Play interactive tourEdit tour

Windows Analysis Report
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwj85-Cx0Pz-AhV5FVkFHezeDZcQFnoECCUQAQ&url=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&usg=AOvVaw0mYQOAG6hFsIBU_fVcAryo

Overview

General Information

Sample URL:	https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwj85-Cx0Pz-AhV5FVkFHezeDZcQFnoECCUQAQ&url=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&us
Analysis ID:	868381
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Snort IDS alert for network traffic

HTML page contains hidden URLs or javascript code

Yara signature match

HTML body with high number of embedded images detected

Drops PE files

Connects to several IPs in different countries

HTML page is missing a favicon

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

HTML page contains hidden URLs or javascript code

Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm

HTTP Parser: Base64 decoded: ai=BUHwr7-1kZJ_NLM3ZzQaZvpn4BbqomrJGAAAAEAEghrv2hAE4AVjYvrHVgwRguwayARJ3d3cuZGx0ay10ZWFjaC5jb226AQlnZnBfaW1hZ2XIAQPaATdodHRwczovL3d3dy5kbHRrLXRlYWNoLmNvbS9yaHltZXMvbWFjZG9uYWxkL21seXJpY3MuaHRtmALIAcACAuACAOoCJy8yMjQwNDMzNzQ2Ny9kbHRrLXRlYWNoLWxlYWRlcmJvYXJ...

HTML body with high number of embedded images detected

Source: https://www.google.com/search?q=old+macdonald+had+a+phish+farm&oq=old+macdonald+had+a+phish+farm&aqs=chrome..69i57j33i160l4.7250j0j4&sourceid=chrome&ie=UTF-8

HTTP Parser: Total embedded image size: 12670

HTML page is missing a favicon

Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://js-sec.indexww.com/um/ixmatch.html	HTTP Parser: No favicon
Source: https://js-sec.indexww.com/um/ixmatch.html	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156858&gdpr=0&gdpr_consent=&us_privacy=1---	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156858&gdpr=0&gdpr_consent=&us_privacy=1---	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?us_privacy=1---&	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?us_privacy=1---&	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?gdpr=0&us_privacy=1---	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?gdpr=0&us_privacy=1---	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=&gdpr_consent=&us_privacy=&p=156319&gdpr=0&predirect=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D3%26src%3D2%26cspi%3D0%26cn%3D3%26spui%3D%26dpui%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=&gdpr_consent=&us_privacy=&p=156319&gdpr=0&predirect=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D3%26src%3D2%26cspi%3D0%26cn%3D3%26spui%3D%26dpui%3D	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=duration_media&endpoint=us-east	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=duration_media&endpoint=us-east	HTTP Parser: No favicon
Source: https://eu-u.openx.net/w/1.0/pd?plm=6&ph=e1b1f5e1-3c2c-4287-9806-317cfbf3bd12&gdpr=0&us_privacy=1---	HTTP Parser: No favicon
Source: https://eu-u.openx.net/w/1.0/pd?plm=6&ph=e1b1f5e1-3c2c-4287-9806-317cfbf3bd12&gdpr=0&us_privacy=1---	HTTP Parser: No favicon
Source: https://u.4dex.io/usync.html?us_privacy=1---	HTTP Parser: No favicon
Source: https://u.4dex.io/usync.html?us_privacy=1---	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=162412&userIdMacro=PM_UID&gdpr=0&gdpr_consent=&us_privacy=1---&&predirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D316%26uid%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=162412&userIdMacro=PM_UID&gdpr=0&gdpr_consent=&us_privacy=1---&&predirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D316%26uid%3DPM_UID	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D&s=195491&C=1	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D&s=195491&C=1	HTTP Parser: No favicon
Source: https://ssbsync.smartadserver.com/api/sync?callerId=9&gdpr=0&gdpr_consent=&us_privacy=1---&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D317%26uid%3D%24UID	HTTP Parser: No favicon
Source: https://ssbsync.smartadserver.com/api/sync?callerId=9&gdpr=0&gdpr_consent=&us_privacy=1---&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D317%26uid%3D%24UID	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV85OWNkNjUwNy01N2QzLTQyZTQtOTFkOC00MDZmMTNiMmVkNTU=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV85OWNkNjUwNy01N2QzLTQyZTQtOTFkOC00MDZmMTNiMmVkNTU=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=gumgum	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=gumgum	HTTP Parser: No favicon
Source: https://cs-rtb.minutemedia-prebid.com/sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1---&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D348%26uid%3D%7BpartnerId%7D	HTTP Parser: No favicon
Source: https://cs-rtb.minutemedia-prebid.com/sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1---&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D348%26uid%3D%7BpartnerId%7D	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatchredir?s=189872&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Diex%26i%3D	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatchredir?s=189872&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Diex%26i%3D	HTTP Parser: No favicon
Source: https://onetag-sys.com/usync/?pubId=6c68086c0c61793&gdpr=&gdpr_consent=&us_privacy=	HTTP Parser: No favicon
Source: https://onetag-sys.com/usync/?pubId=6c68086c0c61793&gdpr=&gdpr_consent=&us_privacy=	HTTP Parser: No favicon
Source: https://www.google.com/search?q=old+macdonald+had+a+phish+farm&oq=old+macdonald+had+a+phish+farm&aqs=chrome..69i57j33i160l4.7250j0j4&sourceid=chrome&ie=UTF-8	HTTP Parser: No favicon
Source: https://www.google.com/search?q=old+macdonald+had+a+phish+farm&oq=old+macdonald+had+a+phish+farm&aqs=chrome..69i57j33i160l4.7250j0j4&sourceid=chrome&ie=UTF-8	HTTP Parser: No favicon
Source: https://www.google.com/search?q=old+macdonald+had+a+phish+farm&oq=old+macdonald+had+a+phish+farm&aqs=chrome..69i57j33i160l4.7250j0j4&sourceid=chrome&ie=UTF-8	HTTP Parser: No favicon
Source: https://www.google.com/search?q=old+macdonald+had+a+phish+farm&oq=old+macdonald+had+a+phish+farm&aqs=chrome..69i57j33i160l4.7250j0j4&sourceid=chrome&ie=UTF-8	HTTP Parser: No favicon
Source: https://www.google.com/search?q=old+macdonald+had+a+phish+farm&oq=old+macdonald+had+a+phish+farm&aqs=chrome..69i57j33i160l4.7250j0j4&sourceid=chrome&ie=UTF-8	HTTP Parser: No favicon
Source: https://www.google.com/search?q=old+macdonald+had+a+phish+farm&oq=old+macdonald+had+a+phish+farm&aqs=chrome..69i57j33i160l4.7250j0j4&sourceid=chrome&ie=UTF-8	HTTP Parser: No favicon
Source: https://www.google.com/search?q=pcappstore&ei=EO5kZIGQNdGykwXjt6nQCw&ved=0ahUKEwiB2OOM0fz-AhVR2aQKHeNbCroQ4dUDCGw&uact=5&oq=pcappstore&gs_lcp=Cgxnd3Mtd2l6LXNlcnAQAzIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgUIABCABDoICAAQgAQQsAM6CwgAEIoFEIYDELADOgoIABCKBRCxAxBDOgcIABCABBAKSgQIQRgBUNsMWKIkYJgnaARwAHgBgAHpBogBgh6SAQc0LTEuMy4ymAEAoAEByAEDwAEB&sclient=gws-wiz-serp	HTTP Parser: No favicon
Source: https://www.google.com/search?q=pcappstore&ei=EO5kZIGQNdGykwXjt6nQCw&ved=0ahUKEwiB2OOM0fz-AhVR2aQKHeNbCroQ4dUDCGw&uact=5&oq=pcappstore&gs_lcp=Cgxnd3Mtd2l6LXNlcnAQAzIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgUIABCABDoICAAQgAQQsAM6CwgAEIoFEIYDELADOgoIABCKBRCxAxBDOgcIABCABBAKSgQIQRgBUNsMWKIkYJgnaARwAHgBgAHpBogBgh6SAQc0LTEuMy4ymAEAoAEByAEDwAEB&sclient=gws-wiz-serp	HTTP Parser: No favicon
Source: https://pcapp.store/lp/compatibility.html	HTTP Parser: No favicon
Source: https://pcapp.store/lp/compatibility.html	HTTP Parser: No favicon

Compliance

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2027757 ET DNS Query for .to TLD 192.168.2.3:57558 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2027757 ET DNS Query for .to TLD 192.168.2.3:52640 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2027757 ET DNS Query for .to TLD 192.168.2.3:61376 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2027757 ET DNS Query for .to TLD 192.168.2.3:57315 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2027757 ET DNS Query for .to TLD 192.168.2.3:51953 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2027757 ET DNS Query for .to TLD 192.168.2.3:62273 -> 1.1.1.1:53

