Edit tour

Windows Analysis Report
http://www.fire.co.za

Overview

General Information

Sample URL:	http://www.fire.co.za
Analysis ID:	850111
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Detected hidden input values containing email addresses (often used in phishing pages)

Found iframes

HTML page is missing a favicon

None HTTPS page querying sensitive user data (password, username or email)

No HTML title found

HTML body with high number of embedded SVGs detected

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6060 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 4120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 3420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4484 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 3064 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 4732 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.fire.co.za MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

cleanup

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: accounts.google.com

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets.js HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/platform.js HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=http%3A%2F%2Fwww.fire.co.za HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http%3A%2F%2Fwww.fire.co.za&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__ HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.zUi2Oiqh0cQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.zUi2Oiqh0cQ.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw/cb=gapi.loaded_1?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js?hash=e30f44b386feffbac14858e9a02c4b81 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: http://www.fire.co.zasec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.fire.co.za&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__ HTTP/1.1Host: accounts.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Chrome-ID-Consistency-Request: version=1,client_id=77185425430.apps.googleusercontent.com,device_id=31d43cf5-589a-4e6d-9628-8ca7884cc233,signin_mode=all_accounts,signout_mode=show_confirmationX-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: developers.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/rpc:shindig_random.js?onload=init HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.zUi2Oiqh0cQ.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/rpc:shindig_random.js?onload=init HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "44e45ce8b3777f32"
Source: global traffic	HTTP traffic detected: GET /settings?session_id=ee90eca4bcf54845e209d9a3c74486e40c6bb20e HTTP/1.1Host: syndication.twitter.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://platform.twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://platform.twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2.0/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1f18fbe320fdb%26domain%3Dwww.fire.co.za%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.fire.co.za%252Ff23f9c5803cc43%26relation%3Dparent.parent&container_width=1247&href=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/button.e7f9415a2e000feaab02c86dd5802747.js HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /channel/UCW-wT5XRUpLC9JX2mW8Ukcw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m?continue=https%3A%2F%2Fwww.youtube.com%2Fchannel%2FUCW-wT5XRUpLC9JX2mW8Ukcw%3Fcbrd%3D1&gl=GB&m=0&pc=yt&cm=2&hl=en&src=1 HTTP/1.1Host: consent.youtube.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SOCS=CAAaBgiA3vyhBg; YSC=41aGm-tn7B8; __Secure-YEC=CgtWR3NVQ0libXJKVSjS84CiBg%3D%3D; CONSENT=PENDING+351
Source: global traffic	HTTP traffic detected: GET /widgets/tweet_button.2b2d73daf636805223fb11d48f3e94f7.en.html HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1681963105858%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22aaf4084522e3a%3A1674595607486%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=ee90eca4bcf54845e209d9a3c74486e40c6bb20e HTTP/1.1Host: syndication.twitter.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://consent.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1681963105858%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22aaf4084522e3a%3A1674595607486%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=ee90eca4bcf54845e209d9a3c74486e40c6bb20e HTTP/1.1Host: syndication.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1 HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"Referer: https://consent.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; __Secure-YEC=CgtWR3NVQ0libXJKVSjS84CiBg%3D%3D; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/cssbin/www-onepick.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.P7UumMG2pNE.L.B1.O/am=gAI/d=0/rs=AGKMywGaUyxg_9ga6v-mgAbw8dT5gKIppQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/cssbin/www-main-desktop-watch-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/webcomponents-sd.vflset/webcomponents-sd.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/intersection-observer.min.vflset/intersection-observer.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/scheduler.vflset/scheduler.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/www-tampering.vflset/www-tampering.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/spf.vflset/spf.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/network.vflset/network.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk
Source: global traffic	HTTP traffic detected: GET /ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en HTTP/1.1Host: accounts.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Chrome-ID-Consistency-Request: version=1,client_id=77185425430.apps.googleusercontent.com,device_id=31d43cf5-589a-4e6d-9628-8ca7884cc233,signin_mode=all_accounts,signout_mode=show_confirmationX-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /InteractiveLogin?continue=https://www.youtube.com/signin?action_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en&passive=true&service=youtube&uilel=3&ifkv=AQMjQ7Syb-aGSsTrneCsdJX0hIYFCA2qydA3YPAoUkCtL0Jq0vVtjTu7DGPD8KOX4GINelYm0chp HTTP/1.1Host: accounts.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Chrome-ID-Consistency-Request: version=1,client_id=77185425430.apps.googleusercontent.com,device_id=31d43cf5-589a-4e6d-9628-8ca7884cc233,signin_mode=all_accounts,signout_mode=show_confirmationX-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"Referer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/signin/identifier?dsh=S-1627170847%3A1681930724361565&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en&ifkv=AQMjQ7Sd5_5oKAa_dYMztzd4-l_yOx8SUTaw79Fv73rOC9tF-ttpTBsz4LiLlYshkMB3H3NavcDv9Q&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin HTTP/1.1Host: accounts.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Chrome-ID-Consistency-Request: version=1,client_id=77185425430.apps.googleusercontent.com,device_id=31d43cf5-589a-4e6d-9628-8ca7884cc233,signin_mode=all_accounts,signout_mode=show_confirmationX-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"Referer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/failure.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_AngelesRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/no_input.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_AngelesRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/open.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_AngelesRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/success.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1Accept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_AngelesRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptX-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw?cbrd=1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/serviceworker-kevlar-appshell.vflset/serviceworker-kevlar-appshell.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /vi/Rtra__s9rXA/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBmbzyhG1qh44v3ZAOiCGA2o-PJiQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AGIKgqNEh0Cl5e40Qqr3f71eYj-Gu9JKqQ1ngRO6xbHc=s176-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/player/6f20102c/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8UkcwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/player/6f20102c/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8UkcwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /app_shell HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: youtube.comConnection: keep-alivePragma: no-cacheCache-Control: no-cachesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/cssbin/www-main-desktop-home-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8UkcwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/jsbin/www-searchbox.vflset/www-searchbox.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/player/6f20102c/player_ias.vflset/en_US/offline.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8UkcwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/player/6f20102c/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8UkcwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/player/6f20102c/player_ias.vflset/en_US/miniplayer.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8UkcwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/img/favicon.ico HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8UkcwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/img/favicon_32x32.png HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8UkcwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/ymD8mqb2jAHc-oWP6UM0kDpI7GaSG_zI3vXiXIPrEkw.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?-2sCxg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIguTKAQiVocsBCLK0zAEIgbzMAQiAvcwBCNvAzAEImsHMAQizwcwBCMXBzAEI1sHMAQjdxMwBCK7GzAEInMnMAQjiy8wBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8UkcwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/player/6f20102c/player_ias.vflset/en_US/captions.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/player/6f20102c/player_ias.vflset/en_US/endscreen.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /ytc/AGIKgqNEh0Cl5e40Qqr3f71eYj-Gu9JKqQ1ngRO6xbHc=s176-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/Rtra__s9rXA/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBmbzyhG1qh44v3ZAOiCGA2o-PJiQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/img/favicon.ico HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /s/desktop/2fc4f2e2/img/favicon_32x32.png HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=41aGm-tn7B8; CONSENT=PENDING+351; SOCS=CAISNQgDEitib3FfaWRlbnRpdHlmcm9udGVuZHVpc2VydmVyXzIwMjMwNDE0LjAzX3AwGgJlbiACGgYIgN78oQY; GPS=1; VISITOR_INFO1_LIVE=0MWPmu-9LLk; PREF=tz=America.Los_Angeles
Source: global traffic	HTTP traffic detected: GET /js/platform.js HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a817d6f6a95ec85f"
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "87fca3d71371a4a71985ccc8f08fe6f9"
Source: global traffic	HTTP traffic detected: GET /widgets.js HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "9e99725b7a4cd730a934afba2a438bb5"If-Modified-Since: Tue, 24 Jan 2023 21:41:51 GMT
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.yTSbWrSe458.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http%3A%2F%2Fwww.fire.co.za&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Ffire-dynamics-africa%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.yTSbWrSe458.O%2Fd%3D1%2Frs%3DAHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q%2Fm%3D__features__ HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.yTSbWrSe458.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q/cb=gapi.loaded_1?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings?session_id=5f635b7f35dadb5ab99754695fc5743b646761a4 HTTP/1.1Host: syndication.twitter.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://platform.twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://platform.twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: developers.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.fire.co.za&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.yTSbWrSe458.O%2Fd%3D1%2Frs%3DAHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q%2Fm%3D__features__ HTTP/1.1Host: accounts.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Chrome-ID-Consistency-Request: version=1,client_id=77185425430.apps.googleusercontent.com,device_id=31d43cf5-589a-4e6d-9628-8ca7884cc233,signin_mode=all_accounts,signout_mode=show_confirmationX-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/rpc:shindig_random.js?onload=init HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "44e45ce8b3777f32"
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.yTSbWrSe458.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlaHLAQiBvMwBCIC9zAEIs8HMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.fire.co.za%2Fitem%2Ffire-dynamics-africa%2F%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1681963170374%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22aaf4084522e3a%3A1674595607486%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=5f635b7f35dadb5ab99754695fc5743b646761a4 HTTP/1.1Host: syndication.twitter.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2.0/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df54be269d46a58%26domain%3Dwww.fire.co.za%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.fire.co.za%252Ff2591078936cecc%26relation%3Dparent.parent&container_width=1247&href=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Ffire-dynamics-africa%2F&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.fire.co.za/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.fire.co.za%2Fitem%2Ffire-dynamics-africa%2F%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1681963170374%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22aaf4084522e3a%3A1674595607486%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=5f635b7f35dadb5ab99754695fc5743b646761a4 HTTP/1.1Host: syndication.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /%7B$options-%3Etheme-%3Eheader-%3Elogo%7D HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-logo-1/Dosetech-logo-1-2720985730.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-Logo-1-small/Fire-Dynamics-Africa-Logo-1-small-1726965620.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /%7Boptions-%3Etheme-%3Eheader-%3Elogo HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Inspection-Solutions-Logo-4/Fire-Inspection-Solutions-Logo-4-1118262499.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/SBS-Logo-1/SBS-Logo-1-236112869.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Technoswitch-Logo-1/Technoswitch-Logo-1-2259348168.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/AdvertiseHere112/AdvertiseHere112-1196120779.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-logo-1/Dosetech-logo-1-2720985730.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /%7B$options-%3Etheme-%3Eheader-%3Elogo%7D HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-Logo-1-small/Fire-Dynamics-Africa-Logo-1-small-1726965620.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Range: bytes=149030-149030If-Range: Thu, 16 Aug 2018 14:26:53 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Inspection-Solutions-Logo-4/Fire-Inspection-Solutions-Logo-4-1118262499.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Range: bytes=88734-88734If-Range: Tue, 09 Aug 2016 05:35:10 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/SBS-Logo-1/SBS-Logo-1-236112869.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Range: bytes=88734-88734If-Range: Fri, 19 Aug 2016 11:54:56 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Technoswitch-Logo-1/Technoswitch-Logo-1-2259348168.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Range: bytes=88734-88734If-Range: Tue, 23 Aug 2016 06:31:43 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/AdvertiseHere112/AdvertiseHere112-1196120779.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Range: bytes=65209-65209If-Range: Wed, 03 Aug 2016 11:21:13 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-Logo-1-small/Fire-Dynamics-Africa-Logo-1-small-1726965620.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Range: bytes=149030-218413If-Range: Thu, 16 Aug 2018 14:26:53 GMT
