Windows Analysis Report
http://www.waterbarriers.us

Overview

General Information

Sample URL: http://www.waterbarriers.us
Analysis ID: 1530839
Infos:

Detection

Score: 1
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

HTML page contains hidden javascript code
Stores files to the Windows start menu directory
Uses insecure TLS / SSL version for HTTPS connection

Classification

HTML page contains hidden javascript code
Source: http://www.waterbarriers.us/ HTTP Parser: Base64 decoded: {"uuid":"820bd704-8380-4578-8532-30a3694d4917","page_time":1728567784,"page_url":"http://www.waterbarriers.us/","page_method":"GET","page_request":{},"page_headers":{},"host":"www.waterbarriers.us","ip":"8.46.123.33"}
Source: http://www.waterbarriers.us/ HTTP Parser: No favicon
Source: http://www.waterbarriers.us/ HTTP Parser: No favicon
Source: http://www.waterbarriers.us/ HTTP Parser: No favicon
Source: http://www.waterbarriers.us/?caf=1&bpt=345&query=Roof+Repairs&afdToken=ChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg&pcsa=false&nb=0&nm=13&nx=354&ny=61&is=700x480&clkt=2 HTTP Parser: No favicon
Source: http://www.waterbarriers.us/?caf=1&bpt=345&query=Roof+Repairs&afdToken=ChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg&pcsa=false&nb=0&nm=13&nx=354&ny=61&is=700x480&clkt=2 HTTP Parser: No favicon
Source: http://www.waterbarriers.us/?caf=1&bpt=345&query=Roof+Repairs&afdToken=ChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg&pcsa=false&nb=0&nm=13&nx=354&ny=61&is=700x480&clkt=2 HTTP Parser: No favicon
Source: http://www.waterbarriers.us/?caf=1&bpt=345&query=Roof+Repairs&afdToken=ChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg&pcsa=false&nb=0&nm=13&nx=354&ny=61&is=700x480&clkt=2 HTTP Parser: No favicon
Source: https://bullockbuilders.com/bullock-builders#396c777d-6613-45bb-ace9-789a5a49aa9d HTTP Parser: No favicon
Source: https://bullockbuilders.com/bullock-builders#396c777d-6613-45bb-ace9-789a5a49aa9d HTTP Parser: No favicon
Source: https://bullockbuilders.com/bullock-builders#396c777d-6613-45bb-ace9-789a5a49aa9d HTTP Parser: No favicon
Uses insecure TLS / SSL version for HTTPS connection
Source: unknown HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49740 version: TLS 1.0
Source: unknown HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.9:49725 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.9:49728 version: TLS 1.2
Uses insecure TLS / SSL version for HTTPS connection
Source: unknown HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49740 version: TLS 1.0
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: global traffic HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.waterbarriers.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol113%2Cpid-bodis-gcontrol454%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol164&client=dp-bodis01_js&r=m&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.waterbarriers.us%2F%3Fcaf%3D1%26bpt%3D345&terms=Roof%20Repairs%2CRoofing%20Contractors%2CBuilding%20Contractors%2CResidential%20Roofing%20Repair%20Contractors%2CRoof%20Replacement%20Services%2CResidential%20Roofing%20Companies%2CRain%20Gutters%2CRoof%20Contractors&kw=Roof%20Repairs&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2148305361097618&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301542%2C17301266%2C72717107&format=r3&nocache=6981728567784827&num=0&output=afd_ads&domain_name=www.waterbarriers.us&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1728567784828&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fwww.waterbarriers.us%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.waterbarriers.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /afs/gen_204?client=dp-bodis01_js&output=uds_ads_only&zx=phsapx8n67p3&aqid=6tkHZ-_eMbG8juwP-rCzMA&psid=3113057640&pbt=bs&adbx=281.5&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis01_js&errv=681010707&csala=6%7C0%7C1050%7C1249%7C65&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.waterbarriers.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /afs/gen_204?client=dp-bodis01_js&output=uds_ads_only&zx=6y09cmasxazq&aqid=6tkHZ-_eMbG8juwP-rCzMA&psid=3113057640&pbt=bv&adbx=281.5&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis01_js&errv=681010707&csala=6%7C0%7C1050%7C1249%7C65&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.waterbarriers.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.waterbarriers.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol113%2Cpid-bodis-gcontrol454%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol164&client=dp-bodis01_js&r=m&sct=ID%3D75e03cd36f6eea1c%3AT%3D1728567786%3ART%3D1728567786%3AS%3DALNI_MZvZlM7ne59U7g6Q4faJGARKRZNWQ&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.waterbarriers.us%2F%3Fcaf%3D1%26bpt%3D345%26query%3DRoof%2BRepairs%26afdToken%3DChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg%26pcsa%3Dfalse%26nb%3D0%26nm%3D13%26nx%3D354%26ny%3D61%26is%3D700x480%26clkt%3D2&terms=Roof%20Repairs%2CRoofing%20Contractors%2CBuilding%20Contractors%2CResidential%20Roofing%20Repair%20Contractors%2CRoof%20Replacement%20Services%2CResidential%20Roofing%20Companies%2CRain%20Gutters%2CRoof%20Contractors&kw=Roof%20Repairs&max_radlink_len=50&type=0&uiopt=false&swp=as-drid-2148305361097618&q=Roof%20Repairs&afdt=ChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301542%2C17301266%2C72717107&format=n3&ad=n3&nocache=8761728567807807&num=0&output=afd_ads&domain_name=www.waterbarriers.us&v=3&bsl=8&pac=0&u_his=2&u_tz=-240&dt=1728567807807&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=ad-1&drt=0&jsid=caf&nfp=1&jsv=681010707&rurl=http%3A%2F%2Fwww.waterbarriers.us%2F%3Fcaf%3D1%26bpt%3D345%26query%3DRoof%2BRepairs%26afdToken%3DChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg%26pcsa%3Dfalse%26nb%3D0%26nm%3D13%26nx%3D354%26ny%3D61%26is%3D700x480%26clkt%3D2&referer=https%3A%2F%2Fsyndicatedsearch.goog%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.waterbarriers.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.waterbarriers.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /afs/gen_204?client=dp-bodis01_js&output=uds_ads_only&zx=fs6kujsu28hl&aqid=AtoHZ7DeBeq1xdwP34KECQ&psid=3113057640&pbt=bs&adbx=381.5&adby=143&adbh=1468&adbw=500&adbah=506%2C481%2C481&adbn=master-1&eawp=partner-dp-bodis01_js&errv=681010707&csala=24%7C0%7C1741%7C27%7C169&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.waterbarriers.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /afs/gen_204?client=dp-bodis01_js&output=uds_ads_only&zx=dtl54gln06hm&aqid=AtoHZ7DeBeq1xdwP34KECQ&psid=3113057640&pbt=bv&adbx=381.5&adby=143&adbh=1468&adbw=500&adbah=506%2C481%2C481&adbn=master-1&eawp=partner-dp-bodis01_js&errv=681010707&csala=24%7C0%7C1741%7C27%7C169&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.waterbarriers.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /?gad_source=5&gclid=EAIaIQobChMIsOep8viDiQMV6lqRBR1fASEBEAAYASAAEgKHwvD_BwE HTTP/1.1Host: www.bullockbuilders.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /?gad_source=5&gclid=EAIaIQobChMIsOep8viDiQMV6lqRBR1fASEBEAAYASAAEgKHwvD_BwE HTTP/1.1Host: bullockbuilders.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /markup/ad HTTP/1.1Host: bullockbuilders.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bullockbuilders.com/?gad_source=5&gclid=EAIaIQobChMIsOep8viDiQMV6lqRBR1fASEBEAAYASAAEgKHwvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1