Connects to several IPs in different countries

Source: unknown

Network traffic detected: IP country count 11

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: www.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49543
Source: unknown	Network traffic detected: HTTP traffic on port 49647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49538
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49537
Source: unknown	Network traffic detected: HTTP traffic on port 49621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49531
Source: unknown	Network traffic detected: HTTP traffic on port 49587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49670 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49513
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49512
Source: unknown	Network traffic detected: HTTP traffic on port 49543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 49461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49503
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49589
Source: unknown	Network traffic detected: HTTP traffic on port 49592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49587
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49581
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49579
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49575
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49573
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49568
Source: unknown	Network traffic detected: HTTP traffic on port 49649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49564
Source: unknown	Network traffic detected: HTTP traffic on port 49569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49558
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49553
Source: unknown	Network traffic detected: HTTP traffic on port 49570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49551
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 49465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49599
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49590
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 49583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.159
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.102&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.102Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwj85-Cx0Pz-AhV5FVkFHezeDZcQFnoECCUQAQ&url=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&usg=AOvVaw0mYQOAG6hFsIBU_fVcAryo HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; __Secure-ENID=6.SE=cJKCBuSaL1dV3R8z2Y2al7-m2m5bGA74lqbYYkqC3uy-NtZ1f6n_bCBr25tlnnjvdmLpGQ81ZKzP3Te5vVjpSQjYWCwvlOMApK7tmZNWcORu0p4wniPJGQfTslQNnpQWhG9qkwkEgy49-6UG3UQ1eiUyFolJZWLeUM1p4KvjM9E
Source: global traffic	HTTP traffic detected: GET /rhymes/macdonald/mlyrics.htm HTTP/1.1Host: www.dltk-teach.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /script.js HTTP/1.1Host: droiw9gfb309t.cloudfront.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/dltk/dltkteach/sidebar2-layout.js HTTP/1.1Host: qd.admetricspro.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/dltk/dltkteach/engine.js HTTP/1.1Host: qd.admetricspro.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dltkstyles/main.css HTTP/1.1Host: www.dltk-teach.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index-rhymes.js HTTP/1.1Host: www.dltk-teach.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cse.js?cx=006942297880364118670:mgahrcqhv0w HTTP/1.1Host: cse.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/dltk/dltkteach/cmp.js HTTP/1.1Host: qd.admetricspro.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/dltk/dltkteach/uspcmp.js HTTP/1.1Host: qd.admetricspro.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rhymes/macdonald/scow.gif HTTP/1.1Host: www.dltk-teach.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/dltk/dltkteach/prebid.js HTTP/1.1Host: qd.admetricspro.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/youtube.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/pinterest.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/twitter.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/fade-grey.jpg HTTP/1.1Host: www.dltk-kids.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cse/static/element/8e77c7877b8339e2/cse_element__en.js?usqp=CAI%3D HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dltkstyles/small-device.css HTTP/1.1Host: www.dltk-teach.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cse/static/element/8e77c7877b8339e2/default+en.css HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cse/static/style/look/v4/minimalist.css HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /includes/features-data.js HTTP/1.1Host: www.dltk-kids.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dltk-brand-1200.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/cmp2/vendor-list.json HTTP/1.1Host: qd.admetricspro.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dltk-teach.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/facebook.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/instagram.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/linkedin.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /includes/features-insert.js HTTP/1.1Host: www.dltk-kids.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ppub_config?ippd=www.dltk-teach.com HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dltk-teach.comX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202305110101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cse/static/css/v2/clear.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/cse/static/element/8e77c7877b8339e2/default+en.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/search/async-ads.js HTTP/1.1Host: cse.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cse/static/images/1x/en/branding.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pioeg.admetricspro.workers.devConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dltk-teach.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: clients1.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pioeg.admetricspro.workers.devConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dltk-teach.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/1018018?ers=3 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Content-Type: text/plainAccept: */*Origin: https://www.dltk-teach.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fairy-tales/rumpelstiltskin/images/s/story-rumpelstiltskin.jpg HTTP/1.1Host: www.dltk-teach.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.420427137.1684336108; _gat_gtag_UA_52971111_2=1; _ga_35SC65DXQ2=GS1.1.1684336109.1.0.1684336109.0.0.0; _ga=GA1.1.1448998378.1684336108; usprivacy=1---; _pbjs_userid_consent_data=6683316680106290
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVHa5qZ7oBQm6vviUQqfqQ0tcPXXm_gViMXB4NfPJ1ID-6dCqxC1LhE5bsFD9pHOcLQgfFR7jhXJx41ndswv0I=?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg0MzM2MTA5LDY3NDAwMDAwMF0sIkNCRkJFRDkwLUMxMDUtNDUyQi1BODcwLTk3MUU1OTY0MjFCOSIsbnVsbCxudWxsLFtudWxsLFs3XV0sImh0dHBzOi8vd3d3LmRsdGstdGVhY2guY29tL3JoeW1lcy9tYWNkb25hbGQvbWx5cmljcy5odG0iLG51bGwsW1s4LCJxcE83eFl4Z0E0VSJdLFs5LCJlbi1VUyJdXV0 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /localstore.js HTTP/1.1Host: script.4dex.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spring/images/s/tissue-flowerpot-craft.jpg HTTP/1.1Host: www.dltk-holidays.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adagio.js HTTP/1.1Host: script.4dex.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dltk-teach.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%227ddc289fae29d2%22%3A%227d986712c77c2b01c15a%7C728x90%2C970x90%2C970x250%7Cgpid%3D%2F22404337467%2C1018018%2Fdltk-teach-leaderboard-top%2Cc%3Dd%2C%22%2C%228bfc06610ef47b%22%3A%227d986712c77c2b01c15a%7C728x90%7Cgpid%3D%2F22404337467%2C1018018%2Fdltk-teach-Sticky%2Cc%3Dd%2C%22%2C%22955154e6e2f215%22%3A%227d986712c77c2b01c15a%7C300x600%2C160x600%2C300x250%7Cgpid%3D%2F22404337467%2C1018018%2Fdltk-teach-Sidebar1%2Cc%3Dd%2C%22%2C%221013f0c7f24b35e%22%3A%227d986712c77c2b01c15a%7C300x600%2C160x600%2C300x250%7Cgpid%3D%2F22404337467%2C1018018%2Fdltk-teach-Sidebar2%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&s=429b7bc1-5ea1-4704-b309-293af62083d4&pv=c53a5acf-dc8a-4673-9508-723770a25173&vp=desktop&lib_name=prebid&lib_v=7.41.0&us=8&fpd=%7B%22regs%22%3A%7B%22ext%22%3A%7B%22gdpr%22%3A0%2C%22us_privacy%22%3A%221---%22%7D%7D%2C%22user%22%3A%7B%22ext%22%3A%7B%7D%7D%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm%22%2C%22ref%22%3A%22https%3A%2F%2Fwww.google.com%2F%22%2C%22domain%22%3A%22dltk-teach.com%22%2C%22keywords%22%3A%22teach%2Ceducational%2Cpreschool%2Ckindergarten%22%2C%22publisher%22%3A%7B%22domain%22%3A%22dltk-teach.com%22%7D%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A913%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F104.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22104%22%2C%220%22%2C%225112%22%2C%22102%22%5D%7D%2C%7B%22brand%22%3A%22%20Not%20A%3BBrand%22%2C%22version%22%3A%5B%2299%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22104%22%2C%220%22%2C%225112%22%2C%22102%22%5D%7D%5D%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22bitness%22%3A%2264%22%2C%22architecture%22%3A%22x86%22%7D%7D%7D&ius=1&gdpr=false&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22admetricspro.com%22%2C%22sid%22%3A%22599%22%2C%22hp%22%3A1%7D%5D%7D&us_privacy=1---&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Content-Type: text/plainAccept: */*Origin: https://www.dltk-teach.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/arj?ju=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&ch=UTF-8&res=1280x1024x24&ifr=false&tz=-120&tws=1280x913&be=1&bc=hb_pb_3.0.3&dddid=32695484-f803-47b4-9c11-8ac6db6885fb%2C32695484-f803-47b4-9c11-8ac6db6885fb%2C32695484-f803-47b4-9c11-8ac6db6885fb%2C51ad131b-ca2d-4be2-88d6-5fb7b72968e2%2C64c74395-18e3-4193-a458-47510514ab1f%2C64c74395-18e3-4193-a458-47510514ab1f%2C64c74395-18e3-4193-a458-47510514ab1f%2C7c0897f8-ecf8-48f6-be32-fcbc9b6e926a%2C7c0897f8-ecf8-48f6-be32-fcbc9b6e926a%2C7c0897f8-ecf8-48f6-be32-fcbc9b6e926a&nocache=1684336109807&sua=%7B%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22104%22%2C%220%22%2C%225112%22%2C%22102%22%5D%7D%2C%7B%22brand%22%3A%22%20Not%20A%3BBrand%22%2C%22version%22%3A%5B%2299%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22104%22%2C%220%22%2C%225112%22%2C%22102%22%5D%7D%5D%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22bitness%22%3A%2264%22%2C%22architecture%22%3A%22x86%22%7D&gdpr=0&x_gdpr_f=1&us_privacy=1---&schain=1.0%2C1!admetricspro.com%2C599%2C1%2C%2C%2C&aus=728x90%2C970x90%2C970x250%7C728x90%2C970x90%2C970x250%7C728x90%2C970x90%2C970x250%7C728x90%7C300x600%2C160x600%2C300x250%7C300x600%2C160x600%2C300x250%7C300x600%2C160x600%2C300x250%7C300x600%2C160x600%2C300x250%7C300x600%2C160x600%2C300x250%7C300x600%2C160x600%2C300x250&divids=div-gpt-ad-1659626971261-0%2Cdiv-gpt-ad-1659626971261-0%2Cdiv-gpt-ad-1659626971261-0%2Cdiv-gpt-ad-1659627004067-0%2Cdiv-gpt-ad-1659626981345-0%2Cdiv-gpt-ad-1659626981345-0%2Cdiv-gpt-ad-1659626981345-0%2Cdiv-gpt-ad-1659626991197-0%2Cdiv-gpt-ad-1659626991197-0%2Cdiv-gpt-ad-1659626991197-0&aucs=%252F22404337467%252C1018018%252Fdltk-teach-leaderboard-top%2C%252F22404337467%252C1018018%252Fdltk-teach-leaderboard-top%2C%252F22404337467%252C1018018%252Fdltk-teach-leaderboard-top%2C%252F22404337467%252C1018018%252Fdltk-teach-Sticky%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar1%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar1%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar1%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar2%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar2%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar2&auid=557741601%2C557741599%2C558592365%2C557741603%2C558592366%2C557741608%2C557741604%2C558592368%2C558592367%2C557741605 HTTP/1.1Host: teachingaids-d.openx.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Content-Type: text/plainAccept: */*Origin: https://www.dltk-teach.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.dltk-teach.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.420427137.1684336108; _gat_gtag_UA_52971111_2=1; _ga_35SC65DXQ2=GS1.1.1684336109.1.0.1684336109.0.0.0; _ga=GA1.1.1448998378.1684336108; usprivacy=1---; _pbjs_userid_consent_data=6683316680106290
Source: global traffic	HTTP traffic detected: GET /adsid/integrator.js?domain=www.dltk-teach.com HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsid/integrator.js?domain=www.dltk-teach.com HTTP/1.1Host: adservice.google.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1722257024091187&correlator=3644478449410046&eid=31072019%2C31074172&output=ldjh&gdfp_req=1&vrg=202305110101&ptt=17&impl=fifs&gdpr=0&us_privacy=1---&tfua=0&tfcd=0&iu_parts=22404337467%3A1018018%2Cdltk-teach-leaderboard-top%2Cdltk-teach-Sticky%2Cdltk-teach-Sidebar1%2Cdltk-teach-Sidebar2&enc_prev_ius=%2F0%2F1%2C%2F0%2F2%2C%2F0%2F3%2C%2F0%2F4&prev_iu_szs=728x90%7C970x90%7C970x250%2C728x90%2C300x600%7C160x600%7C300x250%2C300x600%7C160x600%7C300x250&ifi=1&adks=1765610747%2C2522619647%2C994413629%2C1696906574&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1684336111034&lmt=1680489124&dlt=1684336106405&idt=2829&adxs=8%2C269%2C1006%2C1006&adys=8%2C820%2C467%2C991&biw=1263&bih=913&scr_x=0&scr_y=0&btvi=0%7C0%7C0%7C1&ucis=1%7C2%7C3%7C4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&uach=WyJXaW5kb3dzIiwiOC4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjEwMiIsW10sMCxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjEwMiJdLFsiIE5vdCBBO0JyYW5kIiwiOTkuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMDQuMC41MTEyLjEwMiJdXSwwXQ..&nvt=1&url=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&ref=https%3A%2F%2Fwww.google.com%2F&frm=20&vis=1&psz=1247x250%7C1265x-1%7C249x792%7C249x792&msz=1247x250%7C728x-1%7C249x250%7C249x250&fws=0%2C512%2C4%2C4&ohw=0%2C0%2C249%2C249&ga_vid=1448998378.1684336108&ga_sid=1684336111&ga_hid=1806887753&ga_fc=true HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dltk-teach.comX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuV1hIzXj5z_bPw3Qw7JZBLzdq3A3xzlUHMyRv-NFNVnE-P7N0VhT8KexMHgiJ9ybN1jyJLDebzkMDRA2PMpyn93MJ2pXjtfGU11SxFnvAea6_QkuIjiK3ETqhnl_GW5RXR59qNAlBgXcCDVtma5w7bZgnsybe60kYnKsD8Ru53qfYjVFRdGkqebCgQ9eURTIPxDad9NIw0ltkCpQkCmTpWHxFWCPUE18eNOyBYm6QO8dndv2cBMAo9Ri0gWE05hcIquNZ1mJOVsAzLsgXF0iltTW1pDTnmnym1utY96sKGama_Hgqq8Z62k-ovqbadUhRqwYvIbhU-W01erdm7LA7R3pJF4BE&sai=AMfl-YRci2y71zGKXH1zjLG6TZqB2wBxkfjAbYd5qqGDILOzsVaf2wL2zd5txTxTfHCmid0lVHJx-38BaN8cJsKW293qE6X06BQ5OtnsBJLk3PwyJfTwSmRibqQ6FhifjUqRUvPEW_ahNbsbomHFFGk&sig=Cg0ArKJSzJrEERNdcLe6EAE&uach_m=[UACH]&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CgXHf7-1kZLGNLs3ZzQaZvpn4Bd6k-c9wy4TkjboRpYqrkv8PEAEg-ZvxhAFguwagAe6a0IYpyAEGqQK4Sb-1M2eyPuACAKgDAaoEkgJP0BrUqkdMKq0JLGwbSsfwmxLnoaV_RIz6UyHU2dKglYG1_yTwJ7xNTU8G1WYs3FChxYTjJylwV7bSDP6pLKyWeHOLHYX-2pzMZk3Q7ZgympXkhFMqP282zG2Kb5Urp78Ge9MIj46WBgyOJ4-XAIeASwDmpexeGURJ_sOwjSkTsEgCJ5FiJ3HVzBxwN8c9wvf3jht1-FESnF_HSCJs3XAFkgxqSUmZrY0yLd9cQXFDHoX71LVYqXTBfPv4nWdQP_to99tz5HrUNptINBVh41KEwL0v_4QEoH0eiQl9hcSvoZTm73CNZ5UrZvlEi5njb10Kdvs38CE7-7t7gHZmpB5ks2Dp12zv1jVlUhzwy8WW0R8awAT82tmYrQTgBAGSBQQIBBgBkgUECAUYBIAH7tKg5gOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAfIHBBD1vxDSCBQIgGEQARgdMgKKAjoCgEBIvf3BOoAKA8gLAdgTDdAVAYAXAbIXHgocCAASFHB1Yi0xNzUyNjkwMzU1Mzc5ODYwGITbew&sigh=CgEqQ2Ng63k&uach_m=[UACH]&cid=CAQSSwBygQiDMDN31fMm4Y6KoHVJYmwBjm1AUrF7i5fTIYfUdfBMfOOUYv05xEPuynsi1swyTPB22ahn0jasPiaxRxVYqzvPfe1B4IWVABgB&template_id=492 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /rtv/012305051745000/amp4ads-v0.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012305051745000/v0/amp-ad-exit-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012305051745000/v0/amp-analytics-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012305051745000/v0/amp-fit-text-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssURUpNloPwYUkepNlUiObZQumogi7uRAdoDfSz3Nu5DwwOInFnlTJOxNCmYg0gzlPH7ZReMuivIKoWCAbJcScswYvB7hyHCv7fV8uXnVa1_KtkrbvpYvwnyA2qAIdGFGmDGdx_2lyWEKywfVRqLTmE4srPcuBoQaXC7krIUpmPDqyaiXPxh1CLoTA1uIhQ_WLffOaXqGgobXYvomSpaSFmQQRxhHsC819_FIqu4Ga8CBPTHMHCbusW_z7cogssZLQAIcoxQ5LKF6GABCY42HhMasme9tEfZLIKru34m46T-fRpP5FEYq7KmxwTwPgqX3UbmmxAKXiouVkAPFCpRQ&sai=AMfl-YS5D5wTkq67tGwzcuvpMO-brd82IvX9yQN_4nBP2bBpPhQgymWpAvovV7qH2pALorw0P4vnh5Di2pI9vzcQ7kk82kRg-6RJxCVNwkOh0PZbaU0xNQDBuOvkQNPGHB4MGhbP22goZfE9eT4JT9M&sig=Cg0ArKJSzIJVZSrcBqQsEAE&uach_m=[UACH]&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnqkiCmh6fGMKS-oMNaAHVJv8izoaGGxybhSI3hk8pNFJKc7Q-mc7T4pAhus0s
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsun6ivRqChf9GO1U-s0uymtnBpyL4OhC-sFjdM_xTYfgyO7z8ovxbO135rPlrFzl64kE6qJt9MCdBPN_Lkz7GsUn8eKHDteN7mq0xmyzCFLBeY-e7_obrp3uDVw2s09macxYVrxNROgbQ6AVF-XPCoz63wFb5G8XIanUyvx3SVILMU2ytTVQ4Y782mmfuEP_4z0go-Zk_k3Uw8mpEWlF8-tqCAFiXLRiC8bTVVgo5eQ90dhCERhVT85PTPtbrp7x3Om0B2u57mN3gjtIKWZS5FLotn4GKfVkKar38K-4gNMva_Am60knxmswcThOQ6RizqMAo8bhdC8TJHq32Mc4A&sai=AMfl-YQb7bp-4OF5XQjz0B9F-Xh7DndxCzDoVF1qUndf7q38JV_e-3TnjzOLwOVCtSnt3BjYhi44ya4lDrP6q_OSjtGdvOGG_LYzLohfp66TNEsEL1JlwP4dSVDRvODBvITkzpjJO6HwBQjG6THzrUg&sig=Cg0ArKJSzG3GaOBlerEMEAE&uach_m=[UACH]&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY
Source: global traffic	HTTP traffic detected: GET /rtv/012305051745000/v0/amp-form-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuM-NW6eZ8OcMdA6ee5XEVYNSGHsQRgFp6fTE80HxER85-P5SWjilUaFaRJv51TDbdSF7PVkrOoVoAgBS0r-a8nrmfAbI5oOfyzcgAPjuRPOpUipRBJzyN3E6Nr4qmxspcj-IRbf3nN3Ll3LiLgYNrLc_jP-PV7NiKZJXP2zH7TuitZArMwmpPjNDEKah6ZxNd_RIRc5tFLmYq85zV153AsIY0DnTBxF2B13uH0YrgLYhoGsLpvzXw-6VLBic1e97b_ntq20HfOXMkpTlWgCmhiTvju5BCGRYl0zldlc4OkcpK5q4VouD6p669OVK9ljmczSD4r19_1PWTt3l52ID4HorCoAWtGyg&sai=AMfl-YSz-cJsCHcE1BCtrvf9beWDoSH3yvmYk3EsBAuXcyZXw084jlDDEkwB_a2QLvPvtjh2TW0_4pywbr8q0hr-lTFHYiVDlcIpxwbznQEdGmREPDZNp56DmyDcYb-5dI2VL5Lpxf_1NZnbUjj8fwI&sig=Cg0ArKJSzJlfvf30oyJgEAE&uach_m=[UACH]&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssSTdU_FBGMgdqNx5gACNqWsIoeKPK0sJn5pQQqOF9NJyUNKKcasFGg1mDT4rnSh6nfJmmzJb9SVxkcN792DT0h83vKTKBCVHV-FtDmygrT05aJxfM0dWFPY5Ff1Tw7ValYQwpsvjjkei1V1qK60jKmYEFIilp-nOgsNoC-pTV9CJ-mQeXev_f32jU3xgbweCfoVsqd_bkJWKoYQPdaVlB9WqhnxJIEezJ4k596zPzJ5rVHCQ2IZ9yhBdS15phJDKSg6LmQ53wu_lSa1GtKKL1av79iQUCHHecI5kz1EMOsCTDO-aX2eIOameNCWNPRQqpck8eBvnkSI0FbTR3iieN4&sai=AMfl-YQCLRHz7eJoCF-yKQCfNOKoGj0hvkhhTE2_ExMn4TzbwqIzl2iZRbOhN6guLFTi1JngsIhLZRKCXszBMSH4lQGWxie8BgoF0GAPVGipzDeQjDNjDRQbWtoG2ICeySGpjkbFToEI16gTdX-B-gg&sig=Cg0ArKJSzGlcY-dLnrUgEAE&uach_m=[UACH]&uach=WyJXaW5kb3dzIiwiOC4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjEwMiIsW10sMCxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjEwMiJdLFsiIE5vdCBBO0JyYW5kIiwiOTkuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMDQuMC41MTEyLjEwMiJdXSwwXQ%3D%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsu2MG1YAHjrXEVkkJBk1LuKwb9z1E0W_fhYb2Z005IuccCOU3DBlwgBjBgxLMtVtD6PnzagZjrqfTBPqzQT6U09frdRoyrCnLKSu7A-iIOKURGKIxRXeMy06AwZ4cklkrpRReZLYv7ke4KaAm--aCs3Uc-3ZsmRsD9g3VugJCxkxbzB3zj-fu732af0p8xCyYHSjRbbV9hWBfs5n2ntTGYvFz5s6qtkMGUVrB90LVNOvmcjkO7G7CYFxnrFyS9slYZXWlCERna2IWOGLCse-48YNCKqXIq-sD5bqZiN4cjAQv_3hHqLG7SUN5om5xxNNcpQLBmEMoVRJibD3sX4mnLE&sai=AMfl-YRkFE27r9sTFlOeg4yY6-BViGi4IzAMlNy0xzubJvmjHm9KyOXV92MxLB6PL87QS1j4Hhy6cbFKUO95r2sOCH6PNEY4K4ht4RFwHfdemaOsIop0nzGVxJIOKtmUHA02ZaIa22V5DMyENCpcPDs&sig=Cg0ArKJSzLjE8QWEC2PuEAE&uach_m=[UACH]&uach=WyJXaW5kb3dzIiwiOC4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjEwMiIsW10sMCxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjEwMiJdLFsiIE5vdCBBO0JyYW5kIiwiOTkuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMDQuMC41MTEyLjEwMiJdXSwwXQ%3D%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/drt/ui HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/drt/si?st=NO_DATA HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY
Source: global traffic	HTTP traffic detected: GET /rhymes/macdonald/mlyrics.htm HTTP/1.1Host: www.dltk-teach.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_pieog=9JCajlmc1p1LlB3byVXRiojI6RnIsIyZyVmYuVmb1hkI6ISe0l2YiwiIHplI6ISZk92Qu9WanVmciwiInVnWiojIu9WanVmciwiIINkI6ISeyRnb192YiwiIxMzM2IiOiUGZvNEbhR3cvBnIsICM3MTOx4yN0IiOiQXYsJCLiAjMwIDNugjI6IyZu9GbiwiI0EjLzQTMukjMx4iMwEjI6ICcpJCLxojI2Jye; _gid=GA1.2.420427137.1684336108; _gat_gtag_UA_52971111_2=1; _ga_35SC65DXQ2=GS1.1.1684336109.1.0.1684336109.0.0.0; _ga=GA1.1.1448998378.1684336108; usprivacy=1---; _pbjs_userid_consent_data=6683316680106290; __gads=ID=1773da3191a24e72:T=1684336111:S=ALNI_Ma0SI8xYYMMYJMYKSj6PrhERaoj4Q; __gpi=UID=00000c1978ab8e58:T=1684336111:RT=1684336111:S=ALNI_MZkZfKuqzcXMznM0aZVcF-loBkcDw
Source: global traffic	HTTP traffic detected: GET /rhymes/macdonald/mlyrics.htm HTTP/1.1Host: www.dltk-teach.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_pieog=9JCajlmc1p1LlB3byVXRiojI6RnIsIyZyVmYuVmb1hkI6ISe0l2YiwiIHplI6ISZk92Qu9WanVmciwiInVnWiojIu9WanVmciwiIINkI6ISeyRnb192YiwiIxMzM2IiOiUGZvNEbhR3cvBnIsICM3MTOx4yN0IiOiQXYsJCLiAjMwIDNugjI6IyZu9GbiwiI0EjLzQTMukjMx4iMwEjI6ICcpJCLxojI2Jye; _gid=GA1.2.420427137.1684336108; _gat_gtag_UA_52971111_2=1; _ga_35SC65DXQ2=GS1.1.1684336109.1.0.1684336109.0.0.0; _ga=GA1.1.1448998378.1684336108; usprivacy=1---; _pbjs_userid_consent_data=6683316680106290; __gads=ID=1773da3191a24e72:T=1684336111:S=ALNI_Ma0SI8xYYMMYJMYKSj6PrhERaoj4Q; __gpi=UID=00000c1978ab8e58:T=1684336111:RT=1684336111:S=ALNI_MZkZfKuqzcXMznM0aZVcF-loBkcDwIf-None-Match: "d99e6f7ad465d91:0"If-Modified-Since: Mon, 03 Apr 2023 02:32:04 GMT
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/recaptcha/api2/aframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cse.js?cx=006942297880364118670:mgahrcqhv0w HTTP/1.1Host: cse.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spring/images/mgrassseedcaterpillar.jpg HTTP/1.1Host: www.dltk-holidays.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fairy-tales/hansel-and-gretel/images/s/s-gretel.jpg HTTP/1.1Host: www.dltk-teach.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.420427137.1684336108; _gat_gtag_UA_52971111_2=1; _ga_35SC65DXQ2=GS1.1.1684336109.1.0.1684336109.0.0.0; _ga=GA1.1.1448998378.1684336108; usprivacy=1---; _pbjs_userid_consent_data=6683316680106290; __gads=ID=1773da3191a24e72:T=1684336111:S=ALNI_Ma0SI8xYYMMYJMYKSj6PrhERaoj4Q; __gpi=UID=00000c1978ab8e58:T=1684336111:RT=1684336111:S=ALNI_MZkZfKuqzcXMznM0aZVcF-loBkcDw
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: clients1.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/1018018?ers=3 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /localstore.js HTTP/1.1Host: script.4dex.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJzeW5jcyI6eyJpbmRleGV4Y2hhbmdlIjoiMjAyMy0wNS0xN1QxNTowODozMS4yMTIyMTIzNloiLCJwdWJtYXRpYyI6IjIwMjMtMDUtMTdUMTU6MDg6MzEuMjEyMjA0NjMxWiIsInJ1Ymljb24iOiIyMDIzLTA1LTE3VDE1OjA4OjMxLjIxMjIxMDUxOFoifSwidWlkcyI6eyJhZGFnaW8iOnsidWlkIjoiYzBjZGNkZTYtZjY0Zi00MmU4LWE5MmMtNzY5NmQzNjQwMTc3IiwiZXhwaXJlcyI6IjIwMjMtMDctMTZUMTU6MDg6MzEuMjExNDA3NDk5WiJ9fSwiYmRheSI6IjIwMjMtMDUtMTdUMTU6MDg6MzEuMjExMjc2MjY3WiJ9If-None-Match: W/"922cffdd75f7192f75231d92684885aa"If-Modified-Since: Wed, 23 Nov 2022 15:43:18 GMT
Source: global traffic	HTTP traffic detected: GET /w/1.0/arj?ju=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&ch=UTF-8&res=1280x1024x24&ifr=false&tz=-120&tws=1280x913&be=1&bc=hb_pb_3.0.3&dddid=5a628109-f5e1-4c01-a0f3-f553043517d6%2C5a628109-f5e1-4c01-a0f3-f553043517d6%2C5a628109-f5e1-4c01-a0f3-f553043517d6%2Cc893e63d-20f3-433f-a99e-620b90da7f23%2C7bfcf4bd-649e-4dcf-98f9-694c0fce85c2%2C7bfcf4bd-649e-4dcf-98f9-694c0fce85c2%2C7bfcf4bd-649e-4dcf-98f9-694c0fce85c2%2C774a0cb8-c8ce-4e64-9011-c4ec6be06d92%2C774a0cb8-c8ce-4e64-9011-c4ec6be06d92%2C774a0cb8-c8ce-4e64-9011-c4ec6be06d92&nocache=1684336117027&sua=%7B%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22104%22%2C%220%22%2C%225112%22%2C%22102%22%5D%7D%2C%7B%22brand%22%3A%22%20Not%20A%3BBrand%22%2C%22version%22%3A%5B%2299%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22104%22%2C%220%22%2C%225112%22%2C%22102%22%5D%7D%5D%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22bitness%22%3A%2264%22%2C%22architecture%22%3A%22x86%22%7D&gdpr=0&x_gdpr_f=1&us_privacy=1---&id5id=0&schain=1.0%2C1!admetricspro.com%2C599%2C1%2C%2C%2C&aus=728x90%2C970x90%2C970x250%7C728x90%2C970x90%2C970x250%7C728x90%2C970x90%2C970x250%7C728x90%7C300x600%2C160x600%2C300x250%7C300x600%2C160x600%2C300x250%7C300x600%2C160x600%2C300x250%7C300x600%2C160x600%2C300x250%7C300x600%2C160x600%2C300x250%7C300x600%2C160x600%2C300x250&divids=div-gpt-ad-1659626971261-0%2Cdiv-gpt-ad-1659626971261-0%2Cdiv-gpt-ad-1659626971261-0%2Cdiv-gpt-ad-1659627004067-0%2Cdiv-gpt-ad-1659626981345-0%2Cdiv-gpt-ad-1659626981345-0%2Cdiv-gpt-ad-1659626981345-0%2Cdiv-gpt-ad-1659626991197-0%2Cdiv-gpt-ad-1659626991197-0%2Cdiv-gpt-ad-1659626991197-0&aucs=%252F22404337467%252C1018018%252Fdltk-teach-leaderboard-top%2C%252F22404337467%252C1018018%252Fdltk-teach-leaderboard-top%2C%252F22404337467%252C1018018%252Fdltk-teach-leaderboard-top%2C%252F22404337467%252C1018018%252Fdltk-teach-Sticky%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar1%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar1%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar1%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar2%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar2%2C%252F22404337467%252C1018018%252Fdltk-teach-Sidebar2&auid=557741601%2C557741599%2C558592365%2C557741603%2C558592366%2C557741608%2C557741604%2C558592368%2C558592367%2C557741605 HTTP/1.1Host: teachingaids-d.openx.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Content-Type: text/plainAccept: */*Origin: https://www.dltk-teach.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyRefere
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUlp1sBD3Fmt9F5ltXpPfkPPZleJFg0JhyRa5pDHTa79wMnCANayDEK9dfVlY7sY6a5uzeGsuKwC5DTTnaKi5s=?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNjg0MzM2MTE3LDE3MTAwMDAwMF0sIjAxQkU4QTFELTk3NEUtNDdGMC1CRERCLTM3RjBFNjY1RTc3MyIsbnVsbCxudWxsLFtudWxsLFs3XV0sImh0dHBzOi8vd3d3LmRsdGstdGVhY2guY29tL3JoeW1lcy9tYWNkb25hbGQvbWx5cmljcy5odG0iLG51bGwsW1s4LCJxcE83eFl4Z0E0VSJdLFs5LCJlbi1VUyJdXV0 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%2228019eb4ae81734%22%3A%227d986712c77c2b01c15a%7C728x90%2C970x90%2C970x250%7Cgpid%3D%2F22404337467%2C1018018%2Fdltk-teach-leaderboard-top%2Cc%3Dd%2C%22%2C%2229795accc0ee58%22%3A%227d986712c77c2b01c15a%7C728x90%7Cgpid%3D%2F22404337467%2C1018018%2Fdltk-teach-Sticky%2Cc%3Dd%2C%22%2C%22302f1b4cafbe117%22%3A%227d986712c77c2b01c15a%7C300x600%2C160x600%2C300x250%7Cgpid%3D%2F22404337467%2C1018018%2Fdltk-teach-Sidebar1%2Cc%3Dd%2C%22%2C%2231e91cb77eba387%22%3A%227d986712c77c2b01c15a%7C300x600%2C160x600%2C300x250%7Cgpid%3D%2F22404337467%2C1018018%2Fdltk-teach-Sidebar2%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&s=cf745758-783b-49c6-9926-94135f02675c&pv=af50baf1-bf64-4bc1-8206-db9f2eec2422&vp=desktop&lib_name=prebid&lib_v=7.41.0&us=8&fpd=%7B%22regs%22%3A%7B%22ext%22%3A%7B%22gdpr%22%3A0%2C%22us_privacy%22%3A%221---%22%7D%7D%2C%22user%22%3A%7B%22ext%22%3A%7B%7D%7D%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm%22%2C%22ref%22%3A%22https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm%22%2C%22domain%22%3A%22dltk-teach.com%22%2C%22keywords%22%3A%22teach%2Ceducational%2Cpreschool%2Ckindergarten%22%2C%22publisher%22%3A%7B%22domain%22%3A%22dltk-teach.com%22%7D%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A913%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F104.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22104%22%2C%220%22%2C%225112%22%2C%22102%22%5D%7D%2C%7B%22brand%22%3A%22%20Not%20A%3BBrand%22%2C%22version%22%3A%5B%2299%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22104%22%2C%220%22%2C%225112%22%2C%22102%22%5D%7D%5D%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22bitness%22%3A%2264%22%2C%22architecture%22%3A%22x86%22%7D%7D%7D&ius=1&gdpr=false&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22admetricspro.com%22%2C%22sid%22%3A%22599%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%220%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%7D%7D%5D%7D%5D&us_privacy=1---&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Content-Type: text/plainAccept: */*Origin: https://www.dltk-teach.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: h