Source: global traffic	HTTP traffic detected: GET /%7Boptions-%3Etheme-%3Eheader-%3Elogo HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Inspection-Solutions-Logo-4/Fire-Inspection-Solutions-Logo-4-1118262499.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Range: bytes=88734-225146If-Range: Tue, 09 Aug 2016 05:35:10 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/SBS-Logo-1/SBS-Logo-1-236112869.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Range: bytes=88734-126973If-Range: Fri, 19 Aug 2016 11:54:56 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Technoswitch-Logo-1/Technoswitch-Logo-1-2259348168.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Range: bytes=88734-164855If-Range: Tue, 23 Aug 2016 06:31:43 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/AdvertiseHere112/AdvertiseHere112-1196120779.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Range: bytes=65209-115101If-Range: Wed, 03 Aug 2016 11:21:13 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/local/category_default-4257682527.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-Logo-1-small/Fire-Dynamics-Africa-Logo-1-small-1726965620.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/SBS-Logo-1/SBS-Logo-1-236112869.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Technoswitch-Logo-1/Technoswitch-Logo-1-2259348168.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/local/category_default-4257682527.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/AdvertiseHere112/AdvertiseHere112-1196120779.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Inspection-Solutions-Logo-4/Fire-Inspection-Solutions-Logo-4-1118262499.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /%7B$homeUrl%7D HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /%7BhomeUrl HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/directory2/design/img/404.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/%7BhomeUrlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Pro-Amp-Logo-1/Pro-Amp-Logo-1-3248741379.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/%7BhomeUrlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Rapid-Fire-Control-Logo-1/Rapid-Fire-Control-Logo-1-3022833621.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/%7BhomeUrlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Corporate-Security-Logo-1/Corporate-Security-Logo-1-2743285788.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/%7BhomeUrlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/CGS-Solutions-Logo-1/CGS-Solutions-Logo-1-1046770216.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/%7BhomeUrlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/fireweb-logo.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/%7BhomeUrlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Referer: http://www.fire.co.za/%7BhomeUrlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Pro-Amp-Logo-1.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/%7BhomeUrlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Corporate-Security-Logo-1.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/%7BhomeUrlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/ HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Referer: http://www.fire.co.za/%7BhomeUrlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/js/vendor/jquery-3.2.1.min.js HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Referer: http://www.fire.co.za/universalpopup/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/js/vendor/getBrowser.js HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Referer: http://www.fire.co.za/universalpopup/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/index-chrome.html HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Referer: http://www.fire.co.za/universalpopup/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/css/main.css HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.fire.co.za/universalpopup/index-chrome.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/css/bootstrap.min.css HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.fire.co.za/universalpopup/index-chrome.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/css/jquery.fancybox.css HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.fire.co.za/universalpopup/index-chrome.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/css/slick.css HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.fire.co.za/universalpopup/index-chrome.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/js/jquery.fancybox.js HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Referer: http://www.fire.co.za/universalpopup/index-chrome.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/js/wow.js HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Referer: http://www.fire.co.za/universalpopup/index-chrome.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/js/main.js HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Referer: http://www.fire.co.za/universalpopup/index-chrome.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/css/font-awesome.min.css HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.fire.co.za/universalpopup/css/main.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/img/chrome.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/universalpopup/index-chrome.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/img/chrome-bottom.jpg HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/universalpopup/index-chrome.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/img/arr.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/universalpopup/index-chrome.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/fireweb-logo.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/directory2/design/img/404.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Corporate-Security-Logo-1/Corporate-Security-Logo-1-2743285788.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Pro-Amp-Logo-1.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/Corporate-Security-Logo-1.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Rapid-Fire-Control-Logo-1/Rapid-Fire-Control-Logo-1-3022833621.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Pro-Amp-Logo-1/Pro-Amp-Logo-1-3248741379.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/img/arr.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/CGS-Solutions-Logo-1/CGS-Solutions-Logo-1-1046770216.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/img/chrome-bottom.jpg HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/index-chrome.html HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/universalpopup/index-chrome.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/img/magnify.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/universalpopup/css/main.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/img/chrome.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/index-chrome.html HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalpopup/img/magnify.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /item/dosetech/ HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/directory2/design/img/categories/category_default.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-logo-1/Dosetech-logo-1-2975487766.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-1/Dosetech-1-920319985.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-2/Dosetech-2-3092639762.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-3/Dosetech-3-1962930316.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-4/Dosetech-4-2117794197.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-5/Dosetech-5-2995845387.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-6/Dosetech-6-1008729832.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-7/Dosetech-7-4038458998.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-Akron-1/Dosetech-Akron-1-3422118476.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-East-London/Dosetech-East-London-3966410378.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-logo-1/Dosetech-logo-1-4152915254.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-1/Dosetech-1-2700929016.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-2/Dosetech-2-779345947.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: developers.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Referer: http://www.fire.co.za/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-3/Dosetech-3-3805929605.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-4/Dosetech-4-3894208924.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-5/Dosetech-5-615966978.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-6/Dosetech-6-2855923425.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-7/Dosetech-7-1720970879.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-Akron-1/Dosetech-Akron-1-4040265894.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-East-London/Dosetech-East-London-264167398.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/CGS-Solutions-Logo-1.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/SEControls-Master-Logo.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/dosetech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/directory2/design/img/categories/category_default.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-logo-1/Dosetech-logo-1-2975487766.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-2/Dosetech-2-3092639762.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-4/Dosetech-4-2117794197.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-1/Dosetech-1-920319985.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-5/Dosetech-5-2995845387.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-3/Dosetech-3-1962930316.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-6/Dosetech-6-1008729832.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-logo-1/Dosetech-logo-1-4152915254.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-1/Dosetech-1-2700929016.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-2/Dosetech-2-779345947.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-Akron-1/Dosetech-Akron-1-3422118476.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-4/Dosetech-4-3894208924.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-3/Dosetech-3-3805929605.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-5/Dosetech-5-615966978.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-7/Dosetech-7-4038458998.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-6/Dosetech-6-2855923425.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-7/Dosetech-7-1720970879.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-East-London/Dosetech-East-London-264167398.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/CGS-Solutions-Logo-1.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/SEControls-Master-Logo.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-Akron-1/Dosetech-Akron-1-4040265894.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Dosetech-East-London/Dosetech-East-London-3966410378.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /item/fire-dynamics-africa/ HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-Logo-1-small/Fire-Dynamics-Africa-Logo-1-small-3544585693.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/fire-dynamics-africa/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-logo-1/Fire-Dynamics-Africa-logo-1-2687282339.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/fire-dynamics-africa/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-Logo-1-small/Fire-Dynamics-Africa-Logo-1-small-2409275564.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/fire-dynamics-africa/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-Logo-1-small/Fire-Dynamics-Africa-Logo-1-small-3544585693.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/fire-dynamics-africa/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-logo-1/Fire-Dynamics-Africa-logo-1-2687282339.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/fire-dynamics-africa/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-Logo-1-small/Fire-Dynamics-Africa-Logo-1-small-2409275564.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/fire-dynamics-africa/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-logo-1/Fire-Dynamics-Africa-logo-1-2424399028.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.fire.co.za/item/fire-dynamics-africa/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-Logo-1-small/Fire-Dynamics-Africa-Logo-1-small-2409275564.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-logo-1/Fire-Dynamics-Africa-logo-1-2424399028.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-Logo-1-small/Fire-Dynamics-Africa-Logo-1-small-3544585693.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/cache/images/Fire-Dynamics-Africa-logo-1/Fire-Dynamics-Africa-logo-1-2687282339.png HTTP/1.1Host: www.fire.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.fire.co.za
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4484 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.fire.co.za	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4484 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: classification engine