Source: global traffic HTTP traffic detected: GET /pb.js HTTP/1.1Host: cdn.poynt.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pb.js HTTP/1.1Host: cdn.poynt.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /bullock-builders HTTP/1.1Host: bullockbuilders.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://bullockbuilders.com/?gad_source=5&gclid=EAIaIQobChMIsOep8viDiQMV6lqRBR1fASEBEAAYASAAEgKHwvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; _tccl_visit=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; _scc_session=pc=1&C_TOUCH=2024-10-10T13:43:51.326Z
Source: global traffic HTTP traffic detected: GET /assets/reamaze-godaddy-loader.js HTTP/1.1Host: cdn.reamaze.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/reamaze-godaddy-loader.js HTTP/1.1Host: cdn.reamaze.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /accounts/9b768d3e-32db-4613-aa51-84050b3bccd0/config?fields[]=cart HTTP/1.1Host: api.ola.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://bullockbuilders.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/reamaze-godaddy-loader.js HTTP/1.1Host: cdn.reamaze.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /dist/embed.js HTTP/1.1Host: cart-checkout.secureserver.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /g/api/cart/cart?cartNotifyTimeout=5000&websiteId=9b768d3e-32db-4613-aa51-84050b3bccd0&env=production&cartUrl=https://bullockbuilders.com/g/api/cart&websiteUrl=https://bullockbuilders.com HTTP/1.1Host: bullockbuilders.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bullockbuilders.com/bullock-buildersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; _tccl_visit=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; _scc_session=pc=2&C_TOUCH=2024-10-10T13:43:58.320Z
Source: global traffic HTTP traffic detected: GET /accounts/9b768d3e-32db-4613-aa51-84050b3bccd0/config?fields[]=cart HTTP/1.1Host: api.ola.godaddy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /dist/embed.js HTTP/1.1Host: cart-checkout.secureserver.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /v3/recaptcha HTTP/1.1Host: contact.apps-api.instantpage.secureserver.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://bullockbuilders.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/webpack-4a2d2f460e7e1a00.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/framework-07ba49083a3e026b.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/main-f7fb4d90a816b6ac.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/pages/_app-26072b358821acb0.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/9-f9d89c7cffe1ee17.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/c8b05f54-e0f91b073e7d8a8c.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /v3/recaptcha HTTP/1.1Host: contact.apps-api.instantpage.secureserver.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /recaptcha/api.js?render=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/358-f0bc955bf7e6d941.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/webpack-4a2d2f460e7e1a00.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/pages/cart-d35bec9da452c38a.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/9-f9d89c7cffe1ee17.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/c8b05f54-e0f91b073e7d8a8c.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/heHYbIJv63MAslxxKW159/_buildManifest.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/heHYbIJv63MAslxxKW159/_ssgManifest.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/main-f7fb4d90a816b6ac.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /recaptcha/api.js?render=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_ HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/framework-07ba49083a3e026b.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/pages/_app-26072b358821acb0.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/heHYbIJv63MAslxxKW159/_buildManifest.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: bullockbuilders.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://bullockbuilders.com/bullock-buildersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/heHYbIJv63MAslxxKW159/_ssgManifest.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/358-f0bc955bf7e6d941.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /api/websites/9b768d3e-32db-4613-aa51-84050b3bccd0/tax-settings HTTP/1.1Host: cart-checkout.secureserver.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://bullockbuilders.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/pages/cart-d35bec9da452c38a.js HTTP/1.1Host: d2r4erd6f6ydft.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /v1/settings/public/9b768d3e-32db-4613-aa51-84050b3bccd0 HTTP/1.1Host: gopay-checkout-settings.secureserver.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://bullockbuilders.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_&co=aHR0cHM6Ly9idWxsb2NrYnVpbGRlcnMuY29tOjQ0Mw..&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=invisible&cb=y1nw7ffa8b4d HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /api/websites/9b768d3e-32db-4613-aa51-84050b3bccd0/tax-settings HTTP/1.1Host: cart-checkout.secureserver.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /g/api/checkout/v2/cart?websiteId=9b768d3e-32db-4613-aa51-84050b3bccd0 HTTP/1.1Host: bullockbuilders.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; _tccl_visit=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; commerce_cart_9b768d3e-32db-4613-aa51-84050b3bccd0_locale=%22en-US%22; _scc_session=pc=3&C_TOUCH=2024-10-10T13:44:03.943Z