Source: global traffic	HTTP traffic detected: GET /adsid/integrator.js?domain=www.dltk-teach.com HTTP/1.1Host: adservice.google.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsid/integrator.js?domain=www.dltk-teach.com HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=3052359095811226&correlator=139640217175676&eid=31072878&output=ldjh&gdfp_req=1&vrg=202305110101&ptt=17&impl=fifs&gdpr=0&us_privacy=1---&tfua=0&tfcd=0&iu_parts=22404337467%3A1018018%2Cdltk-teach-leaderboard-top%2Cdltk-teach-Sticky%2Cdltk-teach-Sidebar1%2Cdltk-teach-Sidebar2&enc_prev_ius=%2F0%2F1%2C%2F0%2F2%2C%2F0%2F3%2C%2F0%2F4&prev_iu_szs=728x90%7C970x90%7C970x250%2C728x90%2C300x600%7C160x600%7C300x250%2C300x600%7C160x600%7C300x250&ifi=1&adks=1765610747%2C2522619647%2C994413629%2C1696906574&sfv=1-0-40&prev_scp=%7Chb_adid_appnexus%3D8448f17c3d3d308%26hb_bidder_appnexus%3Dappnexus%26dyn_bids%3D0.14%26hb_adid%3D8448f17c3d3d308%26hb_bidder%3Dappnexus%7C%7Chb_adid_appnexus%3D854bae269b286bd%26hb_bidder_appnexus%3Dappnexus%26dyn_bids%3D0.14%26hb_adid%3D854bae269b286bd%26hb_bidder%3Dappnexus&eri=1&sc=1&cookie=ID%3D1773da3191a24e72%3AT%3D1684336111%3AS%3DALNI_Ma0SI8xYYMMYJMYKSj6PrhERaoj4Q&gpic=UID%3D00000c1978ab8e58%3AT%3D1684336111%3ART%3D1684336111%3AS%3DALNI_MZkZfKuqzcXMznM0aZVcF-loBkcDw&abxe=1&dt=1684336118170&lmt=1680489124&dlt=1684336115494&idt=1160&adxs=8%2C269%2C1006%2C1006&adys=8%2C820%2C467%2C991&biw=1263&bih=913&scr_x=0&scr_y=0&btvi=0%7C0%7C0%7C1&ucis=1%7C2%7C3%7C4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&uach=WyJXaW5kb3dzIiwiOC4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjEwMiIsW10sMCxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjEwMiJdLFsiIE5vdCBBO0JyYW5kIiwiOTkuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMDQuMC41MTEyLjEwMiJdXSwwXQ..&nvt=2&url=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&ref=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&frm=20&vis=1&psz=1247x250%7C1265x-1%7C249x792%7C249x792&msz=1247x250%7C728x-1%7C249x250%7C249x250&fws=0%2C512%2C4%2C4&ohw=0%2C0%2C249%2C249&ga_vid=1448998378.1684336108&ga_sid=1684336118&ga_hid=1476159014&ga_fc=true HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dltk-teach.comX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: b4bf79b1a994e6f95e45f4bbe5ab9c9b.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQf8QhBE79Q1wfyaAp5Rdm7KL094FA0LmflBniJscAAav0Y57nO0TeI2aaRrChmmMDREu1cSp0RQDWKY-bxE62mdoN9sg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsv4nMKs2HlO2wI-UpZrmn8ZiD1G53CnealjGO0yqCjOZArwHwCp0LC2d6hD8dvPWQWBdkDAbJBz1I5kbd0aJLEHXwNmv1S7-bUUumTSwMgi0UuQXHMBUCCSH323nh8QVtZWr24lJCYwwNOhknTrdRjzccrOLcitiNsiA7K0y2JozrU_kz1zJzPkdIDDEmVjB2Tp4vvxyLM2KfeoLGwMIUtmo7RoXZhyqMTI2zx-JVs5_hFjoL58bxuck0-WrESWlQ-WLlorPh6PB8D-NRDoI07gt2gfPczlbcJZCZy3YjNGVYnrc__5nrMj8TwXqxnuxYALlLOgJwB0I67h0iipQ3a5yI_r6uA&sai=AMfl-YRAc2-B9EoqTsQLv9ahFF1yTCMyVR88ZCIKreSCvpShfoAr3MrSAzI5jBLR89E6vQcPx6bOioiOhmKZGSWFTRzkW4_65ORycP36_Ls6QjoRYQs_UtElY7_HGf6ugQ&sig=Cg0ArKJSzFeyojtegCGPEAE&uach_m=[UACH]&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsstlfkcgoPJrGKiwIsqsjZwyvqWnvY8i2PR5G1XZntDWa-bwqu6rP8sWvb5VbeUXCAEJWjmmz1_6tA-efI27FAcR2REPiXrjm0x4EOG5Fy49x8JEAc31I0rh6W5JzyObxe06DKxhdDV3yPYNA6pEP4vIXlg2mYTYxUoajQRUu49tu0vM8O-hvuNYB54qO5uEBr8srSoczFNJ1IEFytAZ10XlM-Gw2UK8n0WcNc7LzavRBATmTZe-TTQLWgcXbQ7A93Ei8pMXNF_TCBCOY5gKKysGx8f3bXYoPqzTEtuPEp5-AwZ21dk8kMH86M-NNnOt9AGMVH4wjQ_EBTUAdZ-dQ&sai=AMfl-YS4nEPldJnaiJIhoT5rau3AAkjLvJ-iGpOVPRGeSiKosllwLOZq8u9qspt6a1Vc83pi-F2nLvIXEUbgPAgpYQAag3Yq1Z_Vk8FHzb2-84Q-YNM8TQWRly5D7I9Gag&sig=Cg0ArKJSzM45Y9kRTARvEAE&uach_m=[UACH]&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQIVtVF842ubglzkPEwPia6C7QFLM2mdv-8XMEHdb3DvXPUc3qnQQGIPiTQDjHeSpZhdHYnoHj5dENqo4s5GqUN_wQNdA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsunsT3LMmjqb5Z4QxWfo8JoNoOF95P9-6PLsQ2fHMl5WTlEF6cauubcWkHtZmUCC7AFtE--jA0BF3cBHhSy735DB67R1FNYFycaeiyrtjYcG9fyLr7G0-I392bYKsDdzlxbs7sRuWBymk3AwibQl7I0YlqlI6ugbkZjK_tl4FEgmXk-_ZP168ZE6U2U_CfEKyJJONuJ0mxO3v04d5yacUM-uyzCPAXAdykneiwuAC69DRv8wGvSmFADc-ke3F3ERRuSWuVjbbJ0SVJzaxJzMvP9ID3A2Kqk1owaatmyXxrhCXXjRYYe2aTFm3fbERdEtgVqyNtxrb9wODXYqE0fbg&sai=AMfl-YR7kPEjb9wZLRX6siC6X67dMqLS0DFZiqw8R_xdI4f4yIMem00K9_nWMIq3TZfhCA45cG-26tVFlG1le_XSlqYNaTI4O52akkQX6qjKuOrRHpI96ItWPCeBEFIesg&sig=Cg0ArKJSzGx23Tda--7MEAE&uach_m=[UACH]&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssHjSKsAB9Hczx5k_pbIxhoZUAWFjaEbTsJvR6QpDAMFcSXjhxKVWTKiG-Sx7kMSw7Dge6kHfln4XsQD4aGptqEN8S51X9LQbRa2EgqJYlq_eazAEf6pYiLpuBrt4mq4Rz9bzq-zbPwdm3wC_IVkLzxI9PLRce03XpaytMHDKvaiLL01FeR_Tp6iNF2Eu_r7FpNdM93JwlD_Lx9KPdjpXLbg6AlM5t1foaFPGbu9rBtULpVcsTHAZNUqmdKtqf_93K-TIhDoGSr9SfcLcu6SVa0HoIsQ3F6UiLE1ax_DvusgOl3qGJZfYzTXGyMrkgQ0NRuW5ccV5PtVywKNJ-yIGsXKy_avriEzw&sai=AMfl-YQOhWfR9gHAWoiVhwY0432taX6Q88fW-azIGv1eAHiO9GQ5QKBJb4nqvhyneIhvs6K8jjV4yX72xed9FXHkfBhCBY6MaiQvafQormHtd2VaVckFgSbbajBMFD3WOQ&sig=Cg0ArKJSzHCsUsjbve5yEAE&uach_m=[UACH]&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuHfOfKKBMdLfLOSU46hRtgEzBbosgGqe02CBlkFMslviJZlcOPWg8aBxQiC9WEQm0PYt1oSkNU79el_foyVTthVrurvctKzYAckka_Ra-3QWddNB7Rwq2AR3KO35BcyP0EW-pHPQpc6RMcSQYBJaujP4kY8E4NssHUPGgV0yW1KW2it1FLF_44Ot2BZldOUf4RxtEz7-iPURUz-IFAKzVfFi9nWK2W4yvTloZiv5SN3-EA3Ubl6k5lCRnpuVQxZBykIIckzxY-5qt3tja05bT9LBUlMeMsBtWTUnwp27v6UcrLZ_73HqjkKaQ42RRX92-E0s1CUv_jyJkM-JwatkZd&sai=AMfl-YQhwXDCmKASjGHKzKYMuReVCNYFExjr-MAIYK1PYdGQEQporQjS4qUYccIEberjq7DeOt3say6r3e2Qag4C1hmtkqx-5r4Jx03R6iOJsSzFhh_3PtS_K9bCpa8wJw&sig=Cg0ArKJSzLalXpopq_uCEAE&uach_m=[UACH]&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjss_1dkE4qQd7bUCfR4ey6k8--fCnUCD0NTmVPW5KBc9OxSEul3YYr9JhnqfJ6nXLkDWj7GPQdUuMjqCrfhrv9B9tnOyF513qAtSbUEzpDWzMVQCKEGd8695U0hZi7cvfLGsvOWRP47dYZ2s8JYBuABbuo-LMkaiTgIUmhcI9rKptLhdPXuH_lF0tgya78CmpwnlC_wceFRPtSArv8xW21ZtGxBNwu3j5M7bIAe608sxNtVzUnAy9RBNTEHTWf1tfZ5bqZ4vNugeFwujM2B-qhkji3YW6QkFPOu3IfhODyYXAWoUVAviIXyt4w5YIkQi27ScCl5IK4lvgT2T46bTIeqi&sai=AMfl-YTjILTZDL-Sz_36z3jmarEHnRgTpAnwTNlb5SooGhMvhZ9NIOV6jlWkkN44x8MT10L-srkAbzDOfOqpv1f23OVkOUiL3H7gLJA_LUNXcEdfdUV5jfhRcFG7RGLzqQ&sig=Cg0ArKJSzMuOm7ymg_vxEAE&uach_m=[UACH]&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dltk-brand-1200.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/facebook.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/instagram.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/linkedin.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/twitter.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/pinterest.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/youtube.png HTTP/1.1Host: www.dltk-kids.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rhymes/macdonald/scow.gif HTTP/1.1Host: www.dltk-teach.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_pieog=9JCajlmc1p1LlB3byVXRiojI6RnIsIyZyVmYuVmb1hkI6ISe0l2YiwiIHplI6ISZk92Qu9WanVmciwiInVnWiojIu9WanVmciwiIINkI6ISeyRnb192YiwiIxMzM2IiOiUGZvNEbhR3cvBnIsICM3MTOx4yN0IiOiQXYsJCLiAjMwIDNugjI6IyZu9GbiwiI0EjLzQTMukjMx4iMwEjI6ICcpJCLxojI2Jye; _gid=GA1.2.420427137.1684336108; _gat_gtag_UA_52971111_2=1; usprivacy=1---; _pbjs_userid_consent_data=6683316680106290; __gads=ID=1773da3191a24e72:T=1684336111:S=ALNI_Ma0SI8xYYMMYJMYKSj6PrhERaoj4Q; __gpi=UID=00000c1978ab8e58:T=1684336111:RT=1684336111:S=ALNI_MZkZfKuqzcXMznM0aZVcF-loBkcDw; _ga_35SC65DXQ2=GS1.1.1684336109.1.1.1684336116.0.0.0; _ga=GA1.1.1448998378.1684336108
Source: global traffic	HTTP traffic detected: GET /images/fade-grey.jpg HTTP/1.1Host: www.dltk-kids.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cse/static/css/v2/clear.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; __Secure-ENID=6.SE=cJKCBuSaL1dV3R8z2Y2al7-m2m5bGA74lqbYYkqC3uy-NtZ1f6n_bCBr25tlnnjvdmLpGQ81ZKzP3Te5vVjpSQjYWCwvlOMApK7tmZNWcORu0p4wniPJGQfTslQNnpQWhG9qkwkEgy49-6UG3UQ1eiUyFolJZWLeUM1p4KvjM9E
Source: global traffic	HTTP traffic detected: GET /cse/static/images/1x/en/branding.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; __Secure-ENID=6.SE=cJKCBuSaL1dV3R8z2Y2al7-m2m5bGA74lqbYYkqC3uy-NtZ1f6n_bCBr25tlnnjvdmLpGQ81ZKzP3Te5vVjpSQjYWCwvlOMApK7tmZNWcORu0p4wniPJGQfTslQNnpQWhG9qkwkEgy49-6UG3UQ1eiUyFolJZWLeUM1p4KvjM9E
Source: global traffic	HTTP traffic detected: GET /spring/images/mgrassseedcaterpillar.jpg HTTP/1.1Host: www.dltk-holidays.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync.html?usp_consent=1--- HTTP/1.1Host: public.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /ss/2000891.html HTTP/1.1Host: sync.serverbid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?plm=6&ph=e1b1f5e1-3c2c-4287-9806-317cfbf3bd12&gdpr=0&us_privacy=1--- HTTP/1.1Host: eu-u.openx.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ec1c52cb-06c2-07ca-31ac-2a0f79d14029|1684336111
Source: global traffic	HTTP traffic detected: GET /sync?us_privacy=1---& HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync.html?us_privacy=1--- HTTP/1.1Host: u.4dex.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=97&redir=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DgBgkxrVErPj9wqivTDd2AmVY%26source_user_id%3D%7BuserId%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=sharethrough_ob&gdpr=0&gdpr_consent=&google_hm=OTJjYWU5YmQtZmIyYy00YjY1LTgwNzEtMmU1YWRmMDBlMmZl HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /isyn?gdpr_consent=&gdpr=0&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dltk-teach.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=sonobi&google_cm&google_hm=N2ZkMjlhMjYtZjZkNC00OTYxLTgyNmQtOTcwMzllODM2NTM1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /sync?ssp=sonobi&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=sonobi&ttd_tpi=1&ttd_puid=4b897281fe&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?do=add&pid=560606&ev=7fd29a26-f6d4-4961-826d-97039e836535&daaqp=1&rurl=https%3A%2F%2Fsync.go.sonobi.com%2Fus.gif%3Fnw%3Dpp%26nuid%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/img?cs_wd_sy=1&dp=43&redir=https%3A%2F%2Fsync.go.sonobi.com%2Fus.gif%3Fnw%3Dmediamath%26nuid%3D[MM_UUID] HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=97&redir=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DgBgkxrVErPj9wqivTDd2AmVY%26source_user_id%3D%7BuserId%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=5928d526-edd8-4554-a38d-7d9d20bb75c6#1684336124296
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=sonobi&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=37b98004-adf5-4fe6-a560-0074cd676299; c=1684336124; tuuid_lu=1684336124
Source: global traffic	HTTP traffic detected: GET /sync/v1?gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=92cae9bd-fb2c-4b65-8071-2e5adf00e2fe
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=contextweb&google_cm&google_sc&google_hm=Z0VrYkZuSVNnRFJHV1puSFZGd09tZw&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=gBgkxrVErPj9wqivTDd2AmVY&source_user_id=5928d526-edd8-4554-a38d-7d9d20bb75c6-6464edfc-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=92cae9bd-fb2c-4b65-8071-2e5adf00e2fe
Source: global traffic	HTTP traffic detected: GET /bsw_sync?bidswitch_ssp_id=sonobi&bsw_custom_parameter=37b98004-adf5-4fe6-a560-0074cd676299&gdpr=0&gdpr_consent= HTTP/1.1Host: ads.creative-serving.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/bsw_sync?bidswitch_ssp_id=sonobi&bsw_custom_parameter=37b98004-adf5-4fe6-a560-0074cd676299&gdpr=0&gdpr_consent= HTTP/1.1Host: ads.creative-serving.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=cec7a9e7-89cb-4ab0-900e-3ca3c0ba1b56; c=1684336124; tuuid_lu=1684336124
Source: global traffic	HTTP traffic detected: GET /us.gif?nw=zt&nuid=5108559727801155806 HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+
Source: global traffic	HTTP traffic detected: GET /usg.gif?google_gid=CAESECqnRu6j3chT3QiyubBUD5I&google_cver=1 HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+
Source: global traffic	HTTP traffic detected: GET /bh/rtset?do=add&pid=547259&gdpr=&gdpr_consent=&ev=CAESEDcWrdxfBo29XTpmkzNDUBg&google_cver=1 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=vOL0pELCw2Bv; pb_rtb_ev=3-1kmy|7LJ.0.7fd29a26-f6d4-4961-826d-97039e836535; INGRESSCOOKIE=9b0459f3135a740e
Source: global traffic	HTTP traffic detected: GET /us.gif?nw=mediamath&nuid=a7f36464-edfd-4d00-9b17-6a0b245bd31a HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=4&user_id=cec7a9e7-89cb-4ab0-900e-3ca3c0ba1b56&ssp=sonobi&expires=30&user_group=5&bsw_param=37b98004-adf5-4fe6-a560-0074cd676299 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=37b98004-adf5-4fe6-a560-0074cd676299; c=1684336124; tuuid_lu=1684336124
Source: global traffic	HTTP traffic detected: GET /fairy-tales/hansel-and-gretel/images/s/s-gretel.jpg HTTP/1.1Host: www.dltk-teach.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.420427137.1684336108; _gat_gtag_UA_52971111_2=1; usprivacy=1---; _pbjs_userid_consent_data=6683316680106290; __gads=ID=1773da3191a24e72:T=1684336111:S=ALNI_Ma0SI8xYYMMYJMYKSj6PrhERaoj4Q; __gpi=UID=00000c1978ab8e58:T=1684336111:RT=1684336111:S=ALNI_MZkZfKuqzcXMznM0aZVcF-loBkcDw; _ga_35SC65DXQ2=GS1.1.1684336109.1.1.1684336116.0.0.0; _ga=GA1.1.1448998378.1684336108
Source: global traffic	HTTP traffic detected: GET /us.gif?nw=pp&nuid=vOL0pELCw2Bv HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+; __uin_zt=5108559727801155806; __uin_eb=CAESECqnRu6j3chT3QiyubBUD5I||1; __uin_mm=a7f36464-edfd-4d00-9b17-6a0b245bd31a; HAPLB8S=s8655|ZGTt/
Source: global traffic	HTTP traffic detected: GET /us.gif?nw=bidswitch&nuid=37b98004-adf5-4fe6-a560-0074cd676299 HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dltk-teach.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+; __uin_zt=5108559727801155806; __uin_eb=CAESECqnRu6j3chT3QiyubBUD5I||1; __uin_mm=a7f36464-edfd-4d00-9b17-6a0b245bd31a; HAPLB8S=s8655|ZGTt/
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.dltk-teach.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.420427137.1684336108; _gat_gtag_UA_52971111_2=1; usprivacy=1---; _pbjs_userid_consent_data=6683316680106290; __gads=ID=1773da3191a24e72:T=1684336111:S=ALNI_Ma0SI8xYYMMYJMYKSj6PrhERaoj4Q; __gpi=UID=00000c1978ab8e58:T=1684336111:RT=1684336111:S=ALNI_MZkZfKuqzcXMznM0aZVcF-loBkcDw; _ga_35SC65DXQ2=GS1.1.1684336109.1.1.1684336116.0.0.0; _ga=GA1.1.1448998378.1684336108
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=7824331086822214825
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=sonobi&ttd_tpi=1&ttd_puid=4b897281fe&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us.gif?nw=zt&nuid=5108559727801155806 HTTP/1.1Host: sync.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+; __uin_zt=5108559727801155806; __uin_eb=CAESECqnRu6j3chT3QiyubBUD5I||1; __uin_mm=a7f36464-edfd-4d00-9b17-6a0b245bd31a; __uin_bw=37b98004-adf5-4fe6-a560-0074cd676299; HAPLB8S=s8655|ZGTuA; __uin_pp=vOL0pELCw2Bv
Source: global traffic	HTTP traffic detected: GET /usg.gif?google_gid=CAESECqnRu6j3chT3QiyubBUD5I&google_cver=1 HTTP/1.1Host: sync.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+; __uin_zt=5108559727801155806; __uin_eb=CAESECqnRu6j3chT3QiyubBUD5I||1; __uin_mm=a7f36464-edfd-4d00-9b17-6a0b245bd31a; __uin_bw=37b98004-adf5-4fe6-a560-0074cd676299; HAPLB8S=s8655|ZGTuA; __uin_pp=vOL0pELCw2Bv
Source: global traffic	HTTP traffic detected: GET /us.gif?nw=mediamath&nuid=a7f36464-edfd-4d00-9b17-6a0b245bd31a HTTP/1.1Host: sync.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+; __uin_zt=5108559727801155806; __uin_eb=CAESECqnRu6j3chT3QiyubBUD5I||1; __uin_mm=a7f36464-edfd-4d00-9b17-6a0b245bd31a; __uin_bw=37b98004-adf5-4fe6-a560-0074cd676299; HAPLB8S=s8655|ZGTuA; __uin_pp=vOL0pELCw2Bv
Source: global traffic	HTTP traffic detected: GET /us.gif?nw=bidswitch&nuid=37b98004-adf5-4fe6-a560-0074cd676299 HTTP/1.1Host: sync.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+; __uin_zt=5108559727801155806; __uin_eb=CAESECqnRu6j3chT3QiyubBUD5I||1; __uin_mm=a7f36464-edfd-4d00-9b17-6a0b245bd31a; __uin_bw=37b98004-adf5-4fe6-a560-0074cd676299; HAPLB8S=s8655|ZGTuA; __uin_pp=vOL0pELCw2Bv
Source: global traffic	HTTP traffic detected: GET /us.gif?nw=pp&nuid=vOL0pELCw2Bv HTTP/1.1Host: sync.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+; __uin_zt=5108559727801155806; __uin_eb=CAESECqnRu6j3chT3QiyubBUD5I||1; __uin_mm=a7f36464-edfd-4d00-9b17-6a0b245bd31a; __uin_bw=37b98004-adf5-4fe6-a560-0074cd676299; HAPLB8S=s8655|ZGTuA; __uin_pp=vOL0pELCw2Bv
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=5&redir=https%3A%2F%2Feu-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D536872786%26val%3D%5BMM_UUID%5D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=a7f36464-edfd-4d00-9b17-6a0b245bd31a
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dappnexus%26us_privacy%3D1---%26uid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.4dex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=MTNkZmJlNTgtNjYzMi02Njk5LTdlOWEtYjg1ZWQ3MTRiZGI0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=3fb06d92-af45-383d-6b7a-e2e71df673d4&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adswizz/js/SynchroClient2.js HTTP/1.1Host: cdn.adswizz.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /register2.php HTTP/1.1Host: synchrobox.adswizz.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=prebid&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://sync.serverbid.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /usync/?pubId=6c68086c0c61793&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-25CIknq_eSg16.gif?idmatch=0&gdpr=0 HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=536872786&val=a7f36464-edfd-4d00-9b17-6a0b245bd31a HTTP/1.1Host: eu-u.openx.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ec1c52cb-06c2-07ca-31ac-2a0f79d14029|1684336111; pd=v2|1684336124|gekin0vNiygu
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072956&gdpr=0&val=7G7E2b8_wtn3OcLauDzfiOlvxIz3Y5Pd7Gp3H5S4 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ec1c52cb-06c2-07ca-31ac-2a0f79d14029|1684336111; pd=v2|1684336124|gekin0vNiygu
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEJOYhOJ9RjKMSnd1Vh3FyMU&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ec1c52cb-06c2-07ca-31ac-2a0f79d14029|1684336111; pd=v2|1684336124|gekin0vNiygu
Source: global traffic	HTTP traffic detected: GET /usync/13926?gdpr=0&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D309%26uid%3D HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1---&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3D HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=onetag_eb&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=159706&gdpr=1&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26uid%3D%23PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/?int_id=106&redir=1&ot_initiated=1 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/usync/?pubId=6c68086c0c61793&gdpr=&gdpr_consent=&us_privacy=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /711916.gif?ct=4&cv= HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/?int_id=113&gdpr=1&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/usync/?pubId=6c68086c0c61793&gdpr=&gdpr_consent=&us_privacy=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D98%26gdpr%3D1%26gdpr_consent%3D%26uid%3D$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=5&gdpr=1&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid] HTTP/1.1Host: ssbsync-global.smartadserver.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=7824331086822214825
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=9&gdpr=0&gdpr_consent=&us_privacy=1---&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D317%26uid%3D%24UID HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=7824331086822214825
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=75&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D1%26uid%3D%5BMM_UUID%5D%26gdpr%3D1%26gdpr_consent%3D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=a7f36464-edfd-4d00-9b17-6a0b245bd31a
Source: global traffic	HTTP traffic detected: GET /usermatch?s=195491&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58488/occ?&gdpr=1&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=onetag&gdpr=1&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=37b98004-adf5-4fe6-a560-0074cd676299; c=1684336124; tuuid_lu=1684336124
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D&s=195491&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZGTuBtyxOolagkFg3MnO-gAA; CMPS=2200; CMPRO=2200
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=vw6iyrn&ttd_tpi=1&gpdr=1&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?cn=39&ttt=1&dpui=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw HTTP/1.1Host: e.serverbid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1--- HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0&us_privacy=1--- HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_cm&google_sc&gdpr=0&us_privacy=1--- HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1---&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D348%26uid%3D%7BpartnerId%7D HTTP/1.1Host: cs-rtb.minutemedia-prebid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=NjMyNjMxNDQwNjk5ZDE3MjFjZTU5OGYzNzFmNTc1MjZiOTYwN2NkNQ&gdpr=0&us_privacy=1--- HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1---&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6Tx2P68hkA4i01TWgCksy8|t
Source: global traffic	HTTP traffic detected: GET /sync/rubicon/RAKqqQjiFSKz2LPuUuMWcQ?csrc=&gdpr=0&us_privacy=1--- HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1--- HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LHRU8D3I-9-HSOA&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1--- HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D312%26uid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /merge?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1---&&location=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%5BSOVRNID%5D HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1---&&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cchain/0?gdpr=0&gdpr_consent=&us_privacy=1---&&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D327%26uid%3D HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __amc=2_1684336110_1684336118
Source: global traffic	HTTP traffic detected: GET /ups/58559/occ HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAfuZGQCEEzfjDMJRcclL_egB9DstlkFEgEBAQE_ZmRuZAAAAAAA_eMAAA&S=AQAAAin1dUupBryED3YoeEhtWKc
Source: global traffic	HTTP traffic detected: GET /sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1---&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D352%26uid%3D%7BpartnerId%7D HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58632/occ HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAfuZGQCEEzfjDMJRcclL_egB9DstlkFEgEBAQE_ZmRuZAAAAAAA_eMAAA&S=AQAAAin1dUupBryED3YoeEhtWKc
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=duration&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D321%26uid%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=KW3eSFMR&gdpr=0&gdpr_consent=&us_privacy=1---& HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=92cae9bd-fb2c-4b65-8071-2e5adf00e2fe; AWSALBCORS=T4UaGGs7GE8TRBVjD8BzmJ767g7ezFW4eYiOc4dFA23fHFCm/GBKMqp3sh/baCLV++ot2lxwe16TR7oQz5srpK1VnBk6D6h72bDHrPiXCp3dOPWUTrGut5eiVb+I
Source: global traffic	HTTP traffic detected: GET /sync?pid=312&uid=4677251891824697287 HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D5551%26spui%3D%26dpui%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=562763&ev=1&rurl=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D5548%26spui%3D%26dpui%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=vOL0pELCw2Bv; INGRESSCOOKIE=9b0459f3135a740e; pb_rtb_ev=3-1kmy|7LJ.0.7fd29a26-f6d4-4961-826d-97039e836535|4is.0.CAESEDcWrdxfBo29XTpmkzNDUBg
Source: global traffic	HTTP traffic detected: GET /merge?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1---&location=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%5BSOVRNID%5D&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=GqUMuRZHfxKL1OPwRgarl9aZ
Source: global traffic	HTTP traffic detected: GET /usa?loc=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D332%26uid%3D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+; __uin_zt=5108559727801155806; __uin_eb=CAESECqnRu6j3chT3QiyubBUD5I||1; __uin_mm=a7f36464-edfd-4d00-9b17-6a0b245bd31a; __uin_bw=37b98004-adf5-4fe6-a560-0074cd676299; __uin_pp=vOL0pELCw2Bv; HAPLB8S=s8655|ZGTuB
Source: global traffic	HTTP traffic detected: GET /sync?pid=327&uid=a39a1249-96ef-4d07-b6c7-a1f0148b1980&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=pbs&ovsid=setstatuscode&bidder=medianet&gdpr=0&gdpr_consent=&us_privacy=1---&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D353%26uid%3D%3Cvsid%3E HTTP/1.1Host: hbx.media.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cchain/0?gdpr=&gdpr_consent=&cb=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D6294%26spui%3D%26dpui%3D HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __amc=2_1684336110_1684336118
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=185073&gdpr=&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D5528%26spui%3D%26dpui%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZGTuBtyxOolagkFg3MnO-gAA; CMPS=2200; CMPRO=2200
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=appnexus&us_privacy=1---&uid=4677251891824697287 HTTP/1.1Host: u.4dex.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.4dex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537113484&val=7582827400492800849 HTTP/1.1Host: eu-u.openx.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ec1c52cb-06c2-07ca-31ac-2a0f79d14029|1684336111; pd=v2|1684336124|gekin0vNiygu
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+&oit=1&cp=4&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa?loc=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D5444%26spui%3D%26dpui%3D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=7fd29a26-f6d4-4961-826d-97039e836535; _usd_dltk-teach.com=c53a5acf-dc8a-4673-9508-723770a25173; __uih=1; __uir_bw=1; __uir_mm=1; __uir_td=1; __uir_zt=1; __uir_pp=1; __uin_z1=1; __uir_z1=1; __uir_eb=1; HAPLB8G=s85145|ZGTt+; __uin_zt=5108559727801155806; __uin_eb=CAESECqnRu6j3chT3QiyubBUD5I||1; __uin_mm=a7f36464-edfd-4d00-9b17-6a0b245bd31a; __uin_bw=37b98004-adf5-4fe6-a560-0074cd676299; __uin_pp=vOL0pELCw2Bv; HAPLB8S=s8655|ZGTuB
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&us_privacy=1---&redir=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dsovrn%26us_privacy%3D1---%26uid%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.4dex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=GqUMuRZHfxKL1OPwRgarl9aZ
Source: global traffic	HTTP traffic detected: GET /sync?pid=337&uid=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /server_match?partner_id=1790&us_privacy=1---&r=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dimprovedigital%26us_privacy%3D1---%26uid%3D%7BPUB_USER_ID%7D HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.4dex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+m&oit=4&cp=5&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirectuser?r=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D346%26uid%3DBUYERUID HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?redir=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D4%26spui%3D%26dpui%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=GqUMuRZHfxKL1OPwRgarl9aZ
Source: global traffic	HTTP traffic detected: GET /sync?pid=324&uid=5108559727801155806 HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /pbsync?gdpr=&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D6985%26spui%3D%26dpui%3D%24UID HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+ma&oit=4&cp=6&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=5551&spui=&dpui=4677251891824697287 HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+mac&oit=4&cp=7&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/AF1QipMt2rk5mZWv1e2jth9lzXm316PYpCnzwi398GhF=w92-h92-n-k-no HTTP/1.1Host: lh5.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/AF1QipP9xrpXIvqvs_lnHtyz3r2U57gSQZcTIFJHNVrp=w92-h92-n-k-no HTTP/1.1Host: lh5.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macd&oit=4&cp=8&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/AF1QipO3muqZtSyolMfcf1CiWpZzxydVwMV--MNyCI4l=w92-h92-n-k-no HTTP/1.1Host: lh5.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/AF1QipOW5bBCra9vmPLqf2o7OOphOFZ9YcxfUai5TwMH=w92-h92-n-k-no HTTP/1.1Host: lh5.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdo&oit=4&cp=9&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?pid=317&uid=7824331086822214825&gdpr=0&gdpr_consent= HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558355&ev=1&rurl=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=vOL0pELCw2Bv; INGRESSCOOKIE=9b0459f3135a740e; pb_rtb_ev=3-1kmy|7LJ.0.7fd29a26-f6d4-4961-826d-97039e836535|4is.0.CAESEDcWrdxfBo29XTpmkzNDUBg
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=e_99cd6507-57d3-42e4-91d8-406f13b2ed55&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=37b98004-adf5-4fe6-a560-0074cd676299; c=1684336124; tuuid_lu=1684336124
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ec1c52cb-06c2-07ca-31ac-2a0f79d14029|1684336111; pd=v2|1684336124|gekin0vNiygu
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald&oit=4&cp=13&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAfuZGQCEEzfjDMJRcclL_egB9DstlkFEgEBAQE_ZmRuZAAAAAAA_eMAAA&S=AQAAAin1dUupBryED3YoeEhtWKc
Source: global traffic	HTTP traffic detected: GET /711890.gif?credir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D136%26partneruserid%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent= HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=vOL0pELCw2Bv; INGRESSCOOKIE=9b0459f3135a740e; pb_rtb_ev=3-1kmy|7LJ.0.7fd29a26-f6d4-4961-826d-97039e836535|4is.0.CAESEDcWrdxfBo29XTpmkzNDUBg
Source: global traffic	HTTP traffic detected: GET /i/102/9.gif?gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=e_99cd6507-57d3-42e4-91d8-406f13b2ed55&gdpr=0&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services?srv=cs&pid=65&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsnc%26i%3D%5BUSER_ID%5D HTTP/1.1Host: sync.technoratimedia.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+&oit=4&cp=14&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+h&oit=4&cp=15&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirectObuid?platformId=GUMGU18H7EL9NI653I7DPEH51&gdpr=0&gdprConsent=&platformRdUrl=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dobn%26i%3D%7BOB_UID%7D%26r%3D%7BobRdUrl%7D HTTP/1.1Host: sync.outbrain.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=71&gdpr=0&gdpr_consent=&redir=https%3a%2f%2fusersync.gumgum.com%2fusersync%3fb%3dmmh%26i%3d%5bMM_UUID%5d HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=a7f36464-edfd-4d00-9b17-6a0b245bd31a
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+ha&oit=4&cp=16&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had&oit=4&cp=17&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=mmh&i=a7f36464-edfd-4d00-9b17-6a0b245bd31a&gdpr=0&gdpr_consent= HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=ZV85OWNkNjUwNy01N2QzLTQyZTQtOTFkOC00MDZmMTNiMmVkNTU=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+&oit=4&cp=18&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+&oit=4&cp=20&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=atm&i=ZGTuCgAKtyBBQQAn&gdpr=0&gdpr_consent=&_test=ZGTuCgAKtyBBQQAn HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+p&oit=4&cp=21&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/casale HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=189872&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Diex%26i%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZGTuBtyxOolagkFg3MnO-gAA; CMPS=2200; CMPRO=2200
Source: global traffic	HTTP traffic detected: GET /?pubid=11466&redirect=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D24%26external_user_id%3D%7Bviewer_token%7D&us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?pid=333&uid=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?puid=e_99cd6507-57d3-42e4-91d8-406f13b2ed55&redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Daad%26i%3D%5BDSP_USER_ID%5D&gdpr=0&gdpr_consent=&ccpa=1--- HTTP/1.1Host: cs.admanmedia.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+phish&oit=4&cp=25&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A91X8NZ7r0Q7mNqNFaaEMVY|t
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZGTuBtyxOolagkFg3MnO-gAA; CMPS=2200; CMPRO=2200
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+phish+ha&oit=4&cp=28&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aux/idsync?proto=gumgum HTTP/1.1Host: tg.socdm.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://dsum.casalemedia.com/crum?cm_dsp_id=190&external_user_id=$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=index&google_cm&google_hm=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+phish+har&oit=4&cp=29&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=15&redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Fcrum%3Fcm_dsp_id%3D3%26external_user_id%3D%5BMM_UUID%5D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=a7f36464-edfd-4d00-9b17-6a0b245bd31a