Classification label: mal56.win@38/235@34/20

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	5 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	6 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	4 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.fire.co.za	6%	Virustotal		Browse
http://www.fire.co.za	100%	Avira URL Cloud	malware

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	Virustotal		Browse
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	Virustotal		Browse
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	Avira URL Cloud	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.234.35	true	false	high
star.c10r.facebook.com	157.240.17.17	true	false	high
webdesignhostingsa.co.za	164.160.91.30	true	false	high
twitter.com	104.244.42.129	true	false	high
www.dosetech.co.za	196.22.132.120	true	false	high
accounts.google.com	142.251.209.13	true	false	high
fire.co.za	164.160.91.17	true	false	high
plus.l.google.com	142.251.209.46	true	false	high
i.ytimg.com	142.250.180.150	true	false	high
consent.youtube.com	142.250.180.174	true	false	high
cs41.wac.edgecastcdn.net	93.184.220.66	true	false	high
static.doubleclick.net	142.250.180.166	true	false	high
syndication.twitter.com	104.244.42.136	true	false	high
youtube.com	142.251.209.14	true	false	high
youtube-ui.l.google.com	142.250.180.174	true	false	high
scontent.xx.fbcdn.net	157.240.17.15	true	false	high
googleads.g.doubleclick.net	142.251.209.34	true	false	high
play.google.com	142.251.209.46	true	false	high
developers.google.com	142.250.180.174	true	false	high
yt3.googleusercontent.com	142.250.184.97	true	false	high
www.google.com	142.250.184.68	true	false	high
clients.l.google.com	142.250.184.110	true	false	high
www.facebook.com	unknown	unknown	false	high
web.facebook.com	unknown	unknown	false	high
www.fire.co.za	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
www.webdesignhostingsa.co.za	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
platform.twitter.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://www.fire.co.za/universalpopup/css/jquery.fancybox.css	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-4/Dosetech-4-2117794197.png	false	high
https://www.youtube.com/sw.js	false	high
https://www.youtube.com/s/desktop/2fc4f2e2/jsbin/www-tampering.vflset/www-tampering.js	false	high
http://www.fire.co.za/wp-content/uploads/SEControls-Master-Logo.png	false	high
https://www.youtube.com/s/player/6f20102c/player_ias.vflset/en_US/base.js	false	high
https://www.youtube.com/generate_204?-2sCxg	false	high
https://platform.twitter.com/widgets/tweet_button.2b2d73daf636805223fb11d48f3e94f7.en.html#dnt=false&id=twitter-widget-0&lang=en&original_referer=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&size=m&time=1681963105842&type=share&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Pro-Amp-Logo-1/Pro-Amp-Logo-1-3248741379.png	false	high
https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.fire.co.za&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.yTSbWrSe458.O%2Fd%3D1%2Frs%3DAHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q%2Fm%3D__features__#rpctoken=706006844&forcesecure=1	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Technoswitch-Logo-1/Technoswitch-Logo-1-2259348168.png	false	high
https://consent.youtube.com/save	false	high
http://www.fire.co.za/universalpopup/img/arr.png	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-logo-1/Dosetech-logo-1-2720985730.png	false	high
http://connect.facebook.net/en_US/sdk.js	false	high
http://www.fire.co.za/%7B$homeUrl%7D	false	high
https://platform.twitter.com/js/button.e7f9415a2e000feaab02c86dd5802747.js	false	high
https://www.youtube.com/s/desktop/2fc4f2e2/jsbin/intersection-observer.min.vflset/intersection-observer.min.js	false	high
https://www.facebook.com/v2.0/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1f18fbe320fdb%26domain%3Dwww.fire.co.za%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.fire.co.za%252Ff23f9c5803cc43%26relation%3Dparent.parent&container_width=1247&href=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false	false	high
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	high
https://developers.google.com/	false	high
https://www.youtube.com/s/desktop/2fc4f2e2/jsbin/network.vflset/network.js	false	high
https://youtube.com/	false	high
http://www.fire.co.za/universalpopup/img/chrome.png	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-2/Dosetech-2-3092639762.png	false	high
https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http%3A%2F%2Fwww.fire.co.za&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-2/Dosetech-2-779345947.png	false	high
http://www.fire.co.za/wp-content/themes/directory2/design/img/404.png	false	high
http://www.fire.co.za/universalpopup/css/bootstrap.min.css	false	high
https://apis.google.com/js/rpc:shindig_random.js?onload=init	false	high
http://www.fire.co.za/universalpopup/index-chrome.html	false	high
http://www.fire.co.za/wp-content/uploads/fireweb-logo.png	false	high
https://syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1681963105858%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22aaf4084522e3a%3A1674595607486%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=ee90eca4bcf54845e209d9a3c74486e40c6bb20e	false	high
http://www.fire.co.za/universalpopup/img/chrome-bottom.jpg	false	high
https://www.google.com/favicon.ico	false	high
https://www.youtube.com/s/desktop/2fc4f2e2/cssbin/www-main-desktop-watch-page-skeleton.css	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-7/Dosetech-7-1720970879.png	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/local/category_default-4257682527.png	false	high
http://www.fire.co.za/%7BhomeUrl	false	high
https://www.youtube.com/s/desktop/2fc4f2e2/jsbin/desktop_polymer.vflset/desktop_polymer.js	false	high
http://www.fire.co.za/	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-1/Dosetech-1-2700929016.png	false	high
https://www.youtube.com/app_shell	false	high
https://www.youtube.com/s/desktop/2fc4f2e2/img/favicon_32x32.png	false	high
http://www.fire.co.za/universalpopup/js/vendor/getBrowser.js	false	high
https://www.youtube.com/s/search/audio/success.mp3	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-6/Dosetech-6-2855923425.png	false	high
http://www.fire.co.za/	false	high
http://www.fire.co.za/universalpopup/js/jquery.fancybox.js	false	high
http://www.fire.co.za/universalpopup/index-chrome.html	false	high
https://www.youtube.com/s/player/6f20102c/www-player.css	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-6/Dosetech-6-1008729832.png	false	high
https://syndication.twitter.com/settings?session_id=5f635b7f35dadb5ab99754695fc5743b646761a4	false	high
https://www.youtube.com/s/desktop/2fc4f2e2/img/favicon.ico	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/AdvertiseHere112/AdvertiseHere112-1196120779.png	false	high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.yTSbWrSe458.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q/cb=gapi.loaded_1?le=scs	false	high
http://www.fire.co.za/%7Boptions-%3Etheme-%3Eheader-%3Elogo	false	high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.yTSbWrSe458.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q/cb=gapi.loaded_0?le=scs	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Corporate-Security-Logo-1/Corporate-Security-Logo-1-2743285788.png	false	high
https://accounts.google.com/v3/signin/identifier?dsh=S-1627170847%3A1681930724361565&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en&ifkv=AQMjQ7Sd5_5oKAa_dYMztzd4-l_yOx8SUTaw79Fv73rOC9tF-ttpTBsz4LiLlYshkMB3H3NavcDv9Q&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin	false	high
http://www.fire.co.za/item/dosetech/	false	high
https://platform.twitter.com/widgets.js	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Fire-Dynamics-Africa-logo-1/Fire-Dynamics-Africa-logo-1-2424399028.png	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/CGS-Solutions-Logo-1/CGS-Solutions-Logo-1-1046770216.png	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-3/Dosetech-3-3805929605.png	false	high
https://yt3.googleusercontent.com/ytc/AGIKgqNEh0Cl5e40Qqr3f71eYj-Gu9JKqQ1ngRO6xbHc=s176-c-k-c0x00ffffff-no-rj	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/SBS-Logo-1/SBS-Logo-1-236112869.png	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-5/Dosetech-5-2995845387.png	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-1/Dosetech-1-920319985.png	false	high
http://www.fire.co.za/wp-content/uploads/cache/images/Dosetech-Akron-1/Dosetech-Akron-1-3422118476.png	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_390.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://myaccount-daily-1.corp.google.com	chromecache_390.1.dr	false		high
https://apis.google.com/js/client.js	chromecache_340.1.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_390.1.dr	false	URL Reputation: safe	unknown
https://www.youtube.com	chromecache_390.1.dr	false		high
https://www.internalfb.com/intern/invariant/	chromecache_367.1.dr	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_367.1.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_390.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://content-googleapis-test.sandbox.google.com	chromecache_340.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_428.1.dr	false		high
https://www.google.com/tools/feedback	chromecache_340.1.dr, chromecache_390.1.dr	false		high
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	chromecache_390.1.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_340.1.dr	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_390.1.dr	false		high
https://apis.google.com/js/api.js	chromecache_390.1.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_390.1.dr	false	URL Reputation: safe	unknown
https://docs.google.com/picker	chromecache_390.1.dr	false		high
https://schema.org	chromecache_390.1.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_340.1.dr	false		high
https://plus.google.com	chromecache_536.1.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_340.1.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_390.1.dr, chromecache_451.1.dr	false		high
https://content-googleapis-staging.sandbox.google.com	chromecache_340.1.dr	false		high
https://accounts.google.com/o/oauth2/iframe	chromecache_428.1.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_387.1.dr	false		high
https://support.google.com/inapp/%	chromecache_340.1.dr	false		high
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	chromecache_390.1.dr	false		high
https://apis.google.com	chromecache_536.1.dr, chromecache_390.1.dr	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_390.1.dr	false	URL Reputation: safe	unknown
https://domains.google.com/suggest/flow	chromecache_536.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.68	www.google.com	United States	15169	GOOGLEUS	false
93.184.220.66	cs41.wac.edgecastcdn.net	European Union	15133	EDGECASTUS	false
104.244.42.200	unknown	United States	13414	TWITTERUS	false
164.160.91.17	fire.co.za	South Africa	328037	ElitehostZA	false
157.240.17.35	unknown	United States	32934	FACEBOOKUS	false
157.240.17.15	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.251.209.14	youtube.com	United States	15169	GOOGLEUS	false
142.251.209.13	accounts.google.com	United States	15169	GOOGLEUS	false
142.251.209.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.180.166	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.97	yt3.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.184.110	clients.l.google.com	United States	15169	GOOGLEUS	false
104.244.42.136	syndication.twitter.com	United States	13414	TWITTERUS	false
142.251.209.46	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.180.150	i.ytimg.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.180.174	consent.youtube.com	United States	15169	GOOGLEUS	false
157.240.234.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	37.0.0 Beryl
Analysis ID:	850111
Start date and time:	2023-04-19 20:56:38 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 10m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.fire.co.za
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@38/235@34/20
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://www.fire.co.za/%7B$homeUrl%7D Browse: http://www.fire.co.za/item/dosetech/ Browse: https://www.youtube.com/channel/UCW-wT5XRUpLC9JX2mW8Ukcw Browse: http://www.fire.co.za/item/fire-dynamics-africa/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.67, 34.104.35.123, 142.250.180.170, 142.251.209.10, 142.251.209.42, 142.250.184.74, 142.250.184.106, 142.250.180.138, 142.251.209.3, 142.250.184.99, 216.58.209.42
Excluded domains from analysis (whitelisted): www.bing.com, fonts.googleapis.com, ssl.gstatic.com, fs.microsoft.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, jnn-pa.googleapis.com, edgedl.me.gvt1.com, update.googleapis.com, wac.apr-8315.edgecastdns.net, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtWriteVirtualMemory calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: mgf@dosetech.co.za
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: info@fire.co.za
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: fire@fire.co.za

Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: /universalpopup
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http%3A%2F%2Fwww.fire.co.za&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__#_methods=onPlusOne%2C_ready%2C_close%2C_open%2C_resizeMe%2C_renderstart%2Concircled%2Cdrefresh%2Cerefresh%2Conload&id=I0_1681963095359&_gfid=I0_1681963095359&parent=http%3A%2F%2Fwww.fire.co.za&pfname=&rpctoken=90618866
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=http%3A%2F%2Fwww.fire.co.za
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.fire.co.za&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__#rpctoken=280035364&forcesecure=1
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: /universalpopup
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://www.facebook.com/v2.0/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1f18fbe320fdb%26domain%3Dwww.fire.co.za%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.fire.co.za%252Ff23f9c5803cc43%26relation%3Dparent.parent&container_width=1247&href=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/tweet_button.2b2d73daf636805223fb11d48f3e94f7.en.html#dnt=false&id=twitter-widget-0&lang=en&original_referer=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&size=m&time=1681963105842&type=share&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http%3A%2F%2Fwww.fire.co.za&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__#_methods=onPlusOne%2C_ready%2C_close%2C_open%2C_resizeMe%2C_renderstart%2Concircled%2Cdrefresh%2Cerefresh%2Conload&id=I0_1681963095359&_gfid=I0_1681963095359&parent=http%3A%2F%2Fwww.fire.co.za&pfname=&rpctoken=90618866
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=http%3A%2F%2Fwww.fire.co.za
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.fire.co.za&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__#rpctoken=280035364&forcesecure=1
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: /universalpopup
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://www.facebook.com/v2.0/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1f18fbe320fdb%26domain%3Dwww.fire.co.za%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.fire.co.za%252Ff23f9c5803cc43%26relation%3Dparent.parent&container_width=1247&href=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/tweet_button.2b2d73daf636805223fb11d48f3e94f7.en.html#dnt=false&id=twitter-widget-0&lang=en&original_referer=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&size=m&time=1681963105842&type=share&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http%3A%2F%2Fwww.fire.co.za&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__#_methods=onPlusOne%2C_ready%2C_close%2C_open%2C_resizeMe%2C_renderstart%2Concircled%2Cdrefresh%2Cerefresh%2Conload&id=I0_1681963095359&_gfid=I0_1681963095359&parent=http%3A%2F%2Fwww.fire.co.za&pfname=&rpctoken=90618866
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=http%3A%2F%2Fwww.fire.co.za
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.fire.co.za&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__#rpctoken=280035364&forcesecure=1
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: /universalpopup
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://www.facebook.com/v2.0/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1f18fbe320fdb%26domain%3Dwww.fire.co.za%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.fire.co.za%252Ff23f9c5803cc43%26relation%3Dparent.parent&container_width=1247&href=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/tweet_button.2b2d73daf636805223fb11d48f3e94f7.en.html#dnt=false&id=twitter-widget-0&lang=en&original_referer=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&size=m&time=1681963105842&type=share&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http%3A%2F%2Fwww.fire.co.za&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__#_methods=onPlusOne%2C_ready%2C_close%2C_open%2C_resizeMe%2C_renderstart%2Concircled%2Cdrefresh%2Cerefresh%2Conload&id=I0_1681963095359&_gfid=I0_1681963095359&parent=http%3A%2F%2Fwww.fire.co.za&pfname=&rpctoken=90618866
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=http%3A%2F%2Fwww.fire.co.za
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.fire.co.za&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__#rpctoken=280035364&forcesecure=1
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: Iframe src: /universalpopup
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: Iframe src: https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http%3A%2F%2Fwww.fire.co.za&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Ffire-dynamics-africa%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.yTSbWrSe458.O%2Fd%3D1%2Frs%3DAHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q%2Fm%3D__features__#_methods=onPlusOne%2C_ready%2C_close%2C_open%2C_resizeMe%2C_renderstart%2Concircled%2Cdrefresh%2Cerefresh%2Conload&id=I0_1681963160078&_gfid=I0_1681963160078&parent=http%3A%2F%2Fwww.fire.co.za&pfname=&rpctoken=17146079
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=http%3A%2F%2Fwww.fire.co.za
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.fire.co.za&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.yTSbWrSe458.O%2Fd%3D1%2Frs%3DAHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q%2Fm%3D__features__#rpctoken=706006844&forcesecure=1
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: Iframe src: /universalpopup
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: Iframe src: https://www.facebook.com/v2.0/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df54be269d46a58%26domain%3Dwww.fire.co.za%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.fire.co.za%252Ff2591078936cecc%26relation%3Dparent.parent&container_width=1247&href=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Ffire-dynamics-africa%2F&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/tweet_button.2b2d73daf636805223fb11d48f3e94f7.en.html#dnt=false&id=twitter-widget-0&lang=en&original_referer=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Ffire-dynamics-africa%2F&size=m&time=1681963170372&type=share&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Ffire-dynamics-africa%2F
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: Iframe src: https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http%3A%2F%2Fwww.fire.co.za&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Ffire-dynamics-africa%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.yTSbWrSe458.O%2Fd%3D1%2Frs%3DAHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q%2Fm%3D__features__#_methods=onPlusOne%2C_ready%2C_close%2C_open%2C_resizeMe%2C_renderstart%2Concircled%2Cdrefresh%2Cerefresh%2Conload&id=I0_1681963160078&_gfid=I0_1681963160078&parent=http%3A%2F%2Fwww.fire.co.za&pfname=&rpctoken=17146079
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=http%3A%2F%2Fwww.fire.co.za
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: Iframe src: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.fire.co.za&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.yTSbWrSe458.O%2Fd%3D1%2Frs%3DAHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q%2Fm%3D__features__#rpctoken=706006844&forcesecure=1

Source: http://www.fire.co.za/	HTTP Parser: No favicon
Source: http://www.fire.co.za/	HTTP Parser: No favicon
Source: http://www.fire.co.za/%7BhomeUrl	HTTP Parser: No favicon
Source: http://www.fire.co.za/%7BhomeUrl	HTTP Parser: No favicon
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No favicon
Source: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.fire.co.za&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__#rpctoken=280035364&forcesecure=1	HTTP Parser: No favicon
Source: https://platform.twitter.com/widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=http%3A%2F%2Fwww.fire.co.za	HTTP Parser: No favicon
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No favicon
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No favicon
Source: https://platform.twitter.com/widgets/tweet_button.2b2d73daf636805223fb11d48f3e94f7.en.html#dnt=false&id=twitter-widget-0&lang=en&original_referer=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F&size=m&time=1681963105842&type=share&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Fdosetech%2F	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?dsh=S-1627170847%3A1681930724361565&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en&ifkv=AQMjQ7Sd5_5oKAa_dYMztzd4-l_yOx8SUTaw79Fv73rOC9tF-ttpTBsz4LiLlYshkMB3H3NavcDv9Q&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: No favicon
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No favicon
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: No favicon
Source: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fwww.fire.co.za&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.yTSbWrSe458.O%2Fd%3D1%2Frs%3DAHpOoo_5dpdVCMe_LPx1yH-hHA2M85TB-Q%2Fm%3D__features__#rpctoken=706006844&forcesecure=1	HTTP Parser: No favicon
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: No favicon
Source: https://platform.twitter.com/widgets/tweet_button.2b2d73daf636805223fb11d48f3e94f7.en.html#dnt=false&id=twitter-widget-0&lang=en&original_referer=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Ffire-dynamics-africa%2F&size=m&time=1681963170372&type=share&url=http%3A%2F%2Fwww.fire.co.za%2Fitem%2Ffire-dynamics-africa%2F	HTTP Parser: No favicon

Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: Has password / email / username input fields
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: Has password / email / username input fields

Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: HTML title missing
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: HTML title missing
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: HTML title missing
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: HTML title missing
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: HTML title missing
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: HTML title missing

Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No <meta name="author".. found
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No <meta name="author".. found
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No <meta name="author".. found
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No <meta name="author".. found
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: No <meta name="author".. found
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: No <meta name="author".. found

Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No <meta name="copyright".. found
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No <meta name="copyright".. found
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No <meta name="copyright".. found
Source: http://www.fire.co.za/item/dosetech/	HTTP Parser: No <meta name="copyright".. found
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: No <meta name="copyright".. found
Source: http://www.fire.co.za/item/fire-dynamics-africa/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443

Source: chromecache_367.1.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_459.1.dr	String found in binary or memory: ;var Q=A.window,R,S,T=(null==Q?void 0:null==(R=Q.yt)?void 0:R.config_)\|\|(null==Q?void 0:null==(S=Q.ytcfg)?void 0:S.data_)\|\|{};B("yt.config_",T);var U=Object.freeze("document.appendChild document.body.appendChild document.querySelector document.querySelectorAll history.back history.go".split(" ")),V=Object.freeze("fonts.googleapis.com s0.2mdn.net securepubads.g.doubleclick.net ssl.google-analytics.com static.doubleclick.net www.google-analytics.com www.googletagservices.com www.youtube.com youtube.com".split(" ")),W=Object.freeze(["pkedcjkdefgpdelpbcmbmeomcjbeemfm","fjhoaacokmgbjemoflkofnenfaiekifl","enhhojjnijigcajfphajepfemndkmdlo"]),X= equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: ;var dcb={},ecb=(dcb.initialized={callback:function(a){var b={},c={};Vab().install((b.document_disposed={callback:function(){A("finalize_all_timelines")?QVa():lv();cbb("FOREGROUND_HEARTBEAT_TRIGGER_ON_BACKGROUND");d4a();a.injector.resolve(vy).shutdown();QRa(It);null!=Vt&&Vt.flush();Dy&&Dy.JSC$8018_snapshotAndFlush()}},b),(c.flush_logs={callback:function(){Wo()}},c))}},dcb);var fcb={},gcb=(fcb.initialized={priority:8,callback:function(){var a=document.createElement("iframe");a.style.display="none";var b=zg("https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid="+lk("INNERTUBE_CONTEXT_CLIENT_NAME"));a.removeAttribute("srcdoc");if(b instanceof Eb)throw new Mga("TrustedResourceUrl",2);for(var c="allow-same-origin allow-scripts allow-forms allow-popups allow-popups-to-escape-sandbox allow-storage-access-by-user-activation".split(" ");0<a.sandbox.length;)a.sandbox.remove(a.sandbox.item(0)); equals www.youtube.com (Youtube)
Source: chromecache_367.1.dr	String found in binary or memory: __d("FBPixelEndpoint",["invariant","FBEventsParamList","FBEventsUtils"],(function(a,b,c,d,e,f,g,h){"use strict";var i="https://www.facebook.com/tr/",j=location.href,k=window.top!==window,l=document.referrer;function m(a,b,d,e){e===void 0&&(e={});var f=new(c("FBEventsParamList"))();f.append("id",a);f.append("ev",b);f.append("dl",j);f.append("rl",l);f.append("if",k);f.append("ts",new Date().valueOf());f.append("cd",d);f.append("sw",window.screen.width);f.append("sh",window.screen.height);for(a in e)f.append(a,e[a]);return f}function a(a,b,c,d){a=m(a,b,c,d);b=a.toQueryString();2048>(i+"?"+b).length?n(i,b):o(i,a)}function n(a,b){var c=new Image();c.src=a+"?"+b}function o(a,b){var c="fb"+Math.random().toString().replace(".",""),e=document.createElement("form");e.method="post";e.action=a;e.target=c;e.acceptCharset="utf-8";e.style.display="none";a=!!(window.attachEvent&&!window.addEventListener);a=a?'<iframe name="'+c+'">':"iframe";var f=document.createElement(a);f instanceof HTMLIFrameElement\|\|h(0,20659);f.src="javascript:false";f.id=c;f.name=c;e.appendChild(f);d("FBEventsUtils").listenOnce(f,"load",function(){b.each(function(a,b){var c=document.createElement("input");c.name=a;c.value=b;e.appendChild(c)}),d("FBEventsUtils").listenOnce(f,"load",function(){var a;(a=e.parentNode)==null?void 0:a.removeChild(e)}),e.submit()});(a=document.body)==null?void 0:a.appendChild(e)}g.sendEvent=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_367.1.dr	String found in binary or memory: __d("LiveChatPluginConstants",["$InternalEnum"],(function(a,b,c,d,e,f){"use strict";a="LiveChatEvent/";c="mqtt";d=b("$InternalEnum")({CONNECTED:"Connected",CONNECTING:"Connecting",DISCONNECTED:"Disconnected"});e=250;b=a+"close_timestamps";var g=a+"reset_badging",h=a+"state",i=a+"switch_account",j=a+"typing",k=a+"unread_count",l=a+"update_message_list",m="platform/plugins/connect/guest",n=a+"guest_upgrade_success",o=a+"guest_upgrade_success_incognito",p=a+"navigate_to_welcome_page",q="platform/plugins/connect/access_token";a=a+"start_re_engagement";var r=124,s=187,t=24,u=424,v=288,w=313,x=219,y=40,z=36,A=24,B=18,C=708,D=540,E=244,F=202,G=509,H=430,I=6,J=0,K=1,L=-1,M="messaging_plugin",N=8634e4,O="#8A8D91",P="entrypoint:customer_chat_plugin",Q=0,R=1,S=2,T=3,U="new_message_update",V="initial_fetch",W=5e3,X="https://www.facebook.com/business/help/1661027437357021";f.MQTT=c;f.MQTTGatewayConnectionState=d;f.LOGIN_CHECK_INTERVAL=e;f.CLOSE_TIMESTAMPS=b;f.RESET_BADGING=g;f.STATE_UPDATE=h;f.SWITCH_ACCOUNT=i;f.TYPING_UPDATE=j;f.UNREAD_COUNT_UPDATE=k;f.UPDATE_MESSAGE_LIST=l;f.GUEST_MODE_CONNECT=m;f.GUEST_UPGRADE_SUCCESS=n;f.GUEST_UPGRADE_SUCCESS_INCOGNITO=o;f.NAVIGATE_TO_WELCOME_PAGE=p;f.ACCESS_TOKEN_LOGIN=q;f.START_RE_ENGAGEMENT=a;f.PROMPT_FALLBACK_HEIGHT=r;f.PROMPT_REDESIGN_FALLBACK_HEIGHT=s;f.PROMPT_CONTAINER_PADDING_HEIGHT=t;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT=u;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT=v;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=w;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=x;f.WELCOME_PAGE_ATTRIBUTION_OFFEST_HEIGHT=y;f.WELCOME_PAGE_ATTRIBUTION_OFFSET_HEIGHT_WITH_COMPACT=z;f.MAIN_IFRAME_PADDING_HEIGHT=A;f.MAIN_IFRAME_PADDING_HEIGHT_WITH_COMPACT=B;f.THREAD_PAGE_HEIGHT=C;f.THREAD_PAGE_HEIGHT_COMPACT=D;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT=E;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT_COMPACT=F;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT=G;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT_COMPACT=H;f.GREETING_TEXT_BOTTOM_SPACING_OFFEST=I;f.LOGGED_IN_CHAT_MODE=J;f.GUEST_CHAT_MODE=K;f.INVALID_CHAT_MODE=L;f.MESSENGING_PLUGIN=M;f.GUEST_SESSION_STORAGE_VALIDITY_MS=N;f.GUEST_SEND_BUTTON_COLOR_EMPTY_INPUT=O;f.LIVE_CHAT_ENTRYPOINT_ATTRIBUTION_TAG=P;f.ITP_CONSISTENCY_UNKNOWN_LOGGED_OUT=Q;f.ITP_CONSISTENCY_CONSISTENT_LOGGED_IN=R;f.ITP_CONSISTENCY_INCONSISTENT=S;f.ITP_CONSISTENCY_CONSISTENT_NO_ITP=T;f.NEW_MESSAGE_UPDATE=U;f.INITIAL_FETCH=V;f.PLUGIN_FADE_DELAY=W;f.HELP_DEX_LINK=X}),66); equals www.facebook.com (Facebook)
Source: chromecache_390.1.dr	String found in binary or memory: a.image3DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg";a.image3LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg";a.image0SquigglyBackground=a.image0LightSquigglyBackground;a.image1SquigglyBackground=a.image1LightSquigglyBackground;a.image3SquigglyBackground=a.image3LightSquigglyBackground;return a}; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: b.includes("/mytube.js")\|\|b.includes("JSON.parseWrapper")\|\|b.includes("/inj_js/common.js")\|\|b.includes("firebug-lite")\|\|b.includes(".repl.co/")\|\|b.includes("linkfix")\|\|a.message.includes("Access is denied for this document")&&b.includes("<anonymous>"))return!0;if(b.includes("https://www.youtube.com"))return!1;a=b.split("\n");if(!a.length)return!1;if(3>=a.length&&b.includes("s.onloadeddata"))return!0;b=0;for(var c=k(a),d=c.next();!d.done;d=c.next())d=d.value,(d.includes("https://")\|\|d.includes("http://"))&& equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: cW.prototype.navigateToAboutTheseResultsPage=function(){var a=yg("https://www.youtube.com/howyoutubeworks/product-features/search/");if(a){var b=window;a=mg(a);void 0!