Source: global traffic HTTP traffic detected: GET /v1/settings/public/9b768d3e-32db-4613-aa51-84050b3bccd0 HTTP/1.1Host: gopay-checkout-settings.secureserver.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_&co=aHR0cHM6Ly9idWxsb2NrYnVpbGRlcnMuY29tOjQ0Mw..&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=invisible&cb=y1nw7ffa8b4dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /js/bg/zEg4NaMiOUeKKZ2pqXY4HMvMf5VCq4avNU_6WgNs2Cw.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_&co=aHR0cHM6Ly9idWxsb2NrYnVpbGRlcnMuY29tOjQ0Mw..&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=invisible&cb=y1nw7ffa8b4dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /js/bg/zEg4NaMiOUeKKZ2pqXY4HMvMf5VCq4avNU_6WgNs2Cw.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /signals/config/282429905966327?v=2.9.170&r=stable&domain=bullockbuilders.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/reamaze.js HTTP/1.1Host: cdn.reamaze.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /m/api/reamaze/v2/customers/auth?brand=9b768d3e-32db-4613-aa51-84050b3bccd0 HTTP/1.1Host: bullockbuilders.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bullockbuilders.com/bullock-buildersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; _tccl_visit=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; commerce_cart_9b768d3e-32db-4613-aa51-84050b3bccd0_locale=%22en-US%22; _scc_session=pc=3&C_TOUCH=2024-10-10T13:44:03.943Z; _ga=GA1.1.1132907150.1728567838; _ga_BF2FDR6KMM=GS1.1.1728567838.1.1.1728567851.0.0.0; cookie_warning_dismissed=true; cookie_terms_accepted=true
Source: global traffic HTTP traffic detected: GET /assets/reamaze.js HTTP/1.1Host: cdn.reamaze.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /data/brands/9b768d3e-32db-4613-aa51-84050b3bccd0/ping HTTP/1.1Host: cdn.reamaze.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://bullockbuilders.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /m/api/reamaze/v2/customers/auth?brand=9b768d3e-32db-4613-aa51-84050b3bccd0 HTTP/1.1Host: bullockbuilders.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; _tccl_visit=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; commerce_cart_9b768d3e-32db-4613-aa51-84050b3bccd0_locale=%22en-US%22; _scc_session=pc=3&C_TOUCH=2024-10-10T13:44:03.943Z; _ga=GA1.1.1132907150.1728567838; _ga_BF2FDR6KMM=GS1.1.1728567838.1.1.1728567851.0.0.0; cookie_warning_dismissed=true; cookie_terms_accepted=true
Source: global traffic HTTP traffic detected: GET /assets/reamaze-push.js HTTP/1.1Host: push.reamaze.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ajax/libs/pusher/7.0.1/pusher.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /data/brands/9b768d3e-32db-4613-aa51-84050b3bccd0/ping HTTP/1.1Host: cdn.reamaze.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/reamaze-push.js HTTP/1.1Host: push.reamaze.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /tr/?id=282429905966327&ev=PageView&dl=https%3A%2F%2Fbullockbuilders.com%2Fbullock-builders%23396c777d-6613-45bb-ace9-789a5a49aa9d&rl=https%3A%2F%2Fbullockbuilders.com%2F%3Fgad_source%3D5%26gclid%3DEAIaIQobChMIsOep8viDiQMV6lqRBR1fASEBEAAYASAAEgKHwvD_BwE&if=false&ts=1728567855730&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4126&fbp=fb.1.1728567855727.407407704672427350&cdl=API_unavailable&it=1728567851922&coo=false&exp=h2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=282429905966327&ev=PageView&dl=https%3A%2F%2Fbullockbuilders.com%2Fbullock-builders%23396c777d-6613-45bb-ace9-789a5a49aa9d&rl=https%3A%2F%2Fbullockbuilders.com%2F%3Fgad_source%3D5%26gclid%3DEAIaIQobChMIsOep8viDiQMV6lqRBR1fASEBEAAYASAAEgKHwvD_BwE&if=false&ts=1728567855730&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4126&fbp=fb.1.1728567855727.407407704672427350&cdl=API_unavailable&it=1728567851922&coo=false&exp=h2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://bullockbuilders.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /signals/config/282429905966327?v=2.9.170&r=stable&domain=bullockbuilders.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ajax/libs/pusher/7.0.1/pusher.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /tr/?id=282429905966327&ev=PageView&dl=https%3A%2F%2Fbullockbuilders.com%2Fbullock-builders%23396c777d-6613-45bb-ace9-789a5a49aa9d&rl=https%3A%2F%2Fbullockbuilders.com%2F%3Fgad_source%3D5%26gclid%3DEAIaIQobChMIsOep8viDiQMV6lqRBR1fASEBEAAYASAAEgKHwvD_BwE&if=false&ts=1728567855730&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4126&fbp=fb.1.1728567855727.407407704672427350&cdl=API_unavailable&it=1728567851922&coo=false&exp=h2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sw.js HTTP/1.1Host: bullockbuilders.comConnection: keep-aliveCache-Control: max-age=0Accept: */*Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://bullockbuilders.com/bullock-buildersUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; _tccl_visit=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; commerce_cart_9b768d3e-32db-4613-aa51-84050b3bccd0_locale=%22en-US%22; _scc_session=pc=3&C_TOUCH=2024-10-10T13:44:03.943Z; _ga=GA1.1.1132907150.1728567838; _ga_BF2FDR6KMM=GS1.1.1728567838.1.1.1728567851.0.0.0; cookie_warning_dismissed=true; cookie_terms_accepted=true; _fbp=fb.1.1728567855727.407407704672427350
Source: global traffic HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=282429905966327&ev=PageView&dl=https%3A%2F%2Fbullockbuilders.com%2Fbullock-builders%23396c777d-6613-45bb-ace9-789a5a49aa9d&rl=https%3A%2F%2Fbullockbuilders.com%2F%3Fgad_source%3D5%26gclid%3DEAIaIQobChMIsOep8viDiQMV6lqRBR1fASEBEAAYASAAEgKHwvD_BwE&if=false&ts=1728567855730&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4126&fbp=fb.1.1728567855727.407407704672427350&cdl=API_unavailable&it=1728567851922&coo=false&exp=h2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /welcome-1 HTTP/1.1Host: bullockbuilders.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bullockbuilders.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; _tccl_visit=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; commerce_cart_9b768d3e-32db-4613-aa51-84050b3bccd0_locale=%22en-US%22; _scc_session=pc=3&C_TOUCH=2024-10-10T13:44:03.943Z; _ga=GA1.1.1132907150.1728567838; _ga_BF2FDR6KMM=GS1.1.1728567838.1.1.1728567851.0.0.0; cookie_warning_dismissed=true; cookie_terms_accepted=true; _fbp=fb.1.1728567855727.407407704672427350
