromecache_435.2.dr, chromecache_519.2.dr String found in binary or memory: https://www.rtbhouse.com/
Source: chromecache_485.2.dr String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=e_d40d1578-b327-4db4-8691-eb2636444379&gdpr=&gdpr_c
Source: chromecache_430.2.dr, chromecache_274.2.dr String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY
Source: chromecache_394.2.dr String found in binary or memory: https://yoast.com/wordpress/plugins/seo/
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown Network traffic detected: HTTP traffic on port 50562 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50627 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50598 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50603 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50615 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50586 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50659 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50669 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown Network traffic detected: HTTP traffic on port 50749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50750 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50543 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown Network traffic detected: HTTP traffic on port 50416 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50657 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown Network traffic detected: HTTP traffic on port 50601 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50403
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50404
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50407
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50406
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50408
Source: unknown Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50725 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50401
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50400
Source: unknown Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49836 version: TLS 1.2
Source: unknown HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:50311 version: TLS 1.2
Source: classification engine Classification label: clean2.win@67/495@502/100
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2164,i,14562950122353892082,8938884654339843377,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://teaandrosemary.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2164,i,14562950122353892082,8938884654339843377,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Google Drive.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Window Recorder Window detected: More than 3 window changes detected
Stores files to the Windows start menu directory
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1560048 URL: http://teaandrosemary.com Startdate: 21/11/2024 Architecture: WINDOWS Score: 2 14 stags.bluekai.com 2->14 16 pixel.rubiconproject.com 2->16 18 7 other IPs or domains 2->18 6 chrome.exe 9 2->6         started        9 chrome.exe 2->9         started        process3 dnsIp4 20 192.168.2.5 unknown unknown 6->20 22 239.255.255.250 unknown Reserved 6->22 11 chrome.exe 6->11         started        process5 dnsIp6 24 dcs-ups.g03.yahoodns.net 87.248.119.251 YAHOO-DEBDE United Kingdom 11->24 26 87.248.119.252 YAHOO-DEBDE United Kingdom 11->26 28 289 other IPs or domains 11->28
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
38.91.45.7
 m.deepintent.com United States
174 COGENT-174US false
18.66.147.40
 detgh1asa1dg4.cloudfront.net United States
3 MIT-GATEWAYSUS false
34.96.70.87
 invstatic101.creativecdn.com United States
15169 GOOGLEUS false
13.35.57.188
 unknown United States
16509 AMAZON-02US false
3.160.150.30
 unknown United States
16509 AMAZON-02US false
98.82.156.207
 s.amazon-adsystem.com United States
11351 TWC-11351-NORTHEASTUS false
185.64.190.82
 t-lhrc.pubmnet.com United Kingdom
62713 AS-PUBMATICUS false
77.243.51.122
 uip.semasio.net Denmark
42697 NETIC-ASDK false
185.64.190.81
 spug-lhrc.pubmnet.com United Kingdom
62713 AS-PUBMATICUS false
54.72.67.43
 unknown United States
16509 AMAZON-02US false
5.9.235.246
 unknown Germany
24940 HETZNER-ASDE false
52.16.54.39
 ds-pr-bh.ybp.gysm.yahoodns.net United States
16509 AMAZON-02US false
35.190.80.1