==a&&b.open(a,"_blank",void 0)}else qk(Error("Could not get url for 'About These Results' help center"))}; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: e.created=function(){this.embedHost_=yUc[lk("INNERTUBE_CLIENT_NAME")]\|\|"www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: function RBb(a){if(a.urlEndpoint){if(a=uk(a.urlEndpoint.url),a.adurl)return Kc(a.adurl)}else if(a.watchEndpoint)return"//www.youtube.com/watch?v="+a.watchEndpoint.videoId;return null} equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: gD[Jo]=[t0a,hx,py];var Gab=new Ko("STORAGE_MANAGER_TOKEN");var Hab=new Ko("APP_DIRECTION_TOKEN"),hD=new Ko("ICON_RENDERER_TOKEN"),iD=new Ko("DARK_THEME_TOKEN");var Iab=new Ko("VISIBILITY_OBSERVER");var Jab=new Ko("ICON_SET_TOKEN");var Kab=["https://fonts.gstatic.com","https://www.gstatic.com","https://www.youtube.com"],Lab=A("wil_icon_limit_concurrent_fetches")?2:Infinity,zD=function(a,b){this.iconSet=a;this.appDirection=b;this.responsePromises={};this.queuedResponseResolvers={};this.numFetches=0;this.cacheStorage=ya.caches?ya.caches.open("yt-icons").catch(function(){}):Promise.resolve(void 0); equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: if(!c.iconset)return c.missingIconSet=!0,c.listen(window,"iron-iconset-added","onIconsetAdded"),B.return();c.missingIconSet&&(c.missingIconSet=!1,c.unlisten(window,"iron-iconset-added","onIconsetAdded"));if(f)a:{var D={name:"animated_like_light",nameDarkTheme:"animated_like_dark",path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/animated_like_icon_v2_light.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/animated_like_icon_v2_dark.json",lottiePlayerProps:{animationConfig:{loop:!1, equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: m(Z$,H);e=Z$.prototype;e.created=function(){var a=Mo();A("kevlar_clear_duplicate_pref_cookie")&&vl(Fh,function(){var b=fh.get("PREF");b&&!/f\d=/.test(b)&&(b=Ak("kevlar_duplicate_pref_cookie_domain_override"),document.cookie=b?"PREF=null;domain="+b+";expires=Thu, 01 Jan 1970 00:00:01 GMT":"PREF=null;domain=.www.youtube.com;expires=Thu, 01 Jan 1970 00:00:01 GMT")}); equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: v7a.prototype.getUrl=function(a,b){return"https://www.gstatic.com/youtube/img/icons/web/"+b.style+"/"+a+"/v"+b.version+"/"+b.size+"px.svg"};var sz=function(){}; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: var L8a={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.gif"}; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: var V_b=U_b;y([S(),z("design:type",Object)],V_b.prototype,"data",void 0);V_b=y([T({is:"ytd-handles-claiming-faq-section-renderer"})],V_b);var W_b;var X_b;var Y_b=function(){var a=N.apply(this,arguments)\|\|this;a.rightSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg";a.rightSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg";a.leftSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg";a.leftSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg";a.leftSquiggly=a.leftSquigglyLight;a.rightSquiggly=a.rightSquigglyLight; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: var ZV=H5b;y([O(W.YtRendererBehavior),z("design:type",Object)],ZV.prototype,"ytRendererBehavior",void 0);y([O(U.YtRendererstamperBehavior),z("design:type",Object)],ZV.prototype,"ytRendererstamperBehavior",void 0);y([S(),z("design:type",Object)],ZV.prototype,"data",void 0);ZV=y([T({is:"ytd-feed-channel-filter-header-renderer"})],ZV);var I5b;var J5b;var K5b=bx(hu("DELETE_FROM_DOWNLOADS",{},"Delete from downloads"));var L5b={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: var aU=$T;y([S(),z("design:type",Object)],aU.prototype,"data",void 0);y([O(DK.YtComponentBehavior),z("design:type",Object)],aU.prototype,"ytComponentBehavior",void 0);y([S({reflectToAttribute:!0,value:!1}),z("design:type",Boolean)],aU.prototype,"isDarkTheme",void 0);y([O(Sy.YtActionHandlerBehavior),z("design:type",Object)],aU.prototype,"ytActionHandlerBehavior",void 0);aU=y([T({is:"ytd-handles-claiming-update-social-renderer"})],aU);var d0b;var e0b;var bU=function(){var a=N.apply(this,arguments)\|\|this;a.JSC$14523_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg";a.JSC$14523_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.squigglyBackground=a.JSC$14523_squigglyBackgroundLight;return a}; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: var eMc=dMc;y([S(),z("design:type",Object)],eMc.prototype,"data",void 0);eMc=y([T({is:"ytd-feature-enablement-info-renderer"})],eMc);var fMc;var gMc;var hMc=["www.youtube.com","yt-web-release.corp.youtube.com","yt-web-green.corp.youtube.com"],l6=function(){var a=N.apply(this,arguments)\|\|this;a.handlePhoneVerificationSuccess=function(b){if(a.isValidPhoneVerificationCompletionMessageEvent(b)){var c;(null==(c=a.data)?0:c.nextStepCommand)&&a.ytComponentBehavior.resolveCommand(a.data.nextStepCommand)}}; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: var qY=cfc;y([O(W.YtRendererBehavior),z("design:type",Object)],qY.prototype,"ytRendererBehavior",void 0);y([O(U.YtRendererstamperBehavior),z("design:type",Object)],qY.prototype,"ytRendererstamperBehavior",void 0);y([S(),z("design:type",Object)],qY.prototype,"data",void 0);qY=y([T({is:"ytd-labs-edit-renderer"})],qY);var dfc;var efc;var rY=function(){var a=N.apply(this,arguments)\|\|this;a.dark=!1;a.headerBackgroundLight="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_2x.png";a.headerBackgroundDark="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_dark_2x.png";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: vg(d,Kb(Ab("https://www.youtube.com/iframe_api")));a.insertBefore(d,a.firstChild);return c.promise},OBb=function(a,b,c){var d,f; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: weight:500},{callback:function(a){if(!a.stack)return!1;var b=a.stack.trim().split("\n");b.length&&b[0].endsWith("Error: "+a.message)&&b.shift();b.length&&b[b.length-1].includes("at window.onerror (")&&b.pop();if(!b.length)return!0;if("Script error."===a.message)return b[0].includes("www.youtube.com")\|\|2<=b.length&&b[0].startsWith("at new")&&b[1].startsWith("at window.onerror");if("Unexpected token"===a.message)return!0;a=k(b);for(b=a.next();!b.done;b=a.next())if(b=b.value,!(b.includes("<anonymous>")\|\| equals www.youtube.com (Youtube)
Source: chromecache_367.1.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (e) {var i = new Image();i.crossOrigin = 'anonymous';i.dataset.testid = 'fbSDKErrorReport';i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+e.name+'","line":"'+(e.lineNumber\|\|e.line)+'","script":"'+(e.fileName\|\|e.sourceURL\|\|e.script\|\|"sdk.js")+'","stack":"'+(e.stackTrace\|\|e.stack)+'","revision":"1007342133","namespace":"FB","message":"'+e.message+'"}}');document.body.appendChild(i);} equals www.facebook.com (Facebook)
Source: chromecache_390.1.dr	String found in binary or memory: y([O(Sy.YtActionHandlerBehavior),z("design:type",Object)],XT.prototype,"ytActionHandlerBehavior",void 0);y([S(),z("design:type",Object)],XT.prototype,"actionButtonOverride",void 0);y([S({reflectToAttribute:!0}),z("design:type",Object)],XT.prototype,"darkerDarkTheme",void 0);XT=y([T({is:"ytd-handles-claiming-header-renderer"})],XT);var Z_b;var $_b;var a0b=function(){var a=N.apply(this,arguments)\|\|this;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.image0DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg";a.image0LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg";a.image1DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg";a.image1LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg"; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: y([S({reflectToAttribute:!0,value:!1}),z("design:type",Boolean)],cU.prototype,"isDarkTheme",void 0);y([S(),z("design:type",String)],cU.prototype,"squigglyBackground",void 0);y([R("squigglyBackground"),z("design:type",Function),z("design:paramtypes",[]),z("design:returntype")],cU.prototype,"updateSquigglyBackgroundStyle",null);cU=y([T({is:"ytd-handles-claiming-vanity-info-renderer"})],cU);var f0b;var g0b;var h0b=function(){var a=N.apply(this,arguments)\|\|this;a.JSC$14526_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg";a.JSC$14526_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg";a.squigglyBackground=a.JSC$14526_squigglyBackgroundLight;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_390.1.dr	String found in binary or memory: {query:a.browseEndpoint.query})),f&&a.browseEndpoint.params&&(f=ju(f,{params:a.browseEndpoint.params}));else{if(a.urlEndpoint)return a.urlEndpoint.url;a.signInEndpoint?(f="https://accounts.google.com/ServiceLogin",d={},vb.extend(d,b\|\|{},{"continue":window.location.href.split("#")[0],action_handle_signin:!0,passive:!0}),b=d):a.uploadEndpoint?f="//www.youtube.com/upload":a.liveChatEndpoint?(f=a.liveChatEndpoint,d=vb.clone(f),La(f.continuation)&&(h=Object.keys(f.continuation)[0],d.continuation=f.continuation[h].continuation), equals www.youtube.com (Youtube)