Source: global traffic HTTP traffic detected: GET /bullock-builders HTTP/1.1Host: bullockbuilders.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bullockbuilders.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; _tccl_visit=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; commerce_cart_9b768d3e-32db-4613-aa51-84050b3bccd0_locale=%22en-US%22; _scc_session=pc=3&C_TOUCH=2024-10-10T13:44:03.943Z; _ga=GA1.1.1132907150.1728567838; _ga_BF2FDR6KMM=GS1.1.1728567838.1.1.1728567851.0.0.0; cookie_warning_dismissed=true; cookie_terms_accepted=true; _fbp=fb.1.1728567855727.407407704672427350
Source: global traffic HTTP traffic detected: GET /bullock-builders HTTP/1.1Host: bullockbuilders.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bullockbuilders.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; _tccl_visit=4bd0cd22-d20b-4fc5-bf9e-ecc152eba821; commerce_cart_9b768d3e-32db-4613-aa51-84050b3bccd0_locale=%22en-US%22; _scc_session=pc=3&C_TOUCH=2024-10-10T13:44:03.943Z; _ga=GA1.1.1132907150.1728567838; _ga_BF2FDR6KMM=GS1.1.1728567838.1.1.1728567851.0.0.0; cookie_warning_dismissed=true; cookie_terms_accepted=true; _fbp=fb.1.1728567855727.407407704672427350
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: www.waterbarriers.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /bvIYRmogX.js HTTP/1.1Host: www.waterbarriers.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://www.waterbarriers.us/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=820bd704-8380-4578-8532-30a3694d4917
Source: global traffic HTTP traffic detected: GET /bvIYRmogX.js HTTP/1.1Host: www.waterbarriers.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=820bd704-8380-4578-8532-30a3694d4917
Source: global traffic HTTP traffic detected: GET /_fd HTTP/1.1Host: www.waterbarriers.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=820bd704-8380-4578-8532-30a3694d4917
Source: global traffic HTTP traffic detected: GET /_tr HTTP/1.1Host: www.waterbarriers.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=820bd704-8380-4578-8532-30a3694d4917; __gsas=ID=75e03cd36f6eea1c:T=1728567786:RT=1728567786:S=ALNI_MZvZlM7ne59U7g6Q4faJGARKRZNWQ
Source: global traffic HTTP traffic detected: GET /?caf=1&bpt=345&query=Roof+Repairs&afdToken=ChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg&pcsa=false&nb=0&nm=13&nx=354&ny=61&is=700x480&clkt=2 HTTP/1.1Host: www.waterbarriers.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=820bd704-8380-4578-8532-30a3694d4917; __gsas=ID=75e03cd36f6eea1c:T=1728567786:RT=1728567786:S=ALNI_MZvZlM7ne59U7g6Q4faJGARKRZNWQ
Source: global traffic HTTP traffic detected: GET /?caf=1&bpt=345&query=Roof+Repairs&afdToken=ChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg&pcsa=false&nb=0&nm=13&nx=354&ny=61&is=700x480&clkt=2 HTTP/1.1Host: www.waterbarriers.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=820bd704-8380-4578-8532-30a3694d4917; __gsas=ID=75e03cd36f6eea1c:T=1728567786:RT=1728567786:S=ALNI_MZvZlM7ne59U7g6Q4faJGARKRZNWQ
Source: global traffic HTTP traffic detected: GET /bNAskrfrI.js HTTP/1.1Host: www.waterbarriers.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://www.waterbarriers.us/?caf=1&bpt=345&query=Roof+Repairs&afdToken=ChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg&pcsa=false&nb=0&nm=13&nx=354&ny=61&is=700x480&clkt=2Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=820bd704-8380-4578-8532-30a3694d4917; __gsas=ID=75e03cd36f6eea1c:T=1728567786:RT=1728567786:S=ALNI_MZvZlM7ne59U7g6Q4faJGARKRZNWQ
Source: global traffic HTTP traffic detected: GET /bNAskrfrI.js HTTP/1.1Host: www.waterbarriers.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=820bd704-8380-4578-8532-30a3694d4917; __gsas=ID=75e03cd36f6eea1c:T=1728567786:RT=1728567786:S=ALNI_MZvZlM7ne59U7g6Q4faJGARKRZNWQ
Source: global traffic HTTP traffic detected: GET /_fd?caf=1&bpt=345&query=Roof+Repairs&afdToken=ChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg&pcsa=false&nb=0&nm=13&nx=354&ny=61&is=700x480&clkt=2 HTTP/1.1Host: www.waterbarriers.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=820bd704-8380-4578-8532-30a3694d4917; __gsas=ID=75e03cd36f6eea1c:T=1728567786:RT=1728567786:S=ALNI_MZvZlM7ne59U7g6Q4faJGARKRZNWQ
Source: global traffic HTTP traffic detected: GET /_tr HTTP/1.1Host: www.waterbarriers.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=820bd704-8380-4578-8532-30a3694d4917; __gsas=ID=75e03cd36f6eea1c:T=1728567786:RT=1728567786:S=ALNI_MZvZlM7ne59U7g6Q4faJGARKRZNWQ
Source: chromecache_328.2.dr, chromecache_278.2.dr String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},hk:function(){e=zb()},rd:function(){d()}}};var gc=ka(["data-gtm-yt-inspected-"]),SC=["www.youtube.com","www.youtube-nocookie.com"],TC,UC=!1; equals www.youtube.com (Youtube)
Source: chromecache_328.2.dr, chromecache_278.2.dr String found in binary or memory: if(!(e||f||g||k.length||m.length))return;var p={kh:e,ih:f,jh:g,Uh:k,Vh:m,Je:n,Eb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(cD(w,"iframe_api")||cD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!UC&&aD(x[A],p.Je))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_318.2.dr String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_318.2.dr String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_318.2.dr String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: global traffic DNS traffic detected: DNS query: www.waterbarriers.us
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic DNS traffic detected: DNS query: click-use1.bodis.com
Source: global traffic DNS traffic detected: DNS query: www.bullockbuilders.com
Source: global traffic DNS traffic detected: DNS query: bullockbuilders.com
Source: global traffic DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic DNS traffic detected: DNS query: api.ola.godaddy.com
Source: global traffic DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic DNS traffic detected: DNS query: cdn.poynt.net
Source: global traffic DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic DNS traffic detected: DNS query: cdn.reamaze.com
Source: global traffic DNS traffic detected: DNS query: cart-checkout.secureserver.net
Source: global traffic DNS traffic detected: DNS query: contact.apps-api.instantpage.secureserver.net
Source: global traffic DNS traffic detected: DNS query: d2r4erd6f6ydft.cloudfront.net
Source: global traffic DNS traffic detected: DNS query: gopay-checkout-settings.secureserver.net
Source: global traffic DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic DNS traffic detected: DNS query: 2c4dcd873ed64bcc9becbcdbdde777a4.apm.us-west-2.aws.found.io
Source: global traffic DNS traffic detected: DNS query: _9243._https.2c4dcd873ed64bcc9becbcdbdde777a4.apm.us-west-2.aws.found.io