 a.nel.cloudflare.com United States
15169 GOOGLEUS false
198.47.127.205
 pug-ams-bc.pubmnet.com United States
62713 AS-PUBMATICUS false
37.252.171.52
 unknown European Union
29990 ASN-APPNEXUS false
95.101.148.20
 contextual.media.net European Union
20940 AKAMAI-ASN1EU false
3.73.221.49
 unknown United States
16509 AMAZON-02US false
211.120.53.192
 unknown Japan 4694 IDCFIDCFrontierIncJP false
13.248.245.213
 eu-eb2.3lift.com United States
16509 AMAZON-02US false
35.190.39.111
 esp.rtbhouse.com United States
15169 GOOGLEUS false
18.203.194.139
 euw-ice.360yield.com United States
16509 AMAZON-02US false
107.178.254.65
 pippio.com United States
15169 GOOGLEUS false
13.33.173.196
 d1jvc9b8z3vcjs.cloudfront.net United States
16509 AMAZON-02US false
239.255.255.250
 unknown Reserved
unknown unknown false
34.196.74.196
 sync.ipredictive.com United States
14618 AMAZON-AESUS false
54.229.88.203
 match.prod.bidr.io United States
16509 AMAZON-02US false
34.247.233.198
 usersync.gumgum.com United States
16509 AMAZON-02US false
178.250.1.11
 gum.nl3.vip.prod.criteo.com France
44788 ASN-CRITEO-EUROPEFR false
91.228.74.159
 global.px.quantserve.com United Kingdom
27281 QUANTCASTUS false
67.202.105.22
 pixel.33across.com United States
32748 STEADFASTUS false
47.253.61.56
 bid-iad-static.yeahtargeter.com United States
45102 CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC false
35.244.174.68
 id.rlcdn.com United States
15169 GOOGLEUS false
18.244.18.104
 unknown United States
16509 AMAZON-02US false
51.255.68.171
 dsp.nrich.ai France
16276 OVHFR false
18.245.31.92
 config.aps.amazon-adsystem.com United States
16509 AMAZON-02US false
172.67.40.173
 mwzeom.zeotap.com United States
13335 CLOUDFLARENETUS false
216.58.206.34
 unknown United States
15169 GOOGLEUS false
208.93.169.131
 am1-direct-bgp.contextweb.com United States
26228 SERVEPATHUS false
188.40.16.146
 client-rapi-mediavine.recombee.com Germany
24940 HETZNER-ASDE false
18.157.230.4
 eu-tlx.3lift.com United States
16509 AMAZON-02US false
87.248.119.251
 dcs-ups.g03.yahoodns.net United Kingdom
203220 YAHOO-DEBDE false
46.228.164.13
 d-ams1.turn.com United Kingdom
56396 TURNGB false
87.248.119.252
 unknown United Kingdom
203220 YAHOO-DEBDE false
34.91.165.80
 unknown United States
15169 GOOGLEUS false
107.178.250.95
 ads.optable.co United States
15169 GOOGLEUS false
34.36.130.12
 e.chicoryapp.com United States
2686 ATGS-MMD-ASUS false
46.228.164.11
 presentation-ams1.turn.com United Kingdom
56396 TURNGB false
34.149.155.241
 mediavine-3pd.cloud.optable.co United States
2686 ATGS-MMD-ASUS false
162.19.138.120
 id5-sync.com United States
209 CENTURYLINK-US-LEGACY-QWESTUS false
169.197.150.7
 unknown United States
19381 SIMPLY-BITS-LLCUS false
185.64.189.112
 hbopenbid-ams.pubmnet.com United Kingdom
62713 AS-PUBMATICUS false
3.121.150.111
 exchange.mediavine.com United States
16509 AMAZON-02US false
3.122.214.165
 ps.eyeota.net United States
16509 AMAZON-02US false
178.250.1.9
 widget.nl3.vip.prod.criteo.com France
44788 ASN-CRITEO-EUROPEFR false
35.186.154.107
 cm-supply-web.gammaplatform.com United States
15169 GOOGLEUS false
172.67.38.106
 cdn.id5-sync.com United States
13335 CLOUDFLARENETUS false
34.36.216.150
 pixel-sync.sitescout.com United States
2686 ATGS-MMD-ASUS false
34.120.133.55
 api.rlcdn.com United States
15169 GOOGLEUS false
54.229.252.101
 rtb.gumgum.com United States
16509 AMAZON-02US false
178.250.1.3
 static.nl3.vip.prod.criteo.net France
44788 ASN-CRITEO-EUROPEFR false
185.64.190.78
 pugm-lhrc.pubmnet.com United Kingdom
62713 AS-PUBMATICUS false
104.18.26.193
 htlb.casalemedia.com United States
13335 CLOUDFLARENETUS false
3.211.75.57
 sync.srv.stackadapt.com United States
14618 AMAZON-AESUS false
141.95.33.120
 lb.eu-1-id5-sync.com Germany
680 DFNVereinzurFoerderungeinesDeutschenForschungsnetzese false
188.114.96.3
 sda.fyi European Union
13335 CLOUDFLARENETUS false
18.197.30.174
 match-eu-central-1-ecs.sharethrough.com United States
16509 AMAZON-02US false
3.123.137.67
 unknown United States
16509 AMAZON-02US false
65.9.66.66
 unknown United States
16509 AMAZON-02US false
162.19.138.119
 unknown United States
209 CENTURYLINK-US-LEGACY-QWESTUS false
185.64.189.226
 t-amsc.pubmnet.com United Kingdom
62713 AS-PUBMATICUS false
18.210.235.203