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=rubiconprojectHMT&id=9qL7J1ZTRdqwv-CvvH4TNQ&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A91X8NZ7r0Q7mNqNFaaEMVY|t
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+phish+harm&oit=4&cp=30&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=aad&i=66142cae-3a63-4a70-9d87-b41de2be3603 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /usersync?b=sus&i=ZGTuDMCo8YQAAAYJGzAAAAAA HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /sync?pid=348&uid=u-1P1eIakp_mm HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-rtb.minutemedia-prebid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=4677251891824697287 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1---&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A91X8NZ7r0Q7mNqNFaaEMVY|t
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u=6f463v3ISzK4srggzXqY; ts=1684336140
Source: global traffic	HTTP traffic detected: GET /usersync?b=opx&i=c88dc9e2-8750-006b-0c01-f20ad5a67292 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /usersync?b=pln&i=vOL0pELCw2Bv&ev=1&pid=558355 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /usersync?b=oth&i=y-vfGqp_ZE2pcBGdWultyW.ppgKLOQjlS7ikO_~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=86&partneruserid=4677251891824697287&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=7824331086822214825
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=92&partneruserid=vOL0pELCw2Bv&ev=1&pid=560288&gdpr_consent=&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=7824331086822214825
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+phish+har&oit=4&cp=29&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://ssp.disqus.com/match?bidder=14&buyeruid=$UID&r=Cid1YS1kNmQxNDJiMi1jN2YwLTNiMDctOTE5OS1hOTEwMjIxNzg3YmYQ____________ASpTaHR0cHM6Ly9hZHMuc2VydmVub2JpZC5jb20vc3luYz9waWQ9MzQ2JnVpZD11YS1kNmQxNDJiMi1jN2YwLTNiMDctOTE5OS1hOTEwMjIxNzg3YmYyAg4eOAE=&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /usersync?b=rth&i=6f463v3ISzK4srggzXqY&pi=gumgum&tc=1 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /usersync?b=snc&i=GDPR HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+phish+ha&oit=4&cp=28&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /server_match?partner_id=N&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Didi%26i%3D%7BPUB_USER_ID%7D HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=bbb4e244-f6b8-4b2a-bb3b-6d44144bba20; tuuid_lu=1684336137
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=7824331086822214825
Source: global traffic	HTTP traffic detected: GET /sync?pid=309&uid=e_99cd6507-57d3-42e4-91d8-406f13b2ed55 HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm
Source: global traffic	HTTP traffic detected: GET /usersync?b=obn&i=ENC%28THJ-0Ap1lnpyBfWVQWdsTB9ssf-xwNAIQRe0GY39diSm2jS7cHP0Gr3GEIIBNAQD%29&r=https%3A%2F%2Fsync.outbrain.com%2FsyncUser%3FplatformId%3D%7Bplatform_id%7D%26platformUid%3D%7Bplatform_uid%7D%26obuid%3DENC%28THJ-0Ap1lnpyBfWVQWdsTB9ssf-xwNAIQRe0GY39diSm2jS7cHP0Gr3GEIIBNAQD%29 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /sync?pid=339&uid=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm
Source: global traffic	HTTP traffic detected: GET /sync?pid=310&uid=GqUMuRZHfxKL1OPwRgarl9aZ HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm
Source: global traffic	HTTP traffic detected: GET /usersync?b=sta&i=0-318dc82f-3ebd-5daa-7a4b-5a1474be8053$ip$102.129.143.14 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=vnt&i=82912684-4ab5-4268-a069-c0d88093784d HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /sync?pid=332&uid=7fd29a26-f6d4-4961-826d-97039e836535 HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm
Source: global traffic	HTTP traffic detected: GET /sync?pid=353&uid=0000EEA HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm
Source: global traffic	HTTP traffic detected: GET /sync?pid=352&uid=FaRP1AUaCp_s HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm
Source: global traffic	HTTP traffic detected: GET /ups/58760/sync?redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAfuZGQCEEzfjDMJRcclL_egB9DstlkFEgEBAQE_ZmRuZAAAAAAA_eMAAA&S=AQAAAin1dUupBryED3YoeEhtWKc; IDSYNC=198o~2bp3
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www/delivery/afr.php?zoneid=9&aw_0_req.gdpr=false HTTP/1.1Host: synchroscript.deliveryengine.adswizz.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=5f3d563bb70b88e286b6e37a939db7f7
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=duration&zcc=1&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D321%26uid%3D%5BRX_UUID%5D&cb=1684336136434 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-a6e1f8a1-45ca-4c54-a568-5023aadb7aad-003%22%2C%22zdxidn%22%3A%222069.26%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D321%26uid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+phish+da&oit=4&cp=28&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=5548&spui=&dpui=vOL0pELCw2Bv&ev=1&pid=562763 HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /getUID?curl=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D175765%26dpuuid%3D%24%7BUID%7D HTTP/1.1Host: synchroscript.deliveryengine.adswizz.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=5f3d563bb70b88e286b6e37a939db7f7
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=5528&spui=&dpui=ZGTuBtyxOolagkFg3MnO-gAA%262200 HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=6294&spui=&dpui=3e64c5dc-00ec-4c9d-a58d-485568713525&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /ul_cb/server_match?partner_id=1790&us_privacy=1---&r=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dimprovedigital%26us_privacy%3D1---%26uid%3D%7BPUB_USER_ID%7D HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.4dex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=bbb4e244-f6b8-4b2a-bb3b-6d44144bba20; tuuid_lu=1684336137
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=4&spui=&dpui=GqUMuRZHfxKL1OPwRgarl9aZ HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=5444&spui=&dpui=7fd29a26-f6d4-4961-826d-97039e836535 HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=6985&spui=&dpui=3IMedKzTTJzOHtlwuqVm&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=one_tag&google_hm=AAABiCpByaR1ar1jFvwENXtXQwmHw1zktmYLNw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /match/?int_id=106&google_gid=CAESEL-aNS6VYuoFcSUe4KvPScE&google_cver=1 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+phish+d&oit=4&cp=27&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=1---&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26uid%3D%23PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /match/?int_id=98&gdpr=1&gdpr_consent=&uid=4677251891824697287 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /match/?int_id=1&uid=a7f36464-edfd-4d00-9b17-6a0b245bd31a&gdpr=1&gdpr_consent= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=onetag.com&id=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A91X8NZ7r0Q7mNqNFaaEMVY
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+phish+&oit=4&cp=26&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=improvedigital&us_privacy=1---&uid=bbb4e244-f6b8-4b2a-bb3b-6d44144bba20 HTTP/1.1Host: u.4dex.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.4dex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /match/?int_id=106&redir=1&ot_initiated=1 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1---&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=5&gdpr=0&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid] HTTP/1.1Host: ssbsync-global.smartadserver.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=7824331086822214825; csync=92:vOL0pELCw2Bv
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=onetag_eb&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D98%26gdpr%3D0%26gdpr_consent%3D%26uid%3D$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4677251891824697287; icu=ChkIoKqEARAKGAIgAigCMPXbk6MGOAJAAkgCEPXbk6MGGAE.
Source: global traffic	HTTP traffic detected: GET /match/?int_id=113&gdpr=0&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1---&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /match/?int_id=2&uid=LHRU8D3I-9-HSOA&gdpr=0 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=old+macdonald+had+a+phish+far&oit=4&cp=29&gs_rn=42&psi=lJuWKRjbLS98rUhr&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=MTNkZmJlNTgtNjYzMi02Njk5LTdlOWEtYjg1ZWQ3MTRiZGI0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /711916.gif?ct=4&cv= HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?pid=323&uid=LHRU8D3I-9-HSOA HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s
Source: global traffic	HTTP traffic detected: GET /sync?ssp=onetag&gdpr=1&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=37b98004-adf5-4fe6-a560-0074cd676299; c=1684336124; tuuid_lu=1684336124
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=159706&gdpr=1&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26uid%3D%23PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; SyncRTB3=1685491200%3A220; ipc=159706^https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26uid%3D%23PMUID^1^0; pi=159706:2; KADUSERCOOKIE=31252F38-13C8-4953-A519-A25CCDCC7674; chkChromeAb67Sec=1
Source: global traffic	HTTP traffic detected: GET /ups/58488/occ?&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAfuZGQCEEzfjDMJRcclL_egB9DstlkFEgEBAQE_ZmRuZAAAAAAA_eMAAA&S=AQAAAin1dUupBryED3YoeEhtWKc; IDSYNC="198o~2bp3:19c8~2bp3"
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEKEr5FeLzVAi5Naq-rABbxY&google_cver=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZGTuBtyxOolagkFg3MnO-gAA; CMPS=2200; CMPRO=2200
Source: global traffic	HTTP traffic detected: GET /www/delivery/lg.php?adData=targeted-publisher-info%3A2%3Bsynchroscript%5Ebilling%3Asynchroscript_A12%3B14%3BUSD%3B0.00000%3Bfalse%5EtraceId%3Ac1de9343-f4c4-11ed-8681-02f6831eadd3%5EAS%2Fi%3Asynchroscript%3Bad_id%3A14%3Bzone_id%3A9%3Bview_key%3A1684336142178%3Bduration%3A0%3Baf%3A0.00000%3Btf%3A0.00000%3Bnp%3A0.00000%3Bgp%3A0.00000%3Bc%3AUSD%3Bbaf%3A0.00000%3Bbtf%3A0.00000%3Bbnp%3A0.00000%3Bbgp%3A0.00000%3Bbc%3AUSD%3Bat%3A1%3Bo_id%3A0%3Bc_id%3A4%5Epchain%3A52ded3ee71b94c84%3Asynchroscript&loc=&referer=https%3A%2F%2Fsync.serverbid.com%2F&listenerId=5f3d563bb70b88e286b6e37a939db7f7&sessionId=a37154825bf4896734749c9d3570b5be&ip=%3A%3Affff%3A102.129.143.14&user_agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F104.0.0.0+Safari%2F537.36&aw_0_req.gdpr=false&cbs=6763065&aw_0_req.gdpr=false&aw_0_azn.pname=%5B%22Sync+Publisher%22%5D HTTP/1.1Host: synchroscript.deliveryengine.adswizz.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://synchroscript.deliveryengine.adswizz.com/www/delivery/afr.php?zoneid=9&aw_0_req.gdpr=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=5f3d563bb70b88e286b6e37a939db7f7
Source: global traffic	HTTP traffic detected: GET /usersync/bluekai/callback/?d=NB2HI4DTHIXS65LTMVZHG6LOMMXGO5LNM52W2LTDN5WS65LTMVZHG6LOMM7WEPL2MVWSMZLYMNUGC3THMU6WO5LNM52W2JTHMRYHEPJQEZUT22DFPJDWYZ27G5RUGNSYNQZGY2SKNRTWMJTVONPXA4TJOZQWG6J5GEWS2LI HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=hezGlg_7cC6Xl2ljJlgf
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072956&gdpr=0&val=7G7E2b8_wtn3OcLauDzfiOlvxIz3Y5Pd7Gp3H5S4 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ec1c52cb-06c2-07ca-31ac-2a0f79d14029|1684336111; pd=v2|1684336124|gekin0vNiygu
Source: global traffic	HTTP traffic detected: GET /match?bidder=14&buyeruid=4677251891824697287&r=Cid1YS1kNmQxNDJiMi1jN2YwLTNiMDctOTE5OS1hOTEwMjIxNzg3YmYQ____________ASpTaHR0cHM6Ly9hZHMuc2VydmVub2JpZC5jb20vc3luYz9waWQ9MzQ2JnVpZD11YS1kNmQxNDJiMi1jN2YwLTNiMDctOTE5OS1hOTEwMjIxNzg3YmYyAg4eOAE=&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://public.servenobid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zeta-ssp-user-id=ua-d6d142b2-c7f0-3b07-9199-a910221787bf
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&rdf=1 HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; SyncRTB3=1685491200%3A220; ipc=159706^https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26uid%3D%23PMUID^1^0; pi=159706:2; KADUSERCOOKIE=31252F38-13C8-4953-A519-A25CCDCC7674; chkChromeAb67Sec=1
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=536872786&val=a7f36464-edfd-4d00-9b17-6a0b245bd31a HTTP/1.1Host: eu-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ec1c52cb-06c2-07ca-31ac-2a0f79d14029|1684336111; pd=v2|1684336124|gekin0vNiygu
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=75&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D1%26uid%3D%5BMM_UUID%5D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=a7f36464-edfd-4d00-9b17-6a0b245bd31a
Source: global traffic	HTTP traffic detected: GET /usersync?cn=39&ttt=1&dpui=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw HTTP/1.1Host: e.serverbid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /sync?pid=312&uid=4677251891824697287 HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s
Source: global traffic	HTTP traffic detected: GET /sync?pid=327&uid=a39a1249-96ef-4d07-b6c7-a1f0148b1980&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s
Source: global traffic	HTTP traffic detected: GET /search?q=old+macdonald+had+a+phish+farm&oq=old+macdonald+had+a+phish+farm&aqs=chrome..69i57j33i160l4.7250j0j4&sourceid=chrome&ie=UTF-8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; __Secure-ENID=6.SE=cJKCBuSaL1dV3R8z2Y2al7-m2m5bGA74lqbYYkqC3uy-NtZ1f6n_bCBr25tlnnjvdmLpGQ81ZKzP3Te5vVjpSQjYWCwvlOMApK7tmZNWcORu0p4wniPJGQfTslQNnpQWhG9qkwkEgy49-6UG3UQ1eiUyFolJZWLeUM1p4KvjM9E
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537113484&val=7582827400492800849 HTTP/1.1Host: eu-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ec1c52cb-06c2-07ca-31ac-2a0f79d14029|1684336111; pd=v2|1684336124|gekin0vNiygu
Source: global traffic	HTTP traffic detected: GET /sync?pid=337&uid=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=4677251891824697287 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /match/?int_id=106&google_gid=CAESEL-aNS6VYuoFcSUe4KvPScE&google_cver=1 HTTP/1.1Host: onetag-sys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=appnexus&us_privacy=1---&uid=4677251891824697287 HTTP/1.1Host: u.4dex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=NjMyNjMxNDQwNjk5ZDE3MjFjZTU5OGYzNzFmNTc1MjZiOTYwN2NkNQ&gdpr=0&us_privacy=1--- HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /match/?int_id=98&gdpr=1&gdpr_consent=&uid=4677251891824697287 HTTP/1.1Host: onetag-sys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=one_tag&google_hm=AAABiCpByaR1ar1jFvwENXtXQwmHw1zktmYLNw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=175765&dpuuid=5f3d563bb70b88e286b6e37a939db7f7 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=rubiconprojectHMT&id=9qL7J1ZTRdqwv-CvvH4TNQ&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A91X8NZ7r0Q7mNqNFaaEMVY
Source: global traffic	HTTP traffic detected: GET /cs?aid=11591&id=y-.pV7e0pE2uJEQ.yDDGgTx_iXkQ5IORqg~A&gdpr_in_effect=0 HTTP/1.1Host: cs.yellowblue.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=FaRP1AUaCp_s
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=5&gdpr=1&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid] HTTP/1.1Host: ssbsync-global.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=7824331086822214825; csync=92:vOL0pELCw2Bv
Source: global traffic	HTTP traffic detected: GET /logos/doodles/2023/renate-kroners-78th-birthday-6753651837110044.3-shs.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=70&user_id=7582827400492800849&ssp=gumgum2 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=37b98004-adf5-4fe6-a560-0074cd676299; c=1684336124; tuuid_lu=1684336124
Source: global traffic	HTTP traffic detected: GET /sync?pid=324&uid=5108559727801155806 HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /i/102/9.gif?gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf=; cip=; cnac=; car=; gdpr=; callback=
Source: global traffic	HTTP traffic detected: GET /usersync?b=opx&i=c88dc9e2-8750-006b-0c01-f20ad5a67292 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /adswizz/js/swfobject-2.2.min.js HTTP/1.1Host: delivery-cdn-cf.adswizz.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://synchroscript.deliveryengine.adswizz.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=5f3d563bb70b88e286b6e37a939db7f7
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZGTuBtyxOolagkFg3MnO-gAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /sync?ssp=onetag&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=37b98004-adf5-4fe6-a560-0074cd676299; c=1684336124; tuuid_lu=1684336124
Source: global traffic	HTTP traffic detected: GET /sync?pid=317&uid=7824331086822214825&gdpr=0&gdpr_consent= HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /match/?int_id=1&uid=a7f36464-edfd-4d00-9b17-6a0b245bd31a&gdpr=1&gdpr_consent= HTTP/1.1Host: onetag-sys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /logos/doodles/2023/renate-kroners-78th-birthday-6753651837110044-s.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg
Source: global traffic	HTTP traffic detected: GET /match/?int_id=2&uid=LHRU8D3I-9-HSOA&gdpr=0 HTTP/1.1Host: onetag-sys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LHRU8D3I-9-HSOA&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1--- HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A91X8NZ7r0Q7mNqNFaaEMVY
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=5551&spui=&dpui=4677251891824697287 HTTP/1.1Host: x.serverbid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=3fb06d92-af45-383d-6b7a-e2e71df673d4&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=pln&i=vOL0pELCw2Bv&ev=1&pid=558355 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEKEr5FeLzVAi5Naq-rABbxY&google_cver=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZGTuBtyxOolagkFg3MnO-gAA; CMPS=2200; CMPRO=2200
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=bxjs&cad=&b=0&ei=EO5kZIGQNdGykwXjt6nQCw&zx=1684336144788&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A91X8NZ7r0Q7mNqNFaaEMVY
Source: global traffic	HTTP traffic detected: GET /sync?pid=333&uid=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /usersync?b=oth&i=y-vfGqp_ZE2pcBGdWultyW.ppgKLOQjlS7ikO_~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=86&partneruserid=4677251891824697287&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=7824331086822214825; csync=92:vOL0pELCw2Bv
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=5548&spui=&dpui=vOL0pELCw2Bv&ev=1&pid=562763 HTTP/1.1Host: x.serverbid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1---&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A91X8NZ7r0Q7mNqNFaaEMVY
Source: global traffic	HTTP traffic detected: GET /sync?pid=348&uid=u-1P1eIakp_mm HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=92&partneruserid=vOL0pELCw2Bv&ev=1&pid=560288&gdpr_consent=&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=7824331086822214825; csync=92:vOL0pELCw2Bv
Source: global traffic	HTTP traffic detected: GET /usersync?b=snc&i=GDPR HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=vw6iyrn&ttd_tpi=1&gpdr=1&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=onetag.com&id=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A91X8NZ7r0Q7mNqNFaaEMVY
Source: global traffic	HTTP traffic detected: GET /match/?int_id=107&uid=7824331086822214825 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEJOYhOJ9RjKMSnd1Vh3FyMU&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ec1c52cb-06c2-07ca-31ac-2a0f79d14029|1684336111; pd=v2|1684336124|gekin0vNiygu
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0&us_privacy=1--- HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/?int_id=106&google_gid=CAESEL-aNS6VYuoFcSUe4KvPScE&google_cver=1 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=4&external_user_id=2750352212637780342 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZGTuBtyxOolagkFg3MnO-gAA; CMPS=2200; CMPRO=2200
Source: global traffic	HTTP traffic detected: GET /usersync?b=sta&i=0-318dc82f-3ebd-5daa-7a4b-5a1474be8053$ip$102.129.143.14 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=5528&spui=&dpui=ZGTuBtyxOolagkFg3MnO-gAA%262200 HTTP/1.1Host: x.serverbid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /match/?int_id=98&gdpr=0&gdpr_consent=&uid=4677251891824697287 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=improvedigital&us_privacy=1---&uid=bbb4e244-f6b8-4b2a-bb3b-6d44144bba20 HTTP/1.1Host: u.4dex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=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
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/search?q=old+macdonald+had+a+phish+farm&oq=old+macdonald+had+a+phish+farm&aqs=chrome..69i57j33i160l4.7250j0j4&sourceid=chrome&ie=UTF-8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg
Source: global traffic	HTTP traffic detected: GET /syncUser?platformId=GUMGU18H7EL9NI653I7DPEH51&platformUid=e_99cd6507-57d3-42e4-91d8-406f13b2ed55&obuid=ENC(THJ-0Ap1lnpyBfWVQWdsTB9ssf-xwNAIQRe0GY39diSm2jS7cHP0Gr3GEIIBNAQD) HTTP/1.1Host: sync.outbrain.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: obuid=f52b79d3-fbcf-4120-8581-770de9c5acc1
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=6294&spui=&dpui=3e64c5dc-00ec-4c9d-a58d-485568713525&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: x.serverbid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=MzEyNTJGMzgtMTNDOC00OTUzLUE1MTktQTI1Q0NEQ0M3Njc0&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /track/cmf/casale HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=5444&spui=&dpui=7fd29a26-f6d4-4961-826d-97039e836535 HTTP/1.1Host: x.serverbid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /sync?pid=309&uid=e_99cd6507-57d3-42e4-91d8-406f13b2ed55 HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=vw6iyrn&ttd_tpi=1&gpdr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=4&spui=&dpui=GqUMuRZHfxKL1OPwRgarl9aZ HTTP/1.1Host: x.serverbid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /cs?aid=11576&id=31252F38-13C8-4953-A519-A25CCDCC7674 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-server-s2s.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=FaRP1AUaCp_s
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=onetag.com&id=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A91X8NZ7r0Q7mNqNFaaEMVY
Source: global traffic	HTTP traffic detected: GET /sync?pid=339&uid=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=6985&spui=&dpui=3IMedKzTTJzOHtlwuqVm&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: x.serverbid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=a9b2f56c30084fadb2f56c3008afad91
Source: global traffic	HTTP traffic detected: GET /match/?int_id=92&uid=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /usersync?b=vnt&i=82912684-4ab5-4268-a069-c0d88093784d HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /images/nav_logo321.webp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/search?q=old+macdonald+had+a+phish+farm&oq=old+macdonald+had+a+phish+farm&aqs=chrome..69i57j33i160l4.7250j0j4&sourceid=chrome&ie=UTF-8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=3&external_user_id=a7f36464-edfd-4d00-9b17-6a0b245bd31a HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZGTuBtyxOolagkFg3MnO-gAA; CMPS=2200; CMPRO=2200
Source: global traffic	HTTP traffic detected: GET /sync?pid=310&uid=GqUMuRZHfxKL1OPwRgarl9aZ HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=idi&i=bbb4e244-f6b8-4b2a-bb3b-6d44144bba20 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /usersync?b=sad&i=7824331086822214825 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g2.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=one_tag&google_hm=AAABiCpB6t323F7vnYyjctxlTyPO9_1AHFUMGw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /www/delivery/lg.php?adData=targeted-publisher-info%3A2%3Bsynchroscript%5Ebilling%3Asynchroscript_A12%3B14%3BUSD%3B0.00000%3Bfalse%5EtraceId%3Ac1de9343-f4c4-11ed-8681-02f6831eadd3%5EAS%2Fi%3Asynchroscript%3Bad_id%3A14%3Bzone_id%3A9%3Bview_key%3A1684336142178%3Bduration%3A0%3Baf%3A0.00000%3Btf%3A0.00000%3Bnp%3A0.00000%3Bgp%3A0.00000%3Bc%3AUSD%3Bbaf%3A0.00000%3Bbtf%3A0.00000%3Bbnp%3A0.00000%3Bbgp%3A0.00000%3Bbc%3AUSD%3Bat%3A1%3Bo_id%3A0%3Bc_id%3A4%5Epchain%3A52ded3ee71b94c84%3Asynchroscript&loc=&referer=https%3A%2F%2Fsync.serverbid.com%2F&listenerId=5f3d563bb70b88e286b6e37a939db7f7&sessionId=a37154825bf4896734749c9d3570b5be&ip=%3A%3Affff%3A102.129.143.14&user_agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F104.0.0.0+Safari%2F537.36&aw_0_req.gdpr=false&cbs=6763065&aw_0_req.gdpr=false&aw_0_azn.pname=%5B%22Sync+Publisher%22%5D HTTP/1.1Host: synchroscript.deliveryengine.adswizz.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OAID=5f3d563bb70b88e286b6e37a939db7f7
Source: global traffic	HTTP traffic detected: GET /sync?pid=332&uid=7fd29a26-f6d4-4961-826d-97039e836535 HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /sync?pid=353&uid=0000EEA HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /sync?pid=352&uid=FaRP1AUaCp_s HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /usersync?b=mag&i=LHRU8D3I-9-HSOA HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /sync?pid=323&uid=LHRU8D3I-9-HSOA HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /doc/-/s/www.emailveritas.com/url-checker/old-macdonald-had-a-phish-farm HTTP/1.1Host: www-emailveritas-com.webpkgcache.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.google.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?pid=318&uid=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw HTTP/1.1Host: ads.servenobid.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg
Source: global traffic	HTTP traffic detected: GET /crt/4tAVUkEg_XkZ/s/www.emailveritas.com/cdn-fpw/sxg/cert.pem.msg.4tAVUkEg_XkZvRIka9oW-yVIWaC_H8hmVD3cfw5hxSQ HTTP/1.1Host: www-emailveritas-com.webpkgcache.comConnection: keep-aliveAccept: application/cert-chain+cborSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?aid=11591&id=y-.pV7e0pE2uJEQ.yDDGgTx_iXkQ5IORqg~A&gdpr_in_effect=0 HTTP/1.1Host: cs.yellowblue.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=FaRP1AUaCp_s
Source: global traffic	HTTP traffic detected: GET /logos/doodles/2023/renate-kroners-78th-birthday-6753651837110044.3-shs.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg
Source: global traffic	HTTP traffic detected: GET /match/?int_id=107&uid=7824331086822214825 HTTP/1.1Host: onetag-sys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /match/?int_id=106&google_gid=CAESEL-aNS6VYuoFcSUe4KvPScE&google_cver=1 HTTP/1.1Host: onetag-sys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /logos/doodles/2023/renate-kroners-78th-birthday-6753651837110044-s.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=4&external_user_id=2750352212637780342 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZGTuBtyxOolagkFg3MnO-gAA; CMPS=2200; CMPRO=2200
Source: global traffic	HTTP traffic detected: GET /match/?int_id=98&gdpr=0&gdpr_consent=&uid=4677251891824697287 HTTP/1.1Host: onetag-sys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg
Source: global traffic	HTTP traffic detected: GET /sub/FD1r5kHI2-jz/s/www.emailveritas.com/dist/main.css HTTP/1.1Host: www-emailveritas-com.webpkgcache.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crt/4tAVUkEg_XkZ/s/www.emailveritas.com/cdn-fpw/sxg/cert.pem.msg.4tAVUkEg_XkZvRIka9oW-yVIWaC_H8hmVD3cfw5hxSQ HTTP/1.1Host: www-emailveritas-com.webpkgcache.comConnection: keep-aliveAccept: application/cert-chain+cborSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/nav_logo321.webp HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=3&external_user_id=a7f36464-edfd-4d00-9b17-6a0b245bd31a HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZGTuBtyxOolagkFg3MnO-gAA; CMPS=2200; CMPRO=2200
Source: global traffic	HTTP traffic detected: GET /sync?pid=318&uid=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw HTTP/1.1Host: ads.servenobid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cap_908=10; pid_312=4677251891824697287; pid_327=a39a1249-96ef-4d07-b6c7-a1f0148b1980; pid_337=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_324=5108559727801155806; pid_317=7824331086822214825; pid_333=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB; pid_348=u-1P1eIakp_mm; pid_309=e_99cd6507-57d3-42e4-91d8-406f13b2ed55; pid_339=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A; pid_310=GqUMuRZHfxKL1OPwRgarl9aZ; pid_332=7fd29a26-f6d4-4961-826d-97039e836535; pid_353=0000EEA; pid_352=FaRP1AUaCp_s; pid_323=LHRU8D3I-9-HSOA; pid_318=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /match/?int_id=92&uid=y-TYt8boRE2uGlHHYF5O7LS5PetTx1FhdIuX3oBCk-~A HTTP/1.1Host: onetag-sys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=vw6iyrn&ttd_tpi=1&gpdr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=idi&i=bbb4e244-f6b8-4b2a-bb3b-6d44144bba20 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=one_tag&google_hm=AAABiCpB6t323F7vnYyjctxlTyPO9_1AHFUMGw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmjmyYT2MqCv0UTxP02-FDNTrDAEQ-A2qR30NRL5q_TjR_BDH3TbEqo0oFAPqY; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiVocsBCIurzAEI+7vMAQj9vMwBCJjRzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg
Source: global traffic	HTTP traffic detected: GET /usersync?b=sad&i=7824331086822214825 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /usersync?b=mag&i=LHRU8D3I-9-HSOA HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=onetag.com&id=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A91X8NZ7r0Q7mNqNFaaEMVY
Source: global traffic	HTTP traffic detected: GET /cs?aid=11576&id=31252F38-13C8-4953-A519-A25CCDCC7674 HTTP/1.1Host: cs-server-s2s.yellowblue.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=FaRP1AUaCp_s
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/am=AiIABACiQTgFsAEEwJ8wAAAAAQEAAAAAgBLACADB-28gAAAAEMEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAAAlAAeGQAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QBIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=1/ed=1/dg=2/br=1/rs=ACT90oFTdg9D4XkIv6JX0jgwR99-yYcmeg/m=attn,cdos,dpf,gwc,hsm,jsa,d,csi HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=bxjs&cad=&b=1&ei=EO5kZIGQNdGykwXjt6nQCw&zx=1684336150138&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; __Secure-ENID=12.SE=ZKgXbM6la7Us42m5sfV_6ZC7XXx6lrKDa2vKZQTGHz9rbS1udOlCT7XMoJafl8b9hjxdDirOJG87d_tsoga1pU3ImJAFYiV17pxEqUD2j8oAQFo_-UbUUh5l-qbnBWGijLjxI2mBs_kJNir08zUqtIlR8lzzu-v30mZ5uRUuHwg; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg
Source: global traffic	HTTP traffic detected: GET /compressiontest/gzip.html HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; NID=511=bXhn_Yw_rjdFIM7kZYPahc7-YWU5NABksXrKbF49MMlWj7Ad-2qUh2MhoIqOTRCqtg12Afc1G5d5StWGY6czawdEWEbJ9D540B2LGeyQf3CecYYQ6tvuZ6CsJuhls5k4w3t_YpKmxOtcqBZBylAbTjRbx-Ok2cXhozhDCT7wXWk; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&psi=EO5kZIGQNdGykwXjt6nQCw.1684336150923&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; NID=511=bXhn_Yw_rjdFIM7kZYPahc7-YWU5NABksXrKbF49MMlWj7Ad-2qUh2MhoIqOTRCqtg12Afc1G5d5StWGY6czawdEWEbJ9D540B2LGeyQf3CecYYQ6tvuZ6CsJuhls5k4w3t_YpKmxOtcqBZBylAbTjRbx-Ok2cXhozhDCT7wXWk
Source: global traffic	HTTP traffic detected: GET /complete/search?q=old%20macdonald%20had%20a%20phish%20farm&cp=0&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&pq=old%20macdonald%20had%20a%20phish%20farm&psi=EO5kZIGQNdGykwXjt6nQCw.1684336150923&dpr=1&ofp=GI20zc7CudCzuwEY0N-ngNGLtapVGPKx9NPP2_jJKRjx-66H7-m92A8Yw5icys-ssppSEAE HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; NID=511=bXhn_Yw_rjdFIM7kZYPahc7-YWU5NABksXrKbF49MMlWj7Ad-2qUh2MhoIqOTRCqtg12Afc1G5d5StWGY6czawdEWEbJ9D540B2LGeyQf3CecYYQ6tvuZ6CsJuhls5k4w3t_YpKmxOtcqBZBylAbTjRbx-Ok2cXhozhDCT7wXWk
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=1/k=xjs.s.en_GB.zATBW_38I5w.O/am=AiIABACiQTgFsAEEwJ8wAAAAAQEAAAAAgBLACADB-28gAAAAEMEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAAAlAAeGQAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QBIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/rs=ACT90oFTdg9D4XkIv6JX0jgwR99-yYcmeg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; NID=511=bXhn_Yw_rjdFIM7kZYPahc7-YWU5NABksXrKbF49MMlWj7Ad-2qUh2MhoIqOTRCqtg12Afc1G5d5StWGY6czawdEWEbJ9D540B2LGeyQf3CecYYQ6tvuZ6CsJuhls5k4w3t_YpKmxOtcqBZBylAbTjRbx-Ok2cXhozhDCT7wXWk
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEEwJ8wAAAAAQEAAAAAgBLACADB-28gAAAAEMEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAAAlAAeGQAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QBIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=1/exm=attn,cdos,csi,d,dpf,gwc,hsm,jsa/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,WaSRUb,WxJ6g,XHo6qe,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,dyUEmd,eTv59e,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oFWSRBHfU9I9y7nwHlK5UmoK8dexw/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KQzWid:mB4wNe;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;Oj465e:KG2eXe;Pjplud:PoEs9b;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SJsSc:H1GVub;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:x8cHvb;TijjCd:SSmhPd;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;YV5bee:IvPZ6d;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eHDfl:ofjVkb;g8nkx:U4MzKc;gaub4:TN6bMe;hK67qb:QWEO5b;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:sgY6Zb;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;lkq0A:Z0MWEf;lzgfYb:PI40bd;nAFL3:s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tosKvd:ZCqP3;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:OXTqFb;w3bZCb:ZPGaIb;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:wbTLEd;xqZiqf:wmnU7d;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zxnPse:GkRiKb/m=CW5FZe,Eox39d,FmAr0c,HYSCof,K6HGfd,KSk4yc,M9mgyc,MpJwZc,RagDlc,pHXghd,tIj4fb,yBi4o?xjs=s1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fet
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=913&ei=EO5kZIGQNdGykwXjt6nQCw&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; NID=511=bXhn_Yw_rjdFIM7kZYPahc7-YWU5NABksXrKbF49MMlWj7Ad-2qUh2MhoIqOTRCqtg12Afc1G5d5StWGY6czawdEWEbJ9D540B2LGeyQf3CecYYQ6tvuZ6CsJuhls5k4w3t_YpKmxOtcqBZBylAbTjRbx-Ok2cXhozhDCT7wXWk; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.UjJbvPIecP0.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_flbzE3yQmWQ7n7N3yCQZtJt8-oA/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; NID=511=bXhn_Yw_rjdFIM7kZYPahc7-YWU5NABksXrKbF49MMlWj7Ad-2qUh2MhoIqOTRCqtg12Afc1G5d5StWGY6czawdEWEbJ9D540B2LGeyQf3CecYYQ6tvuZ6CsJuhls5k4w3t_YpKmxOtcqBZBylAbTjRbx-Ok2cXhozhDCT7wXWk
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEEwJ8wAAAAAQEAAAAAgBLACADB-28gAAAAEMEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAAAlAAeGQAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QBIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=0/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,WaSRUb,WxJ6g,XHo6qe,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,dyUEmd,eTv59e,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oFWSRBHfU9I9y7nwHlK5UmoK8dexw/m=sb_wiz,aa,abd,sycr,sycw,sycy,sycx,sycz,async,syfd,bgd,syjj,foot,sy1l2,sy1w5,kyn,syhp,lli,sf,sy92,sy11c,sy1mt,sonic,sy10y,syf3,syqi,sy113,sy112,sy111,sy119,spch,sy1nj,tl,sy84,sy83,rtH1bd,sy87,sy85,sy8o,syak,syax,syb4,syb5,sycs,syct,sycu,sy2hu,sy2hv,EkevXb,GU4Gab,sy7g,sy7h,sy1pw,sy26k,sy26i,sy26m,syfb,sy26n,sy26o,syu1,sy26j,sy26p,sy26h,sy26l,tboZfc,T5VV,sy2cc,CgfbTd,J9Q59e,Zilivc,E9M6Uc,OESk0e,a6Sgfb,syaz,L1AAkb,kQvlef,sylr,fiAufb,x4FYXe,syjm,syjq,syku,sykv,syjp,syf5,syf4,syf8,syf7,sy2b,sy2c,sy3a,sy3t,sy79,sykn,syko,sykp,sykm,sykq,sykr,syks,sy97,sy98,sykt,sy3n,sy41,sy44,sy45,sy2a,sy4n,sy4o,sy7p,sybi,syej,sykj,syka,sy35,sy4e,sy4g,sy4f,sykd,sy34,sykc,sy9b,syke,sy4s,sykg,sykf,sykh,syki,sykb,syky,sykk,sykl,sykz,syk9,sykx,syl0,syl1,syl2,sykw,syl4,syl3,syl5,Hlw0zd,syl6,MTV2Lb,SZXsif,sydl,sytf,syte,syth,syti,sy20y,sy27h,sy27i,sYEX8b,UUJqVe,sy1h,sOXFj,sy1g,sy2n,s39S4,nAFL3,oGtAuc,sy25,sy26,q0xTif,sy9o,sy9p,sy9q,sy1m,sy9t,sy9s,sy9r,sy9u,syhb,syhc,syq7,syqh,sydn,sydo,sydq,sydr,syp9,sydp,sypa,sypb,sypc,sypd,sype,sypf,sypg,syph,sypi,sypj,sypk,syq8,syr5,syql,syqm,syqw,syr6,syqj,syrh,syrj,syrm,syrn,syqo,syli,syqn,syrr,syqp,syqq,sy39,sy6l,syrt,syru,syrs,syrv,syt7,syt8,syqb,syqx,syqy,sy1xv,sy1xw,sy273,sy275,sy276,epYOx?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; NID=511=bXhn_Yw_rjdFIM7kZYPahc7-YWU5NABksXrKbF49MMlWj7Ad-2qUh2MhoIqOTRCqtg12Afc1G5d5StWGY6czawdEWEbJ9D540B2LGeyQf3CecYYQ6tvuZ6CsJuhls5k4w
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEEwJ8wAAAAAQEAAAAAgBLACADB-28gAAAAEMEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAAAlAAeGQAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QBIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=0/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,WaSRUb,WxJ6g,XHo6qe,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,dyUEmd,eTv59e,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oFWSRBHfU9I9y7nwHlK5UmoK8dexw/m=sy1v,sy6x,sy6v,uxMpU,sy1i,sy1j,byfTOb,sy1l,lsjVmc,sy2e,OTA3Ae,sy2d,COQbmf,PoEs9b,U0aPgd,vTw9Fc,sy1t,syb8,sybb,WlNQGd,symy,nabPbb,sy2c3,SC7lYd,ANyn1,sy6q,sy6r,kHVSUb,xRxDld,eBAeSb,MkHyGd,kbAm9d,OZLguc,sy6p,BYwJlf,syap,syb0,syb1,syb2,syb3,VEbNoe,syn0,syn1,b8OZff,syn6,qcH9Lc,W0N1pf,sy1k,sy1n,LEikZe,Mlhmy,uKlGbf,pjDTFb,uY49fb,Pjplud,QGR0gd,sy27,sy28,sy2g,sy2h,sy2i,kWgXee,sy2bz,sy26q,sy26r,syz3,sy26s,sy2c0,KgxeNb,syha,U4MzKc,ovKuLd,sy2z,sy30,sy2x,sy33,sy31,sy2y,sy3e,sy3i,sy37,sy3h,sy32,sy3f,sy3p,sy3q,sy3u,sy3v,sy3w,sy3g,sy3j,sy47,sy40,sy4j,sy4i,sy4l,sy4k,sy4h,sy52,sy4w,sy3r,sy3b,sy3c,sy38,sy3k,sy3l,sy3m,sy3d,sy4p,sy4q,sy4t,sy4u,sy4r,sy4v,sy36,sy3s,sy4d,sy4x,sy4y,sy4z,sy50,sy53,sy51,sy4m,sy48,sy72,sy73,sy1o,sy1q,sy1r,sy1s,sy1p,sy74,sy75,sy76,sy77,sy78,sy7b,sy7a,sy7c,sy7e,sy7d,sy7f,sy6o,sy7i,sy7l,sy6z,sy70,sy71,sy7m,sy7k,sy7j,sy7o,sy6y,sy7n,sy7r,sy7q,sy7s,sy7t,sy7u,sy7v,sy7w,sy7x,sy7y,sy7z,sy82,sy81,sy80,sgY6Zb,sy8k,sygw,sygx,sygy,sygz,DPreE,syh0,Mbif2,syd4,syd6,syd7,syd8,syhu,syht,syi1,syhg,sy19x,sy19y,p2I2Je,g8nkx,syba,syk5,syk4,sydm,syds,syop,syq3,syq4,syq2,syr7,syr9,syr8,syra,sy10z,sy110,sy114,sy12o,sy12w,sy138,syj7,syj6,sy13a,sy19z,sy1a0,sy1a1,sy1a4,sy139,sy13f,sy13p,sy1ag,sy1af,sy1ae,sy116,sy118,sy13c,sy13b,sy13d,sy13n,sy1ai,sy1d4,sy1bx,sy1d5,sy1d7,sye6,syef,sy1d6,sy1aj,sy12v,sy1al,sy130,sy1an,syoq,syp2,sy1aq,sy1ap,sy12c,sy13r,syog,syp6,syp7,sy13e,sy12p,sy1ak,syob,syoe,sy1d1,syou,sy1d2,sy1d0,sy1ct,sy1cs,sy1cu,syo7,syol,symu,sypm,sypn,syeb,sypo,sypp,sy1cv,sy1br,sy1bs,sy1bt,syee,syo4,sydt,sydu,syp8,sypl,sy1cx,sy1cf,sy1cg,sy1cy,sy1cw,sy1ao,syoz,sy1ar,sy1as,sy1at,sy12x,sy1am,sy1au,sy1aw,sy1ax,sy1b1,sy1ay,sy1az,sy1b0,sy1av,sy1b2,sy1b3,sy1b8,sy1b9,sy1ba,sy1bb,sy12y,sy1bc,sy1bd,sy1bf,sy1bg,sydv,sy1bh,sy1bi,sy1be,sy1bj,sy1bk,sy1bl,sy1bm,syo6,syom,syo9,sy1bn,sy1bv,sy1bw,syo8,syon,syot,syov,syp5,sy12z,sy1bp,sy1bq,sy1bu,sy1bo,sy1by,sy1bz,sy1c0,sy1c1,sy1c2,sy1c3,sy1c4,sy1c5,sy1c6,sy1c7,sy1c8,sy1cn,sy1co,sy1cp,sy1cq,sy1ci,sy1cj,sy1ck,syos,sy1cz,sy1c9,syoj,syok,sy12m,sy12h,sy12i,sy13s,sy13u,syt0,sy1ah,sy1b4,sy1b5,sy1b6,sy1b7,sy1cc,sy1ch,sy1cl,syod,sy1ce,sy1cm,sy1cb,sy1cd,sy1ca,syr0,sy1cr,sy1d3,sy1d8,sy1da,sy1db,sye9,sy1dc,sy1dd,sy1d9,sy1de,sy1df,sy1dg,syed,sy1di,sy1a6,sy1dj,sy1dk,sy1dh,sy1dl,sy1dm,sy1dn,sy1do,sy1dp,syoa,syoo,sypq,sy1dr,sy1dq,symt,sy13g,sy9g,sy13k,sy13m,symn,sy13i,sy13o,sy1dt,sy1ds,sy1du,sy1dv,syp0,sy1dw,sy1dx,exgaYe,io8t5d,KG2eXe,Oj465e,symm,DpX64d,EufiNb?xjs=s3 HTTP/1.1Host: www.google.co
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=EO5kZIGQNdGykwXjt6nQCw&opi=89978449&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; NID=511=bXhn_Yw_rjdFIM7kZYPahc7-YWU5NABksXrKbF49MMlWj7Ad-2qUh2MhoIqOTRCqtg12Afc1G5d5StWGY6czawdEWEbJ9D540B2LGeyQf3CecYYQ6tvuZ6CsJuhls5k4w3t_YpKmxOtcqBZBylAbTjRbx-Ok2cXhozhDCT7wXWk; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /client_204?cs=1&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; NID=511=bXhn_Yw_rjdFIM7kZYPahc7-YWU5NABksXrKbF49MMlWj7Ad-2qUh2MhoIqOTRCqtg12Afc1G5d5StWGY6czawdEWEbJ9D540B2LGeyQf3CecYYQ6tvuZ6CsJuhls5k4w3t_YpKmxOtcqBZBylAbTjRbx-Ok2cXhozhDCT7wXWk; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg
Source: global traffic	HTTP traffic detected: GET /js/bg/DD3DDxkRSX1vC75vleGHJDaAb3Q-n79OBM8-X1bH4nw.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEEwJ8wAAAAAQEAAAAAgBLACADB-28gAAAAEMEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAAAlAAeGQAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QBIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=0/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,WaSRUb,WxJ6g,XHo6qe,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,dyUEmd,eTv59e,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oFWSRBHfU9I9y7nwHlK5UmoK8dexw/m=symz,w4UyN,i9SNBf,ceRt3e?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEEwJ8wAAAAAQEAAAAAgBLACADB-28gAAAAEMEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAAAlAAeGQAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QBIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=0/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,WaSRUb,WxJ6g,XHo6qe,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,dyUEmd,eTv59e,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oFWSRBHfU9I9y7nwHlK5UmoK8dexw/m=syb9,CnSW2d,syu2,syu4,syu5,syu7,sy15m,sy25m,sy25y,VD4Qme,ND0kmf,sy1e2,Exk9Ld,GGTOgd,khkNpe?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEEwJ8wAAAAAQEAAAAAgBLACADB-28gAAAAEMEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAAAlAAeGQAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QBIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=0/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,WaSRUb,WxJ6g,XHo6qe,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,dyUEmd,eTv59e,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oFWSRBHfU9I9y7nwHlK5UmoK8dexw/m=sy6s,sy6t,aLUfP?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEEwJ8wAAAAAQEAAAAAgBLACADB-28gAAAAEMEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAAAlAAeGQAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QBIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=0/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,WaSRUb,WxJ6g,XHo6qe,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,dyUEmd,eTv59e,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oFWSRBHfU9I9y7nwHlK5UmoK8dexw/m=syew,syk0,syk1,dt4g2b?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /complete/search?q=pca&cp=3&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&pq=old%20macdonald%20had%20a%20phish%20farm&psi=EO5kZIGQNdGykwXjt6nQCw.1684336150923&gs_mss=old%20macdonald%20had%20a%20phish%20farm&dpr=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /complete/search?q=pcap&cp=4&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&pq=old%20macdonald%20had%20a%20phish%20farm&psi=EO5kZIGQNdGykwXjt6nQCw.1684336150923&gs_mss=old%20macdonald%20had%20a%20phish%20farm&dpr=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /complete/search?q=pcapp&cp=5&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&pq=old%20macdonald%20had%20a%20phish%20farm&psi=EO5kZIGQNdGykwXjt6nQCw.1684336150923&gs_mss=old%20macdonald%20had%20a%20phish%20farm&dpr=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /complete/search?q=pcapps&cp=6&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&pq=old%20macdonald%20had%20a%20phish%20farm&psi=EO5kZIGQNdGykwXjt6nQCw.1684336150923&gs_mss=old%20macdonald%20had%20a%20phish%20farm&dpr=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /complete/search?q=pcappso&cp=7&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&pq=old%20macdonald%20had%20a%20phish%20farm&psi=EO5kZIGQNdGykwXjt6nQCw.1684336150923&gs_mss=old%20macdonald%20had%20a%20phish%20farm&dpr=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /complete/search?q=pcappst&cp=7&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&pq=old%20macdonald%20had%20a%20phish%20farm&psi=EO5kZIGQNdGykwXjt6nQCw.1684336150923&gs_mss=old%20macdonald%20had%20a%20phish%20farm&dpr=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /complete/search?q=pcappsto&cp=8&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&pq=old%20macdonald%20had%20a%20phish%20farm&psi=EO5kZIGQNdGykwXjt6nQCw.1684336150923&gs_mss=old%20macdonald%20had%20a%20phish%20farm&dpr=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /complete/search?q=pcappstor&cp=9&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&pq=old%20macdonald%20had%20a%20phish%20farm&psi=EO5kZIGQNdGykwXjt6nQCw.1684336150923&gs_mss=old%20macdonald%20had%20a%20phish%20farm&dpr=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /complete/search?q=pcappstore&cp=10&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&pq=old%20macdonald%20had%20a%20phish%20farm&psi=EO5kZIGQNdGykwXjt6nQCw.1684336150923&gs_mss=old%20macdonald%20had%20a%20phish%20farm&dpr=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /search?q=pcappstore&ei=EO5kZIGQNdGykwXjt6nQCw&ved=0ahUKEwiB2OOM0fz-AhVR2aQKHeNbCroQ4dUDCGw&uact=5&oq=pcappstore&gs_lcp=Cgxnd3Mtd2l6LXNlcnAQAzIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgUIABCABDoICAAQgAQQsAM6CwgAEIoFEIYDELADOgoIABCKBRCxAxBDOgcIABCABBAKSgQIQRgBUNsMWKIkYJgnaARwAHgBgAHpBogBgh6SAQc0LTEuMy4ymAEAoAEByAEDwAEB&sclient=gws-wiz-serp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=R9L9VxSOatcUham7dyrzw64OT69IhwaA6o1zFZUAXCCAPV28wpzSgV4m6N4O0J0JUUVutko0DZ0nkUvf4W6D8Y34rO7452DYE0nwMj2WgFMTN8d870vzu1ALU4LnX1NuDBfHC73HUJLEV-vXRWj_zOVzRbV07u7I47dAyb1Xg0oZyq0G
Source: global traffic	HTTP traffic detected: GET /verify/AFW7gerWew_QClnF0fNewcXVzCSoFB9RSxTKgCKMBppUD-ZxSct0fCr7ZyGDHHAgKXD3-egB3UwBxo3vOOryr4VRQ9_gSbVrLGcxkCS5DhfXxvc HTTP/1.1Host: id.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; NID=511=AoBMO6fy3g4WHezFujzWVV-JHPqd58l0vZbmCf6ze9IwHtUVN62IYVJPkStkGPctrQWFY88_3Zld7vEzX1RZ1lCvYK17mqMtQinQEC1BkDuxejHjEhfMUPVFweoIWJB8QqYQbb2OqcHjqsdh5oTwyQEtRMh7JDAOrQ4KznzRevZJ5svdnqRD
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/am=AiIABACiQTgFsAEExJ8wAAAAAQEAAAAAgBLACADB-28gAIAAEsEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAMglAAeGAAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QLIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=1/ed=1/dg=2/br=1/rs=ACT90oESA6b0ruLP6kmB8KaUYYB0RfzR5g/m=attn,cdos,dpf,gwc,hsm,jsa,d,csi HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=AoBMO6fy3g4WHezFujzWVV-JHPqd58l0vZbmCf6ze9IwHtUVN62IYVJPkStkGPctrQWFY88_3Zld7vEzX1RZ1lCvYK17mqMtQinQEC1BkDuxejHjEhfMUPVFweoIWJB8QqYQbb2OqcHjqsdh5oTwyQEtRMh7JDAOrQ4KznzRevZJ5svdnqRD
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&hl=en-GB&authuser=0&pq=pcappstore&psi=Ju5kZPPdLpj3sAe1zryoDg.1684336167834&dpr=1&ofp=GKPiycOau4CmDBiYjbOGm-fvxdgBGLKl363n-KypHBidl4_wpb33jBcYp8KhydyD7dDMAQ&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=bRABI4Afmv1TKKq0pM4Ic-yhL5u9UTAfYBsLuyUqfDiiE6ikMYGgKMwZoh1ES5NFNOzUXeUr-QxctpbBamjfhQDI4XueZNieFgETegvRHMGriquMwCitpijlRSG-FpEUC5hDI7MfLz5zvOd98_cIUAeotteLK7eOt0ek_rliBGMcug5mJVosxyhbiQ
Source: global traffic	HTTP traffic detected: GET /complete/search?q=pcappstore&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&hl=en-GB&authuser=0&pq=pcappstore&psi=Ju5kZPPdLpj3sAe1zryoDg.1684336167834&dpr=1&ofp=GKPiycOau4CmDBiYjbOGm-fvxdgBGLKl363n-KypHBidl4_wpb33jBcYp8KhydyD7dDMARABMtcBChIKEHBjYXBwc3RvcmUgdmlydXMKEwoRcGNhcHBzdG9yZSByZWRkaXQKHwodcGMgYXBwIHN0b3JlIG5vdCB1bmluc3RhbGxpbmcKIAoeaG93IHRvIGdldCByaWQgb2YgcGMgYXBwIHN0b3JlChMKEXBjYXBwc3RvcmUgZm9sZGVyCiAKHnJlbW92ZSBwYyBhcHAgc3RvcmUgd2luZG93cyAxMQoVChNwYyBhcHAgc3RvcmUgcG9wIHVwChkKF3BjIGFwcCBzdG9yZSBpcyBpdCBzYWZlEEcyZAoVChNXaGF0IGlzIHBjYXBwc3RvcmU_CiEKH0hvdyBkbyBJIGdldCByaWQgb2YgUGNhcHBzdG9yZT8KJQojQ2FuIEkgYWNjZXNzIEFwcGxlIEFwcCBTdG9yZSBvbiBQQz8Q5AI HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=bRABI4Afmv1TKKq0pM4Ic-yhL5u9UTAfYBsLuyUqfDiiE6ikMYGgKMwZoh1ES5NFNOzUXeUr-QxctpbBamjfhQDI4XueZNieFgETegvRHMGriquMwCitpijlRSG-FpEUC5hDI7MfLz5zvOd98_cIUAeotteLK7eOt0ek_rliBGMcug5mJVosxyhbiQ
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=1/k=xjs.s.en_GB.zATBW_38I5w.O/am=AiIABACiQTgFsAEExJ8wAAAAAQEAAAAAgBLACADB-28gAIAAEsEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAMglAAeGAAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QLIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/rs=ACT90oESA6b0ruLP6kmB8KaUYYB0RfzR5g HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=bRABI4Afmv1TKKq0pM4Ic-yhL5u9UTAfYBsLuyUqfDiiE6ikMYGgKMwZoh1ES5NFNOzUXeUr-QxctpbBamjfhQDI4XueZNieFgETegvRHMGriquMwCitpijlRSG-FpEUC5hDI7MfLz5zvOd98_cIUAeotteLK7eOt0ek_rliBGMcug5mJVosxyhbiQ
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEExJ8wAAAAAQEAAAAAgBLACADB-28gAIAAEsEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAMglAAeGAAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QLIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=1/exm=attn,cdos,csi,d,dpf,gwc,hsm,jsa/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CVVp5c,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,V9W1ad,WaSRUb,WxJ6g,XHo6qe,XOehOc,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,cKV22c,dyUEmd,eTv59e,ee9Gld,hWJjIf,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oHgbE6EY_fyhOE0HVisGkijRWMz4Q/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KQzWid:mB4wNe;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;Oj465e:KG2eXe;Pjplud:PoEs9b;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SJsSc:H1GVub;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:x8cHvb;TijjCd:SSmhPd;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;YV5bee:IvPZ6d;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eHDfl:ofjVkb;g8nkx:U4MzKc;gaub4:TN6bMe;hK67qb:QWEO5b;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:sgY6Zb;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;lkq0A:Z0MWEf;lzgfYb:PI40bd;nAFL3:s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tosKvd:ZCqP3;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:OXTqFb;w3bZCb:ZPGaIb;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:wbTLEd;xqZiqf:wmnU7d;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zxnPse:GkRiKb/m=CW5FZe,Da4hkd,Eox39d,FmAr0c,HYSCof,K6HGfd,M9mgyc,MpJwZc,RagDlc,aD8OEe,fVaWL,pHXghd,tIj4fb,xfmZMb,yBi4o?xjs=s1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swB
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=913&dpr=1&ei=Ju5kZPPdLpj3sAe1zryoDg&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=bRABI4Afmv1TKKq0pM4Ic-yhL5u9UTAfYBsLuyUqfDiiE6ikMYGgKMwZoh1ES5NFNOzUXeUr-QxctpbBamjfhQDI4XueZNieFgETegvRHMGriquMwCitpijlRSG-FpEUC5hDI7MfLz5zvOd98_cIUAeotteLK7eOt0ek_rliBGMcug5mJVosxyhbiQ
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEExJ8wAAAAAQEAAAAAgBLACADB-28gAIAAEsEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAMglAAeGAAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QLIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=1/exm=CW5FZe,Da4hkd,Eox39d,FmAr0c,HYSCof,K6HGfd,M9mgyc,MpJwZc,RagDlc,aD8OEe,attn,cdos,csi,d,dpf,fVaWL,gwc,hsm,jsa,pHXghd,tIj4fb,xfmZMb,yBi4o/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CVVp5c,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,V9W1ad,WaSRUb,WxJ6g,XHo6qe,XOehOc,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,cKV22c,dyUEmd,eTv59e,ee9Gld,hWJjIf,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oHgbE6EY_fyhOE0HVisGkijRWMz4Q/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KQzWid:mB4wNe;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;Oj465e:KG2eXe;Pjplud:PoEs9b;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SJsSc:H1GVub;SLtqO:Kh1xYe;SMDL4c:vjQg0b;SNUn3:x8cHvb;TijjCd:SSmhPd;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;YV5bee:IvPZ6d;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eHDfl:ofjVkb;g8nkx:U4MzKc;gaub4:TN6bMe;hK67qb:QWEO5b;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:sgY6Zb;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;l8Azde:j4Ca9b;lkq0A:Z0MWEf;lzgfYb:PI40bd;nAFL3:s39S4;oGtAuc:sOXFj;oSUNyd:vjQg0b;oUlnpc:RagDlc;okUaUd:wItadb;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tosKvd:ZCqP3;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:OXTqFb;w3bZCb:ZPGaIb;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:wbTLEd;xqZiqf:wmnU7d;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zxnPse:GkRiKb/m=CgfbTd,E9M6Uc,EO13pd,EkevXb,GU4Gab,Hlw0zd,J9Q59e,L1AAkb,OESk0e,T5VV,UUJqVe,Zilivc,a6Sgfb,aa,abd,async,bgd,epYOx,fiAufb,foot,kQvlef,kyn,lli,mu,q0xTif,s39S4,sOXFj,sYEX8b,sb_wiz,sf,sonic,spch,tboZfc,tl?xjs=s2 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-
Source: global traffic	HTTP traffic detected: GET /adsid/google/ui HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; NID=511=bRABI4Afmv1TKKq0pM4Ic-yhL5u9UTAfYBsLuyUqfDiiE6ikMYGgKMwZoh1ES5NFNOzUXeUr-QxctpbBamjfhQDI4XueZNieFgETegvRHMGriquMwCitpijlRSG-FpEUC5hDI7MfLz5zvOd98_cIUAeotteLK7eOt0ek_rliBGMcug5mJVosxyhbiQ
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=Ju5kZPPdLpj3sAe1zryoDg&opi=89978449&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; DV=43pfAtMXosgWoLzqnEwKQNAhPB-kghg; NID=511=bRABI4Afmv1TKKq0pM4Ic-yhL5u9UTAfYBsLuyUqfDiiE6ikMYGgKMwZoh1ES5NFNOzUXeUr-QxctpbBamjfhQDI4XueZNieFgETegvRHMGriquMwCitpijlRSG-FpEUC5hDI7MfLz5zvOd98_cIUAeotteLK7eOt0ek_rliBGMcug5mJVosxyhbiQ
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEExJ8wAAAAAQEAAAAAgBLACADB-28gAIAAEsEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAMglAAeGAAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QLIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=0/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CVVp5c,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,V9W1ad,WaSRUb,WxJ6g,XHo6qe,XOehOc,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,cKV22c,dyUEmd,eTv59e,ee9Gld,hWJjIf,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oHgbE6EY_fyhOE0HVisGkijRWMz4Q/m=sy1v,sy6x,sy6v,uxMpU,sy1i,sy1j,byfTOb,sy1l,lsjVmc,sy2e,OTA3Ae,sy2d,COQbmf,PoEs9b,U0aPgd,vTw9Fc,sy1t,syb8,sybb,WlNQGd,symy,nabPbb,sy2c3,SC7lYd,ANyn1,sy6q,sy6r,kHVSUb,xRxDld,eBAeSb,MkHyGd,kbAm9d,OZLguc,sy6p,BYwJlf,syap,syb0,syb1,syb2,syb3,VEbNoe,syn0,syn1,b8OZff,syn6,qcH9Lc,sy1k,sy1n,LEikZe,Mlhmy,uKlGbf,pjDTFb,uY49fb,Pjplud,QGR0gd,sy27,sy28,sy2g,sy2h,sy2i,kWgXee,sy2bz,sy26q,sy26r,syz3,sy26s,sy2c0,KgxeNb,syha,U4MzKc,ovKuLd,sy2z,sy30,sy2x,sy33,sy31,sy2y,sy3e,sy3i,sy37,sy3h,sy32,sy3f,sy3p,sy3q,sy3u,sy3v,sy3w,sy3g,sy3j,sy47,sy40,sy4j,sy4i,sy4l,sy4k,sy4h,sy52,sy4w,sy3r,sy3b,sy3c,sy38,sy3k,sy3l,sy3m,sy3d,sy4p,sy4q,sy4t,sy4u,sy4r,sy4v,sy36,sy3s,sy4d,sy4x,sy4y,sy4z,sy50,sy53,sy51,sy4m,sy48,sy72,sy73,sy1o,sy1q,sy1r,sy1s,sy1p,sy74,sy75,sy76,sy77,sy78,sy7b,sy7a,sy7c,sy7e,sy7d,sy7f,sy6o,sy7i,sy7l,sy6z,sy70,sy71,sy7m,sy7k,sy7j,sy7o,sy6y,sy7n,sy7r,sy7q,sy7s,sy7t,sy7u,sy7v,sy7w,sy7x,sy7y,sy7z,sy82,sy81,sy80,sgY6Zb,sygw,sygx,sygy,sygz,DPreE,syh0,Mbif2,syd4,sy19x,sy19y,p2I2Je,g8nkx,syba,syk5,syk4,sydm,syds,syop,syq3,syq4,syq2,syr7,syr9,syr8,syra,sy10z,sy110,sy114,sy12o,sy12w,sy138,syj7,syj6,sy13a,sy19z,sy1a0,sy1a1,sy1a4,sy139,sy13f,sy13p,sy1ag,sy1af,sy1ae,sy116,sy118,sy13c,sy13b,sy13d,sy13n,sy1ai,sy1d4,sy1bx,sy1d5,sy1d7,sye6,syef,sy1d6,sy1aj,sy12v,sy1al,sy130,sy1an,syoq,syp2,sy1aq,sy1ap,sy12c,sy13r,syog,syp6,syp7,sy13e,sy12p,sy1ak,syob,syoe,sy1d1,syou,sy1d2,sy1d0,sy1ct,sy1cs,sy1cu,syo7,syol,symu,sypm,sypn,syeb,sypo,sypp,sy1cv,sy1br,sy1bs,sy1bt,syee,syo4,sydt,sydu,syp8,sypl,sy1cx,sy1cf,sy1cg,sy1cy,sy1cw,sy1ao,syoz,sy1ar,sy1as,sy1at,sy12x,sy1am,sy1au,sy1aw,sy1ax,sy1b1,sy1ay,sy1az,sy1b0,sy1av,sy1b2,sy1b3,sy1b8,sy1b9,sy1ba,sy1bb,sy12y,sy1bc,sy1bd,sy1bf,sy1bg,sydv,sy1bh,sy1bi,sy1be,sy1bj,sy1bk,sy1bl,sy1bm,syo6,syom,syo9,sy1bn,sy1bv,sy1bw,syo8,syon,syot,syov,syp5,sy12z,sy1bp,sy1bq,sy1bu,sy1bo,sy1by,sy1bz,sy1c0,sy1c1,sy1c2,sy1c3,sy1c4,sy1c5,sy1c6,sy1c7,sy1c8,sy1cn,sy1co,sy1cp,sy1cq,sy1ci,sy1cj,sy1ck,syos,sy1cz,sy1c9,syoj,syok,sy12m,sy12h,sy12i,sy13s,sy13u,syt0,sy1ah,sy1b4,sy1b5,sy1b6,sy1b7,sy1cc,sy1ch,sy1cl,syod,sy1ce,sy1cm,sy1cb,sy1cd,sy1ca,syr0,sy1cr,sy1d3,sy1d8,sy1da,sy1db,sye9,sy1dc,sy1dd,sy1d9,sy1de,sy1df,sy1dg,syed,sy1di,sy1a6,sy1dj,sy1dk,sy1dh,sy1dl,sy1dm,sy1dn,sy1do,sy1dp,syoa,syoo,sypq,sy1dr,sy1dq,symt,sy13g,sy9g,sy13k,sy13m,symn,sy13i,sy13o,sy1dt,sy1ds,sy1du,sy1dv,syp0,sy1dw,sy1dx,exgaYe,io8t5d,KG2eXe,Oj465e,symm,DpX64d,EufiNb?xjs=s3 HTTP/1.1Host: www.google.comCo
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEExJ8wAAAAAQEAAAAAgBLACADB-28gAIAAEsEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAMglAAeGAAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QLIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=0/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CVVp5c,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,V9W1ad,WaSRUb,WxJ6g,XHo6qe,XOehOc,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,cKV22c,dyUEmd,eTv59e,ee9Gld,hWJjIf,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oHgbE6EY_fyhOE0HVisGkijRWMz4Q/m=symz,w4UyN,i9SNBf,ceRt3e?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; NID=511=bRABI4Afmv1TKKq0pM4Ic-yhL5u9UTAfYBsLuyUqfDiiE6ikMYGgKMwZoh1ES5NFNOzUXeUr-QxctpbBamjfhQDI4XueZNieFgETegvRHMGriquMwCitpijlRSG-FpEUC5hDI7MfLz5zvOd98_cIUAeotteLK7eOt0ek_rliBGMcug5mJVosxyhbiQ; DV=43pfAtMXosgWoLzqnEwKQNDhjySkghg
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEExJ8wAAAAAQEAAAAAgBLACADB-28gAIAAEsEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAMglAAeGAAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QLIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=0/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CVVp5c,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,V9W1ad,WaSRUb,WxJ6g,XHo6qe,XOehOc,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,cKV22c,dyUEmd,eTv59e,ee9Gld,hWJjIf,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oHgbE6EY_fyhOE0HVisGkijRWMz4Q/m=syb9,CnSW2d,syu2,syu4,syu5,syu7,sy15m,sy25m,sy25y,VD4Qme,ND0kmf,sy1e2,Exk9Ld,GGTOgd,khkNpe?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; NID=511=bRABI4Afmv1TKKq0pM4Ic-yhL5u9UTAfYBsLuyUqfDiiE6ikMYGgKMwZoh1ES5NFNOzUXeUr-QxctpbBamjfhQDI4XueZNieFgETegvRHMGriquMwCitpijlRSG-FpEUC5hDI7MfLz5zvOd98_cIUAeotteLK7eOt0ek_rliBGMcug5mJVosxyhbiQ; DV=43pfAtMXosgWoLzqnEwKQNDhjySkghg
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zATBW_38I5w.O/ck=xjs.s.55qG5uKhv10.L.W.O/am=AiIABACiQTgFsAEExJ8wAAAAAQEAAAAAgBLACADB-28gAIAAEsEQxKAAQFICJgUAAOD0QwQAAAAAYAAKAMglAAeGAAVAAAAAAOQPgDkvADiYsAAAAAAAAAAAAAIsQTC4QLIKAkAAAAAAAAAAAIAqmbw8IAQAAAI/d=0/excm=A1Sy2b,ABxRVc,AD6AIb,AOTkuc,CVVp5c,CnT5wd,FmnE6b,FuQWyc,JxE93,KrUr5e,MrkcAd,NsEUGe,Oa7Qpb,Ok4XMd,PoJj8d,SKZSKc,TO0csb,U3Ovcc,UbcHRb,V9W1ad,WaSRUb,WxJ6g,XHo6qe,XOehOc,ZrXR8b,Zudxcb,a0nyD,bXKPzd,bXyZdf,cKV22c,dyUEmd,eTv59e,ee9Gld,hWJjIf,hfJ9hb,jkRPje,kOSi0d,llagHf,pQk1fc,rL2AR,tzTB5,vJPFse,y25qZb,y6Ihab,yChgtb/ed=1/dg=2/br=1/rs=ACT90oHgbE6EY_fyhOE0HVisGkijRWMz4Q/m=sy6s,sy6t,aLUfP?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.102", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.102"sec-ch-ua-platform-version: "8.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJWhywEIi6vMAQj7u8wBCP28zAEI6sDMAQicycwBCOLLzAEImNHMAQiZ0swBSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; AEC=AUEFqZcIasjgf2dl80mY-5ZlAC_4c6KCuznJxLEtr2sovXN8A4z6-0efCJE; SOCS=CAISHAgCEhJnd3NfMjAyMzA1MTEtMF9SQzQaAmVuIAEaBgiAspCjBg; GZ=Z=0; NID=511=bRABI4Afmv1TKKq0pM4Ic-yhL5u9UTAfYBsLuyUqfDiiE6ikMYGgKMwZoh1ES5NFNOzUXeUr-QxctpbBamjfhQDI4XueZNieFgETegvRHMGriquMwCitpijlRSG-FpEUC5hDI7MfLz5zvOd98_cIUAeotteLK7eOt0ek_rliBGMcug5mJVosxyhbiQ; DV=43pfAtMXosgWoLzqnEwKQNDhjySkghg
Source: global traffic	HTTP traffic detected: GET /lp/appstore/src/lpd_appstore_r5.min.css?nocache=1684219060082 HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1684336171219680; c_prefix=appstore_r5
Source: global traffic	HTTP traffic detected: GET /lp/av/img/pci-dss-compliance-feature21.png HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1684336171219680; c_prefix=appstore_r5
Source: global traffic	HTTP traffic detected: GET /pcapp/images/appstore_r5/Untitled0001.png HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c_prefix=appstore_r5
Source: global traffic	HTTP traffic detected: GET /pcapp/images/appstore_r5/Untitled0002.png HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c_prefix=appstore_r5
Source: global traffic	HTTP traffic detected: GET /pcapp/images/appstore_r5/Untitled0003.png HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c_prefix=appstore_r5
Source: global traffic	HTTP traffic detected: GET /ajax/libs/gsap/3.6.1/gsap.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/gsap/3.6.1/TextPlugin.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcapp/images/appstore_r5/Untitled0004.png HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c_prefix=appstore_r5
Source: global traffic	HTTP traffic detected: GET /w3css/4/w3.css HTTP/1.1Host: www.w3schools.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/gsap/3.6.1/MotionPathPlugin.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Found strings which match to known social media urls