Source: global traffic DNS traffic detected: DNS query: push.reamaze.com
Source: global traffic DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic DNS traffic detected: DNS query: www.facebook.com
Source: unknown HTTP traffic detected: POST /_tr?click=true&session=820bd704-8380-4578-8532-30a3694d4917&signature=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&nc=41800851728567821707 HTTP/1.1Host: click-use1.bodis.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://syndicatedsearch.googSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundLink: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.43.0.js>; rel=preload; as=script; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossoriginCache-Control: max-age=30Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.comContent-Type: text/html;charset=utf-8Vary: Accept-EncodingServer: DPS/2.0.0+sha-227ca78X-Version: 227ca78X-SiteId: us-east-1Set-Cookie: dps_site_id=us-east-1; path=/; secureDate: Thu, 10 Oct 2024 13:43:51 GMTConnection: closeTransfer-Encoding: chunked
Source: chromecache_246.2.dr String found in binary or memory: http://9b768d3e.32db.4613.aa51.84050b3bccd0.com
Source: chromecache_246.2.dr String found in binary or memory: http://img1.wsimg.com/isteam/ip/9b768d3e-32db-4613-aa51-84050b3bccd0/IMG_20240621_104030.jpg
Source: chromecache_337.2.dr, chromecache_331.2.dr String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_279.2.dr, chromecache_246.2.dr String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_278.2.dr String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_189.2.dr String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&amp;reasons=AXRXrqkisPsaO8DXrtd0Hti4fil-8s72f
Source: chromecache_189.2.dr String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&amp;reasons=AXRXrqlPx9N1w3xW8oHa9gAD5duCerwNQ
Source: chromecache_189.2.dr String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&amp;reasons=AXRXrqn4mMtIROvNaxZWoy9UCwHRJpXSQ
Source: chromecache_319.2.dr, chromecache_382.2.dr String found in binary or memory: https://api.ola.$
Source: chromecache_279.2.dr String found in binary or memory: https://bullockbuilders.com/404
Source: chromecache_246.2.dr String found in binary or memory: https://bullockbuilders.com/bullock-builders
Source: chromecache_319.2.dr, chromecache_382.2.dr String found in binary or memory: https://cart-checkout.dev-secureserver.net
Source: chromecache_319.2.dr, chromecache_382.2.dr String found in binary or memory: https://cart-checkout.secureserver.net
Source: chromecache_319.2.dr, chromecache_382.2.dr String found in binary or memory: https://cart-checkout.test-secureserver.net
Source: chromecache_328.2.dr, chromecache_278.2.dr String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_238.2.dr, chromecache_194.2.dr String found in binary or memory: https://cdn.poynt.net/pb.js
Source: chromecache_300.2.dr, chromecache_191.2.dr, chromecache_263.2.dr String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_300.2.dr, chromecache_191.2.dr, chromecache_263.2.dr String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_359.2.dr, chromecache_318.2.dr String found in binary or memory: https://connect.facebook.net/
Source: chromecache_279.2.dr, chromecache_246.2.dr String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_359.2.dr, chromecache_318.2.dr String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_238.2.dr, chromecache_194.2.dr String found in binary or memory: https://contact.apps-api.instantpage.secureserver.net
Source: chromecache_300.2.dr, chromecache_191.2.dr, chromecache_263.2.dr String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_300.2.dr, chromecache_191.2.dr, chromecache_263.2.dr String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_300.2.dr, chromecache_191.2.dr, chromecache_263.2.dr String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_243.2.dr, chromecache_326.2.dr, chromecache_255.2.dr, chromecache_271.2.dr String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_228.2.dr, chromecache_376.2.dr String found in binary or memory: https://github.com/lancedikson/bowser
Source: chromecache_222.2.dr String found in binary or memory: https://img1.wsimg.com/blobby/go/font/LeagueSpartan/LeagueSpartan.woff)
Source: chromecache_222.2.dr String found in binary or memory: https://img1.wsimg.com/blobby/go/font/LeagueSpartan/LeagueSpartan.woff2)
Source: chromecache_246.2.dr String found in binary or memory: https://img1.wsimg.com/isteam/ip/9b768d3e-32db-4613-aa51-84050b3bccd0/IMG_20240621_104030.jpg
Source: chromecache_278.2.dr String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_243.2.dr, chromecache_326.2.dr, chromecache_328.2.dr, chromecache_278.2.dr, chromecache_255.2.dr, chromecache_271.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_243.2.dr, chromecache_326.2.dr, chromecache_255.2.dr, chromecache_271.2.dr String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_263.2.dr String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_194.2.dr String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_194.2.dr String found in binary or memory: https://policies.google.com/terms
Source: chromecache_372.2.dr, chromecache_298.2.dr String found in binary or memory: https://pusher.com/
Source: chromecache_263.2.dr String found in binary or memory: https://recaptcha.net
Source: chromecache_246.2.dr String found in binary or memory: https://schema.org
Source: chromecache_275.2.dr String found in binary or memory: https://secure.gravatar.com/avatar/d0d1b0e49f988df885e346451be744d0?default=https%3A%2F%2Freamaze.co
Source: chromecache_328.2.dr, chromecache_278.2.dr String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_263.2.dr String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_300.2.dr, chromecache_191.2.dr, chromecache_263.2.dr String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_300.2.dr, chromecache_191.2.dr, chromecache_263.2.dr String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_300.2.dr, chromecache_191.2.dr, chromecache_263.2.dr String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_243.2.dr, chromecache_326.2.dr, chromecache_255.2.dr, chromecache_271.2.dr String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_189.2.dr String found in binary or memory: https://syndicatedsearch.goog/
Source: chromecache_328.2.dr, chromecache_278.2.dr String found in binary or memory: https://td.doubleclick.net
Source: chromecache_189.2.dr String found in binary or memory: https://www.bullockbuilders.com/
Source: chromecache_189.2.dr String found in binary or memory: https://www.financeinfonow.com/search/search
Source: chromecache_279.2.dr, chromecache_246.2.dr String found in binary or memory: https://www.fontsquirrel.com/license/league-spartan
Source: chromecache_278.2.dr String found in binary or memory: https://www.google.com
Source: chromecache_189.2.dr String found in binary or memory: https://www.google.com/images/afs/snowman.png
Source: chromecache_243.2.dr, chromecache_326.2.dr, chromecache_255.2.dr, chromecache_271.2.dr String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_352.2.dr, chromecache_297.2.dr String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_300.2.dr, chromecache_356.2.dr, chromecache_191.2.dr, chromecache_263.2.dr, chromecache_186.2.dr String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_328.2.dr, chromecache_278.2.dr String found in binary or memory: https://www.googleadservices.com
Source: chromecache_189.2.dr String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&amp;ai=DChcSEwiw56ny-IOJAxXqWpEFHV8BIQEYABAAGgJscg
Source: chromecache_189.2.dr String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&amp;ai=DChcSEwiw56ny-IOJAxXqWpEFHV8BIQEYABABGgJscg
Source: chromecache_189.2.dr String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&amp;ai=DChcSEwiw56ny-IOJAxXqWpEFHV8BIQEYABACGgJscg
Source: chromecache_243.2.dr, chromecache_326.2.dr, chromecache_255.2.dr, chromecache_271.2.dr String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_278.2.dr String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_279.2.dr, chromecache_246.2.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-BF2FDR6KMM
Source: chromecache_300.2.dr, chromecache_191.2.dr, chromecache_263.2.dr String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.
Source: chromecache_210.2.dr, chromecache_356.2.dr, chromecache_305.2.dr, chromecache_186.2.dr String found in binary or memory: https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Source: chromecache_328.2.dr, chromecache_278.2.dr String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_189.2.dr String found in binary or memory: https://www.pwrhouseconstruction.com/
Source: chromecache_328.2.dr, chromecache_278.2.dr String found in binary or memory: https://www.youtube.com/iframe_api
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.9:49725 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.9:49728 version: TLS 1.2
Source: classification engine Classification label: clean1.win@19/335@92/35
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1928,i,7871448077309435032,15508831204917086615,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.waterbarriers.us"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1928,i,7871448077309435032,15508831204917086615,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Google Drive.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Window Recorder Window detected: More than 3 window changes detected
Stores files to the Windows start menu directory
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 1530839 URL: http://www.waterbarriers.us Startdate: 10/10/2024 Architecture: WINDOWS Score: 1 5 chrome.exe 9 2->5         started        8 chrome.exe 2->8         started        dnsIp3 13 192.168.2.10 unknown unknown 5->13 15 192.168.2.9, 138, 443, 49378 unknown unknown 5->15 17 239.255.255.250 unknown Reserved 5->17 10 chrome.exe 5->10         started        process4 dnsIp5 19 142.250.181.228, 443, 49911 GOOGLEUS United States 10->19 21 syndicatedsearch.goog 142.250.184.206, 443, 49720, 49735 GOOGLEUS United States 10->21 23 46 other IPs or domains 10->23
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
34.223.247.11
 k8s-wsb-gopayche-ebf8a59bed-2112792250.us-west-2.elb.amazonaws.com United States
16509 AMAZON-02US false
142.250.185.228
 www.google.com United States
15169 GOOGLEUS false
216.58.212.142
 unknown United States
15169 GOOGLEUS false
104.22.9.8
 cdn.reamaze.com United States
13335 CLOUDFLARENETUS false
45.40.130.49
 proxy.k8s.pnc.phx.secureserver.net United States
26496 AS-26496-GO-DADDY-COM-LLCUS false
13.32.118.183
 unknown United States
16509 AMAZON-02US false
172.67.28.250
 unknown United States
13335 CLOUDFLARENETUS false
157.240.252.13
 scontent.xx.fbcdn.net United States
32934 FACEBOOKUS false
52.26.59.44
 proxy-nlb-prod-us-west-2-v5-ac4e52c97755301b.elb.us-west-2.amazonaws.com United States
16509 AMAZON-02US false
142.250.186.33
 googlehosted.l.googleusercontent.com United States
15169 GOOGLEUS false
18.185.147.191
 isteam.wsimg.com United States
16509 AMAZON-02US false
199.59.243.227
 www.waterbarriers.us United States
395082 BODIS-NJUS false
172.217.18.4
 unknown United States
15169 GOOGLEUS false
142.250.185.238
 unknown United States
15169 GOOGLEUS false
239.255.255.250
 unknown Reserved
unknown unknown false
142.250.185.196
 unknown United States
15169 GOOGLEUS false
157.240.253.35
 star-mini.c10r.facebook.com United States
32934 FACEBOOKUS false
18.245.86.16
 d347164ulyc57y.cloudfront.net United States
16509 AMAZON-02US false
18.245.86.44
 unknown United States
16509 AMAZON-02US false
76.223.105.230
 bullockbuilders.com United States
16509 AMAZON-02US false
104.22.8.8
 unknown United States
13335 CLOUDFLARENETUS false
54.214.211.165
 unknown United States
16509 AMAZON-02US false
216.58.212.129
 unknown United States
15169 GOOGLEUS false
198.71.248.123
 proxy.k8s.pnc.iad.secureserver.net United States
26496 AS-26496-GO-DADDY-COM-LLCUS false
142.250.186.132
 unknown United States
15169 GOOGLEUS false
142.250.184.206
 syndicatedsearch.goog United States
15169 GOOGLEUS false
13.32.118.217
 d2r4erd6f6ydft.cloudfront.net United States
16509 AMAZON-02US false
104.17.24.14
 cdnjs.cloudflare.com United States
13335 CLOUDFLARENETUS false
199.59.243.205
 click-use1.bodis.com United States
395082 BODIS-NJUS false
142.250.185.132
 unknown United States
15169 GOOGLEUS false
157.240.251.9
 unknown United States
32934 FACEBOOKUS false
142.250.181.228
 unknown United States
15169 GOOGLEUS false
44.239.178.203
 k8s-wsb-gopaycar-3da687aa34-1957764904.us-west-2.elb.amazonaws.com United States
16509 AMAZON-02US false

Private

IP
192.168.2.9
192.168.2.10

Contacted Domains

Name IP Active
star-mini.c10r.facebook.com 157.240.253.35 true
syndicatedsearch.goog 142.250.184.206 true
proxy.k8s.pnc.phx.secureserver.net 45.40.130.49 true
bullockbuilders.com 76.223.105.230 true
d2r4erd6f6ydft.cloudfront.net 13.32.118.217 true
proxy-nlb-prod-us-west-2-v5-ac4e52c97755301b.elb.us-west-2.amazonaws.com 52.26.59.44 true