 idx.cph.liveintent.com United States
14618 AMAZON-AESUS false
18.244.18.125
 dta23xhexutk5.cloudfront.net United States
16509 AMAZON-02US false
46.228.174.117
 sync.1rx.io United Kingdom
56396 TURNGB false
178.32.197.53
 unknown France
16276 OVHFR false
37.252.171.21
 unknown European Union
29990 ASN-APPNEXUS false
50.31.142.127
 chidc2.outbrain.org United States
22075 AS-OUTBRAINUS false
34.102.243.38
 pandg.tapad.com United States
15169 GOOGLEUS false
13.32.99.21
 sb.scorecardresearch.com United States
16509 AMAZON-02US false
35.244.193.51
 lexicon.33across.com United States
15169 GOOGLEUS false
67.220.228.200
 aax-eu.amazon-adsystem.com United States
18450 WEBNXUS false
67.220.228.201
 unknown United States
18450 WEBNXUS false
34.120.107.143
 oajs.openx.net United States
15169 GOOGLEUS false
163.5.194.30
 nld-prebid.a-mx.net France
56339 EPITECHFR false
198.47.127.20
 spug-amsfpairbc.pubmnet.com United States
62713 AS-PUBMATICUS false
52.48.164.2
 unknown United States
16509 AMAZON-02US false
142.250.185.66
 cm.g.doubleclick.net United States
15169 GOOGLEUS false
3.33.220.150
 unknown United States
8987 AMAZONEXPANSIONGB false
98.82.158.241
 unknown United States
11351 TWC-11351-NORTHEASTUS false
172.64.150.63
 a.tribalfusion.com United States
13335 CLOUDFLARENETUS false
54.38.113.4
 pixel-eu.onaudience.com France
16276 OVHFR false
178.250.1.57
 in-ftd-104.nl3.vip.prod.criteo.com France
44788 ASN-CRITEO-EUROPEFR false
3.78.168.176
 unknown United States
16509 AMAZON-02US false
34.13.138.208
 um.simpli.fi United States
2686 ATGS-MMD-ASUS false
185.184.8.90
 creativecdn.com Poland
204995 RTB-HOUSE-AMSNL false
52.209.53.88
 unknown United States
16509 AMAZON-02US false
198.47.127.19
 pugm-amsfpairbc.pubmnet.com United States
62713 AS-PUBMATICUS false
188.114.97.3
 some.growplow.events European Union
13335 CLOUDFLARENETUS false
34.120.135.53
 unknown United States
15169 GOOGLEUS false
13.33.187.51
 d1wsawskf2klzj.cloudfront.net United States
16509 AMAZON-02US false

Private

IP
192.168.2.5

Contacted Domains

Name IP Active
stats.wp.com 192.0.76.3 true
securepubads.g.doubleclick.net 142.250.186.162 true
um.simpli.fi 34.13.138.208 true
1.gravatar.com 192.0.73.2 true
static.nl3.vip.prod.criteo.net 178.250.1.3 true
e.chicoryapp.com 34.36.130.12 true
global.px.quantserve.com 91.228.74.159 true
id5-sync.com 162.19.138.120 true
d-ams1.turn.com 46.228.164.13 true
rtb.openx.net 35.186.253.211 true
platform.twitter.map.fastly.net 146.75.120.157 true
disqus.com 151.101.192.134 true
mediavine-3pd.cloud.optable.co 34.149.155.241 true
pandg.tapad.com 34.102.243.38 true
crb.kargo.com 35.157.49.87 true
mwzeom.zeotap.com 172.67.40.173 true
www.google.com 142.250.185.132 true
sync.intentiq.com 18.245.60.10 true
lb.eu-1-id5-sync.com 141.95.33.120 true
id.rlcdn.com 35.244.174.68 true
dta23xhexutk5.cloudfront.net 18.244.18.125 true
match.adsrvr.org 52.223.40.198 true
dsp-cookie.adfarm1.adition.com 80.82.210.217 true
match.prod.bidr.io 54.229.88.203 true
chidc2.outbrain.org 50.31.142.127 true
creativecdn.com 185.184.8.90 true
pagead-googlehosted.l.google.com 216.58.206.65 true
pugm-lhrc.pubmnet.com 185.64.190.78 true
plus.l.google.com 172.217.18.14 true
uip.semasio.net 77.243.51.122 true
m.deepintent.com 38.91.45.7 true
events-ssc.33across.com 34.117.239.71 true
nld-prebid.a-mx.net 163.5.194.30 true
esp.rtbhouse.com 35.190.39.111 true
i0.wp.com 192.0.77.2 true
pixel.onaudience.com 54.38.113.7 true
pug-lhr-bc.pubmnet.com 185.64.191.210 true
pixel-sync.sitescout.com 34.36.216.150 true
detgh1asa1dg4.cloudfront.net 18.66.147.40 true
teaandrosemary.com 172.67.153.54 true
i2.wp.com 192.0.77.2 true
euw-ice.360yield.com 18.203.194.139 true
d1ykf07e75w7ss.cloudfront.net 108.138.3.93 true
pdmp.papi-public.eu-central-1.dmp.3lift.com 18.195.239.197 true
d3mdrpbbs8qfxa.cloudfront.net 18.173.205.127 true
ssum-sec.casalemedia.com 104.18.27.193 true
oajs.openx.net 34.120.107.143 true
in-ftd-104.nl3.vip.prod.criteo.com 178.250.1.57 true
presentation-ams1.turn.com 46.228.164.11 true
t-amsc.pubmnet.com 185.64.189.226 true
mediavine-auth.cloud.optable.co 34.149.155.241 true
rtb.adgrx.com 52.19.224.221 true
config.aps.amazon-adsystem.com 18.245.31.92 true
widget.us5.vip.prod.criteo.com 74.119.117.16 true
sda.fyi 188.114.96.3 true
am1-direct-bgp.contextweb.com 208.93.169.131 true