Source: chromecache_851.2.dr	String found in binary or memory: <a href="https://www.facebook.com/DLTKsCraftsForKids" target="_blank"> <img alt="Follow DLTKs on Facebook" height="40" src="https://www.dltk-kids.com/images/facebook.png" width="40" style="border-width: 0"></a>&nbsp;&nbsp; equals www.facebook.com (Facebook)
Source: chromecache_851.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/in/leanne-guenther-7b393ba1/" target="_blank"><img alt="Connect with Leanne on LinkedIn" height="40" src="http://www.dltk-kids.com/images/linkedin.png" width="40" style="border-width: 0"></a>&nbsp;&nbsp; <a href="https://twitter.com/DLTKsCrafts" target="_blank"> <img alt="Follow DLTKs on Twitter" height="40" src="https://www.dltk-kids.com/images/twitter.png" width="40" style="border-width: 0"></a>&nbsp;&nbsp; equals www.linkedin.com (Linkedin)
Source: chromecache_851.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/in/leanne-guenther-7b393ba1/" target="_blank"><img alt="Connect with Leanne on LinkedIn" height="40" src="http://www.dltk-kids.com/images/linkedin.png" width="40" style="border-width: 0"></a>&nbsp;&nbsp; <a href="https://twitter.com/DLTKsCrafts" target="_blank"> <img alt="Follow DLTKs on Twitter" height="40" src="https://www.dltk-kids.com/images/twitter.png" width="40" style="border-width: 0"></a>&nbsp;&nbsp; equals www.twitter.com (Twitter)
Source: chromecache_851.2.dr	String found in binary or memory: <a href="https://www.youtube.com/user/DLTKcrafts/featured" target="_blank"> <img alt="Follow DLTK's on YouTube" height="40" src="https://www.dltk-kids.com/images/youtube.png" width="40" style="border-width: 0"></a> equals www.youtube.com (Youtube)
Source: chromecache_352.2.dr	String found in binary or memory: b,"vert.pix");break;case "PERCENT":Lz(d.verticalThresholds,b,"vert.pct")}Kw("sdl","init",!1)?Kw("sdl","pending",!1)||I(function(){return Mz()}):(Iw("sdl","init",!0),Iw("sdl","pending",!0),I(function(){Mz();if(Nz()){var e=Oz();rc(z,"scroll",e);rc(z,"resize",e)}else Iw("sdl","init",!1)}));return b}Sz.K="internal.enableAutoEventOnScroll";var cc=ca(["data-gtm-yt-inspected-"]),Tz=["www.youtube.com","www.youtube-nocookie.com"],Uz,Vz=!1; equals www.youtube.com (Youtube)
Source: chromecache_586.2.dr	String found in binary or memory: function Sz(a,b){var c=this;return b}Sz.K="internal.enableAutoEventOnScroll";var cc=ca(["data-gtm-yt-inspected-"]),Tz=["www.youtube.com","www.youtube-nocookie.com"],Uz,Vz=!1; equals www.youtube.com (Youtube)
Source: chromecache_352.2.dr	String found in binary or memory: m=!!a.get("fixMissingApi");if(!(d||e||f||g.length||h.length))return;var n={ah:d,Yg:e,Zg:f,Ih:g,Jh:h,ue:m,rb:b},p=z.YT,q=function(){aA(n)};if(p)return p.ready&&p.ready(q),b;var r=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=G.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(dA(w,"iframe_api")||dA(w,"player_api"))return b}for(var x=G.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!Vz&&bA(x[A],n.ue))return nc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)