isteam.wsimg.com 18.185.147.191 true
d347164ulyc57y.cloudfront.net 18.245.86.16 true
fp2e7a.wpc.phicdn.net 192.229.221.95 true
k8s-wsb-gopayche-ebf8a59bed-2112792250.us-west-2.elb.amazonaws.com 34.223.247.11 true
proxy.k8s.pnc.iad.secureserver.net 198.71.248.123 true
bg.microsoft.map.fastly.net 199.232.210.172 true
scontent.xx.fbcdn.net 157.240.252.13 true
www.waterbarriers.us 199.59.243.227 true
cdnjs.cloudflare.com 104.17.24.14 true
k8s-wsb-gopaycar-3da687aa34-1957764904.us-west-2.elb.amazonaws.com 44.239.178.203 true
www.google.com 142.250.185.228 true
cdn.reamaze.com 104.22.9.8 true
googlehosted.l.googleusercontent.com 142.250.186.33 true
push.reamaze.com 104.22.9.8 true
click-use1.bodis.com 199.59.243.205 true
img1.wsimg.com unknown unknown
www.facebook.com unknown unknown
events.api.secureserver.net unknown unknown
afs.googleusercontent.com unknown unknown
2c4dcd873ed64bcc9becbcdbdde777a4.apm.us-west-2.aws.found.io unknown unknown
api.ola.godaddy.com unknown unknown
connect.facebook.net unknown unknown
_9243._https.2c4dcd873ed64bcc9becbcdbdde777a4.apm.us-west-2.aws.found.io unknown unknown
contact.apps-api.instantpage.secureserver.net unknown unknown
csp.secureserver.net unknown unknown
cdn.poynt.net unknown unknown
cart-checkout.secureserver.net unknown unknown
www.bullockbuilders.com unknown unknown
gopay-checkout-settings.secureserver.net unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
http://www.waterbarriers.us/_fd?caf=1&bpt=345&query=Roof+Repairs&afdToken=ChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg&pcsa=false&nb=0&nm=13&nx=354&ny=61&is=700x480&clkt=2 false
    		unknown
    https://bullockbuilders.com/g/api/checkout/v2/cart?websiteId=9b768d3e-32db-4613-aa51-84050b3bccd0 false
      		unknown
      https://cdn.reamaze.com/assets/reamaze-godaddy-loader.js false
        		unknown
        https://gopay-checkout-settings.secureserver.net/v1/settings/public/9b768d3e-32db-4613-aa51-84050b3bccd0 false
          		unknown
          http://www.waterbarriers.us/_fd false
            		unknown
            https://syndicatedsearch.goog/afs/gen_204?client=dp-bodis01_js&output=uds_ads_only&zx=fs6kujsu28hl&aqid=AtoHZ7DeBeq1xdwP34KECQ&psid=3113057640&pbt=bs&adbx=381.5&adby=143&adbh=1468&adbw=500&adbah=506%2C481%2C481&adbn=master-1&eawp=partner-dp-bodis01_js&errv=681010707&csala=24%7C0%7C1741%7C27%7C169&lle=0&ifv=1&hpt=1 false
              		unknown
              https://connect.facebook.net/en_US/fbevents.js false
              • URL Reputation: safe
              		 unknown
              https://www.google.com/images/afs/snowman.png false
                		unknown
                https://bullockbuilders.com/manifest.webmanifest false
                  		unknown
                  https://d2r4erd6f6ydft.cloudfront.net/_next/static/chunks/pages/_app-26072b358821acb0.js false
                    		unknown
                    https://bullockbuilders.com/welcome-1 false
                      		unknown
                      https://syndicatedsearch.goog/afs/ads/i/iframe.html false
                      • URL Reputation: safe
                      		 unknown
                      https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff false
                        		unknown
                        https://click-use1.bodis.com/_tr?click=true&session=820bd704-8380-4578-8532-30a3694d4917&signature=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&nc=41800851728567821707 false
                          		unknown
                          https://d2r4erd6f6ydft.cloudfront.net/_next/static/chunks/c8b05f54-e0f91b073e7d8a8c.js false
                            		unknown
                            https://d2r4erd6f6ydft.cloudfront.net/_next/static/heHYbIJv63MAslxxKW159/_buildManifest.js false
                              		unknown
                              https://d2r4erd6f6ydft.cloudfront.net/_next/static/chunks/main-f7fb4d90a816b6ac.js false
                                		unknown
                                http://www.waterbarriers.us/?caf=1&bpt=345&query=Roof+Repairs&afdToken=ChMIrtuY5_iDiQMVuJ39Bx1l1DAUEnIBlLqpj5PaedTRF-yh_kg73CBAFXG7rWfJGH_J7jynJjXhS5qYTEFHzUZIaL2lV7ueJQual0F-9tlsg_IHpmOAVPZWcPMOHyGnJG5pa3tCnZfdibj55NladYasBeZEejq4SZyYwpR_kmzPU1iL4sZRHIg&pcsa=false&nb=0&nm=13&nx=354&ny=61&is=700x480&clkt=2 false
                                  		unknown
                                  http://www.waterbarriers.us/ false
                                    		unknown
                                    https://www.bullockbuilders.com/?gad_source=5&gclid=EAIaIQobChMIsOep8viDiQMV6lqRBR1fASEBEAAYASAAEgKHwvD_BwE false
                                      		unknown
                                      https://bullockbuilders.com/sw.js false
                                        		unknown
                                        https://push.reamaze.com/assets/reamaze-push.js false
                                          		unknown
                                          https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY false
                                            		unknown
                                            https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b false
                                              		unknown
                                              https://bullockbuilders.com/bullock-builders#396c777d-6613-45bb-ace9-789a5a49aa9d false
                                                		unknown
                                                https://syndicatedsearch.goog/afs/gen_204?client=dp-bodis01_js&output=uds_ads_only&zx=phsapx8n67p3&aqid=6tkHZ-_eMbG8juwP-rCzMA&psid=3113057640&pbt=bs&adbx=281.5&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis01_js&errv=681010707&csala=6%7C0%7C1050%7C1249%7C65&lle=0&ifv=1&hpt=0 false
                                                  		unknown
                                                  https://cdn.reamaze.com/data/brands/9b768d3e-32db-4613-aa51-84050b3bccd0/ping false
                                                    		unknown
                                                    https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0 false
                                                    • URL Reputation: safe
                                                    		 unknown
                                                    https://www.google.com/js/bg/zEg4NaMiOUeKKZ2pqXY4HMvMf5VCq4avNU_6WgNs2Cw.js false
                                                      		unknown