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Wed, 19 Apr 2023 18:58:44 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsReport-To: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi/external"}]}Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="AccountsSignInUi"Content-Security-Policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-Ni-D0PpoYJapLCD6PLaFLA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self'Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlistAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-platform=, ch-ua-platform-version=Server: ESFX-XSS-Protection: 0X-Content-Type-Options: nosniffAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Accept-Ranges: noneVary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-EncodingConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/5.5.38content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://www.fire.co.za/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Wed, 19 Apr 2023 18:57:41 GMTserver: LiteSpeedData Raw: 31 62 34 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 5c db 6e 1b 49 92 7d b6 81 fd 87 1c 19 68 5b 80 8a 14 49 59 17 5b d6 8e 5a 96 dd c2 58 b6 c6 54 b7 b1 bd 58 18 c9 aa 24 59 a3 62 15 bb 2e a2 e9 c5 00 fb b0 df b0 c0 be f5 eb fe 46 7f ca 7c c9 9e 88 cc ac ca 22 59 14 bb a7 b5 dd 98 b5 60 58 54 55 5e 22 23 23 e3 72 22 92 0f 1f d2 cf 71 10 de 0a 3f 92 59 f6 62 6b ac 64 a0 52 2f 92 f3 a4 c8 85 8a d4 44 c5 b9 17 27 b1 f2 54 2c 07 91 0a b6 4e 1e 3e 58 d1 c3 36 9d a5 72 ca 4d da 18 75 75 d3 4c c9 d4 1f 7b a6 65 45 42 18 bc d8 52 d1 c4 33 ef 87 49 3a f1 d4 d3 9e 0a d4 d3 a7 f2 b0 23 d5 a1 37 91 61 bc 65 69 5d 6c cb 2f 4f ec 82 ee 1e ad 69 20 90 6f 96 78 f7 18 9e 9f c4 39 88 52 69 39 9a 4b 7e f9 56 98 a7 f9 7c aa bc 0e 31 e8 c1 31 2d 50 48 3f 0f 93 18 8c cf f3 e9 b3 76 7b 36 9b b5 86 61 aa 5a 7e d2 fa 2c db 5b 62 a2 f2 71 02 c6 8c 54 5e ce 40 0b 75 b9 c4 04 63 40 67 1f 89 37 c4 e0 29 08 a3 c9 ea 6f c3 78 5a e4 99 43 bb 6e 52 1b c1 10 9c 8d 65 90 cc b6 4e 8e cd 7e 2e 0e 65 9a d1 42 21 29 66 ae 07 a2 3e 9f 69 64 a6 b5 22 42 43 f1 cf 71 36 95 b1 dd 55 dd 96 9b 1a 11 39 e6 3f 04 b1 ee c5 56 ae 3e 81 11 b1 9c e0 73 b6 25 68 87 dc 1e fa f5 34 92 be 1a 27 11 44 f9 c5 56 9f c5 4d dc a8 f9 2c 49 83 92 89 4e af 2d 71 2b a3 02 03 6e 89 36 16 4a d4 90 18 59 f2 f0 db 65 ad 2f 73 35 4a d2 b9 dd 01 5e 8e 08 64 2e bd 69 92 85 7a 3b b1 87 99 e1 46 6d 75 65 67 3f 02 59 60 6b 68 d7 3d 94 62 28 bd 3c 9c a8 8c b8 1d 56 84 d0 fc 19 ce 97 9f 9b 59 dc d5 9d 19 6a 2c 4f ec 04 e5 3a ed 03 43 ae 08 d4 50 16 51 ee 05 61 a6 cf b3 c8 f2 79 84 c5 e3 01 f8 36 7f 26 e8 b4 3f d7 3b 79 9c 4c 69 3d a0 c5 7c 20 a6 98 87 96 69 dd c3 dd ad 93 53 95 26 59 12 89 57 90 5d 71 fe 29 0f e3 51 11 66 63 fc 12 fd 79 96 ab 49 56 0e b1 d8 7d ff 68 eb e4 fc 16 c2 93 09 4f f7 ff 4a 4e a6 cf c5 f9 ad f4 0b 49 d3 8b 4b 19 cb 11 ab a2 c6 51 0e 40 04 4f 2e e3 40 9c 46 51 a8 f0 2b cb 12 3f e4 21 9a a7 3f c0 69 2c 3b f6 e5 50 e5 73 71 9d e2 84 81 f6 e6 d9 7a a6 d3 59 12 67 e0 a6 24 ea 9f 5c 72 27 71 11 07 45 96 a7 f3 ed e6 ee dd 15 dd 89 f0 f3 78 04 5d a2 d2 35 e4 ee 55 5d f3 14 1c ff 4e 46 b7 aa b1 7d af 63 f9 f2 12 4c 5d 3b f0 53 33 f0 4b 95 43 d4 88 ed 9a 95 12 5a ea 22 ce 72 19 45 6b fb ef 2f f5 ef 17 d3 29 36 22 15 67 c9 04 67 2a 5c 47 66 39 7b 92 ac 5b fd 81 99 44 33 8a 04 a3 18 42 85 16 29 48 13 6d 61 67 6c e4 47 f7 00 d2 a6 85 b4 12 af ab 34 f1 55 80 31 d6 74 3b 34 dd 5e 85 a3 31 49 b7 38 ff a1 08 a7 64 1d 21 b5 3f 9f 8c 43 2b 75 2b c7 eb ab f4 36 f4 d7 09 e0 a1 95 20 ec cc d4 6c 97 ee b5 66 11 87 56 6a 2f 62 88 4c 1e 8e f4 d1 00 df 5e 25 a9 8a b3 d0 c7 46 Data Asc
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/5.5.38content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://www.fire.co.za/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Wed, 19 Apr 2023 18:57:42 GMTserver: LiteSpeedData Raw: 31 62 34 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 5c db 6e 1b 49 92 7d b6 81 fd 87 1c 19 68 5b 80 8a 14 49 59 17 5b d6 8e 5a 96 dd c2 58 b6 c6 54 b7 b1 bd 58 18 c9 aa 24 59 a3 62 15 bb 2e a2 e9 c5 00 fb b0 df b0 c0 be f5 eb fe 46 7f ca 7c c9 9e 88 cc ac ca 22 59 14 bb a7 b5 dd 98 b5 60 58 54 55 5e 22 23 23 e3 72 22 92 0f 1f d2 cf 71 10 de 0a 3f 92 59 f6 62 6b ac 64 a0 52 2f 92 f3 a4 c8 85 8a d4 44 c5 b9 17 27 b1 f2 54 2c 07 91 0a b6 4e 1e 3e 58 d1 c3 36 9d a5 72 ca 4d da 18 75 75 d3 4c c9 d4 1f 7b a6 65 45 42 18 bc d8 52 d1 c4 33 ef 87 49 3a f1 d4 d3 9e 0a d4 d3 a7 f2 b0 23 d5 a1 37 91 61 bc 65 69 5d 6c cb 2f 4f ec 82 ee 1e ad 69 20 90 6f 96 78 f7 18 9e 9f c4 39 88 52 69 39 9a 4b 7e f9 56 98 a7 f9 7c aa bc 0e 31 e8 c1 31 2d 50 48 3f 0f 93 18 8c cf f3 e9 b3 76 7b 36 9b b5 86 61 aa 5a 7e d2 fa 2c db 5b 62 a2 f2 71 02 c6 8c 54 5e ce 40 0b 75 b9 c4 04 63 40 67 1f 89 37 c4 e0 29 08 a3 c9 ea 6f c3 78 5a e4 99 43 bb 6e 52 1b c1 10 9c 8d 65 90 cc b6 4e 8e cd 7e 2e 0e 65 9a d1 42 21 29 66 ae 07 a2 3e 9f 69 64 a6 b5 22 42 43 f1 cf 71 36 95 b1 dd 55 dd 96 9b 1a 11 39 e6 3f 04 b1 ee c5 56 ae 3e 81 11 b1 9c e0 73 b6 25 68 87 dc 1e fa f5 34 92 be 1a 27 11 44 f9 c5 56 9f c5 4d dc a8 f9 2c 49 83 92 89 4e af 2d 71 2b a3 02 03 6e 89 36 16 4a d4 90 18 59 f2 f0 db 65 ad 2f 73 35 4a d2 b9 dd 01 5e 8e 08 64 2e bd 69 92 85 7a 3b b1 87 99 e1 46 6d 75 65 67 3f 02 59 60 6b 68 d7 3d 94 62 28 bd 3c 9c a8 8c b8 1d 56 84 d0 fc 19 ce 97 9f 9b 59 dc d5 9d 19 6a 2c 4f ec 04 e5 3a ed 03 43 ae 08 d4 50 16 51 ee 05 61 a6 cf b3 c8 f2 79 84 c5 e3 01 f8 36 7f 26 e8 b4 3f d7 3b 79 9c 4c 69 3d a0 c5 7c 20 a6 98 87 96 69 dd c3 dd ad 93 53 95 26 59 12 89 57 90 5d 71 fe 29 0f e3 51 11 66 63 fc 12 fd 79 96 ab 49 56 0e b1 d8 7d ff 68 eb e4 fc 16 c2 93 09 4f f7 ff 4a 4e a6 cf c5 f9 ad f4 0b 49 d3 8b 4b 19 cb 11 ab a2 c6 51 0e 40 04 4f 2e e3 40 9c 46 51 a8 f0 2b cb 12 3f e4 21 9a a7 3f c0 69 2c 3b f6 e5 50 e5 73 71 9d e2 84 81 f6 e6 d9 7a a6 d3 59 12 67 e0 a6 24 ea 9f 5c 72 27 71 11 07 45 96 a7 f3 ed e6 ee dd 15 dd 89 f0 f3 78 04 5d a2 d2 35 e4 ee 55 5d f3 14 1c ff 4e 46 b7 aa b1 7d af 63 f9 f2 12 4c 5d 3b f0 53 33 f0 4b 95 43 d4 88 ed 9a 95 12 5a ea 22 ce 72 19 45 6b fb ef 2f f5 ef 17 d3 29 36 22 15 67 c9 04 67 2a 5c 47 66 39 7b 92 ac 5b fd 81 99 44 33 8a 04 a3 18 42 85 16 29 48 13 6d 61 67 6c e4 47 f7 00 d2 a6 85 b4 12 af ab 34 f1 55 80 31 d6 74 3b 34 dd 5e 85 a3 31 49 b7 38 ff a1 08 a7 64 1d 21 b5 3f 9f 8c 43 2b 75 2b c7 eb ab f4 36 f4 d7 09 e0 a1 95 20 ec cc d4 6c 97 ee b5 66 11 87 56 6a 2f 62 88 4c 1e 8e f4 d1 00 df 5e 25 a9 8a b3 d0 c7 46 Data Asc
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Wed, 19 Apr 2023 18:57:43 GMTserver: LiteSpeedData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/5.5.38content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://www.fire.co.za/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Wed, 19 Apr 2023 18:57:54 GMTserver: LiteSpeedData Raw: 31 62 34 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 5c db 6e 1b 49 92 7d b6 81 fd 87 1c 19 68 5b 80 8a 14 49 59 17 5b d6 8e 5a 96 dd c2 58 b6 c6 54 b7 b1 bd 58 18 c9 aa 24 59 a3 62 15 bb 2e a2 e9 c5 00 fb b0 df b0 c0 be f5 eb fe 46 7f ca 7c c9 9e 88 cc ac ca 22 59 14 bb a7 b5 dd 98 b5 60 58 54 55 5e 22 23 23 e3 72 22 92 0f 1f d2 cf 71 10 de 0a 3f 92 59 f6 62 6b ac 64 a0 52 2f 92 f3 a4 c8 85 8a d4 44 c5 b9 17 27 b1 f2 54 2c 07 91 0a b6 4e 1e 3e 58 d1 c3 36 9d a5 72 ca 4d da 18 75 75 d3 4c c9 d4 1f 7b a6 65 45 42 18 bc d8 52 d1 c4 33 ef 87 49 3a f1 d4 d3 9e 0a d4 d3 a7 f2 b0 23 d5 a1 37 91 61 bc 65 69 5d 6c cb 2f 4f ec 82 ee 1e ad 69 20 90 6f 96 78 f7 18 9e 9f c4 39 88 52 69 39 9a 4b 7e f9 56 98 a7 f9 7c aa bc 0e 31 e8 c1 31 2d 50 48 3f 0f 93 18 8c cf f3 e9 b3 76 7b 36 9b b5 86 61 aa 5a 7e d2 fa 2c db 5b 62 a2 f2 71 02 c6 8c 54 5e ce 40 0b 75 b9 c4 04 63 40 67 1f 89 37 c4 e0 29 08 a3 c9 ea 6f c3 78 5a e4 99 43 bb 6e 52 1b c1 10 9c 8d 65 90 cc b6 4e 8e cd 7e 2e 0e 65 9a d1 42 21 29 66 ae 07 a2 3e 9f 69 64 a6 b5 22 42 43 f1 cf 71 36 95 b1 dd 55 dd 96 9b 1a 11 39 e6 3f 04 b1 ee c5 56 ae 3e 81 11 b1 9c e0 73 b6 25 68 87 dc 1e fa f5 34 92 be 1a 27 11 44 f9 c5 56 9f c5 4d dc a8 f9 2c 49 83 92 89 4e af 2d 71 2b a3 02 03 6e 89 36 16 4a d4 90 18 59 f2 f0 db 65 ad 2f 73 35 4a d2 b9 dd 01 5e 8e 08 64 2e bd 69 92 85 7a 3b b1 87 99 e1 46 6d 75 65 67 3f 02 59 60 6b 68 d7 3d 94 62 28 bd 3c 9c a8 8c b8 1d 56 84 d0 fc 19 ce 97 9f 9b 59 dc d5 9d 19 6a 2c 4f ec 04 e5 3a ed 03 43 ae 08 d4 50 16 51 ee 05 61 a6 cf b3 c8 f2 79 84 c5 e3 01 f8 36 7f 26 e8 b4 3f d7 3b 79 9c 4c 69 3d a0 c5 7c 20 a6 98 87 96 69 dd c3 dd ad 93 53 95 26 59 12 89 57 90 5d 71 fe 29 0f e3 51 11 66 63 fc 12 fd 79 96 ab 49 56 0e b1 d8 7d ff 68 eb e4 fc 16 c2 93 09 4f f7 ff 4a 4e a6 cf c5 f9 ad f4 0b 49 d3 8b 4b 19 cb 11 ab a2 c6 51 0e 40 04 4f 2e e3 40 9c 46 51 a8 f0 2b cb 12 3f e4 21 9a a7 3f c0 69 2c 3b f6 e5 50 e5 73 71 9d e2 84 81 f6 e6 d9 7a a6 d3 59 12 67 e0 a6 24 ea 9f 5c 72 27 71 11 07 45 96 a7 f3 ed e6 ee dd 15 dd 89 f0 f3 78 04 5d a2 d2 35 e4 ee 55 5d f3 14 1c ff 4e 46 b7 aa b1 7d af 63 f9 f2 12 4c 5d 3b f0 53 33 f0 4b 95 43 d4 88 ed 9a 95 12 5a ea 22 ce 72 19 45 6b fb ef 2f f5 ef 17 d3 29 36 22 15 67 c9 04 67 2a 5c 47 66 39 7b 92 ac 5b fd 81 99 44 33 8a 04 a3 18 42 85 16 29 48 13 6d 61 67 6c e4 47 f7 00 d2 a6 85 b4 12 af ab 34 f1 55 80 31 d6 74 3b 34 dd 5e 85 a3 31 49 b7 38 ff a1 08 a7 64 1d 21 b5 3f 9f 8c 43 2b 75 2b c7 eb ab f4 36 f4 d7 09 e0 a1 95 20 ec cc d4 6c 97 ee b5 66 11 87 56 6a 2f 62 88 4c 1e 8e f4 d1 00 df 5e 25 a9 8a b3 d0 c7 46 Data Asc