oa.openxcdn.net 34.102.146.192 true
pdmp.dcapi.dmp.3lift.com 52.20.95.51 true
de.tynt.com 67.202.105.32 true
pugm-amsfpairbc.pubmnet.com 198.47.127.19 true
hde.tynt.com 67.202.105.34 true
pghub.io 35.241.45.217 true
pixel-eu.onaudience.com 54.38.113.4 true
contextual.media.net 95.101.148.20 true
scontent.xx.fbcdn.net 157.240.0.6 true
api.rlcdn.com 34.120.133.55 true
some.growplow.events 188.114.97.3 true
s.gravatar.com 192.0.73.2 true
widget.nl3.vip.prod.criteo.com 178.250.1.9 true
spug-lhrc.pubmnet.com 185.64.190.81 true
sync.srv.stackadapt.com 3.211.75.57 true
cdn.id5-sync.com 172.67.38.106 true
pixel.tapad.com 34.111.113.62 true
a.nel.cloudflare.com 35.190.80.1 true
pippio.com 107.178.254.65 true
sync.ipredictive.com 34.196.74.196 true
s.amazon-adsystem.com 98.82.156.207 true
aax-eu.amazon-adsystem.com 67.220.228.200 true
i1.wp.com 192.0.77.2 true
mediavine.cloud.optable.co 34.149.155.241 true
syndication.twitter.com 104.244.42.72 true
youtube.com 142.250.185.142 true
outspot2-ams.adx.opera.com 82.145.213.8 true
sync.colossusssp.com 172.240.155.100 true
t-lhrc.pubmnet.com 185.64.190.82 true
d1wsawskf2klzj.cloudfront.net 13.33.187.51 true
feed.pghub.io 34.102.243.38 true
ib.anycast.adnxs.com 37.252.173.215 true
dsp.nrich.ai 51.255.68.171 true
uipus.semasio.net 50.57.31.206 true
eu-eb2.3lift.com 13.248.245.213 true
hbopenbid-ams.pubmnet.com 185.64.189.112 true
livepixel-production.bln.liveintent.com 52.204.113.148 true
sync.crwdcntrl.net 108.128.75.152 true
cdnjs.cloudflare.com 104.17.25.14 true
cm.g.doubleclick.net 142.250.185.66 true
sync.1rx.io 46.228.174.117 true
ds-pr-bh.ybp.gysm.yahoodns.net 52.16.54.39 true
eu-tlx.3lift.com 18.157.230.4 true
dcs-ups.g03.yahoodns.net 87.248.119.251 true

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://pippio.com/api/sync?pid=5324&it=1&iv=aff9a569ab9b525bd26618e909f117512695aa642c546870077e8e6537735e48791426b5417dce21&_=2 false
    		high
    https://exchange.mediavine.com/usersync/redirect?partner=pubmatic&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B false
      		high
      https://usersync.gumgum.com/usersync?b=oth&i=y-fNoxFSRE2peVxqjwJ2GMyh7NknUbHBg6HZyn~A false
        		high
        https://teaandrosemary.com/wp-content/uploads/sb-instagram-feed-images/467651190_18049831349001741_5210491199902608146_nlow.jpg false
        • Avira URL Cloud: safe
        		 unknown
        https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent= false
          		high
          https://sync.colossusssp.com/ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D false
            		high
            https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&sInitiator=external&gdpr=0&gdpr_consent= false
              		high
              https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7439670164659829102&gdpr=0&gdpr_consent= false
                		high
                https://mediavine-auth.cloud.optable.co/s-2dda8616-76d0-4ba6-9fcf-000ee349ee45/v2/targeting?id=__passport__&osdk=web-v0.20.1&cookies=no&passport=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InY6NTN2d2tSb3p4aEo4MUJHcTN4VnFZTCIsIm5ldyI6dHJ1ZSwiZXhwIjoxNzM0Nzc1MjA1fQ.xbVrvsxR85kb5nfwvavOfSuY5wSWYeDijkPwQQQKuw5J7Y05JGXuUcsm9s_KuGTkm9ov3UQ3ZUVpCUmLqL6DkQ false
                  		high
                  https://sync.1rx.io/usersync/turn/3401281489091757236?dspret=1&gdpr=&gdpr_consent=&us_privacy= false
                    		high
                    https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc false
                      		high
                      https://exchange.mediavine.com/usersync/redirect?partner=criteo&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId=k-frujyAx-dSfYnD0gPqVmP-6FH3DF23qDk5DEsQ false
                        		high
                        https://mediavine-auth.cloud.optable.co/s-2dda8616-76d0-4ba6-9fcf-000ee349ee45/identify?osdk=web-v0.20.1&cookies=no&passport=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InY6NTN2d2tSb3p4aEo4MUJHcTN4VnFZTCIsIm5ldyI6ZmFsc2UsImV4cCI6MTczNDc3NTIwN30.SNCmzqGqDIlVqMCeHY6LzUCyl8daadbrXQA5qXthfg5BtxirZJOz5WLPbfZGu8Og0S6kpSG72fHMom3WUn6SnQ false
                          		high
                          https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=9.8.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= false
                            		high
                            https://pixel.tapad.com/idsync/ex/receive/check?partner_id=1955&partner_device_id=b27cf35f-f0d6-09c9-0692-e2273c95401b false
                              		high
                              https://teaandrosemary.com/wp-content/themes/fox/css/lib/feather/feather.ttf?rny1sd false
                              • Avira URL Cloud: safe
                              		 unknown
                              https://match.sharethrough.com/universal/v1?supply_id=47b99924&us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsharethrough%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D false
                                		high
                                https://teaandrosemary.com/wp-content/uploads/sb-instagram-feed-images/464423623_1263198934822275_3845619286450297427_nlow.jpg false
                                • Avira URL Cloud: safe
                                		 unknown
                                https://match.adsrvr.org/track/rid?ttd_pid=sne7dew&fmt=json false
                                  		high
                                  https://dsp-cookie.adfarm1.adition.com/?ssp=9&gdpr=0&gdpr_consent= false
                                    		high
                                    https://oa.openxcdn.net/esp.js false
                                      		high
                                      https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=n5JVlcfrU9k6YArUqgBA13ioZWkA9h9FVRMBz9nk0_k&pi=pubmatic&gdpr=0&gdpr_consent= false
                                        		high
                                        https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent false
                                          		high
                                          https://teaandrosemary.com/wp-includes/js/jquery/ui/checkboxradio.min.js?ver=1.13.2 false
                                          • Avira URL Cloud: safe
                                          		 unknown
                                          https://dsp-ap.eskimi.com/pixelGet?ex=50&gdpr={gdpr}&gdpr_consent={gdpr_consent}&dest=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM3MDcmdGw9MjAxNjA=&piggybackCookie={dmp_id}&gdpr={gdpr}&gdpr_consent={gdpr_consent} false
                                            		high
                                            https://rtb.gumgum.com/usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D false
                                              		high
                                              https://pr-bh.ybp.yahoo.com/sync/openx/20c5e6e7-3b7d-a607-7da4-6c04f04e4c5e?gdpr=0 false
                                                		high
                                                https://us-u.openx.net/w/1.0/sd?id=537072399&val=6584676363640427219 false
                                                  		high
                                                  https://green.erne.co/pubmatic/cm?gdpr=0&gdpr_consent= false
                                                    		high
                                                    https://x.bidswitch.net/ul_cb/check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=53c22730-a7ef-11ef-9524-59b39092d66a false
                                                      		high
                                                      https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=&gdpr_consent= false
                                                        		high
                                                        https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202411180101/pubads_impl.js false
                                                          		high
                                                          https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEMCoy5WkKFJ-n6z3RN5CuHc&google_cver=1 false
                                                            		high
                                                            https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= false
                                                              		high
                                                              https://teaandrosemary.com/wp-content/uploads/2024/09/basilandbella_photo_of_Lughnasadh_Ancestral_Harvest_Ritual_329bfa3d-283c-457f-b047-fa066b42d721-480x600.jpg.webp false