                                                      https://cart-checkout.secureserver.net/dist/embed.js false
                                                        		unknown
                                                        https://d2r4erd6f6ydft.cloudfront.net/_next/static/chunks/webpack-4a2d2f460e7e1a00.js false
                                                          		unknown
                                                          https://d2r4erd6f6ydft.cloudfront.net/_next/static/chunks/358-f0bc955bf7e6d941.js false
                                                            		unknown
                                                            https://d2r4erd6f6ydft.cloudfront.net/_next/static/heHYbIJv63MAslxxKW159/_ssgManifest.js false
                                                              		unknown
                                                              https://connect.facebook.net/signals/config/282429905966327?v=2.9.170&r=stable&domain=bullockbuilders.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 false
                                                                		unknown
                                                                https://bullockbuilders.com/?gad_source=5&gclid=EAIaIQobChMIsOep8viDiQMV6lqRBR1fASEBEAAYASAAEgKHwvD_BwE false
                                                                  		unknown
                                                                  https://d2r4erd6f6ydft.cloudfront.net/_next/static/chunks/framework-07ba49083a3e026b.js false
                                                                    		unknown
                                                                    http://www.waterbarriers.us/bvIYRmogX.js false
                                                                      		unknown
                                                                      https://cdnjs.cloudflare.com/ajax/libs/pusher/7.0.1/pusher.min.js false
                                                                        		unknown
                                                                        https://syndicatedsearch.goog/afs/gen_204?client=dp-bodis01_js&output=uds_ads_only&zx=6y09cmasxazq&aqid=6tkHZ-_eMbG8juwP-rCzMA&psid=3113057640&pbt=bv&adbx=281.5&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis01_js&errv=681010707&csala=6%7C0%7C1050%7C1249%7C65&lle=0&ifv=1&hpt=0 false
                                                                          		unknown
                                                                          https://cdn.reamaze.com/assets/reamaze.js false
                                                                            		unknown
                                                                            https://contact.apps-api.instantpage.secureserver.net/v3/recaptcha false
                                                                              		unknown
                                                                              https://d2r4erd6f6ydft.cloudfront.net/_next/static/chunks/pages/cart-d35bec9da452c38a.js false
                                                                                		unknown
                                                                                https://www.google.com/adsense/domains/caf.js?abp=1&bodis=true false
                                                                                  		unknown
                                                                                  https://d2r4erd6f6ydft.cloudfront.net/_next/static/chunks/9-f9d89c7cffe1ee17.js false
                                                                                    		unknown
                                                                                    https://cart-checkout.secureserver.net/api/websites/9b768d3e-32db-4613-aa51-84050b3bccd0/tax-settings false
                                                                                      		unknown
                                                                                      https://bullockbuilders.com/g/api/cart/cart?cartNotifyTimeout=5000&websiteId=9b768d3e-32db-4613-aa51-84050b3bccd0&env=production&cartUrl=https://bullockbuilders.com/g/api/cart&websiteUrl=https://bullockbuilders.com false
                                                                                        		unknown
                                                                                        https://bullockbuilders.com/bullock-builders false
                                                                                          		unknown
                                                                                          https://www.google.com/recaptcha/api.js?render=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_ false
                                                                                            		unknown
                                                                                            http://www.waterbarriers.us/bNAskrfrI.js false
                                                                                              		unknown
                                                                                              https://bullockbuilders.com/markup/ad false
                                                                                                		unknown
                                                                                                https://cdn.poynt.net/pb.js false
                                                                                                  		unknown
                                                                                                  https://syndicatedsearch.goog/afs/gen_204?client=dp-bodis01_js&output=uds_ads_only&zx=dtl54gln06hm&aqid=AtoHZ7DeBeq1xdwP34KECQ&psid=3113057640&pbt=bv&adbx=381.5&adby=143&adbh=1468&adbw=500&adbah=506%2C481%2C481&adbn=master-1&eawp=partner-dp-bodis01_js&errv=681010707&csala=24%7C0%7C1741%7C27%7C169&lle=0&ifv=1&hpt=1 false
                                                                                                    		unknown
                                                                                                    https://bullockbuilders.com/m/api/reamaze/v2/customers/auth?brand=9b768d3e-32db-4613-aa51-84050b3bccd0 false
                                                                                                      		unknown