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	330897
Entropy (8bit):	7.994738577523807
Encrypted:	true
SSDEEP:	6144:VabQsX6RkJr1+6SWkbYUsYMaaekdhpMOKuHcdq+QZ8JR:uXUkJ4XxhsYMaaekdhpFK3dq+QZ4
MD5:	5E1601B69E561CCB40CB55430D6CC7E8
SHA1:	A222FC5AEC69BCBDE35B3552A98327DFF1706287
SHA-256:	382AE927EB4FB8549112B74117EC13DFBB3348D63E4A9D0CB99F96EA573EC4B8
SHA-512:	67259027064124B6D0AFA3485EB56E3CE97533405DADD3F7E018A715A18B6B0E42C07E0F7FDCBCC683A51577A1907C5C5F009768F6CD49F8DF66CB771A0EE8DF
Malicious:	false
Reputation:	low
URL:	http://www.fire.co.za/wp-content/uploads/cache/images/Rapid-Fire-Control-Logo-1/Rapid-Fire-Control-Logo-1-3022833621.png
Preview:	.PNG........IHDR.............5..... .IDATx..i.e.u..;q...VY.Y.."i."E.%.Z.a.....a7f.....n.z`..1.l.{>wO...{.....E.e[.%..N.U."....\......!"....(J-..2.{...D.9.s.....Z...""....e.E.......#eA....2..X.. I.Q....A0..x8.......}..}.....5>..?.....g?...qrk.0....u.J.~hm...?.!.c...g....._...\|.._&NR.$E).R..(.....Z....V.GV}..\...M..&.2.._....;.......bcc..w.b...l..e...CQ.t.]N.>.>.)~.....g.r..y..e;E.c...(z..r..>"./.BQ.\|.S?E...z=G.(....`".+G!".{;.Z-.....enn._.._r}......Q.(...7...O?....'\|.k_..._..... .b.8&M..8..l...Y##.".4C.bv...03;.R...e.4..s.;m.?t.f....".N..c.@IIK...............~.....P..v....m}z[=$.....o+.h...x.[....._z...^.x.0..Z.[....`.@..b....X...r.Zb.-b..W...zq..s..,..._..'>A<;K...LNZ...5...M\|..Zw_..5.3..:.F.4..;.4.#7>....,.o..3...l.v.._z.y.s"j`..Z.(..X..ZK....X..U...d)".X.........1Z.F%l..;.p.#.b.......c.?.I.(.=.Rb7f.O..6.'.).>...QRN..=M. ......"..(K.>....W_...~....[.=Ok.i...V.E.J)VM......6I../.K.V........7..t.....\}.%..../P.$1...O...y...Q.M...Z..A....

Target ID:	0
Start time:	20:57:33
Start date:	19/04/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff7c2920000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	1
Start time:	20:57:34
Start date:	19/04/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7c2920000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	2
Start time:	20:57:37
Start date:	19/04/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.fire.co.za
Imagebase:	0x7ff7c2920000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	12
Start time:	20:58:49
Start date:	19/04/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4484 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7c2920000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	13
Start time:	20:58:59
Start date:	19/04/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1728,i,4602465334380722352,9341420018384067839,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7c2920000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.fire.co.za

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Chrome Cache Entry: 325

Chrome Cache Entry: 326

Chrome Cache Entry: 327

Chrome Cache Entry: 328

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Chrome Cache Entry: 332

Chrome Cache Entry: 333

Chrome Cache Entry: 334

Chrome Cache Entry: 335

Chrome Cache Entry: 336

Chrome Cache Entry: 337

Chrome Cache Entry: 338

Windows Analysis Report
http://www.fire.co.za

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre