Edit tour

Windows Analysis Report
https://www.vintagelights.com/ 1/

Overview

General Information

Sample URL:	https://www.vintagelights.com/ %2
Analysis ID:	1644410
Infos:

Detection

Phisher

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected Phisher

Creates files inside the system directory

Deletes files inside the Windows folder

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1828,i,8242345170570139461,8900251255918981314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2284 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6736 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_63	JoeSecurity_Phisher_1	Yara detected Phisher	Joe Security

Suricata Signatures

ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-20T14:57:53.942736+0100	2024228	2	Possible Social Engineering Attempted	209.38.148.105	443	192.168.2.4	49768	TCP
2025-03-20T14:57:58.681316+0100	2024228	2	Possible Social Engineering Attempted	209.38.148.105	443	192.168.2.4	49767	TCP

HTTP traffic detected: POST /%20%20%20%20%20%20%20%20%20%20%20%20%202 HTTP/1.1Host: vintagelights.comConnection: keep-aliveContent-Length: 26Cache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Origin: https://www.vintagelights.comContent-Type: application/x-www-form-urlencodedUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.vintagelights.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_63.2.dr	String found in binary or memory: https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.38.148.105:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.38.148.105:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.194.169.74:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.38.148.105:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.4:49773 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6608_1614556301

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6608_1614556301

Jump to behavior

Source: classification engine

Classification label: mal48.phis.win@24/26@22/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1828,i,8242345170570139461,8900251255918981314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2284 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1828,i,8242345170570139461,8900251255918981314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2284 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/IVmJaMqVltIpxCloFrE25yHxAYwf1bvEjJuXSc4QNPwK6iS2oIh0NR02bMBgRnOmEP9794z5OfjFeAZGuqha7cPzUemkrpxaGuwoczsHJXFiOT83nlssGBTdTfie8WL1/index	0%	Avira URL Cloud	safe
https://vintagelights.com/favicon.ico	0%	Avira URL Cloud	safe
https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/page/images/favicon.ico	0%	Avira URL Cloud	safe
https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202	0%	Avira URL Cloud	safe
https://www.vintagelights.com/favicon.ico	0%	Avira URL Cloud	safe
https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.251.35.164	true	false	high
vintagelights.com	216.194.169.74	true	false	unknown
log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org	209.38.148.105	true	false	unknown
www.vintagelights.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202/	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/800791795:1742476688:_zzlGi28I8UOuUWpUsti_Jb59zKUHDX1aoPZ0i-MkRg/9235b8533bd15e71/RfaGlC5EfKG6mQLRkPH6RRxHB1olWw7a6INf8t90Kqc-1742479061-1.1.1.1-Ekj8CxjVdg.WjyoCaKx5KGtoqkYzCLF2I6USpqOg4HHEVx2KowOUkDtXMuhfAsLt	false		high
https://www.vintagelights.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9235b8533bd15e71/1742479062605/ZfgNLAE-7bNqlvh	false		high
https://cdn.jsdelivr.net/gh/syntaxerror019/HTML-STO/ld.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kw61j/0x4AAAAAABAp6-kXqH26cSAg/auto/fbE/new/normal/auto/	false		high
https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/IVmJaMqVltIpxCloFrE25yHxAYwf1bvEjJuXSc4QNPwK6iS2oIh0NR02bMBgRnOmEP9794z5OfjFeAZGuqha7cPzUemkrpxaGuwoczsHJXFiOT83nlssGBTdTfie8WL1/index	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202	false	Avira URL Cloud: safe	unknown
https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/page/images/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/9235b8533bd15e71/1742479062605/0c05e72bac8aeaf1562513e632521d18d9e6c106eef0c04661a7f26f8afbd0f4/C_BSFlA2GAYSqaj	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9235b8533bd15e71&lang=auto	false		high
https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/	false		unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://vintagelights.com/favicon.ico	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
209.38.148.105	log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org	United States	7018	ATT-INTERNET4US	false
142.251.35.164	www.google.com	United States	15169	GOOGLEUS	false
216.194.169.74	vintagelights.com	United States	22611	IMH-WESTUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1644410
Start date and time:	2025-03-20 14:55:40 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.vintagelights.com/ 1/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@24/26@22/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.72.110, 142.250.81.227, 142.250.65.174, 142.250.101.84, 142.250.80.78, 142.251.40.142, 23.203.176.221, 23.210.73.6, 142.250.65.206, 142.250.64.110, 142.251.41.14, 142.250.65.163, 142.251.40.110, 142.251.41.3, 142.250.80.46, 20.12.23.50
Excluded domains from analysis (whitelisted): clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, c.pki.goog, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 24 bits/pixel, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	3126
Entropy (8bit):	6.032328192840703
Encrypted:	false
SSDEEP:	48:+TnbpfzBzw1aX/L4PDuFWTtfPQbMmqLJURWxELW18M0ZuAM8Kr3b:4p7Bzw1EL4PyFkVJUR6unO88r
MD5:	E4C99B3E496F5DA29FD2C34924770BAF
SHA1:	6D8DF0F80FB065AE8FEF042FD47F265BB83B9114
SHA-256:	752FA1A4049096443866169BC66B97E943486BE8B2DBEC5BDDF127653FF38938
SHA-512:	6D6AF32286DF3344AA974C47AE740CF9D3B79C9E0C20176A178105B7227C54E3A4EEE0542AD9609633F933CAB446BBFC242F3EEDDE699481D0CE421326F1659A
Malicious:	false
Reputation:	low
Preview:	..............h...&... ..............(....... ...........@..................................!4M<OhQYg.........djw........................^dt..,$=]$Hs.,Y.#T.!N..?.....................4A.....)..Q.<i.6\.'U.!I........................{{...,.,;.8Z!Al./b.,`.#M...........................CQa.(K.0N.=s.-e.+_~................................'-1.2O.C..:~..[.................................)7G.0U$U..?uu...................................Lk....18U....................................t..........).........................lv.$4;5<=.'K.>Z..-./c. F./Z.-B..2..$..5..+x.....KYYDF>Z..%-89V...i.......S.!<.......Vbbr..........8S\?..:Ye.!>.........Uh\|&......cvY[i...............QfR....'...:......^}....k.;CS.....................4\|.+@L./N+..#........!/C........................q\|.P[..!....2V.]{..1.................................6GPDJZektwx........................................?...?......................................(... ...@........................................lz..3L..:x.%Fk.G...1...J.......)Sw......,

Source: https://www.vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/	HTTP Parser: No favicon
Source: https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/	HTTP Parser: No favicon

Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 209.38.148.105:443 -> 192.168.2.4:49767
Source: Network traffic	Suricata IDS: 2024228 - Severity 2 - ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017 : 209.38.148.105:443 -> 192.168.2.4:49768

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 43.152.135.101
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 43.152.135.101
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.vintagelights.com
Source: global traffic	DNS traffic detected: DNS query: vintagelights.com
Source: global traffic	DNS traffic detected: DNS query: log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 14:56:56.406691074 CET	53	52994	1.1.1.1	192.168.2.4
Mar 20, 2025 14:56:56.421858072 CET	53	54047	1.1.1.1	192.168.2.4
Mar 20, 2025 14:56:57.168514013 CET	53	55075	1.1.1.1	192.168.2.4
Mar 20, 2025 14:56:57.531338930 CET	53	63698	1.1.1.1	192.168.2.4
Mar 20, 2025 14:56:59.887294054 CET	57259	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:56:59.887438059 CET	64344	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:56:59.985207081 CET	53	57259	1.1.1.1	192.168.2.4
Mar 20, 2025 14:56:59.986041069 CET	53	64344	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:02.513942957 CET	51755	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:02.514182091 CET	52980	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:02.682312965 CET	53	52980	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:02.682449102 CET	53	51755	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:05.221996069 CET	53253	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:05.222573996 CET	54871	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:05.347141981 CET	53	53253	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:05.351382971 CET	53	54871	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:14.564960003 CET	53	56594	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:34.382301092 CET	53	57989	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:35.812588930 CET	56577	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:35.813069105 CET	63728	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:35.930991888 CET	53	63728	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:35.931013107 CET	53	56577	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:36.986330986 CET	65298	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:36.986728907 CET	49268	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:37.099802971 CET	53	65298	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:37.099822998 CET	53	49268	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:37.693243027 CET	65380	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:37.693675041 CET	53021	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:37.811996937 CET	53	65380	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:37.814562082 CET	53	53021	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:39.406742096 CET	62376	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:39.406928062 CET	52972	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:39.508725882 CET	53	62376	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:39.509726048 CET	53	52972	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:40.487447977 CET	54982	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:40.488111019 CET	57458	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:40.587009907 CET	53	57458	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:40.588156939 CET	53	54982	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:42.151932001 CET	57672	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:42.152437925 CET	60030	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:42.250941038 CET	53	57672	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:42.251108885 CET	53	60030	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:42.653467894 CET	53259	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:42.653774023 CET	55119	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:42.754781961 CET	53	53259	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:42.788122892 CET	53	55119	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:47.151045084 CET	138	138	192.168.2.4	192.168.2.255
Mar 20, 2025 14:57:55.937266111 CET	53	54966	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:56.191621065 CET	53	55258	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:58.711039066 CET	53281	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:58.711330891 CET	65466	53	192.168.2.4	1.1.1.1
Mar 20, 2025 14:57:58.808218002 CET	53	53281	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:58.808427095 CET	53	65466	1.1.1.1	192.168.2.4
Mar 20, 2025 14:57:59.143575907 CET	53	62027	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 14:57:11.926531076 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 20, 2025 14:57:12.028631926 CET	222	IN	HTTP/1.1 304 Not Modified Date: Thu, 20 Mar 2025 13:49:48 GMT Expires: Thu, 20 Mar 2025 14:39:48 GMT Age: 443 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 20, 2025 14:57:12.034291983 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 20, 2025 14:57:12.126106977 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 20 Mar 2025 13:40:24 GMT Expires: Thu, 20 Mar 2025 14:30:24 GMT Age: 1008 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:03 UTC	868	OUT	GET /%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/ HTTP/1.1 Host: www.vintagelights.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:03 UTC	170	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html
2025-03-20 13:57:03 UTC	8022	IN	Data Raw: 33 61 64 62 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 21 2d 2d 0a 2e 72 70 73 5f 39 65 64 61 20 3e 20 64 69 76 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 61 62 6c 65 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 64 2c 20 2e 72 70 73 5f 39 65 64 61 20 61 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 74 61 62 6c 65 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 64 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 69 6d 67 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 69 6d 67 0a 09 7b 62 6f 72 64 65 72 3a 30 3b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 09 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 0a 2e 72 70 73 5f 39 65 Data Ascii: 3adb<style type="text/css">....rps_9eda > div, .rps_9eda table, .rps_9eda td, .rps_9eda a{}.rps_9eda table, .rps_9eda td{}.rps_9eda img{}.rps_9eda img{border:0;height:auto;line-height:100%;outline:none;text-decoration:none}.rps_9e
2025-03-20 13:57:03 UTC	7051	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 6d 6f 62 69 6c 65 2d 74 6f 70 62 6f 78 2d 70 61 64 64 69 6e 67 2d 32 30 2d 62 6f 74 74 6f 6d 2d 69 74 65 6d 2d 34 38 30 0a 09 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 32 30 70 78 20 32 30 70 78 20 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 6d 6f 62 69 6c 65 2d 68 69 64 65 0a 09 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 23 78 5f 6d 6f 62 69 6c 65 2d 68 69 64 65 0a 09 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 68 65 61 64 6c 69 6e 65 0a 09 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 21 69 6d 70 6f 72 74 61 6e Data Ascii: important}.rps_9eda .x_mobile-topbox-padding-20-bottom-item-480{padding:10px 20px 20px 20px!important}.rps_9eda .x_mobile-hide{display:none!important}.rps_9eda #x_mobile-hide{display:none!important}.rps_9eda .x_headline{font-size:30px!importan
2025-03-20 13:57:03 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 13:57:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:04 UTC	579	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJWhywEInP7MAQiFoM0BCL7VzgEIgNbOAQjI3M4BCIrgzgEIruTOAQiL5c4B Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:04 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:04 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-26CfFEnjjyC97gM976ikjA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 13:57:04 UTC	1303	IN	Data Raw: 63 34 36 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 61 74 69 6f 6e 73 20 6c 65 61 67 75 65 20 70 72 65 64 69 63 74 69 6f 6e 73 22 2c 22 6b 61 6e 73 61 73 20 72 6f 61 64 20 63 6c 6f 73 75 72 65 73 20 69 20 37 30 22 2c 22 63 68 69 63 61 67 6f 20 66 69 72 65 22 2c 22 73 75 6e 72 69 73 65 20 73 6f 6c 61 72 20 65 63 6c 69 70 73 65 22 2c 22 62 61 62 79 20 66 6f 72 6d 75 6c 61 73 20 77 69 74 68 20 68 65 61 76 79 20 6d 65 74 61 6c 73 22 2c 22 70 61 6c 77 6f 72 6c 64 20 63 72 6f 73 73 70 6c 61 79 20 75 70 64 61 74 65 22 2c 22 65 67 79 70 74 69 61 6e 20 70 79 72 61 6d 69 64 73 22 2c 22 70 6f 70 65 20 66 72 61 6e 63 69 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 Data Ascii: c46)]}'["",["nations league predictions","kansas road closures i 70","chicago fire","sunrise solar eclipse","baby formulas with heavy metals","palworld crossplay update","egyptian pyramids","pope francis"],["","","","","","","",""],[],{"google:clientda
2025-03-20 13:57:04 UTC	1303	IN	Data Raw: 57 46 6d 52 43 39 34 54 45 52 57 55 45 5a 73 4b 32 46 53 65 46 46 56 4e 55 52 48 52 32 51 33 53 58 4e 76 51 55 35 33 5a 6b 45 35 5a 57 34 7a 64 6d 6c 70 61 48 42 5a 4d 33 45 76 64 7a 6c 50 56 6c 5a 52 54 45 78 77 4d 30 46 42 52 30 59 78 5a 47 5a 35 51 54 5a 59 62 7a 4e 74 63 56 42 34 4f 55 31 52 4e 6b 4a 4f 53 6a 46 43 59 6a 4e 4a 65 45 78 57 62 57 4e 34 56 56 52 55 52 32 5a 56 61 58 46 69 53 55 64 49 65 6d 56 6e 4e 6a 63 7a 64 7a 42 36 4b 32 46 4d 53 32 4e 78 59 6c 5a 56 55 6c 4a 54 54 33 52 6e 53 46 42 6c 59 6d 4e 48 4e 56 42 52 5a 6d 4a 72 59 7a 64 59 4f 57 52 61 64 6d 31 72 4d 6d 45 77 52 55 70 72 5a 32 52 47 52 32 39 6e 4f 55 70 31 54 79 74 55 64 48 6f 30 51 56 6b 78 59 31 42 61 4e 31 6c 4c 64 6b 4d 34 51 6d 4d 76 65 6a 52 57 52 55 31 71 55 45 31 54 Data Ascii: WFmRC94TERWUEZsK2FSeFFVNURHR2Q3SXNvQU53ZkE5ZW4zdmlpaHBZM3EvdzlPVlZRTExwM0FBR0YxZGZ5QTZYbzNtcVB4OU1RNkJOSjFCYjNJeExWbWN4VVRUR2ZVaXFiSUdIemVnNjczdzB6K2FMS2NxYlZVUlJTT3RnSFBlYmNHNVBRZmJrYzdYOWRadm1rMmEwRUprZ2RGR29nOUp1TytUdHo0QVkxY1BaN1lLdkM4QmMvejRWRU1qUE1T
2025-03-20 13:57:04 UTC	543	IN	Data Raw: 53 6a 4e 7a 65 44 68 44 51 6a 42 43 51 55 6f 31 64 6d 70 4d 4e 46 64 35 64 31 5a 30 56 79 39 68 55 47 39 44 55 6d 78 34 57 57 70 6a 61 6a 4a 6d 4d 48 63 33 63 33 4e 4f 61 54 56 6f 4d 56 4e 72 54 58 46 49 5a 44 68 30 61 6d 30 78 5a 44 5a 4f 65 57 68 54 4d 6a 4a 73 61 43 39 70 5a 6e 5a 71 5a 31 56 34 52 57 46 55 54 45 64 70 63 45 56 6e 4d 31 70 6f 59 32 35 34 64 48 6f 35 54 55 38 32 4d 6d 78 35 62 57 78 76 53 33 56 44 52 6a 4e 68 5a 46 46 77 57 47 5a 57 5a 47 64 52 52 43 74 6f 59 6b 4e 70 61 44 64 68 56 32 4e 56 64 31 5a 70 4d 53 39 73 4d 56 68 44 4b 32 52 32 52 57 4a 69 57 56 52 4d 59 6c 64 70 61 6d 73 30 4b 33 4a 58 55 58 52 78 65 56 4e 53 53 6a 5a 31 55 30 56 4a 63 30 74 42 5a 7a 6c 78 64 30 4a 31 59 6b 46 6e 53 47 55 76 5a 54 4a 31 56 44 51 30 65 47 68 Data Ascii: SjNzeDhDQjBCQUo1dmpMNFd5d1Z0Vy9hUG9DUmx4WWpjajJmMHc3c3NOaTVoMVNrTXFIZDh0am0xZDZOeWhTMjJsaC9pZnZqZ1V4RWFUTEdpcEVnM1poY254dHo5TU82Mmx5bWxvS3VDRjNhZFFwWGZWZGdRRCtoYkNpaDdhV2NVd1ZpMS9sMVhDK2R2RWJiWVRMYldpams0K3JXUXRxeVNSSjZ1U0VJc0tBZzlxd0J1YkFnSGUvZTJ1VDQ0eGh
2025-03-20 13:57:04 UTC	89	IN	Data Raw: 35 33 0d 0a 45 5a 43 51 7a 4e 42 4b 31 6c 59 55 45 38 78 65 6a 6c 6a 57 6b 78 42 53 31 70 47 56 31 6c 54 53 6b 31 35 4e 6a 4a 71 57 6b 4e 31 5a 32 52 50 59 30 55 78 5a 45 35 4d 62 47 52 6c 63 6c 5a 51 57 58 6c 72 55 6e 45 32 53 7a 45 35 54 45 45 7a 53 44 6c 45 0d 0a Data Ascii: 53EZCQzNBK1lYUE8xejljWkxBS1pGV1lTSk15NjJqWkN1Z2RPY0UxZE5MbGRlclZQWXlrUnE2SzE5TEEzSDlE
2025-03-20 13:57:04 UTC	1220	IN	Data Raw: 63 65 34 0d 0a 5a 7a 4a 76 65 6b 64 75 63 6d 46 57 56 6d 78 58 4e 6c 4a 79 5a 46 6b 79 57 54 59 30 64 48 64 45 57 6e 56 78 4e 7a 68 5a 4f 44 49 34 63 6b 68 6e 59 33 42 61 52 6e 4e 4d 4e 6b 56 6c 55 32 35 6c 56 46 64 30 5a 33 56 75 4f 44 45 35 61 56 42 59 59 31 6c 4a 54 6c 5a 4d 62 46 4e 54 55 55 6c 47 52 6c 4e 33 64 45 6c 35 61 30 56 79 5a 6d 78 6d 57 48 67 35 4d 6b 64 72 63 6b 5a 6f 61 30 31 73 54 55 78 54 59 6e 4a 46 54 46 63 33 54 55 63 72 4f 58 56 71 52 79 38 77 64 30 64 57 53 58 4e 57 53 6b 78 6d 62 54 46 44 4d 6d 73 72 4c 32 5a 59 52 45 5a 4a 54 6a 4d 34 53 55 74 61 62 6c 52 54 51 54 51 78 63 30 78 72 4c 7a 68 42 53 43 74 6c 59 32 46 52 62 45 5a 57 53 46 70 35 4e 58 56 6b 55 30 6c 69 54 58 41 76 54 46 6b 35 56 47 4d 35 55 45 52 42 61 57 6f 34 62 30 Data Ascii: ce4ZzJvekducmFWVmxXNlJyZFkyWTY0dHdEWnVxNzhZODI4ckhnY3BaRnNMNkVlU25lVFd0Z3VuODE5aVBYY1lJTlZMbFNTUUlGRlN3dEl5a0VyZmxmWHg5MkdrckZoa01sTUxTYnJFTFc3TUcrOXVqRy8wd0dWSXNWSkxmbTFDMmsrL2ZYREZJTjM4SUtablRTQTQxc0xrLzhBSCtlY2FRbEZWSFp5NXVkU0liTXAvTFk5VGM5UERBaWo4b0
2025-03-20 13:57:04 UTC	1220	IN	Data Raw: 55 72 61 48 46 42 4e 6c 52 4c 62 6a 4e 57 4d 44 4d 72 4e 6a 55 72 62 55 74 6b 5a 6a 5a 70 56 48 63 32 57 47 4e 53 56 48 4a 69 59 6a 42 74 61 31 4e 4b 61 45 68 6e 59 6c 64 5a 4e 45 4a 4b 65 44 42 79 65 47 4e 68 53 6d 52 52 57 46 6c 46 4f 45 56 68 56 7a 4a 36 4d 58 42 43 54 30 4a 30 54 30 39 50 52 44 4e 56 64 6e 46 46 55 6a 55 33 56 46 5a 4f 62 30 56 6b 65 56 5a 33 59 7a 56 53 61 48 6f 34 51 30 74 74 4b 7a 46 59 63 31 67 7a 61 30 52 49 65 6b 4d 31 4b 32 78 4f 5a 57 31 68 51 6d 4d 7a 59 31 4e 44 59 54 6b 77 4d 48 70 47 64 6c 64 58 4d 32 78 4e 62 6e 45 72 53 54 52 49 54 30 74 7a 64 7a 6c 72 63 6e 45 31 61 6d 51 33 5a 57 56 42 4e 30 70 48 55 57 68 70 55 57 56 45 61 6e 64 76 57 56 6c 54 61 48 4a 54 53 57 4e 54 63 56 5a 51 5a 32 59 79 63 56 70 6b 56 6e 51 79 53 Data Ascii: UraHFBNlRLbjNWMDMrNjUrbUtkZjZpVHc2WGNSVHJiYjBta1NKaEhnYldZNEJKeDByeGNhSmRRWFlFOEVhVzJ6MXBCT0J0T09PRDNVdnFFUjU3VFZOb0VkeVZ3YzVSaHo4Q0ttKzFYc1gza0RIekM1K2xOZW1hQmMzY1NDYTkwMHpGdldXM2xNbnErSTRIT0tzdzlrcnE1amQ3ZWVBN0pHUWhpUWVEandvWVlTaHJTSWNTcVZQZ2YycVpkVnQyS
2025-03-20 13:57:04 UTC	867	IN	Data Raw: 49 77 59 6c 49 72 4e 57 78 4f 51 6d 38 35 54 6e 56 4f 55 47 4e 35 59 56 52 50 56 6b 68 56 64 33 6c 49 53 32 34 7a 52 33 49 78 63 48 49 34 54 48 56 5a 59 69 74 4e 4d 6a 67 32 4f 45 31 48 4e 6c 5a 59 62 54 6c 34 4d 6c 49 72 4d 6d 52 57 4d 45 49 76 64 47 38 35 52 55 4d 76 52 46 6b 35 62 6e 64 78 5a 33 5a 76 4e 32 6b 35 5a 32 74 75 55 6c 4e 4a 62 6b 4a 59 53 54 5a 46 62 57 39 77 57 6c 45 72 56 44 42 4b 63 57 35 4f 54 7a 5a 51 52 33 4e 51 56 55 31 48 57 53 74 52 4e 33 46 72 63 57 78 6f 55 57 74 50 4f 47 5a 42 54 6c 4a 7a 51 6b 68 6a 65 44 6c 4e 54 55 4e 4e 5a 6a 68 42 5a 6a 4e 78 55 30 6c 46 62 30 64 48 51 33 4a 4c 52 46 56 4d 55 32 4a 30 65 6d 74 61 55 57 56 36 65 48 6c 44 54 7a 63 30 4d 57 31 5a 62 54 4e 6f 56 57 52 7a 61 32 78 57 53 6a 49 78 55 45 56 74 65 Data Ascii: IwYlIrNWxOQm85TnVOUGN5YVRPVkhVd3lIS24zR3IxcHI4THVZYitNMjg2OE1HNlZYbTl4MlIrMmRWMEIvdG85RUMvRFk5bndxZ3ZvN2k5Z2tuUlNJbkJYSTZFbW9wWlErVDBKcW5OTzZQR3NQVU1HWStRN3FrcWxoUWtPOGZBTlJzQkhjeDlNTUNNZjhBZjNxU0lFb0dHQ3JLRFVMU2J0emtaUWV6eHlDTzc0MW1ZbTNoVWRza2xWSjIxUEVte
2025-03-20 13:57:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:04 UTC	988	OUT	GET /%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/ HTTP/1.1 Host: www.vintagelights.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:05 UTC	170	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html
2025-03-20 13:57:05 UTC	8022	IN	Data Raw: 33 61 64 62 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 21 2d 2d 0a 2e 72 70 73 5f 39 65 64 61 20 3e 20 64 69 76 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 61 62 6c 65 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 64 2c 20 2e 72 70 73 5f 39 65 64 61 20 61 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 74 61 62 6c 65 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 64 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 69 6d 67 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 69 6d 67 0a 09 7b 62 6f 72 64 65 72 3a 30 3b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 09 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 0a 2e 72 70 73 5f 39 65 Data Ascii: 3adb<style type="text/css">....rps_9eda > div, .rps_9eda table, .rps_9eda td, .rps_9eda a{}.rps_9eda table, .rps_9eda td{}.rps_9eda img{}.rps_9eda img{border:0;height:auto;line-height:100%;outline:none;text-decoration:none}.rps_9e
2025-03-20 13:57:05 UTC	7051	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 6d 6f 62 69 6c 65 2d 74 6f 70 62 6f 78 2d 70 61 64 64 69 6e 67 2d 32 30 2d 62 6f 74 74 6f 6d 2d 69 74 65 6d 2d 34 38 30 0a 09 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 32 30 70 78 20 32 30 70 78 20 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 6d 6f 62 69 6c 65 2d 68 69 64 65 0a 09 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 23 78 5f 6d 6f 62 69 6c 65 2d 68 69 64 65 0a 09 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 68 65 61 64 6c 69 6e 65 0a 09 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 21 69 6d 70 6f 72 74 61 6e Data Ascii: important}.rps_9eda .x_mobile-topbox-padding-20-bottom-item-480{padding:10px 20px 20px 20px!important}.rps_9eda .x_mobile-hide{display:none!important}.rps_9eda #x_mobile-hide{display:none!important}.rps_9eda .x_headline{font-size:30px!importan
2025-03-20 13:57:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 13:57:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:05 UTC	802	OUT	GET /favicon.ico HTTP/1.1 Host: www.vintagelights.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:05 UTC	235	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 07 Feb 2024 10:38:36 GMT Accept-Ranges: bytes Content-Length: 3126 Content-Type: image/x-icon
2025-03-20 13:57:05 UTC	3126	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 18 00 68 03 00 00 26 00 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 8e 03 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 18 00 00 00 00 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 34 4d 3c 4f 68 51 59 67 00 00 00 00 00 00 95 96 98 64 6a 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 8e 8d 9c a1 a8 5e 64 74 07 18 2c 24 3d 5d 24 48 73 09 2c 59 00 23 54 01 21 4e 00 18 3f 97 96 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 34 41 00 00 11 10 1a 29 12 2e 51 1c 3c 69 18 36 5c 08 27 55 02 21 49 9e aa c1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 7b 81 11 1c 2c 1f 2c 3b 1b 38 5a 21 41 6c 07 2f 62 06 2c 60 06 23 4d Data Ascii: h& ( @!4M<OhQYgdjw^dt,$=]$Hs,Y#T!N?*4A).Q<i6\'U!I{{,,;8Z!Al/b,`#M