URLs found in memory or binary data

Source: chromecache_562.2.dr	String found in binary or memory: http://code.google.com/apis/ajaxsearch/faq.html
Source: chromecache_555.2.dr	String found in binary or memory: http://old-macdonald.had-a.phish.farm
Source: 42A8D58F9A237D75EF41BD5715DB567C0.1.dr	String found in binary or memory: http://pki.goog/repo/certs/gtsr4.der
Source: chromecache_555.2.dr	String found in binary or memory: http://schema.org/SearchResultsPage
Source: chromecache_555.2.dr	String found in binary or memory: http://support.google.com/websearch/?p
Source: chromecache_477.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_898.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: http://www.dltk-kids.com/images/linkedin.png
Source: chromecache_442.2.dr	String found in binary or memory: http://www.dltk-kids.com/searchresults.html
Source: chromecache_807.2.dr	String found in binary or memory: http://www.dltk-teach.com/shakespeare/midsummer-fairies/images/s/puppets-250w.jpg
Source: chromecache_562.2.dr	String found in binary or memory: http://www.google.com
Source: chromecache_562.2.dr	String found in binary or memory: http://www.google.com/
Source: chromecache_562.2.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_555.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin?hl
Source: chromecache_371.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_371.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_766.2.dr	String found in binary or memory: https://ad.360yield.com/server_match?partner_id=N&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb
Source: chromecache_812.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=21
Source: chromecache_655.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=$
Source: chromecache_766.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fus
Source: chromecache_766.2.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=309&uid=e_99cd6507-57d3-42e4-91d8-406f13b2ed55
Source: chromecache_552.2.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=318&uid=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: chromecache_812.2.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=333&uid=ZGTuBtyxOolagkFg3MnO_gAACJgAAAAB
Source: chromecache_540.2.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=348&uid=u-1P1eIakp_mm
Source: chromecache_881.2.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=352&uid=FaRP1AUaCp_s
Source: chromecache_655.2.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?gdpr=$
Source: chromecache_586.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_414.2.dr	String found in binary or memory: https://afs.googlesyndication.com
Source: chromecache_555.2.dr	String found in binary or memory: https://any.run
Source: chromecache_555.2.dr	String found in binary or memory: https://any.run/report/cf326c85f5a79c37d14437e5cd4d2333bced82563dd46f085df90ba3ac210a1c/54ba5d5f-f06
Source: chromecache_655.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?redir=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi
Source: chromecache_355.2.dr	String found in binary or memory: https://api.rlcdn.com/api/identity/envelope?pid=
Source: chromecache_371.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_766.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=e_99cd6507-57d3-42e4-91d8-406f13b2ed55&gdpr=0&gdpr_
Source: chromecache_766.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&rurl=https%3A%2F%2Fusersync.gumgum.com%2Fusersync
Source: chromecache_348.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2F
Source: chromecache_655.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562763&ev=1&rurl=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Ft
Source: chromecache_885.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=22
Source: chromecache_378.2.dr, chromecache_352.2.dr, chromecache_586.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_655.2.dr	String found in binary or memory: https://cdn.adswizz.com/adswizz/js/SynchroClient2.js
Source: chromecache_371.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_766.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV85OWNkNjUwNy01N2QzLTQyZTQtOTFkO
Source: chromecache_812.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZGTuBtyxOolagkFg3MnO
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=onetag_eb&google_cm
Source: chromecache_885.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_885.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MTNkZmJlNTgtNjYzMi02Njk5LTdlOWEtYjg1ZW
Source: chromecache_885.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-25CIknq_eSg16.gif?idmatch=0&gdpr=0
Source: chromecache_555.2.dr	String found in binary or memory: https://community.goactuary.com
Source: chromecache_555.2.dr	String found in binary or memory: https://consent.google.com/d?continue
Source: chromecache_555.2.dr	String found in binary or memory: https://consent.google.com/save?continue
Source: chromecache_371.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_766.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=gumgum
Source: chromecache_766.2.dr	String found in binary or memory: https://cs.admanmedia.com/sync/gumgum?puid=e_99cd6507-57d3-42e4-91d8-406f13b2ed55&redir=https%3A%2F%
Source: chromecache_766.2.dr	String found in binary or memory: https://cs.iqzone.com/e9d4ff858b5e32317e843f5ed11b2659.gif?puid=e_99cd6507-57d3-42e4-91d8-406f13b2ed
Source: chromecache_562.2.dr	String found in binary or memory: https://cse.google.com/?ref=b&hl=en
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://cse.google.com/cse.js?cx=006942297880364118670:mgahrcqhv0w
Source: chromecache_562.2.dr	String found in binary or memory: https://cse.google.com/cse/element/v1
Source: chromecache_562.2.dr	String found in binary or memory: https://cse.google.com/cse?cx=
Source: chromecache_781.2.dr, chromecache_562.2.dr, chromecache_752.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_562.2.dr	String found in binary or memory: https://csqr-autopush.corp.google.com/cse/element/v1
Source: chromecache_812.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11466&redirect=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_
Source: chromecache_405.2.dr	String found in binary or memory: https://delivery-cdn-cf.adswizz.com/adswizz/js/swfobject-2.2.min.js
Source: chromecache_562.2.dr	String found in binary or memory: https://developers.google.com/custom-search/docs/element.
Source: chromecache_926.2.dr	String found in binary or memory: https://developers.google.com/open-source/licenses/bsd
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/days/cheese-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/days/gingerbread-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/days/international-childrens-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/days/teach-saving.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/months/adopt-a-cat.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/months/fruit-vegetables-month.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/months/images/micheile-henderson-ZVprbBmT8QA-unsplash.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/months/national-financial-literacy-month.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/months/national-safety-month.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/months/zoo-aquarium-month.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/winter/3d-snowflakes.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/winter/images/crossword-picture.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/winter/images/msaltcrystalsnowflake.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/winter/images/s/5snowflakes.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/winter/images/snowflake-type1.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/winter/m5snowflakes.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/winter/msaltcrystalsnowflake.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-holidays.com/winter/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-kids.com/crafts/miscellaneous/image/mini-wooden-plane-700w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-kids.com/sports/mbaseballbuddy.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-kids.com/storyteller/holidays/blanketfort.png
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-kids.com/storyteller/holidays/ghost-stories.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://dltk-kids.com/world/greece/images/m-minotaur.jpg
Source: chromecache_555.2.dr	String found in binary or memory: https://domain.glass
Source: chromecache_371.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_812.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.n
Source: chromecache_355.2.dr	String found in binary or memory: https://e.serverbid.com/api/v2
Source: chromecache_568.2.dr	String found in binary or memory: https://e.serverbid.com/usersync?cn=39&ttt=1&dpui=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05pJzXDHw
Source: chromecache_413.2.dr	String found in binary or memory: https://embed.tawk.to/
Source: chromecache_489.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-app.js
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-arr-find-polyfill.js
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-chunk-common.js
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-chunk-vendors.js
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-entries-polyfill.js
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-event-polyfill.js
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-iterator-polyfill.js
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-main.js
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-object-values-polyfill.js
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-promise-polyfill.js
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-runtime.js
Source: chromecache_801.2.dr	String found in binary or memory: https://embed.tawk.to/_s/v4/app/642b759ae8c/js/twk-vendor.js
Source: chromecache_555.2.dr	String found in binary or memory: https://encrypted-tbn0.gstatic.com/faviconV2?url
Source: chromecache_930.2.dr	String found in binary or memory: https://encrypted-tbn0.gstatic.com/images?q
Source: chromecache_555.2.dr	String found in binary or memory: https://encrypted-tbn1.gstatic.com/faviconV2?url
Source: chromecache_555.2.dr	String found in binary or memory: https://encrypted-tbn2.gstatic.com/faviconV2?url
Source: chromecache_555.2.dr	String found in binary or memory: https://encrypted-tbn3.gstatic.com/faviconV2?url
Source: chromecache_804.2.dr	String found in binary or memory: https://eu-u.openx.net/w/1.0/pd?plm=6&ph=e1b1f5e1-3c2c-4287-9806-317cfbf3bd12&gdpr=0&us_privacy=1---
Source: chromecache_537.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_414.2.dr	String found in binary or memory: https://fonts.googleapis.com/css
Source: chromecache_537.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v46/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_562.2.dr	String found in binary or memory: https://goo.gl/Gs1KIc.
Source: chromecache_586.2.dr	String found in binary or memory: https://google.com/ccm/form-data/
Source: chromecache_586.2.dr	String found in binary or memory: https://google.com/pagead/form-data/
Source: chromecache_586.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_586.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/
Source: chromecache_376.2.dr, chromecache_560.2.dr, chromecache_482.2.dr	String found in binary or memory: https://greensock.com
Source: chromecache_376.2.dr, chromecache_560.2.dr, chromecache_482.2.dr	String found in binary or memory: https://greensock.com/standard-license
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D98%26gdpr%3D$
Source: chromecache_655.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%
Source: chromecache_812.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://dsum.casalemedia.com/crum?cm_dsp_id=190&external_user_id=$UI
Source: chromecache_348.2.dr, chromecache_803.2.dr	String found in binary or memory: https://id.rlcdn.com/711890.gif?credir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://id.rlcdn.com/711916.gif?ct=4&cv=$
Source: chromecache_348.2.dr	String found in binary or memory: https://id5-sync.com/i/102/9.gif?gdpr=0&gdpr_consent=
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=159706&gdpr=$
Source: chromecache_881.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-serve
Source: chromecache_781.2.dr, chromecache_752.2.dr	String found in binary or memory: https://lens.google.com
Source: chromecache_835.2.dr	String found in binary or memory: https://lens.google.com/_/LensWebStandaloneUi/gen204/
Source: chromecache_850.2.dr, chromecache_735.2.dr	String found in binary or memory: https://lh5.googleusercontent.com/p/AF1QipMt2rk5mZWv1e2jth9lzXm316PYpCnzwi398GhF
Source: chromecache_735.2.dr	String found in binary or memory: https://lh5.googleusercontent.com/p/AF1QipP9xrpXIvqvs_lnHtyz3r2U57gSQZcTIFJHNVrp
Source: chromecache_728.2.dr	String found in binary or memory: https://lh5.googleusercontent.com/p/AF1QipPzgV3f_xoMd-USHy3rlZP9C0Le6wJXysbYqhw
Source: chromecache_812.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/casale
Source: chromecache_766.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=vw6iyrn&ttd_tpi=1&gpdr=$
Source: chromecache_885.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=3fb06d92-af45-383d-6b7a-e2e71df673d4&gdpr=0
Source: chromecache_655.2.dr	String found in binary or memory: https://match.adsrvr.org/track/rid?ttd_pid=prebid&fmt=json
Source: chromecache_766.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dd
Source: chromecache_926.2.dr, chromecache_852.2.dr, chromecache_652.2.dr, chromecache_774.2.dr	String found in binary or memory: https://mths.be/cssescape
Source: chromecache_555.2.dr	String found in binary or memory: https://myaccount.google.com/yourdata/search
Source: chromecache_931.2.dr	String found in binary or memory: https://myactivity.google.com/privacyadvisor/search
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://onetag-sys.com/match/?int_id=106&redir=1&ot_initiated=1
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://onetag-sys.com/match/?int_id=113&gdpr=$
Source: chromecache_655.2.dr	String found in binary or memory: https://onetag-sys.com/usync/?pubId=6c68086c0c61793&gdpr=$
Source: chromecache_586.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_586.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: chromecache_738.2.dr, chromecache_710.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_859.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/buyside_topics/set/
Source: chromecache_477.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_477.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_477.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_710.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_738.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_378.2.dr, chromecache_414.2.dr, chromecache_352.2.dr, chromecache_586.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_435.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_710.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_738.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://pinterest.com/leannedltk/
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://pixel-eu.rubiconproject.com/exchange/sync.php?p=onetag&gdpr=$
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=223352&nid=4584&put=Mz_woC5qNOQd7jjSzed6cATBP6zbR17lIg05p
Source: chromecache_752.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_371.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_371.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_555.2.dr	String found in binary or memory: https://policies.google.com/privacy?hl=en-GB&fg=1&utm_source=ucbs
Source: chromecache_555.2.dr	String found in binary or memory: https://policies.google.com/technologies/cookies?utm_source=ucbs&hl=en-GB
Source: chromecache_555.2.dr	String found in binary or memory: https://policies.google.com/terms?hl=en-GB&fg=1&utm_source=ucbs
Source: chromecache_766.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=
Source: chromecache_655.2.dr	String found in binary or memory: https://prebid.a-mo.net/cchain/0?gdpr=$
Source: chromecache_355.2.dr	String found in binary or memory: https://proc.ad.cpe.dotomi.com/cvx/client/sync/publink
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://qd.admetricspro.com/js/dltk/dltkteach/cmp.js
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://qd.admetricspro.com/js/dltk/dltkteach/engine.js
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://qd.admetricspro.com/js/dltk/dltkteach/prebid.js
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://qd.admetricspro.com/js/dltk/dltkteach/sidebar2-layout.js
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://qd.admetricspro.com/js/dltk/dltkteach/uspcmp.js
Source: chromecache_803.2.dr	String found in binary or memory: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F
Source: chromecache_803.2.dr	String found in binary or memory: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&rediru
Source: chromecache_812.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=
Source: chromecache_355.2.dr	String found in binary or memory: https://s.seedtag.com/c/hb/bid
Source: chromecache_355.2.dr	String found in binary or memory: https://s.seedtag.com/se/hb/timeout
Source: chromecache_797.2.dr	String found in binary or memory: https://script.4dex.io/adagio.js
Source: chromecache_766.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum
Source: chromecache_348.2.dr, chromecache_803.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26pa
Source: chromecache_766.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=$
Source: chromecache_766.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_180x72dp.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/branding/googlelogo/1x/googlelogo_light_color_212x72dp.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/hero_dark_opt.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/hero_light_opt.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot01_dark_opt.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot01_light_opt.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot02_dark_opt.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot02_light_opt.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot03_dark_opt.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot03_light_opt.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot04_dark_opt.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot04_light_opt.png
Source: chromecache_567.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?d=$
Source: chromecache_655.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatchredir?s=185073&gdpr=$
Source: chromecache_766.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatchredir?s=189872&cb=https%3A%2F%2Fusersync.gumgum.com%2Fuser
Source: chromecache_352.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_352.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_562.2.dr	String found in binary or memory: https://support.google.com/programmable-search/answer/6001359#captcha
Source: chromecache_555.2.dr	String found in binary or memory: https://support.google.com/websearch/?p
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://support.google.com/websearch/?p=language_search_results
Source: chromecache_931.2.dr	String found in binary or memory: https://support.google.com/websearch/?p=remove_personal_contact_info
Source: chromecache_781.2.dr, chromecache_752.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/106230
Source: chromecache_931.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/11080680
Source: chromecache_555.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/35890
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/9673730
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://support.google.com/websearch/troubleshooter/9685456#ts=2889054%2C2889099%2C9166584%2C9171202
Source: chromecache_413.2.dr	String found in binary or memory: https://swiperjs.com
Source: chromecache_766.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/URnmbSKM?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%
Source: chromecache_766.2.dr	String found in binary or memory: https://sync.adkernel.com/user-sync?zone=181093&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3
Source: chromecache_655.2.dr	String found in binary or memory: https://sync.colossusssp.com/pbs.gif?gdpr=$
Source: chromecache_655.2.dr	String found in binary or memory: https://sync.go.sonobi.com/usa?loc=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cs
Source: chromecache_766.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=$
Source: chromecache_812.2.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=15&redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Fcrum
Source: chromecache_885.2.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=5&redir=https%3A%2F%2Feu-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3
Source: chromecache_766.2.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=71&gdpr=0&gdpr_consent=&redir=https%3a%2f%2fusersync.gumgu
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=75&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%
Source: chromecache_766.2.dr	String found in binary or memory: https://sync.outbrain.com/redirectObuid?platformId=GUMGU18H7EL9NI653I7DPEH51&gdpr=0&gdprConsent=&pla
Source: chromecache_355.2.dr	String found in binary or memory: https://sync.serverbid.com/ss/
Source: chromecache_766.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=
Source: chromecache_766.2.dr	String found in binary or memory: https://sync.technoratimedia.com/services?srv=cs&pid=65&us_privacy=1---&cb=https%3A%2F%2Fusersync.gu
Source: chromecache_655.2.dr	String found in binary or memory: https://synchrobox.adswizz.com/register2.php
Source: chromecache_655.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/getUID?curl=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adp
Source: chromecache_405.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/www/delivery/ajs.php
Source: chromecache_405.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/www/delivery/avw.php?zoneid=8%26amp;n=af3eb0e5
Source: chromecache_405.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/www/delivery/avw.php?zoneid=8&n=af3eb0e5
Source: chromecache_405.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/www/delivery/ck.php?aw_0_req.gdpr=false&oaparams=3_
Source: chromecache_405.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/www/delivery/ck.php?n=af3eb0e5
Source: chromecache_405.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/www/delivery/lg.php?adData=targeted-publisher-info%
Source: chromecache_355.2.dr	String found in binary or memory: https://tag.1rx.io/rmp/
Source: chromecache_355.2.dr	String found in binary or memory: https://targeting.unrulymedia.com/unruly_prebid
Source: chromecache_378.2.dr, chromecache_352.2.dr, chromecache_586.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_766.2.dr	String found in binary or memory: https://tg.socdm.com/aux/idsync?proto=gumgum
Source: chromecache_738.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_738.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://twitter.com/DLTKsCrafts
Source: chromecache_781.2.dr, chromecache_752.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=$
Source: chromecache_881.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58760/sync?redir=true&gdpr=0&gdpr_consent=
Source: chromecache_555.2.dr	String found in binary or memory: https://urlscan.io
Source: chromecache_555.2.dr	String found in binary or memory: https://urlscan.io/domain/oldmacdonald.had-a.phish.farm
Source: chromecache_766.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?_=
Source: chromecache_355.2.dr	String found in binary or memory: https://warp.media.net/js/tags/prebidrtdclient.js?cid=
Source: chromecache_555.2.dr	String found in binary or memory: https://webcache.googleusercontent.com/search?q
Source: chromecache_371.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_610.2.dr, chromecache_406.2.dr	String found in binary or memory: https://www-emailveritas-com.webpkgcache.com/crt/4tAVUkEg_XkZ/s/www.emailveritas.com/cdn-fpw/sxg/cer
Source: chromecache_555.2.dr	String found in binary or memory: https://www-emailveritas-com.webpkgcache.com/doc/-/s/www.emailveritas.com/url-checker/old-macdonald-
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.brainframe-kids.com
Source: chromecache_807.2.dr	String found in binary or memory: https://www.brainframe-kids.com/brain/coloring.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.brainframe-kids.com/brain/images/s/cartoon-brain-tophat.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.brainframe-kids.com/brain/images/s/learned-lobes.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.brainframe-kids.com/brain/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.brainframe-kids.com/emotions/coloring.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.brainframe-kids.com/emotions/images/s/ice-cream.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.brainframe-kids.com/emotions/images/s/wordmine.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.brainframe-kids.com/emotions/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.brainframe-kids.com/mindful-kids/images/resources-worksheet-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.brainframe-kids.com/mindful-kids/resources-worksheet.htm
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.coloring.ws
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/artwork.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/artwork/s/mona-lisa-1.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/cartoons/cinderella/s/cinderella2.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/doodles-2.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/doodles.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/doodles/s/24.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/doodles/s/48.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/doodles/s/54.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/dungeons-and-dragons.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/england/s/5.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/fairy-tales.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/fantasy/s/wizard-older.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/mandala/s/happy-5.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/mandala/s/simple-6.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/mandalas-emotions.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/mandalas.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/patrick.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/patrick/s/3.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/patrick/s/clover.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/shakespeare.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/shakespeare/s/b-titania-older.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.coloring.ws/transportation/s/airplane6.gif
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-holidays.com
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/Patrick/images/s/colored-macaroni.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/SPRING/m-handprint-flower.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/birthdays/carolyn-wells.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/birthdays/images/carolyn-wells/alphabet-zoo.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/birthdays/shakespeare.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/cards.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/crafts.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/images/paper-craft-fisher-bear.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/images/paper-strip-necktie-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/images/paper-strip-tie.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/images/s/fathers-day-fill-in-blanks-worksheet.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/images/s/hooked-fathers-day-card.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/images/scissor-skills-tie.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/index.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/m-dino-mite.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/m-paper-strip-tie.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/mscissor-skills.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/printables.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/songs/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/songs/poem-guenther-dad.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/dad/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/days/first-boeing-707-flew.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/days/first-space-walk.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/days/international-picnic-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/days/macaroni-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/days/paper-bag-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/days/teddy-bear-picnic-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/days/toothbrush-invented.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/days/ufo-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/easter/images/easter-fortune-teller.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/coloring.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/crafts-trees.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/fallpoetry.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/images/acorn-350.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/images/m-draw3.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/images/mfalltree4.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/images/mscissorskills2.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/images/paperstrip-leaves-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/images/s/autumn-branch-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/images/s/crossword-puzzles.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/images/sbrady.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/m-acorn.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/mfalltree.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/mscissor-skills.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/fall/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/guyfawkes/images/stpguyfawkes.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/guyfawkes/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/halloween_songs.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/images/mshiel5.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/images/patterns/baby-dinosaur.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/images/plate-cauldron-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/images/s/cat-pattern.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/images/s/sbagwitch.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/images/s/sc-crossword-picture.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/index.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/mpatterns.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/poems/mflutter.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/stories/witch-broom/
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/stories/witch-broom/images/s/tracer-page.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/stories/witch-potion/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/halloween/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/mom/images/handprint-lilies.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/mom/mlilies.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/months/dog-days.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/months/music-in-our-schools.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/months/pet-owners.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/coloring.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/crafts-trap.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/daubers/sdauber4.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/images/crossword-picture.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/images/mlepeasy.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/images/mplateleprechaun2.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/images/msudoku.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/images/s-stew.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/images/s/cwordwall2.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/images/s/jigsaw-words.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/images/s/s-heart-shamrock.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/images/s/strap3.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/images/s/swordsearch.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/m-crossword.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/m-wordsearch.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/mheart-shamrock.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/mlepeasy.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/mplateleprechaun2.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/songs/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/story/print.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/story/story-1.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/patrick/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/remembrance/crafts.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/remembrance/images/sminibook.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/crafts-flowers.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/images/cardboard-bouquet-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/images/mgrassseedcaterpillar.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/images/msudoku.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/images/s/branch-done.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/images/s/sc-wordsearch3.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/images/s/tissue-flowerpot-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/images/smayday-basket2.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/images/sscissor-skills-flower.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/images/tp-flower-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/m-cardboard-bouquet.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/m-spring-branch-craft.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/m-tp-flowers.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/mgrassseedcaterpillar.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/mmayday-basket.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/poem/daffodils.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/poem/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/poem/m-crow-and-cat.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/poem/s-daffodils.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/poem/smilne-daffodowndilly.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/spring/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/aug28.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/mguenther-beaches.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/msudoku.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/mwatermelon4.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/s-crossword.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/s/dandelion-seed-paper-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/s/nature-suncatcher-6.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/s/plate-icecream.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/s/smlk.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/s/ssun.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/s/summersport-bear.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/summer-branch.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/images/summersport-bear.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/index.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/m-crossword.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/m-dandelion-seed.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/m-nature-suncatcher-craft.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/m-summer-branch-craft.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/mscissor-skills.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/national_ice_cream_month.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/poems.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/watermelon-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/summer/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/thanksgiving/images/mtpturkeyoption.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/thanksgiving/turkey_crafts.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/cards.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/color/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/crafts-animals.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/crafts-candy.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/crafts-hearts.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/crafts-holders.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/crafts-wreaths.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/egg-carton-rose-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/m-plate-panda.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/mdogbox.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/mheartplate.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/paper-strip-heart.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/s/clothespin-hearts.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/s/pop-up-card.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/s/s-redredrose.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/s/scandy-flower.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/s/scards-angrybirds.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/s/scards-preschool.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/s/scrossword.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/s/sdrawdetails.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/s/sstein-valentinetochild.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/s/swordsearch.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/scatwreath.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/images/swoven.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/m-crossword.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/m-eggcarton-roses.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/m-redredrose.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/m-wordsearch.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/poem/mlove.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/valentines/poems.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/weeks/childrens-book-week.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/color/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/crafts-snowflakes.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/crafts-snowmen.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/images/anagram.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/images/mscissor-skillssnowflake.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/images/s/dauber.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/images/s/paperstrip-snowflake.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/images/s/sminibook.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/images/sguenther.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/images/snowman.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/images/wordsearch.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/m-paperstrip-snowflake.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/m-wordsearch.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/printables.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/winter_quotes_and_poems.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/winter/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/chubbysnowmanpoem.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/color/s/cposter-bell.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/color/shapes/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/coloring.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/mconesanta.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/mreindeer.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/mwisemen.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/nutcracker.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/s/c-wordsearch4.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/s/chubby-snowman-poem.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/s/mlacin7.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/s/mpaperpoinsettia2.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/s/s-chubby-snowman-poem.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/s/santa-doorknob.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/s/sc-maze2.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/s/xmas_ornament.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/spaperelf.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/spapertree.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/spoem-bells.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/images/wisemancrown.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/m-wordsearch.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/mpaper-poinsettia.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/mpaperelf.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/mpoem-bells.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/msantadoorknob.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/ornaments.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/reindeer.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/santa.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/scriptbabyjesus.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/songs.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/stories/nutcracker/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/stories/snow-queen/
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/stories/snow-queen/images/s/story.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/trees.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-holidays.com/xmas/worksheets.htm
Source: chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/ANIMALS/mpaperduck.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/CRAFTS/insects/caterpillars.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/CRAFTS/insects/crafts-dragonfly.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/CRAFTS/insects/crafts-ladybug.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/CRAFTS/insects/images/butterfly-craft-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/CRAFTS/insects/images/caterpillar-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/CRAFTS/insects/images/handprint-ladybug4.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/CRAFTS/insects/images/mbigbu13.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/CRAFTS/insects/images/s/scirclecaterpillar.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/CRAFTS/insects/mcaterpillar-numbers.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/birds-crow-raven-appreciation-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/birds-migratory-bird-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/birds-vultures.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/bunny/mbunny-spring.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/bunny/spring-bunny-paper-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/dinosaurs/images/dinosaur-shoes-350.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/dinosaurs/images/hatching-trex-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/dinosaurs/images/s/3d-dino.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/dinosaurs/images/s/hatching-trex.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/dinosaurs/images/s/plate-brontasaurus.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/dinosaurs/m-3d-paper-trex.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/dinosaurs/m-dinosaur-shoes.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/dinosaurs/m-hatching-dinosaur.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/dinosaurs/m-plate-brontasaurus.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/doggy_doggy_song.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/eggcarton.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/forest-squirrels.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/aquarium-200.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/aquarium-350.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/groundhog-pop-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/migrating-geese.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/paper-alligator-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/paper-bag-crow.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/paper-duck.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/paper-plate-bird-nest.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/paper-plate-vulture.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/roll-craft-chameleon.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/bag-cat.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/bag-cow.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/bag-dog.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/bag-elephant.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/dalmatian.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/egg-carton-animals.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/frog-bag-puppet.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/groundhog-paper-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/husky-model.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/leaf-animal-crafts.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/leaf-hedgehog-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/leaf-squirrel.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/mache-bumblebee.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/mfrogb2.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/paper-bag-hippo.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/paper-bag-whale.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/paper-donkey.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/paper-lamb.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/paper-plate-craft-hippo.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/paper-plate-elephant.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/paper-plate-monkey-2.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/piggy-bank-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/plate-seahorse.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/s-doggy-doggy.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/s/spaper_3.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/image/tcera.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/leaf-animals.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/m-aquarium.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/m-leaf-hedgehog.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/m-leaf-squirrel.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/m-shark-cup-game.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mbagcow.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mbagelephant.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mbaghippo.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mbagpig.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mbagwhale.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mbigowl.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mbirdnest.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mcera.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mpaperalligator.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mpaperdonkey.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mpaperlamb.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mplate-elephant.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/mplate-hippo.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/owl/owl.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/paper-plate-crafts-for-kids/
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/paper-plate-crafts-for-preschoolers/
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/paper-plate-crafts-for-preschoolers/dalmatian-dog-paper-plate-craf
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/pet-owners-day.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/reptiles-chameleon.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/animals/songs/sstein-waterworld.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/articles/blog/images/ltcg-astronomy-2.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/articles/blog/images/ltcg-earth-day.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/articles/blog/ltcg-astronomy.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/articles/blog/ltcg-earth-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/articles/blog/ltcg-world-water-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/articles/mid_summer_fun.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/bible/angels/rememb1.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/bible/cv/david_and_goliath.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/bible/cv/images/baby-jesus-story.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/bible/cv/images/david-and-goliath-story.jpg
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/copyright.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/bullet-journal/images/s/gratitude-lists.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/cartoons/image/s/spaperdolldorothy.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/cartoons/oz.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/circus/images/s/ttrain.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/columbus/images/newspa2.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/images/handprintearth.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/images/s-cofeefilter.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/images/s-memory.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/images/s-mother1.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/images/s/crossword-puzzle.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/images/story-tree.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/index.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/m-story.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/mcoffeefilter.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/mearthposter.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/nature-friendly.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/photo.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/posters/s/cdetails-panda.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/songs.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/wed.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/earth/world-oceans-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/emojis/images/hearts.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/emojis/images/shamrocks.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/emojis/mshamrocks.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/european-day-of-languages.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/grandparents/images/handprint-flower-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/grandparents/mhandprint-flower.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/happy_groundhog-poetry.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/happy_groundhog.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/images/pie-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/images/s/paper-bag-dove-puppet.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/images/s/paul-bunyan-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/images/s/s-edl-spanish-alphabet.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/images/s/sgroundhog-dauber4.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/butterflies.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/crafts-bee.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/egg-carton-caterpillar-crafts.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/images/caterpillar-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/images/honey-bee-lavender.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/images/mpapercaterpillar.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/images/plastic_firefly1-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/images/s/butterfly-350.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/images/s/butterfly-life-cycle.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/images/s/shandprint-spider.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/m-plastic-firefly.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/m-story.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/mcaterpillar-numbers.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/mlifecycle-butterfly.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/mpaper-chain-caterpillar.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/insects/world-bee-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/international-peace-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/international-self-care-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/lumberjack-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/march_weather.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/mardigras/images/mplatejester.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/mardigras/images/s/sking.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/mardigras/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/apple.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/beatrix-potter.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/build_a_scarecrow_day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/dental_health_month.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/evaleen-stein.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/fireweek.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/binder-decorations-700w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/bulletjournal-meal-3.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/horizontal-duct-tape1-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/melted-crayon-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/mpillo1.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/page_tutorial_paintedtrees.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/s/butterfly-magnet-250w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/s/paper-house-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/s/s-horizontal-duct-tape1-250w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/s/s-iseealittlegroundhog.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/s/s-minibook.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/s/scissor-skills.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/s/spoetry.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/s/sstein-fireflies.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/s/tshirt-bag.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/sguenther-christmas.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/shark-game-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/sponge-rainbow-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/spotter-bowwowwow.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/swells-valentine.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/tshirt-bag-simple-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/image/watermelon-notebook1-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/m-binder-painting.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/m-horizontal-duct-tape.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/m-melted-crayon.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/m-sponge-rainbow.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/m-tshirt-bag-simple.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/m-watermelon-notebook.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/mbulletjournal.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/mguenther-christmas.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/paul_bunyan_day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/posters/s/ctrace-seeds.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/printable_paper_house_craft.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/scissor_skills.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/sky_day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/miscellaneous/tutorial_paintedtrees.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/music/images/mcupsonginstructions.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/music/images/s/paperstrip-music-notes.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/music/images/s/pinwheel.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/music/mcupsong.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/music/strange-index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/newyear/image/mcrown2.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/newyear/image/s-littlelight.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/newyear/mcrown.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/newyear/mlittlelight.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/pi-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/pirates/images/mplatepirate.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/pirates/images/tmap.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/pirates/images/ttreasure.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/pirates/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/pirates/mmap.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/pirates/mplatepirate.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/pirates/mtreasure.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/rainbows/images/fingerprint-rainbow-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/rainbows/images/mcloudandrainbow_paperplate.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/rainbows/images/watercolor1.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/rainbows/m-fingerprint-rainbow.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/rainbows/m-rainbow-watercolor.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/rainbows/mcloudandrainbow_paperplate.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/space/images/alien-ufo-200.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/space/images/alien-ufo-350.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/space/images/s/splate-porthole.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/space/m-alien-ufo.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/space/national-moon-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/images/boat-egg3.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/images/easy-paper-hot-air-balloon.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/images/halves-boat-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/images/s/hot-air-balloon.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/images/s/shapes-train.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/images/s/train-paper-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/images/s/tugboat-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/index-hot-air-balloon.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/m-paper-train.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/m-paper-tugboat.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/mhalvesboat.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/mshapes-train.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/mtrain.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/crafts/transportation/national-aviation-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/fantasy/dnd.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/fantasy/images/s/c-juliusdnd-adult.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/fantasy/images/s/sbagphoenix.jpg
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/feedback.htm
Source: chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/images/dltk-brand-1200.png
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/images/dltk-brand-350.png
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/images/dltk-brand-700.png
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/images/instagram.png
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/images/pinterest.png
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/images/twitter.png
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/images/youtube.png
Source: chromecache_559.2.dr	String found in binary or memory: https://www.dltk-kids.com/includes/feature.htm
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/includes/features-data.js
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/includes/features-insert.js
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/members/images/pig/mr_pig.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/members/images/scarecrow2.jpg
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/new10.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/nutrition/images/bookmark-pie-350w.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/nutrition/images/s/paperstrippumpkin.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/nutrition/kaitlyn-recipes/images/s/squash-macncheese.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/nutrition/kaitlyn-recipes/images/s/yoghurt-dip.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/poems/longfellow/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/poems/longfellow/skeleton/preview/skeleton.jpg
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/privacy.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/recipes/images/gingernread_cookies.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/recipes/reindeer_cookie.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/recipes/reindeer_cookies.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/3d-bus.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/crafts.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/images/apple-pot-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/images/bus.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/images/poem-hebrew-proverb.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/images/s/3d-bus-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/images/s/apple-for-teacher-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/images/s/craft-3d-bus.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/images/s/reading-chart.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/images/word-search.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/m-monthlyreading.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/mpot.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/poems_for_teachers.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/school/worksheets.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/babe-ruth.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/iditarod.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/images/s/baseball-buddy.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/images/s/football-stadium-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/images/s/mini-basketball1.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/images/s/mini-foosball1.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/images/s/paper-plate-football.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/images/s/tic-tac1.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/index.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/m-3d-football-field.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/m-mini-basketball.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/m-mini-foosball.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/sports/m-tic-tac.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/storyteller/images/midsummerfairies_still2.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/storyteller/shakespeare/midsummer-fairies.htm
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/terms-of-service.htm
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-kids.com/top10.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/flag-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/fourth-of-july-vocabulary.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/images/american-flag-cake.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/images/mlincoln.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/images/mwashington.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/images/platelincoln.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/images/s/4th-word-list-easy.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/images/s/scandrum.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/images/s/scissor-skills.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/images/s/scottonball-washington.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/images/scabin.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/mcabin.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/mcottonball-washington.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/mlincoln.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/mplatelincoln.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/mwashington.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/paul-bunyan/images/s/story.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/usa/scissor-skills.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/australia/images/s/mkangaroowreath.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/australia/maustraliaanimalswreath.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/england/stcrispins.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/finland/images/bride.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/finland/images/mouse.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/finland/m-story-forest-bride.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/france/bastille-day.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/france/images/s/sfrench.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/germany/images/queen.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/germany/m-story.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/crosswords.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-cw-gemini.jpeg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-Aquarius.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-Cancer.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-Capricorn.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-Gemini.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-Libra.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-Pisces.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-Sagittarius.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-Scorpio.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-Virgo.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-aries.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-leo.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/astrology/images/s/s-ws-taurus.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/images/arachne3.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/images/myth-medusa.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/images/s/icarus1.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/images/s/s-trojan-horse.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/images/trojan-horse-craft.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/m-story-arachne-and-athena.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/m-story-creation.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/m-story-icarus.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/m-story-jason.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/m-story-medusa-and-athena.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/m-story-trojan-horse.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/greece/m-trojan.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/japan/images/mfortuner-teller.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/japan/images/morigami-windmill2.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/japan/images/s/sorigami-flower.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/japan/images/s/ssimple_origami_fox.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/japan/mfortune-teller.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/japan/morigami-petals.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/japan/morigami-windmill.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/japan/origami.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/mexico/day-of-the-dead.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/mexico/images/s/bird-rattle.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/mexico/images/s/spaper-catrina.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/mexico/mbirdrattle.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/puerto_rico/navidad.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/scotland/burnsnight.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/scotland/images/mbagpiper.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/ukraine/images/firebird.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/ukraine/images/slipper.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/ukraine/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/ukraine/m-story-baba-yaga.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/ukraine/m-story-golden-slipper.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/ukraine/m-story.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-kids.com/world/wales/index.htm
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-ninos.com
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-teach.com
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/custom/valentine/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/custom/winter/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/daubers/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/daubers/s/c-a.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/image/s/awesome-apple-400.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/image/s/brocolli.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/image/s/cposter-flower.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/image/s/groovy-grape-400.jpg
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/index.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/mawesomeapple.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/mbigboybroccoli.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/mgroovygrapes.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/alphabuddies/sm/swinter.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/books/hungrycaterpillar/index.3.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/books/hungrycaterpillar/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/books/images/forest-guardian.png
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-teach.com/books/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/books/mstory-forest-guardian.htm
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-teach.com/colors/index.htm
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-teach.com/cuddlebuddies/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fables/grasshopper/grasshopper.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fables/grasshopper/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fables/lion/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fables/stonesoup/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fables/stonesoup/sfeltboard.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/Aquarius/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/Cancer/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/Capricorn/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/Gemini/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/Libra/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/Pisces/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/Sagittarius/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/Scorpio/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/Virgo/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/aries/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/cinderella/Images/s/crossword.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/cinderella/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/hansel-and-gretel/images/s/s-gretel.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/hansel-and-gretel/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/leo/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/persephone/images/s/flora-fairy.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/persephone/story.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/red-hen/images/s/s-cw-red-hen.jpeg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/red-hen/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/rumpelstiltskin/images/s/story-rumpelstiltskin.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/rumpelstiltskin/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/taurus/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/theseus/story.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/thumbelina/images/s/thumbelina.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/thumbelina/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/ugly-duckling/images/s/story.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/fairy-tales/ugly-duckling/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/minibooks/a/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/minibooks/a/index.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/minibooks/daddy/s-cover.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/minibooks/flanders/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/minibooks/gingerbread-man/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/minibooks/gingerbread-man/s-cover.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/minibooks/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/minibooks/sindex.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/minibooks/xmas/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/minibooks/xmas/s-cover.gif
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-teach.com/numbers/index.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/pe/songs/handwashing/c-handwashing150.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/beanstalk/images/s/story.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/beanstalk/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/bumblebee/s/baby-bumblebee.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/bumblebee/song.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/gingerbread/images/m-gingerbread-man-tp-roll.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/gingerbread/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/goldilocks.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/images/tbearbag.jpg
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/little_red_riding_hood_section.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/littlered/redriding1.jpg
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/macdonald/index.htm
Source: chromecache_597.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/macdonald/mlyrics.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/marymary/handprint_tulips.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/marymary/mtulip5.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/marymary/s/cposter-verse.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/princessandfrog/princess_and_the_frog.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/rapunzle/img4.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/rapunzle/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/sleeping-beauty/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/sleeping-beauty/s-story-image.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/snowwhite/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/rhymes/snowwhite/ssdwarf.jpg
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/shapes/images/c-shapes-picture3-finished.gif
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.dltk-teach.com/shapes/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.dltk-teach.com/shapes/mshapes-scenes.htm
Source: chromecache_555.2.dr	String found in binary or memory: https://www.emailveritas.com
Source: chromecache_610.2.dr, chromecache_406.2.dr	String found in binary or memory: https://www.emailveritas.com/cdn-fpw/sxg/valid.msg.validity
Source: chromecache_406.2.dr	String found in binary or memory: https://www.emailveritas.com/dist/main.css
Source: chromecache_406.2.dr	String found in binary or memory: https://www.emailveritas.com/url-checker
Source: chromecache_555.2.dr	String found in binary or memory: https://www.emailveritas.com/url-checker/old-macdonald-had-a-phish-farm
Source: chromecache_555.2.dr	String found in binary or memory: https://www.emailveritas.com/url-checker/old-macdonald-had-a-phish-farm&ved=2ahUKEwiB2OOM0fz-AhV
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.first-school.ws
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://www.google.
Source: chromecache_469.2.dr, chromecache_859.2.dr	String found in binary or memory: https://www.google.co.uk/pagead/1p-user-list/858128210/?random
Source: chromecache_738.2.dr, chromecache_562.2.dr, chromecache_555.2.dr, chromecache_586.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_586.2.dr	String found in binary or memory: https://www.google.com/
Source: chromecache_555.2.dr	String found in binary or memory: https://www.google.com/advanced_search
Source: chromecache_562.2.dr	String found in binary or memory: https://www.google.com/cse/static
Source: chromecache_442.2.dr	String found in binary or memory: https://www.google.com/cse/static/element/%
Source: chromecache_562.2.dr	String found in binary or memory: https://www.google.com/cse/static/images/1x/
Source: chromecache_562.2.dr	String found in binary or memory: https://www.google.com/cse/static/images/2x/
Source: chromecache_442.2.dr	String found in binary or memory: https://www.google.com/cse/static/style/look/%
Source: chromecache_752.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_469.2.dr, chromecache_859.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/858128210/?random
Source: chromecache_562.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=explicit
Source: chromecache_738.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_931.2.dr	String found in binary or memory: https://www.google.com/search/howsearchworks/
Source: chromecache_555.2.dr	String found in binary or memory: https://www.google.com/search?q%3Dold%2Bmacdonald%2Bhad%2Ba%2Bphish%2Bfarm%26oq%3Dold%2Bmacdonald%2B
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_555.2.dr	String found in binary or memory: https://www.google.com/webhp?hl=en&ictx=2&sa=X&ved=0ahUKEwiB2OOM0fz-AhVR2aQKHeNbCroQPQhl
Source: chromecache_586.2.dr	String found in binary or memory: https://www.googleadservices.com/
Source: chromecache_371.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_371.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_562.2.dr	String found in binary or memory: https://www.googleapis.com/customsearch/v1element?key=AIzaSyCVAXiUzRYsML1Pv6RwSG1gunmMikTzQqY&rsz=
Source: chromecache_562.2.dr	String found in binary or memory: https://www.googleapis.com/generate_204
Source: chromecache_835.2.dr	String found in binary or memory: https://www.googleapis.com/language/translate/v2
Source: chromecache_378.2.dr, chromecache_352.2.dr, chromecache_586.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_698.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_698.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-858128210
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-52971111-2
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-M8FZJCW
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://www.gstatic.com/kpui/social/fb_32x32.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://www.gstatic.com/kpui/social/twitter_32x32.png
Source: chromecache_847.2.dr, chromecache_931.2.dr	String found in binary or memory: https://www.gstatic.com/kpui/social/whatsapp_solid_bg_36x36.png
Source: chromecache_931.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.instagram.com/dltkcrafts/
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.kidzone.ws
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/creative-writing/book.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/creative-writing/patrick/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/creative-writing/patrick/s/c-writing-prompt-6.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/creative-writing/summer/s/c-writingprompt6.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/images-changed/kindergarten/s/ib-book-christmas.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/images-changed/kindergarten/s/pre-print-diagonal1.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/images-changed/s/in-wordfamily.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/kindergarten/learning-letters/booksthemed.htm#Holidays_
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/math/farm/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/math/graphing/groundhog-index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/math/graphing/images/s-groundhog-prediction.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/math/images/s/gr1-tally2.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/math/images/s/k-6crabs.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/math/images/s/math-which6.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/math/jungle/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/math/ocean/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/phonics/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/poetry/index.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/prek_wrksht/dynamic.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/science/images/s/scientific-method-skittles.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/science/skittles.htm
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/science/tornado/ib-tornado.gif
Source: chromecache_807.2.dr	String found in binary or memory: https://www.kidzone.ws/science/tornado/index.htm
Source: chromecache_555.2.dr	String found in binary or memory: https://www.knowbe4.com
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.linkedin.com/in/leanne-guenther-7b393ba1/
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.makinglearningfun.com
Source: chromecache_352.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.pauseitivity.com
Source: chromecache_807.2.dr	String found in binary or memory: https://www.pauseitivity.com/asmr.elf.html
Source: chromecache_807.2.dr	String found in binary or memory: https://www.pauseitivity.com/images/ASMRELF.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.pauseitivity.com/images/Elfphoto.png
Source: chromecache_807.2.dr	String found in binary or memory: https://www.pauseitivity.com/movealong.elfexercises.html
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.primeraescuela.com
Source: chromecache_555.2.dr	String found in binary or memory: https://www.reddit.com
Source: chromecache_555.2.dr	String found in binary or memory: https://www.reddit.com/r/funny/comments/4juzcz/this_got_sent_to_every_employees_email_yesterday/
Source: chromecache_555.2.dr	String found in binary or memory: https://www.scamadviser.com
Source: chromecache_555.2.dr	String found in binary or memory: https://www.scamadviser.com/check-website/oldmacdonald.had-a.phish.farm
Source: chromecache_388.2.dr	String found in binary or memory: https://www.tawk.to/?utm_source=tawk-messenger&utm_medium=link&utm_campaign=referral&utm_term=61419a
Source: chromecache_555.2.dr	String found in binary or memory: https://www.threatminer.org
Source: chromecache_555.2.dr	String found in binary or memory: https://www.threatminer.org/domain.php%3Fq%3Doldmacdonald.had-a.phish.farm
Source: chromecache_555.2.dr	String found in binary or memory: https://www.threatminer.org/domain.php?q
Source: chromecache_555.2.dr	String found in binary or memory: https://www.threatminer.org/domain.php?q%3Doldmacdonald.had-a.phish.farm
Source: chromecache_352.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_668.2.dr, chromecache_851.2.dr	String found in binary or memory: https://www.youtube.com/user/DLTKcrafts/featured
Source: chromecache_766.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=e_99cd6507-57d3-42e4-91d8-406f13b2ed55&gdpr=0&gdpr_
Source: chromecache_552.2.dr, chromecache_568.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=onetag&gdpr=$
Source: chromecache_655.2.dr	String found in binary or memory: https://x.serverbid.com/usersync?ttt=1&src=1&cspi=0&cn=5573&dpui=