                                                              • Avira URL Cloud: safe
                                                              		 unknown
                                                              https://b1sync.zemanta.com/usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=&gdpr_consent=&puid=e_d40d1578-b327-4db4-8691-eb2636444379&s=2&us_privacy=1--- false
                                                                		high
                                                                https://widget.us.criteo.com/dis/usersync.aspx?r=146&p=319&dis=0&url=https%3a%2f%2fssp-sync.criteo.com%2fuser-sync%2fredirect%3fuid%3d%40%40CRITEO_USERID%40%40%26dised%3dtrue%26gdpr%3d%26gdprapplies%3dFalse%26ccpa%3d%26gpp%3dDBABzw~1---~BqgAAAAAAgA%26gpp_sid%3d-1%26profile%3d319%26redir%3dhttps%253A%252F%252Fexchange.mediavine.com%252Fusersync%252Fredirect%253Fpartner%253Dcriteo%2526uuid%253D53c22730-a7ef-11ef-9524-59b39092d66a%2526s2sVersion%253Dproduction%2526partnerId%253D%2524%7BCRITEO_USER_ID%7D&gdpr=&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 false
                                                                  		high
                                                                  https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Zz8EkgAGkCPfTwAZ&gdpr=0&gdpr_consent= false
                                                                    		high
                                                                    https://usersync.gumgum.com/usersync?b=zem&i=GGC9q9qJE4uP2EF5dzGL&us_privacy=1--- false
                                                                      		high
                                                                      https://teaandrosemary.com/wp-content/plugins/instagram-feed/img/placeholder.png false
                                                                      • Avira URL Cloud: safe
                                                                      		 unknown
                                                                      https://b1sync.zemanta.com/usersync/openx?puid=9fcffae5-4059-05cc-1b40-e6332c095f6c&cb=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D560843120%26val%3D__ZUID__ false
                                                                        		high
                                                                        https://teaandrosemary.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 false
                                                                        • Avira URL Cloud: safe
                                                                        		 unknown
                                                                        https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= false
                                                                          		high
                                                                          https://ice.360yield.com/server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=53c22730-a7ef-11ef-9524-59b39092d66a&s2sVersion=production&partnerId={PUB_USER_ID} false
                                                                            		high
                                                                            https://ups.analytics.yahoo.com/ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA&verify=true false
                                                                              		high
                                                                              https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=ecd4fcde-b77b-8fb4-8c7d-f866672a4af7 false
                                                                                		high
                                                                                https://teaandrosemary.com/wp-content/uploads/2022/10/basilandbella_photo_of_woman_dressed_like_demeter_in_the_fall_3f0f5bde-7560-4c19-b3b8-8ae43a7937f9-480x600.jpg.webp false
                                                                                • Avira URL Cloud: safe
                                                                                		 unknown