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; __Secure-ENID=6.SE=cJKCBuSaL1dV3R8z2Y2al7-m2m5bGA74lqbYYkqC3uy-NtZ1f6n_bCBr25tlnnjvdmLpGQ81ZKzP3Te5vVjpSQjYWCwvlOMApK7tmZNWcORu0p4wniPJGQfTslQNnpQWhG9qkwkEgy49-6UG3UQ1eiUyFolJZWLeUM1p4KvjM9E

System Summary

Yara signature match

Source: dropped/chromecache_832, type: DROPPED

Matched rule: SUSP_obfuscated_JS_obfuscatorio date = 2021-08-25, author = @imp0rtp3, description = Detects JS obfuscation done by the js obfuscator (often malicious), score = , reference = https://obfuscator.io

Classification label

Source: classification engine

Classification label: mal48.win@65/621@142/100

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwj85-Cx0Pz-AhV5FVkFHezeDZcQFnoECCUQAQ&url=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&usg=AOvVaw0mYQOAG6hFsIBU_fVcAryo
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1776,i,17606060470887337793,7573491259211301157,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7852 --field-trial-handle=1776,i,17606060470887337793,7573491259211301157,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7492 --field-trial-handle=1776,i,17606060470887337793,7573491259211301157,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3008 --field-trial-handle=1776,i,17606060470887337793,7573491259211301157,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6728 --field-trial-handle=1776,i,17606060470887337793,7573491259211301157,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1776,i,17606060470887337793,7573491259211301157,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7852 --field-trial-handle=1776,i,17606060470887337793,7573491259211301157,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7492 --field-trial-handle=1776,i,17606060470887337793,7573491259211301157,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3008 --field-trial-handle=1776,i,17606060470887337793,7573491259211301157,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6728 --field-trial-handle=1776,i,17606060470887337793,7573491259211301157,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Creates files inside the program directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\42A8D58F9A237D75EF41BD5715DB567C

Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Persistence and Installation Behavior

Drops PE files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 872686.crdownload (copy)			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\1283a604-60a3-4298-8a79-4cbfb27f301b.tmp			Jump to dropped file

Malware Analysis System Evasion

May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)

Source: chromecache_634.2.dr

Binary or memory string: 9JCajlmc1p1LlB3byVXRiojI6RnIsIyZyVmYuVmb1hkI6ISe0l2YiwiIHplI6ISZk92Qu9WanVmciwiInVnWiojIu9WanVmciwiIINkI6ISeyRnb192YiwiIxMzM2IiOiUGZvNEbhR3cvBnIsICM3MTOx4yN0IiOiQXYsJCLiAjMwIDNugjI6IyZu9GbiwiI0EjLzQTMukjMx4iMwEjI6ICcpJCLxojI2Jye