                                                                                https://teaandrosemary.com/wp-content/plugins/convertkit/resources/frontend/css/button.css?ver=2.3.2 false
                                                                                • Avira URL Cloud: safe
                                                                                		 unknown
                                                                                https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0 false
                                                                                  		high
                                                                                  https://ssum-sec.casalemedia.com/usermatchredir?s=193478&cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D false
                                                                                    		high
                                                                                    https://exchange.mediavine.com/usersync.min.js?s2sVersion=production false
                                                                                      		high
                                                                                      https://teaandrosemary.com/wp-content/plugins/convertkit/resources/frontend/js/broadcasts.js?ver=2.3.2 false
                                                                                      • Avira URL Cloud: safe
                                                                                      		 unknown
                                                                                      https://pixel.onaudience.com/?partner=214&mapped=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&gdpr=0&gdpr_consent= false
                                                                                        		high
                                                                                        https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=8C0D9DDA-0AEA-4A22-96F8-FA9C551D724B&redir=true&gdpr=0&gdpr_consent= false
                                                                                          		high
                                                                                          https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=3700136482230454526&newuser=1&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 false
                                                                                            		high
                                                                                            https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3601273278595652539&gdpr=0&gdpr_consent= false
                                                                                              		high
                                                                                              https://ssp-sync.criteo.com/user-sync/match?p=ZFfkGF9PSkx0dGlyVk9pbE1ZdkJkY2Mzcm1nQ2pVNkZzMXFITXU5YmIxbFJxUlJ5YUVUbW1ycGRjUkdWJTJCYyUyQm9oNGJ5biUyRnlYYXl0aHFvcmtXM1M5RjZta3J0eFlpTDJvZlIza0N4TDIxYU9valBqNnVrS2Q5aXAwcm5KMmkzWGNsblNlVCUyRldpVyUyRmxjcUFGcmwlMkJnQVF5U0J5bTUxbUl1UUlGUEE1MXNPeUFRT0xvd2ZWTmEyWVNEU0RZYVRDbyUyQldVNHJSJTJCcWFvaHRMdnlkckg3NEc3NmhucjkzUXdnWUQ0VjFZVFp6STVSRk15Z0puZW4ySWU3WVBid0w3ZHdCVVkzbUNtaFpJUzU4MyUyRkF2MWh3RTBnSnJmNUxQMTVLMiUyQjVBY0prVm5rUFFjOHNZbkpFJTNE&u=3094c032-c6fa-4250-9b72-b5665ef8a65d false
                                                                                                		high
                                                                                                https://teaandrosemary.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 false
                                                                                                • Avira URL Cloud: safe
                                                                                                		 unknown
                                                                                                https://ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D53c22730-a7ef-11ef-9524-59b39092d66a%26s2sVersion%3Dproduction%26partnerId%3D&s=193478&C=1 false
                                                                                                  		high