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48122)
Category:	downloaded
Size (bytes):	48123
Entropy (8bit):	5.342998089666478
Encrypted:	false
SSDEEP:	768:gCbPzVMta23aGa0rn5iWqS2kdX+iGwS3EjtCsCXY2KIEjkNY1LBep7iFFQ7XIrva:Ita2qGa0rn5Rq05GE2K9k7
MD5:	EA38BDA3C117E2FE01BD862003357394
SHA1:	767CCB3589E3067EE1B348DF2426A9E2E32CEE5C
SHA-256:	719423C7B70AC911F76D00B3AE514D108A8315EA60A80519820BE50C0E4C96EF
SHA-512:	F50FAB9DC2263F40216DF26C234AD390091F23185650E9B4E4748CF09CFEDF2D92A99FC81C986234580844393305AC2195E096DEDB64D9A25A99EF7BE510FFCA
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js
Preview:	"use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function v(s){jt(l,o,c,v,h,"next",s)}function h(s){jt(l,o,c,v,h,"throw",s)}v(void 0)})}}function V(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):V(e,t)}function De(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function Ve(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){De(e,c,a[c])})}return e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:05 UTC	582	OUT	GET /%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201/ HTTP/1.1 Host: www.vintagelights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:06 UTC	170	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html
2025-03-20 13:57:06 UTC	8022	IN	Data Raw: 33 61 64 62 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 21 2d 2d 0a 2e 72 70 73 5f 39 65 64 61 20 3e 20 64 69 76 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 61 62 6c 65 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 64 2c 20 2e 72 70 73 5f 39 65 64 61 20 61 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 74 61 62 6c 65 2c 20 2e 72 70 73 5f 39 65 64 61 20 74 64 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 69 6d 67 0a 09 7b 7d 0a 2e 72 70 73 5f 39 65 64 61 20 69 6d 67 0a 09 7b 62 6f 72 64 65 72 3a 30 3b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 09 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 0a 2e 72 70 73 5f 39 65 Data Ascii: 3adb<style type="text/css">....rps_9eda > div, .rps_9eda table, .rps_9eda td, .rps_9eda a{}.rps_9eda table, .rps_9eda td{}.rps_9eda img{}.rps_9eda img{border:0;height:auto;line-height:100%;outline:none;text-decoration:none}.rps_9e
2025-03-20 13:57:06 UTC	7051	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 6d 6f 62 69 6c 65 2d 74 6f 70 62 6f 78 2d 70 61 64 64 69 6e 67 2d 32 30 2d 62 6f 74 74 6f 6d 2d 69 74 65 6d 2d 34 38 30 0a 09 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 32 30 70 78 20 32 30 70 78 20 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 6d 6f 62 69 6c 65 2d 68 69 64 65 0a 09 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 23 78 5f 6d 6f 62 69 6c 65 2d 68 69 64 65 0a 09 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 72 70 73 5f 39 65 64 61 20 2e 78 5f 68 65 61 64 6c 69 6e 65 0a 09 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 21 69 6d 70 6f 72 74 61 6e Data Ascii: important}.rps_9eda .x_mobile-topbox-padding-20-bottom-item-480{padding:10px 20px 20px 20px!important}.rps_9eda .x_mobile-hide{display:none!important}.rps_9eda #x_mobile-hide{display:none!important}.rps_9eda .x_headline{font-size:30px!importan
2025-03-20 13:57:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 13:57:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:36 UTC	888	OUT	POST /%20%20%20%20%20%20%20%20%20%20%20%20%202 HTTP/1.1 Host: vintagelights.com Connection: keep-alive Content-Length: 26 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://www.vintagelights.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.vintagelights.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:36 UTC	26	OUT	Data Raw: 73 75 62 6d 69 74 42 75 74 74 6f 6e 73 3d 2b 2b 2b 2b 4f 50 45 4e 2b 2b 2b 2b Data Ascii: submitButtons=++++OPEN++++
2025-03-20 13:57:36 UTC	251	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 20 Mar 2025 13:57:36 GMT Server: Apache Location: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202/ Content-Length: 275 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-03-20 13:57:36 UTC	275	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 69 6e 74 61 67 65 6c 69 67 68 74 73 2e 63 6f 6d 2f 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 32 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202/">here</a>.

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:37 UTC	638	OUT	GET /favicon.ico HTTP/1.1 Host: vintagelights.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://vintagelights.com/%20%20%20%20%20%20%20%20%20%20%20%20%202/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:37 UTC	235	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 07 Feb 2024 10:38:36 GMT Accept-Ranges: bytes Content-Length: 3126 Content-Type: image/x-icon
2025-03-20 13:57:37 UTC	3126	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 18 00 68 03 00 00 26 00 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 8e 03 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 18 00 00 00 00 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 34 4d 3c 4f 68 51 59 67 00 00 00 00 00 00 95 96 98 64 6a 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 8e 8d 9c a1 a8 5e 64 74 07 18 2c 24 3d 5d 24 48 73 09 2c 59 00 23 54 01 21 4e 00 18 3f 97 96 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 34 41 00 00 11 10 1a 29 12 2e 51 1c 3c 69 18 36 5c 08 27 55 02 21 49 9e aa c1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 7b 81 11 1c 2c 1f 2c 3b 1b 38 5a 21 41 6c 07 2f 62 06 2c 60 06 23 4d Data Ascii: h& ( @!4M<OhQYgdjw^dt,$=]$Hs,Y#T!N?*4A).Q<i6\'U!I{{,,;8Z!Al/b,`#M

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:37 UTC	759	OUT	GET / HTTP/1.1 Host: log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://vintagelights.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:38 UTC	486	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:37 GMT Server: Apache/2.4.52 (Ubuntu) Set-Cookie: PHPSESSID=j7u9mr36f6gcl04foin66g2b6k; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Content-Length: 4007 Connection: close Content-Type: text/html; charset=UTF-8
2025-03-20 13:57:38 UTC	4007	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 69 73 70 6c 61 79 69 6e 67 20 61 20 70 61 67 65 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 2e 64 65 6c 69 76 65 72 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Displaying a page...</title> <style> body.delivered { display: none;

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:38 UTC	901	OUT	GET / HTTP/1.1 Host: log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=j7u9mr36f6gcl04foin66g2b6k
2025-03-20 13:57:39 UTC	434	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:38 GMT Server: Apache/2.4.52 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-20 13:57:39 UTC	7758	IN	Data Raw: 33 63 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 23 72 65 67 69 6f 6e 28 63 6f 6c 6c 61 70 73 65 64 29 2d 2d 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b Data Ascii: 3c55<!DOCTYPE html><html lang="en-US"> ... #region(collapsed)--> <head> <style> * { box-sizing: border-box; margin: 0; padding: 0; } html {
2025-03-20 13:57:39 UTC	7693	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 65 62 61 75 74 68 6e 2d 64 69 76 69 64 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 72 65 6d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: flex-wrap: wrap; justify-content: center; } .webauthn-divider { margin: 1rem 0; width: 100%; text-align: center;
2025-03-20 13:57:39 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 13:57:39 UTC	8192	IN	Data Raw: 33 36 36 36 0d 0a 70 61 67 65 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 65 72 69 66 79 43 61 6c 6c 62 61 63 6b 5f 43 46 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 73 70 6f 6e 73 65 20 26 26 20 72 65 73 70 6f 6e 73 65 2e 6c 65 6e 67 74 68 20 3e 20 31 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 72 65 61 74 65 20 66 6f 72 6d 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 74 6f 20 73 75 62 6d 69 74 20 72 65 73 70 6f 6e 73 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 3666page/images/favicon.ico" /> <script> var verifyCallback_CF = function (response) { if (response && response.length > 10) { // Create form dynamically to submit response
2025-03-20 13:57:39 UTC	5740	IN	Data Raw: 6b 52 41 4d 6f 75 64 68 56 4c 48 44 64 6d 63 59 79 4c 4e 73 78 67 6d 47 71 78 53 7a 62 34 4e 4a 77 59 53 2f 31 61 50 4a 4d 63 7a 58 63 55 49 61 52 56 66 55 6d 6c 45 49 70 32 4f 4e 72 43 55 37 76 78 6f 6b 4d 6f 48 34 7a 67 37 50 6d 4c 71 33 52 5a 52 51 79 44 5a 71 4b 77 79 4e 58 7a 6d 4b 4f 32 72 4b 35 7a 6c 36 54 5a 49 38 35 61 78 35 76 31 7a 78 79 37 68 68 46 68 47 7a 31 63 7a 6a 78 73 51 6e 42 2f 37 31 44 31 70 77 47 7a 65 41 76 47 35 54 67 71 54 4e 5a 4c 70 4e 7a 7a 57 53 54 68 4e 74 70 46 6d 4e 67 6f 68 61 2b 78 6d 68 48 65 46 4d 77 4d 56 5a 51 73 52 4e 4e 66 75 36 62 63 58 33 71 67 34 62 4e 49 74 6f 73 6c 55 6b 73 76 6d 47 52 44 34 56 63 30 62 54 6f 2b 35 59 6a 61 76 39 74 70 41 79 50 4c 59 6c 32 30 2b 5a 44 2b 66 79 56 43 6a 71 53 4d 35 48 4b 76 4d Data Ascii: kRAMoudhVLHDdmcYyLNsxgmGqxSzb4NJwYS/1aPJMczXcUIaRVfUmlEIp2ONrCU7vxokMoH4zg7PmLq3RZRQyDZqKwyNXzmKO2rK5zl6TZI85ax5v1zxy7hhFhGz1czjxsQnB/71D1pwGzeAvG5TgqTNZLpNzzWSThNtpFmNgoha+xmhHeFMwMVZQsRNNfu6bcX3qg4bNItoslUksvmGRD4Vc0bTo+5Yjav9tpAyPLYl20+ZD+fyVCjqSM5HKvM
2025-03-20 13:57:39 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 13:57:39 UTC	5611	IN	Data Raw: 31 35 64 65 0d 0a 66 30 38 39 65 37 66 38 20 7a 6f 6e 65 2d 6e 61 6d 65 2d 74 69 74 6c 65 20 68 31 22 3e 77 3c 61 20 74 61 72 67 65 74 3d 22 63 35 34 36 32 30 37 33 22 20 63 6c 61 73 73 3d 22 32 36 34 65 34 31 63 66 22 3e 3c 2f 61 3e 77 77 2e 6d 3c 61 20 74 61 72 67 65 74 3d 22 62 32 34 64 65 36 30 34 22 20 63 6c 61 73 73 3d 22 61 33 30 66 35 31 35 31 22 3e 3c 2f 61 3e 69 63 3c 61 20 74 61 72 67 65 74 3d 22 63 37 31 33 38 34 31 36 22 20 63 6c 61 73 73 3d 22 65 61 32 35 63 62 38 33 22 3e 3c 2f 61 3e 72 6f 73 3c 61 20 74 61 72 67 65 74 3d 22 64 30 65 30 31 64 38 63 22 20 63 6c 61 73 73 3d 22 38 63 34 35 35 33 37 30 22 3e 3c 2f 61 3e 6f 66 3c 61 20 74 61 72 67 65 74 3d 22 36 38 34 32 37 39 30 33 22 20 63 6c 61 73 73 3d 22 64 35 66 35 61 66 37 38 22 3e 3c 2f Data Ascii: 15def089e7f8 zone-name-title h1">w<a target="c5462073" class="264e41cf"></a>ww.m<a target="b24de604" class="a30f5151"></a>ic<a target="c7138416" class="ea25cb83"></a>ros<a target="d0e01d8c" class="8c455370"></a>of<a target="68427903" class="d5f5af78"></

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:39 UTC	686	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:39 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 20 Mar 2025 13:57:39 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 9235b84c68e9c3f3-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:40 UTC	670	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:40 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:40 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9235b84f5c670cae-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 13:57:40 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-20 13:57:40 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-20 13:57:40 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-20 13:57:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-20 13:57:40 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-20 13:57:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-20 13:57:40 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-20 13:57:40 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-20 13:57:40 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-20 13:57:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:40 UTC	911	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kw61j/0x4AAAAAABAp6-kXqH26cSAg/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:41 UTC	1297	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:41 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28125 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-6STmp1QgSMQjrgUn' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-20 13:57:41 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-20 13:57:41 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 36 53 54 6d 70 31 51 67 53 4d 51 6a 72 67 55 6e 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-6STmp1QgSMQjrgUn' 'unsafe-
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:41 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9235b8533bd15e71&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kw61j/0x4AAAAAABAp6-kXqH26cSAg/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:41 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:41 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 127690 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9235b856ab3241e7-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 13:57:41 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflar
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 Data Ascii: he%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_timeout":"Timed%20out","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefres
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 51 2c 65 54 2c 65 56 2c 65 57 2c 65 58 2c 66 39 2c 66 6c 2c 66 72 2c 66 73 2c 66 74 2c 66 44 2c 66 4f 2c 66 53 2c 66 Data Ascii: ass":"Testing%20only%2C%20always%20pass."},"polyfills":{"feedback_report_output_subtitle":false,"feedback_report_guideline":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eQ,eT,eV,eW,eX,f9,fl,fr,fs,ft,fD,fO,fS,f
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 28 31 31 38 33 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 67 4d 2c 61 32 29 7b 28 67 4d 3d 67 4c 2c 69 5b 67 4d 28 31 34 36 38 29 5d 5b 67 4d 28 36 37 36 29 5d 28 29 2c 51 5b 67 4d 28 31 34 36 38 29 5d 5b 67 4d 28 37 37 31 29 5d 28 29 2c 52 5b 67 4d 28 31 34 36 38 29 5d 5b 67 4d 28 33 33 32 29 5d 28 29 2c 53 5b 67 4d 28 31 34 36 38 29 5d 5b 67 4d 28 31 31 34 32 29 5d 28 29 2c 54 5b 67 4d 28 31 34 36 38 29 5d 5b 67 4d 28 31 31 34 35 29 5d 28 29 2c 55 5b 67 4d 28 31 37 39 29 5d 29 26 26 28 61 32 3d 7b 7d 2c 61 32 5b 67 4d 28 31 33 35 37 29 5d 3d 6b 5b 67 4d 28 31 33 32 33 29 5d 2c 61 32 5b 67 4d 28 38 37 31 29 5d 3d 5a 5b 67 4d 28 37 30 30 29 5d 5b 67 4d 28 37 36 33 29 5d 2c 61 32 5b 67 4d 28 31 32 38 29 5d 3d 67 4d 28 31 30 36 32 29 2c 61 32 5b 67 4d 28 36 39 36 Data Ascii: (1183)],function(gM,a2){(gM=gL,i[gM(1468)][gM(676)](),Q[gM(1468)][gM(771)](),R[gM(1468)][gM(332)](),S[gM(1468)][gM(1142)](),T[gM(1468)][gM(1145)](),U[gM(179)])&&(a2={},a2[gM(1357)]=k[gM(1323)],a2[gM(871)]=Z[gM(700)][gM(763)],a2[gM(128)]=gM(1062),a2[gM(696
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 65 77 20 65 4d 5b 28 67 4e 28 31 35 37 34 29 29 5d 28 29 2c 76 5b 67 4e 28 31 32 31 38 29 5d 28 6b 5b 67 4e 28 35 32 39 29 5d 2c 6e 29 2c 76 5b 67 4e 28 31 31 31 35 29 5d 3d 35 65 33 2c 76 5b 67 4e 28 36 33 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 78 3d 7b 7d 2c 78 5b 67 4e 28 31 34 33 32 29 5d 3d 67 2c 78 5b 67 4e 28 39 37 31 29 5d 3d 6c 2c 78 2e 63 63 3d 68 2c 78 5b 67 4e 28 31 33 35 37 29 5d 3d 6d 2c 78 5b 67 4e 28 37 33 34 29 5d 3d 73 2c 42 3d 4a 53 4f 4e 5b 67 4e 28 31 32 33 29 5d 28 78 29 2c 76 5b 67 4e 28 31 37 36 29 5d 28 67 65 5b 67 4e 28 35 36 35 29 5d 28 42 29 29 29 3a 78 5b 67 4e 28 31 37 39 29 5d 5b 67 4e 28 31 35 35 36 29 5d 26 26 28 45 3d 7b 7d 2c 45 5b 67 4e 28 31 33 35 37 29 5d 3d 67 4e 28 32 36 30 29 2c 45 5b 67 4e 28 38 37 31 Data Ascii: ew eM[(gN(1574))](),v[gN(1218)](k[gN(529)],n),v[gN(1115)]=5e3,v[gN(633)]=function(){},x={},x[gN(1432)]=g,x[gN(971)]=l,x.cc=h,x[gN(1357)]=m,x[gN(734)]=s,B=JSON[gN(123)](x),v[gN(176)](ge[gN(565)](B))):x[gN(179)][gN(1556)]&&(E={},E[gN(1357)]=gN(260),E[gN(871
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 5d 29 7d 2c 31 30 29 2c 65 4d 5b 67 51 28 39 34 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 53 29 7b 67 53 3d 67 51 2c 65 4d 5b 67 53 28 39 33 36 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 67 51 28 31 30 35 38 29 5d 5b 67 51 28 34 34 36 29 5d 28 6b 5b 67 51 28 31 34 38 36 29 5d 2c 65 29 2c 21 5b 5d 29 7d 2c 65 51 3d 30 2c 65 54 3d 7b 7d 2c 65 54 5b 67 4a 28 36 30 35 29 5d 3d 65 53 2c 65 4d 5b 67 4a 28 34 32 39 29 5d 3d 65 54 2c 65 56 3d 65 4d 5b 67 4a 28 37 30 30 29 5d 5b 67 4a 28 36 36 31 29 5d 5b 67 4a 28 31 30 34 36 29 5d 2c 65 57 3d 65 4d 5b 67 4a 28 37 30 30 29 5d 5b 67 4a 28 36 36 31 29 5d 5b 67 4a 28 36 34 35 29 5d 2c 65 58 3d 65 4d 5b 67 4a 28 37 30 30 29 5d 5b 67 4a 28 36 36 31 29 5d 5b 67 4a 28 31 36 33 32 29 5d 2c 66 39 3d 21 5b 5d 2c 66 6c 3d 75 Data Ascii: ])},10),eM[gQ(947)](function(gS){gS=gQ,eM[gS(936)]()},1e3),eM[gQ(1058)][gQ(446)](k[gQ(1486)],e),![])},eQ=0,eT={},eT[gJ(605)]=eS,eM[gJ(429)]=eT,eV=eM[gJ(700)][gJ(661)][gJ(1046)],eW=eM[gJ(700)][gJ(661)][gJ(645)],eX=eM[gJ(700)][gJ(661)][gJ(1632)],f9=![],fl=u
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 34 39 29 5d 3d 66 48 2c 66 53 5b 67 4a 28 31 32 36 36 29 5d 3d 66 4e 2c 66 53 5b 67 4a 28 31 30 34 30 29 5d 3d 66 4b 2c 66 53 5b 67 4a 28 31 31 34 35 29 5d 3d 66 4a 2c 66 53 5b 67 4a 28 31 31 37 32 29 5d 3d 66 38 2c 66 53 5b 67 4a 28 36 37 36 29 5d 3d 66 46 2c 66 53 5b 67 4a 28 32 35 32 29 5d 3d 66 45 2c 66 53 5b 67 4a 28 33 33 38 29 5d 3d 65 5a 2c 66 53 5b 67 4a 28 38 30 36 29 5d 3d 66 30 2c 66 53 5b 67 4a 28 32 31 35 29 5d 3d 66 6d 2c 66 53 5b 67 4a 28 38 34 30 29 5d 3d 66 6f 2c 66 53 5b 67 4a 28 35 34 34 29 5d 3d 66 6e 2c 66 53 5b 67 4a 28 33 33 32 29 5d 3d 66 79 2c 66 53 5b 67 4a 28 31 31 39 37 29 5d 3d 66 78 2c 66 53 5b 67 4a 28 37 37 31 29 5d 3d 66 77 2c 66 53 5b 67 4a 28 36 33 36 29 5d 3d 66 76 2c 66 53 5b 67 4a 28 37 36 36 29 5d 3d 66 67 2c 66 53 Data Ascii: 49)]=fH,fS[gJ(1266)]=fN,fS[gJ(1040)]=fK,fS[gJ(1145)]=fJ,fS[gJ(1172)]=f8,fS[gJ(676)]=fF,fS[gJ(252)]=fE,fS[gJ(338)]=eZ,fS[gJ(806)]=f0,fS[gJ(215)]=fm,fS[gJ(840)]=fo,fS[gJ(544)]=fn,fS[gJ(332)]=fy,fS[gJ(1197)]=fx,fS[gJ(771)]=fw,fS[gJ(636)]=fv,fS[gJ(766)]=fg,fS
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 6f 5b 69 50 28 31 36 30 29 5d 28 6f 5b 69 50 28 39 39 30 29 5d 2c 6f 5b 69 50 28 31 30 37 31 29 5d 29 29 7b 66 6f 72 28 47 5b 69 50 28 33 36 33 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 69 50 28 34 38 34 29 5d 3b 47 5b 48 2b 31 5d 3d 3d 3d 47 5b 48 5d 3f 47 5b 69 50 28 31 36 32 38 29 5d 28 6f 5b 69 50 28 31 32 36 34 29 5d 28 48 2c 31 29 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 65 6c 73 65 20 72 65 74 75 72 6e 21 21 5b 5d 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 69 4d 28 31 30 39 38 29 5d 5b 69 4d 28 31 34 32 29 5d 28 42 29 2c 43 3d 30 3b 6f 5b 69 4d 28 31 34 34 39 29 5d 28 43 2c 78 5b 69 4d 28 34 38 34 29 5d 29 3b 43 2b 2b 29 69 66 28 69 4d 28 31 36 35 37 29 3d 3d 3d 6f 5b 69 4d 28 37 37 Data Ascii: o[iP(160)](o[iP(990)],o[iP(1071)])){for(G[iP(363)](),H=0;H<G[iP(484)];G[H+1]===G[H]?G[iP(1628)](o[iP(1264)](H,1),1):H+=1);return G}else return!![]}(x),B='nAsAaAb'.split('A'),B=B[iM(1098)][iM(142)](B),C=0;o[iM(1449)](C,x[iM(484)]);C++)if(iM(1657)===o[iM(77
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 5d 2b 27 5f 27 2b 30 2c 6c 3d 6c 5b 69 52 28 35 38 31 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 2c 69 53 29 7b 69 53 3d 69 52 2c 6a 5e 3d 6c 5b 69 53 28 36 32 30 29 5d 28 73 29 7d 29 2c 66 3d 65 4d 5b 69 52 28 31 33 37 39 29 5d 28 66 29 2c 6b 3d 5b 5d 2c 69 3d 2d 31 3b 21 69 73 4e 61 4e 28 6d 3d 66 5b 69 52 28 36 32 30 29 5d 28 2b 2b 69 29 29 3b 6b 5b 69 52 28 35 31 35 29 5d 28 53 74 72 69 6e 67 5b 69 52 28 38 35 39 29 5d 28 28 68 5b 69 52 28 31 35 36 34 29 5d 28 68 5b 69 52 28 38 36 38 29 5d 28 6d 2c 32 35 35 29 2c 6a 29 2d 69 25 36 35 35 33 35 2b 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 69 52 28 38 30 39 29 5d 28 27 27 29 7d 2c 65 4d 5b 67 4a 28 31 35 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6a 33 2c 65 Data Ascii: ]+'_'+0,l=l[iR(581)](/./g,function(n,s,iS){iS=iR,j^=l[iS(620)](s)}),f=eM[iR(1379)](f),k=[],i=-1;!isNaN(m=f[iR(620)](++i));k[iR(515)](String[iR(859)]((h[iR(1564)](h[iR(868)](m,255),j)-i%65535+65535)%255)));return k[iR(809)]('')},eM[gJ(159)]=function(c,j3,e
2025-03-20 13:57:41 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 45 62 79 47 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 70 46 57 5a 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 55 78 75 68 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4e 57 45 4b 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4d 6b 7a 58 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 75 45 70 47 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 46 69 50 62 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 Data Ascii: function(h,i){return h>i},'EbyGy':function(h,i){return i!=h},'pFWZt':function(h,i){return hi},'UxuhB':function(h,i){return h(i)},'NWEKR':function(h,i){return h(i)},'MkzXg':function(h,i){return ih},'uEpGd':function(h,i){return h(i)},'FiPbG':function(h,i)

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:41 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kw61j/0x4AAAAAABAp6-kXqH26cSAg/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:42 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:41 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9235b8593fc7a0fb-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 13:57:42 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.vintagelights.com/ 1/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Windows Analysis Report
https://www.vintagelights.com/ 1/

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:42 UTC	793	OUT	GET /page/images/favicon.ico HTTP/1.1 Host: log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=j7u9mr36f6gcl04foin66g2b6k
2025-03-20 13:57:42 UTC	390	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:42 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Tue, 17 Sep 2024 02:03:54 GMT ETag: "47e-6224719f87680" Accept-Ranges: bytes Content-Length: 1150 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: image/vnd.microsoft.icon
2025-03-20 13:57:42 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 f5 c2 50 ff f3 b2 24 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b2 22 ff f9 d2 7d ff 8a a4 fa ff 39 65 f5 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3b 66 f6 ff 63 86 f8 ff f3 b7 32 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a4 00 ff f7 ca 66 ff 77 95 f9 ff 18 4b f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1a 4c f3 ff 49 71 f6 ff f3 b7 33 ff f0 a5 00 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a5 00 ff f7 cb 67 ff 77 96 f9 ff 19 4c f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1b 4e f3 ff 4a 72 f6 ff f3 Data Ascii: h( P$%%%%"}9e<h<h<h<h;fc2fwKNNNNLIq3gwLOOOONJr

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:42 UTC	1190	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/800791795:1742476688:_zzlGi28I8UOuUWpUsti_Jb59zKUHDX1aoPZ0i-MkRg/9235b8533bd15e71/RfaGlC5EfKG6mQLRkPH6RRxHB1olWw7a6INf8t90Kqc-1742479061-1.1.1.1-Ekj8CxjVdg.WjyoCaKx5KGtoqkYzCLF2I6USpqOg4HHEVx2KowOUkDtXMuhfAsLt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3501 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: RfaGlC5EfKG6mQLRkPH6RRxHB1olWw7a6INf8t90Kqc-1742479061-1.1.1.1-Ekj8CxjVdg.WjyoCaKx5KGtoqkYzCLF2I6USpqOg4HHEVx2KowOUkDtXMuhfAsLt cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kw61j/0x4AAAAAABAp6-kXqH26cSAg/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:42 UTC	3501	OUT	Data Raw: 57 71 45 32 67 32 62 32 75 32 45 32 54 4d 41 37 4d 41 46 32 4d 65 58 4e 6b 79 4d 74 41 6b 41 73 7a 65 48 50 61 41 4a 47 4e 32 34 61 58 47 41 68 41 39 61 6b 4e 66 61 4f 62 6c 66 41 74 61 48 66 41 35 41 57 31 32 41 67 47 32 41 64 48 41 64 36 71 4f 44 41 75 45 51 47 47 66 48 61 58 6a 41 69 65 58 73 41 75 6f 69 50 62 41 44 32 4d 6c 4e 79 70 49 35 4a 70 70 32 4f 65 78 6e 41 57 65 4d 62 64 33 4a 64 69 65 58 41 57 6f 64 30 38 63 6e 6d 67 4d 49 54 4e 32 41 45 77 77 37 75 72 2b 73 41 4d 64 48 41 58 62 6c 77 71 71 78 74 71 32 64 78 46 65 70 24 4f 64 75 4b 71 46 24 4f 32 41 71 62 41 77 79 6c 32 47 41 74 4e 61 41 35 4e 41 2b 62 32 41 6c 63 4e 41 61 6a 77 41 73 24 6f 53 41 4f 4b 52 2d 47 4e 41 24 32 65 74 4e 32 58 4d 59 61 41 6a 41 39 77 51 6c 58 48 6c 78 43 48 61 24 Data Ascii: WqE2g2b2u2E2TMA7MAF2MeXNkyMtAkAszeHPaAJGN24aXGAhA9akNfaOblfAtaHfA5AW12AgG2AdHAd6qODAuEQGGfHaXjAieXsAuoiPbAD2MlNypI5Jpp2OexnAWeMbd3JdieXAWod08cnmgMITN2AEww7ur+sAMdHAXblwqqxtq2dxFep$OduKqF$O2AqbAwyl2GAtNaA5NA+b2AlcNAajwAs$oSAOKR-GNA$2etN2XMYaAjA9wQlXHlxCHa$
2025-03-20 13:57:42 UTC	1115	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:42 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 241848 Connection: close cf-chl-gen: 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$3JYJc947Wy4kKbw5jYbupQ== Server: cloudflare CF-RAY: 9235b85c98706e53-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 13:57:42 UTC	254	IN	Data Raw: 75 62 50 49 74 71 4f 70 75 6f 79 34 69 70 72 4b 67 34 53 63 6f 38 47 53 70 62 4c 4b 71 37 43 61 6d 37 58 59 7a 72 71 65 76 63 37 67 74 65 50 55 35 4f 62 70 74 61 69 36 32 36 66 73 30 72 33 4c 34 74 2b 78 38 73 48 51 78 4d 7a 72 35 72 6a 56 2b 39 62 4f 2f 72 75 34 30 4f 54 31 32 66 50 6e 2b 74 2f 6b 7a 77 44 78 42 4f 6e 54 37 64 55 48 38 77 54 35 37 51 76 76 36 68 76 71 2b 4f 77 43 46 2f 66 39 39 78 63 4d 43 67 49 67 4a 44 45 72 2b 65 54 38 44 79 7a 78 4a 41 73 77 39 53 67 56 4d 52 45 57 48 43 34 53 52 54 38 4f 51 78 45 61 51 78 73 2f 44 44 38 71 4b 77 6f 64 47 77 30 69 4c 53 64 57 4b 68 4e 62 4c 41 39 56 55 6c 70 4e 51 54 4e 50 55 78 31 6c 59 6b 55 32 61 55 77 2b 4f 7a 68 75 53 54 35 67 58 32 39 41 59 6e 4a 71 55 58 4e 64 5a 6c 4a 78 55 57 70 53 59 31 Data Ascii: ubPItqOpuoy4iprKg4Sco8GSpbLKq7Cam7XYzrqevc7gtePU5Obptai626fs0r3L4t+x8sHQxMzr5rjV+9bO/ru40OT12fPn+t/kzwDxBOnT7dUH8wT57Qvv6hvq+OwCF/f99xcMCgIgJDEr+eT8DyzxJAsw9SgVMREWHC4SRT8OQxEaQxs/DD8qKwodGw0iLSdWKhNbLA9VUlpNQTNPUx1lYkU2aUw+OzhuST5gX29AYnJqUXNdZlJxUWpSY1
2025-03-20 13:57:42 UTC	1369	IN	Data Raw: 31 6c 64 32 42 65 68 6c 32 45 69 45 75 4d 57 33 39 62 63 4a 4e 68 68 58 47 58 59 6d 69 47 56 70 57 47 6c 46 31 67 6c 6d 74 68 5a 4a 70 76 6f 47 69 65 64 4a 52 73 6f 6e 69 47 6d 4b 47 42 70 47 32 66 70 61 75 44 6b 59 4e 78 6e 4a 4b 49 72 4c 36 57 6c 5a 79 63 6d 70 4f 66 66 36 4f 41 6d 63 71 64 69 5a 75 38 71 73 4c 49 76 4b 62 4a 74 34 2b 73 75 4d 53 5a 32 36 32 65 6b 71 44 53 73 61 2b 31 6d 4f 61 30 76 61 43 30 74 65 65 33 72 2b 72 68 79 65 76 66 33 63 72 71 2b 4d 6e 61 7a 2b 62 56 79 64 6a 4d 31 4d 37 61 42 41 44 50 78 77 50 35 34 51 54 33 39 65 49 44 45 65 44 79 35 77 62 50 7a 4e 2f 6b 39 65 58 37 2f 42 45 59 33 74 73 4d 45 74 7a 76 41 39 6a 77 41 4f 50 32 47 53 73 48 2b 69 38 43 4c 50 73 77 2f 52 4d 6e 47 42 72 7a 4c 66 63 57 2f 53 77 51 39 2f 4d 36 4e Data Ascii: 1ld2Behl2EiEuMW39bcJNhhXGXYmiGVpWGlF1glmthZJpvoGiedJRsoniGmKGBpG2fpauDkYNxnJKIrL6WlZycmpOff6OAmcqdiZu8qsLIvKbJt4+suMSZ262ekqDSsa+1mOa0vaC0tee3r+rhyevf3crq+Mnaz+bVydjM1M7aBADPxwP54QT39eIDEeDy5wbPzN/k9eX7/BEY3tsMEtzvA9jwAOP2GSsH+i8CLPsw/RMnGBrzLfcW/SwQ9/M6N
2025-03-20 13:57:42 UTC	1369	IN	Data Raw: 42 62 47 4a 62 61 47 64 4f 58 58 4f 50 63 35 53 41 5a 49 57 52 6b 6f 32 48 64 35 61 52 6a 48 75 61 6c 59 4e 2f 6e 70 6d 49 67 36 4b 64 6a 59 65 6d 6f 5a 4b 4c 71 71 57 6c 6a 36 36 70 71 70 4f 79 72 61 2b 58 74 72 47 30 6d 37 71 31 73 5a 2b 2b 75 62 61 6a 77 72 32 37 6c 72 32 77 76 36 50 4b 78 63 53 78 6b 63 4b 6e 7a 71 36 38 7a 71 65 59 7a 4d 37 44 34 63 79 62 78 2b 58 63 6e 38 76 70 33 4b 50 50 37 65 79 6e 30 2f 48 74 72 75 7a 6d 74 4d 50 76 79 39 33 72 2f 66 33 71 41 63 37 63 7a 41 48 63 38 4f 48 65 31 39 7a 69 43 4e 6e 37 32 65 44 39 43 73 33 6d 41 74 50 75 38 2b 4d 4d 2b 68 76 57 38 68 34 44 2b 52 58 75 45 77 4c 6a 45 52 76 35 48 76 34 59 49 41 37 37 41 51 63 6a 4b 76 50 73 41 41 48 30 4e 67 6a 7a 47 54 45 34 50 78 48 39 45 52 6f 47 4d 6b 4d 6e 49 6a Data Ascii: BbGJbaGdOXXOPc5SAZIWRko2Hd5aRjHualYN/npmIg6KdjYemoZKLqqWlj66pqpOyra+XtrG0m7q1sZ++ubajwr27lr2wv6PKxcSxkcKnzq68zqeYzM7D4cybx+Xcn8vp3KPP7eyn0/HtruzmtMPvy93r/f3qAc7czAHc8OHe19ziCNn72eD9Cs3mAtPu8+MM+hvW8h4D+RXuEwLjERv5Hv4YIA77AQcjKvPsAAH0NgjzGTE4PxH9ERoGMkMnIj
2025-03-20 13:57:42 UTC	1369	IN	Data Raw: 57 34 46 50 61 6c 39 4e 6c 6f 52 6e 6a 48 57 58 61 6e 56 70 63 5a 79 59 6a 4b 61 5a 65 71 4a 33 65 71 4e 69 66 71 70 76 6f 33 79 44 62 33 53 4e 70 59 74 78 6a 59 61 37 75 6f 78 35 69 36 74 37 75 37 71 4f 77 37 4f 61 74 70 65 5a 69 49 4b 6a 71 37 6d 39 7a 4b 75 77 79 74 43 6e 6c 37 50 61 79 36 50 56 79 37 65 5a 7a 4e 33 55 74 71 32 6b 34 71 2f 49 32 65 4f 72 77 4e 66 65 7a 62 76 4e 71 4c 75 75 72 73 50 51 78 4e 50 45 36 50 72 53 37 72 66 34 73 2f 73 44 76 2b 50 39 30 4d 54 54 41 4e 76 33 2b 77 37 2b 35 4f 76 64 41 66 33 4f 34 73 33 35 46 4f 51 5a 47 38 38 57 31 39 63 66 41 76 4d 59 46 4e 30 6c 4a 77 55 41 39 41 54 72 2b 52 30 52 4a 2f 77 68 48 77 73 6e 38 41 67 44 4e 44 76 35 2f 43 38 30 44 42 73 44 51 6a 4c 2b 45 7a 55 36 43 53 55 55 42 77 63 50 50 79 67 Data Ascii: W4FPal9NloRnjHWXanVpcZyYjKaZeqJ3eqNifqpvo3yDb3SNpYtxjYa7uox5i6t7u7qOw7OatpeZiIKjq7m9zKuwytCnl7Pay6PVy7eZzN3Utq2k4q/I2eOrwNfezbvNqLuursPQxNPE6PrS7rf4s/sDv+P90MTTANv3+w7+5OvdAf3O4s35FOQZG88W19cfAvMYFN0lJwUA9ATr+R0RJ/whHwsn8AgDNDv5/C80DBsDQjL+EzU6CSUUBwcPPyg
2025-03-20 13:57:42 UTC	1369	IN	Data Raw: 57 2b 55 65 59 39 56 6e 56 47 50 62 6f 43 54 57 31 79 5a 63 48 36 70 5a 48 78 6e 66 4a 75 50 69 4c 47 4b 63 5a 79 6a 69 61 6d 4f 6f 36 75 49 75 4b 6d 61 64 6e 33 42 71 70 4b 6a 6c 49 4f 53 6d 37 4f 2f 78 4b 75 63 69 36 75 74 75 61 57 75 72 39 53 79 6b 74 61 6f 6b 39 75 34 6a 39 58 54 7a 75 48 42 73 39 50 4f 33 4b 4c 49 32 65 4f 72 75 71 62 6c 79 62 44 48 35 38 50 56 33 75 79 79 32 4f 6e 7a 75 72 76 6e 37 66 50 4c 33 73 33 64 76 73 47 34 76 51 50 33 31 64 4d 4e 76 77 62 48 78 78 50 78 34 2f 55 45 46 2b 45 50 38 75 54 7a 46 4f 58 36 31 74 30 66 43 78 6b 45 39 65 50 7a 42 68 58 39 42 77 45 57 47 65 6f 76 41 65 73 30 42 51 51 49 49 4f 34 51 4e 2f 73 6f 42 68 49 33 2b 77 45 7a 49 30 62 2b 46 52 59 6b 47 44 38 69 4b 68 78 44 4a 51 30 67 52 79 6b 56 4a 45 73 75 Data Ascii: W+UeY9VnVGPboCTW1yZcH6pZHxnfJuPiLGKcZyjiamOo6uIuKmadn3BqpKjlIOSm7O/xKuci6utuaWur9Syktaok9u4j9XTzuHBs9PO3KLI2eOruqblybDH58PV3uyy2Onzurvn7fPL3s3dvsG4vQP31dMNvwbHxxPx4/UEF+EP8uTzFOX61t0fCxkE9ePzBhX9BwEWGeovAes0BQQIIO4QN/soBhI3+wEzI0b+FRYkGD8iKhxDJQ0gRykVJEsu
2025-03-20 13:57:42 UTC	1369	IN	Data Raw: 31 57 6c 70 47 55 5a 4a 70 77 6b 47 69 65 64 48 39 39 6c 6f 75 4b 73 49 43 53 68 35 36 52 67 5a 43 49 6a 48 43 45 68 6f 75 50 70 33 61 58 6b 5a 4f 76 72 72 6d 52 6f 73 4c 46 78 61 6e 41 72 5a 6d 48 30 4a 43 50 71 71 6d 67 77 36 47 6f 30 5a 69 6d 74 74 43 62 30 4a 32 76 6d 5a 75 75 6e 73 61 2b 30 39 72 4a 74 37 7a 42 33 74 37 72 78 73 75 7a 73 4c 62 6d 35 2b 58 35 38 75 33 71 31 2f 62 78 37 38 72 78 35 50 50 58 2f 76 6e 34 35 63 58 32 32 77 50 69 38 4e 72 4b 7a 51 44 73 30 74 4c 34 7a 2f 73 61 45 64 4d 41 48 68 48 58 42 43 49 68 32 77 67 6d 49 64 38 4d 4b 75 58 6a 45 43 34 78 35 78 51 79 35 75 73 59 4e 76 58 76 48 44 73 4d 43 42 34 4e 48 51 45 7a 4c 44 6f 62 2f 52 51 32 53 79 59 4a 2f 68 30 75 49 45 52 41 55 6c 4d 74 4b 79 4e 47 56 68 6b 6e 4c 44 31 51 46 Data Ascii: 1WlpGUZJpwkGiedH99louKsICSh56RgZCIjHCEhouPp3aXkZOvrrmRosLFxanArZmH0JCPqqmgw6Go0ZimttCb0J2vmZuunsa+09rJt7zB3t7rxsuzsLbm5+X58u3q1/bx78rx5PPX/vn45cX22wPi8NrKzQDs0tL4z/saEdMAHhHXBCIh2wgmId8MKuXjEC4x5xQy5usYNvXvHDsMCB4NHQEzLDob/RQ2SyYJ/h0uIERAUlMtKyNGVhknLD1QF
2025-03-20 13:57:42 UTC	1369	IN	Data Raw: 54 68 6d 4e 6a 71 4b 6c 39 6c 57 53 6c 69 34 61 6a 73 70 4e 73 6b 5a 43 30 6c 4c 4f 44 64 6e 78 38 68 38 47 76 6d 37 71 69 6d 72 47 42 74 4a 71 36 68 6f 4f 62 6e 6f 79 4f 72 73 36 54 77 36 47 70 6b 35 69 79 7a 70 76 4f 6a 36 37 57 6f 4c 69 35 73 39 65 6b 70 74 62 58 79 4f 6e 69 33 63 33 48 35 75 48 53 79 2b 72 6c 35 63 2f 75 36 65 72 54 38 75 33 76 31 2f 62 78 39 4e 76 36 39 66 48 66 2f 76 6e 32 34 77 50 39 2b 39 62 39 38 41 44 6a 43 77 59 46 38 64 45 44 35 77 2f 75 2f 4e 55 4b 33 77 73 66 33 74 34 46 32 77 67 6d 48 64 38 4d 4b 68 33 6a 45 43 34 74 35 78 51 79 4c 65 73 59 4e 76 48 76 48 44 6f 37 4d 43 6f 32 4c 52 77 30 41 51 49 78 50 42 6c 46 52 78 38 31 42 78 6b 4e 4b 41 38 2f 54 55 55 4e 49 42 63 7a 4b 6b 64 55 54 52 55 6e 53 46 59 2b 54 31 78 6c 48 53 Data Ascii: ThmNjqKl9lWSli4ajspNskZC0lLODdnx8h8Gvm7qimrGBtJq6hoObnoyOrs6Tw6Gpk5iyzpvOj67WoLi5s9ekptbXyOni3c3H5uHSy+rl5c/u6erT8u3v1/bx9Nv69fHf/vn24wP9+9b98ADjCwYF8dED5w/u/NUK3wsf3t4F2wgmHd8MKh3jEC4t5xQyLesYNvHvHDo7MCo2LRw0AQIxPBlFRx81BxkNKA8/TUUNIBczKkdUTRUnSFY+T1xlHS
2025-03-20 13:57:42 UTC	1369	IN	Data Raw: 6d 6f 6d 66 6d 5a 39 74 6a 35 32 6a 63 61 4f 6a 65 61 70 7a 68 59 69 47 73 72 31 7a 73 5a 64 39 6e 4a 4f 78 77 36 72 48 77 35 79 36 79 63 32 72 70 73 50 53 73 36 69 30 77 4a 58 4a 71 5a 6e 47 71 64 2b 2f 6e 37 37 69 6d 39 69 58 33 4e 61 61 6f 37 4f 2f 70 63 53 37 32 65 76 53 37 2b 76 45 34 76 48 31 30 38 37 72 2b 74 76 51 33 4f 69 39 38 64 48 42 38 4d 54 32 37 2f 33 65 42 77 44 39 44 2b 6e 4d 77 75 44 78 34 77 67 45 46 68 66 77 37 75 59 4b 47 74 7a 71 37 77 45 55 32 50 6a 76 32 2f 6b 6d 46 68 51 62 43 76 63 4c 2b 43 33 6e 44 50 76 70 4d 77 38 44 4e 77 6f 30 42 4f 30 47 43 7a 62 36 4e 52 77 76 4f 6a 67 41 4f 6a 34 43 4a 44 77 63 42 51 64 42 4d 53 4d 6c 53 68 41 72 4d 45 51 6f 45 69 4a 49 4c 30 56 59 4b 46 41 2f 54 6d 52 64 54 56 59 36 57 56 46 55 58 44 6f Data Ascii: momfmZ9tj52jcaOjeapzhYiGsr1zsZd9nJOxw6rHw5y6yc2rpsPSs6i0wJXJqZnGqd+/n77im9iX3Naao7O/pcS72evS7+vE4vH1087r+tvQ3Oi98dHB8MT27/3eBwD9D+nMwuDx4wgEFhfw7uYKGtzq7wEU2Pjv2/kmFhQbCvcL+C3nDPvpMw8DNwo0BO0GCzb6NRwvOjgAOj4CJDwcBQdBMSMlShArMEQoEiJIL0VYKFA/TmRdTVY6WVFUXDo
2025-03-20 13:57:42 UTC	1369	IN	Data Raw: 49 43 47 67 34 47 31 63 6f 53 54 75 70 61 4a 6d 4a 4f 41 73 62 4f 65 78 48 36 77 78 61 69 69 70 71 4b 36 71 62 2b 35 76 34 32 76 76 63 4f 52 77 38 4f 5a 79 71 6e 58 71 4b 62 53 33 5a 50 52 74 35 32 38 73 39 48 6a 79 75 66 6a 76 4e 72 70 37 63 76 47 34 2f 4c 54 79 4e 54 67 74 65 6e 4a 75 65 62 4a 41 4e 2b 2f 33 67 4f 37 2b 4c 66 38 39 72 72 44 30 39 2f 46 35 4e 76 35 44 50 49 51 44 4f 51 44 45 68 62 7a 37 67 77 62 2b 2f 44 38 43 64 30 53 38 65 45 52 35 42 63 51 48 76 34 6d 34 78 6f 76 43 75 7a 69 41 52 49 45 4b 43 51 32 4e 78 45 50 42 79 6f 36 2f 41 73 51 49 54 54 34 47 52 44 37 47 6b 59 32 4e 44 73 71 47 42 73 67 54 6b 4d 73 42 55 4a 4b 45 43 52 47 45 44 51 6d 4a 42 63 58 4b 7a 6b 78 4e 54 52 6a 4f 55 41 64 4d 43 41 79 49 54 64 4e 61 46 35 67 54 31 34 71 Data Ascii: ICGg4G1coSTupaJmJOAsbOexH6wxaiipqK6qb+5v42vvcORw8OZyqnXqKbS3ZPRt528s9HjyufjvNrp7cvG4/LTyNTgtenJuebJAN+/3gO7+Lf89rrD09/F5Nv5DPIQDOQDEhbz7gwb+/D8Cd0S8eER5BcQHv4m4xovCuziARIEKCQ2NxEPByo6/AsQITT4GRD7GkY2NDsqGBsgTkMsBUJKECRGEDQmJBcXKzkxNTRjOUAdMCAyITdNaF5gT14q

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:43 UTC	519	OUT	GET /page/images/favicon.ico HTTP/1.1 Host: log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=j7u9mr36f6gcl04foin66g2b6k
2025-03-20 13:57:43 UTC	390	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:43 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Tue, 17 Sep 2024 02:03:54 GMT ETag: "47e-6224719f87680" Accept-Ranges: bytes Content-Length: 1150 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Content-Type: image/vnd.microsoft.icon
2025-03-20 13:57:43 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 f5 c2 50 ff f3 b2 24 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b3 25 ff f3 b2 22 ff f9 d2 7d ff 8a a4 fa ff 39 65 f5 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3c 68 f6 ff 3b 66 f6 ff 63 86 f8 ff f3 b7 32 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a5 00 ff f0 a4 00 ff f7 ca 66 ff 77 95 f9 ff 18 4b f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1c 4e f3 ff 1a 4c f3 ff 49 71 f6 ff f3 b7 33 ff f0 a5 00 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a6 01 ff f0 a5 00 ff f7 cb 67 ff 77 96 f9 ff 19 4c f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1d 4f f3 ff 1b 4e f3 ff 4a 72 f6 ff f3 Data Ascii: h( P$%%%%"}9e<h<h<h<h;fc2fwKNNNNLIq3gwLOOOONJr

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:43 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/800791795:1742476688:_zzlGi28I8UOuUWpUsti_Jb59zKUHDX1aoPZ0i-MkRg/9235b8533bd15e71/RfaGlC5EfKG6mQLRkPH6RRxHB1olWw7a6INf8t90Kqc-1742479061-1.1.1.1-Ekj8CxjVdg.WjyoCaKx5KGtoqkYzCLF2I6USpqOg4HHEVx2KowOUkDtXMuhfAsLt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:43 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 20 Mar 2025 13:57:43 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: nd8BHVF9Rt7ODHPOYf7UWwkOTf+hAPG6m8aowuzRZef/pzJcPwXo7OAxT9LdqGdYtd7BOYMcL/cdAjElohic/w==$sjBfL0Y3qJOxc4kV0K3UgQ== Server: cloudflare CF-RAY: 9235b8651c05c5dc-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 13:57:43 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:43 UTC	856	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/9235b8533bd15e71/1742479062605/0c05e72bac8aeaf1562513e632521d18d9e6c106eef0c04661a7f26f8afbd0f4/C_BSFlA2GAYSqaj HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kw61j/0x4AAAAAABAp6-kXqH26cSAg/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:44 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 20 Mar 2025 13:57:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-20 13:57:44 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 44 41 58 6e 4b 36 79 4b 36 76 46 57 4a 52 50 6d 4d 6c 49 64 47 4e 6e 6d 77 51 62 75 38 4d 42 47 59 61 66 79 62 34 72 37 30 50 51 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gDAXnK6yK6vFWJRPmMlIdGNnmwQbu8MBGYafyb4r70PQAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-20 13:57:44 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:45 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/b/d/9235b8533bd15e71/1742479062605/ZfgNLAE-7bNqlvh HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kw61j/0x4AAAAAABAp6-kXqH26cSAg/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:45 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:45 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9235b86d7d35238e-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 13:57:45 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 31 00 00 00 64 08 02 00 00 00 a0 bd 4f 0f 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR1dOIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:46 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/800791795:1742476688:_zzlGi28I8UOuUWpUsti_Jb59zKUHDX1aoPZ0i-MkRg/9235b8533bd15e71/RfaGlC5EfKG6mQLRkPH6RRxHB1olWw7a6INf8t90Kqc-1742479061-1.1.1.1-Ekj8CxjVdg.WjyoCaKx5KGtoqkYzCLF2I6USpqOg4HHEVx2KowOUkDtXMuhfAsLt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 39041 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: RfaGlC5EfKG6mQLRkPH6RRxHB1olWw7a6INf8t90Kqc-1742479061-1.1.1.1-Ekj8CxjVdg.WjyoCaKx5KGtoqkYzCLF2I6USpqOg4HHEVx2KowOUkDtXMuhfAsLt cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kw61j/0x4AAAAAABAp6-kXqH26cSAg/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:46 UTC	16384	OUT	Data Raw: 57 71 45 32 72 4d 4f 6c 77 75 45 47 4e 74 50 4f 6a 41 2b 39 45 58 42 4f 2b 41 37 32 47 61 4f 50 4f 31 41 4a 61 4d 78 64 41 24 41 57 43 65 41 6c 64 65 41 70 58 41 2d 32 74 64 4f 34 47 41 74 5a 58 72 65 41 31 57 42 32 4d 34 41 78 65 58 44 63 47 41 6b 78 41 2d 32 47 50 41 52 32 47 78 62 6e 74 4a 54 39 6a 41 77 32 41 4e 77 4e 41 75 43 6e 56 4f 41 4d 67 4d 41 2b 32 4d 4e 77 41 31 72 71 4f 49 75 41 47 79 41 6d 32 61 59 61 61 5a 7a 41 58 4a 45 41 33 6f 52 32 58 62 41 4d 71 41 48 72 39 39 52 63 54 6f 4c 54 39 39 41 4d 49 69 50 38 74 75 41 4f 54 6f 6f 62 48 69 47 33 39 73 76 75 69 34 4f 41 41 4a 64 24 61 41 5a 62 6b 6f 36 6c 77 41 31 77 70 73 71 77 53 52 46 4a 78 47 4f 74 36 53 51 34 75 42 33 73 68 51 69 73 37 6f 77 31 78 2d 4e 6e 74 6d 78 36 33 72 52 77 54 6f 72 Data Ascii: WqE2rMOlwuEGNtPOjA+9EXBO+A72GaOPO1AJaMxdA$AWCeAldeApXA-2tdO4GAtZXreA1WB2M4AxeXDcGAkxA-2GPAR2GxbntJT9jAw2ANwNAuCnVOAMgMA+2MNwA1rqOIuAGyAm2aYaaZzAXJEA3oR2XbAMqAHr99RcToLT99AMIiP8tuAOToobHiG39svui4OAAJd$aAZbko6lwA1wpsqwSRFJxGOt6SQ4uB3shQis7ow1x-Nntmx63rRwTor
2025-03-20 13:57:46 UTC	16384	OUT	Data Raw: 45 4d 6b 7a 34 41 35 38 51 62 58 64 61 34 30 57 4c 4c 64 61 35 41 34 30 65 4c 61 35 4e 6c 61 6b 47 77 65 41 4f 65 4f 61 41 51 30 34 41 44 59 6d 6c 6e 75 48 58 35 5a 37 30 2d 30 79 30 6d 75 45 39 71 58 46 61 78 36 35 59 41 2d 41 56 2b 4a 7a 4d 6b 6d 38 36 41 37 32 2d 41 61 41 5a 41 6b 6e 32 32 32 44 69 41 42 79 50 6a 35 64 41 24 52 4b 30 53 30 7a 59 6d 2d 30 38 38 7a 53 68 58 30 4d 65 74 35 6d 6d 41 64 30 65 63 52 71 32 39 30 46 76 52 49 30 48 41 6b 63 6d 6b 30 6c 61 74 38 52 45 32 53 41 45 30 52 63 30 6b 30 43 30 52 41 41 46 61 4d 41 4d 73 41 50 41 75 76 52 45 41 51 2d 62 32 58 4e 41 5a 41 35 77 4d 66 41 66 50 47 78 4f 5a 41 6d 41 39 6b 6d 4d 66 69 7a 4c 62 32 6b 61 78 45 41 41 4f 4a 47 71 7a 6b 6d 4b 47 6c 45 48 67 46 7a 45 37 61 35 66 41 58 41 42 66 4f Data Ascii: EMkz4A58QbXda40WLLda5A40eLa5NlakGweAOeOaAQ04ADYmlnuHX5Z70-0y0muE9qXFax65YA-AV+JzMkm86A72-AaAZAkn222DiAByPj5dA$RK0S0zYm-088zShX0Met5mmAd0ecRq290FvRI0HAkcmk0lat8RE2SAE0Rc0k0C0RAAFaMAMsAPAuvREAQ-b2XNAZA5wMfAfPGxOZAmA9kmMfizLb2kaxEAAOJGqzkmKGlEHgFzE7a5fAXABfO
2025-03-20 13:57:46 UTC	6273	OUT	Data Raw: 42 42 62 66 41 62 76 38 65 4f 66 6a 65 41 52 50 43 6a 30 75 36 42 67 66 45 76 6e 42 6e 6c 42 31 69 56 6b 77 7a 68 43 75 64 59 72 32 73 50 41 32 43 32 54 5a 35 38 46 41 38 6d 75 44 61 4e 33 35 2b 6f 6c 36 24 39 32 33 5a 4e 6a 67 70 65 33 79 52 50 5a 54 32 43 30 72 75 4d 63 5a 58 52 39 30 47 44 77 67 6e 61 6d 6f 42 36 58 5a 39 30 71 7a 4c 58 36 39 6d 78 35 2d 44 2d 39 56 79 44 50 67 66 61 36 7a 63 53 39 63 39 76 75 47 4d 67 77 6a 71 50 44 46 2d 6e 65 71 6a 42 32 50 68 6b 54 76 69 6a 32 58 34 48 42 41 51 72 6a 61 51 70 44 6f 75 4d 38 39 24 46 58 72 71 71 6d 44 35 6f 50 6d 6e 52 68 39 71 48 42 43 57 6c 43 30 39 61 33 35 6a 41 36 57 63 43 57 79 7a 6f 61 44 32 6d 6c 42 62 58 72 7a 36 2d 59 58 57 6d 59 2d 59 70 63 2d 24 59 31 49 31 5a 64 32 35 2d 58 7a 78 79 51 Data Ascii: BBbfAbv8eOfjeARPCj0u6BgfEvnBnlB1iVkwzhCudYr2sPA2C2TZ58FA8muDaN35+ol6$923ZNjgpe3yRPZT2C0ruMcZXR90GDwgnamoB6XZ90qzLX69mx5-D-9VyDPgfa6zcS9c9vuGMgwjqPDF-neqjB2PhkTvij2X4HBAQrjaQpDouM89$FXrqqmD5oPmnRh9qHBCWlC09a35jA6WcCWyzoaD2mlBbXrz6-YXWmY-Ypc-$Y1I1Zd25-XzxyQ
2025-03-20 13:57:46 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:46 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28188 Connection: close cf-chl-gen: zmMy077I7/TwqBYd/G//5SuWbgcjEdL7qCYQsTYXgPreU+ubE5nFy5JtYTNddLHx$ug2ULf/QCpo8XzZtTa+MZg== Server: cloudflare CF-RAY: 9235b8752f9643e6-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 13:57:46 UTC	1047	IN	Data Raw: 75 62 50 49 74 71 4b 45 78 36 57 2f 78 4d 2b 72 76 59 54 55 6b 70 43 6a 71 63 6e 49 6c 64 50 4e 7a 4a 71 70 76 4e 65 65 75 4a 2f 53 76 4f 69 6c 70 4c 62 58 79 39 71 39 31 38 6e 6a 36 50 44 75 76 65 4c 41 31 65 72 4c 30 63 76 71 33 39 33 56 38 2f 63 46 2f 73 33 63 30 4e 6a 30 78 41 7a 56 41 64 37 4a 43 38 66 45 33 4f 55 46 44 75 33 73 43 41 63 64 7a 74 6a 71 45 50 51 55 43 39 76 66 49 68 4d 6d 39 4f 54 32 47 4f 4d 70 44 2f 6b 49 48 78 7a 74 4c 2f 33 6f 41 51 67 6d 4d 68 49 5a 4c 66 76 34 2b 67 41 4c 46 7a 4d 66 41 79 49 7a 52 52 70 49 4f 55 6c 41 4b 77 6f 64 47 77 30 69 4c 53 64 57 4b 68 4e 62 4c 41 39 56 55 6c 70 51 51 54 4e 50 55 78 31 6c 59 6b 55 32 61 55 77 2b 4f 7a 68 75 53 54 35 67 58 32 39 41 59 6e 4a 71 55 58 4e 64 5a 6c 4a 78 55 57 70 53 59 31 31 Data Ascii: ubPItqKEx6W/xM+rvYTUkpCjqcnIldPNzJqpvNeeuJ/SvOilpLbXy9q918nj6PDuveLA1erL0cvq393V8/cF/s3c0Nj0xAzVAd7JC8fE3OUFDu3sCAcdztjqEPQUC9vfIhMm9OT2GOMpD/kIHxztL/3oAQgmMhIZLfv4+gALFzMfAyIzRRpIOUlAKwodGw0iLSdWKhNbLA9VUlpQQTNPUx1lYkU2aUw+OzhuST5gX29AYnJqUXNdZlJxUWpSY11
2025-03-20 13:57:46 UTC	1369	IN	Data Raw: 57 32 4c 43 6f 32 74 7a 49 72 4c 71 79 74 37 43 62 34 72 57 35 75 36 6a 43 75 37 32 6d 33 66 44 4c 72 64 4c 49 39 73 6a 46 79 4c 61 77 31 38 76 4e 74 75 32 34 32 4f 2f 43 78 50 54 53 34 64 49 4a 31 74 33 55 37 51 72 77 44 73 2f 6d 41 63 76 6f 46 2b 58 34 37 75 4c 71 36 42 33 78 33 75 76 36 39 65 4c 79 4a 66 49 43 38 2f 49 43 36 52 77 65 2b 43 77 79 4d 54 4d 48 46 51 73 48 49 67 51 53 42 76 6f 51 46 77 38 50 44 55 42 42 47 51 55 38 4a 7a 6c 44 43 68 77 33 48 51 77 2f 4c 69 77 61 44 55 49 75 45 52 41 79 53 42 59 78 4d 45 34 32 57 6b 78 65 49 44 64 52 5a 6c 39 6e 4e 30 6b 2b 49 32 59 33 57 6a 67 2f 5a 45 49 73 54 6d 55 77 64 31 42 43 61 58 4d 7a 4e 45 64 2f 55 57 46 57 62 57 42 51 58 31 64 62 50 31 4e 56 57 6c 74 67 67 47 68 67 59 31 78 39 69 34 71 56 64 46 Data Ascii: W2LCo2tzIrLqyt7Cb4rW5u6jCu72m3fDLrdLI9sjFyLaw18vNtu242O/CxPTS4dIJ1t3U7QrwDs/mAcvoF+X47uLq6B3x3uv69eLyJfIC8/IC6Rwe+CwyMTMHFQsHIgQSBvoQFw8PDUBBGQU8JzlDChw3HQw/LiwaDUIuERAySBYxME42WkxeIDdRZl9nN0k+I2Y3Wjg/ZEIsTmUwd1BCaXMzNEd/UWFWbWBQX1dbP1NVWltggGhgY1x9i4qVdF
2025-03-20 13:57:46 UTC	1369	IN	Data Raw: 32 61 2f 4d 73 75 47 65 30 4c 58 6c 6f 74 53 38 36 61 62 59 76 2b 32 71 33 4d 62 78 72 75 44 4a 75 50 48 4f 35 39 58 65 2f 74 54 67 31 65 77 45 30 76 49 45 78 74 44 55 2b 73 4c 6e 2b 67 2f 71 2b 39 33 4d 30 77 6a 39 46 65 66 54 35 76 44 74 45 4f 37 7a 33 64 67 44 2b 50 30 57 42 51 6a 67 38 75 45 72 34 53 63 75 2f 51 62 6e 42 75 54 79 4a 52 55 34 38 41 63 49 46 67 6f 78 46 42 77 4f 4e 52 66 2b 45 6a 6b 62 42 78 59 39 49 42 4d 57 46 6a 34 58 52 45 55 6f 49 43 74 41 56 44 38 34 56 45 78 55 4f 30 67 56 46 56 56 51 55 79 4e 5a 4c 30 38 6e 58 54 4d 39 4b 32 45 33 4c 43 39 6c 4f 32 73 7a 61 55 42 6a 58 32 70 49 62 46 6c 6d 62 55 78 4b 55 45 79 41 51 6e 49 33 55 58 39 62 5a 6b 6c 56 69 46 79 48 6a 32 46 2b 61 58 4e 30 64 56 56 2f 65 46 56 6d 67 33 78 5a 65 6f 65 Data Ascii: 2a/MsuGe0LXlotS86abYv+2q3MbxruDJuPHO59Xe/tTg1ewE0vIExtDU+sLn+g/q+93M0wj9FefT5vDtEO7z3dgD+P0WBQjg8uEr4Scu/QbnBuTyJRU48AcIFgoxFBwONRf+EjkbBxY9IBMWFj4XREUoICtAVD84VExUO0gVFVVQUyNZL08nXTM9K2E3LC9lO2szaUBjX2pIbFlmbUxKUEyAQnI3UX9bZklViFyHj2F+aXN0dVV/eFVmg3xZeoe
2025-03-20 13:57:46 UTC	1369	IN	Data Raw: 73 65 6a 32 39 4c 4c 70 36 54 57 7a 36 79 39 32 74 4f 77 30 64 37 58 73 75 76 69 32 37 61 30 35 74 2b 37 79 64 4c 52 31 4d 2f 75 35 38 50 6c 79 73 58 56 42 66 37 49 44 67 76 2b 38 76 33 48 41 2b 58 76 30 67 58 73 47 74 59 4a 37 78 37 61 44 66 59 69 33 68 48 35 36 43 49 44 47 41 59 50 4c 2f 34 52 42 68 33 38 42 7a 55 58 44 51 51 56 4c 77 6f 4f 4a 76 51 57 48 69 77 34 4f 52 34 6a 52 55 4d 65 4b 68 38 6e 50 68 5a 45 44 7a 78 42 51 6b 5a 55 54 55 68 4c 4d 6c 46 4d 53 44 5a 56 55 45 30 36 57 56 52 53 4c 56 52 48 56 6a 70 68 58 46 74 49 4b 46 6b 2b 5a 55 56 63 5a 6e 5a 57 4c 6c 4e 4d 51 6d 68 6c 54 58 78 66 63 58 70 42 51 44 31 37 64 6b 64 66 66 6c 70 73 65 6b 56 6e 6b 46 42 5a 57 32 4e 69 61 6d 32 46 63 58 56 53 61 5a 71 46 6b 33 35 77 58 56 6d 41 6a 33 69 42 Data Ascii: sej29LLp6TWz6y92tOw0d7Xsuvi27a05t+7ydLR1M/u58PlysXVBf7IDgv+8v3HA+Xv0gXsGtYJ7x7aDfYi3hH56CIDGAYPL/4RBh38BzUXDQQVLwoOJvQWHiw4OR4jRUMeKh8nPhZEDzxBQkZUTUhLMlFMSDZVUE06WVRSLVRHVjphXFtIKFk+ZUVcZnZWLlNMQmhlTXxfcXpBQD17dkdfflpsekVnkFBZW2Niam2FcXVSaZqFk35wXVmAj3iB
2025-03-20 13:57:46 UTC	1369	IN	Data Raw: 66 59 76 65 54 45 32 2b 50 6e 73 2b 44 4f 74 4c 54 61 73 64 33 37 38 72 58 68 41 50 4b 35 35 51 51 44 76 65 6b 49 78 4e 58 71 78 65 7a 62 2b 77 67 54 43 64 54 71 42 51 30 4c 31 68 6e 72 31 2b 6b 54 38 78 45 42 49 2f 54 74 46 76 67 6c 33 77 4d 72 2b 51 30 43 48 53 58 77 4d 51 73 66 43 78 59 58 4b 7a 4d 6b 2b 76 50 32 4a 76 64 41 48 52 73 58 47 41 37 33 45 42 6b 36 47 6a 34 4c 50 53 59 76 51 30 6f 52 44 6a 35 45 53 69 49 6f 49 30 6b 6a 4e 43 73 70 55 79 34 78 57 69 45 37 51 6c 42 59 58 6b 4a 48 49 6d 64 42 61 45 38 37 54 6a 34 74 4c 57 64 75 64 55 63 30 52 6d 39 51 62 56 31 2f 55 55 70 79 57 59 47 47 64 59 64 5a 61 56 35 35 58 6c 6c 58 56 33 42 6e 63 6e 4f 45 6a 32 74 66 67 6f 69 4f 5a 6d 78 73 5a 35 52 63 64 6e 32 6a 63 6e 5a 35 64 6e 39 39 71 48 75 6d 71 Data Ascii: fYveTE2+Pns+DOtLTasd378rXhAPK55QQDvekIxNXqxezb+wgTCdTqBQ0L1hnr1+kT8xEBI/TtFvgl3wMr+Q0CHSXwMQsfCxYXKzMk+vP2JvdAHRsXGA73EBk6Gj4LPSYvQ0oRDj5ESiIoI0kjNCspUy4xWiE7QlBYXkJHImdBaE87Tj4tLWdudUc0Rm9QbV1/UUpyWYGGdYdZaV55XllXV3BncnOEj2tfgoiOZmxsZ5Rcdn2jcnZ5dn99qHumq
2025-03-20 13:57:46 UTC	1369	IN	Data Raw: 39 72 36 36 74 72 38 33 4f 78 64 72 38 37 75 69 36 38 72 32 36 2b 62 7a 42 78 76 76 58 31 65 62 4d 44 4d 6a 4f 33 39 72 65 38 4e 2f 75 37 64 66 4f 37 39 6b 5a 47 67 6a 30 47 68 73 55 38 77 2f 30 38 43 66 36 49 65 4c 69 39 43 37 39 4b 68 48 6e 47 69 6b 69 36 77 73 50 42 42 63 4d 4f 52 63 51 42 69 77 75 46 7a 63 37 46 54 42 41 4e 78 77 38 42 77 51 70 51 6a 64 51 48 54 34 52 51 7a 4e 4b 4a 78 51 67 56 56 4d 5a 54 55 73 62 57 52 70 4f 4d 6c 35 53 48 54 4e 43 4b 44 31 72 4e 30 49 34 53 57 30 69 53 79 74 4a 51 57 35 52 5a 31 4e 42 65 6e 63 31 4d 30 35 36 62 6a 6c 4f 66 6d 42 53 68 56 39 39 57 32 5a 54 50 6d 64 48 5a 56 32 4b 62 59 4e 76 58 5a 61 54 57 45 39 71 6c 6f 70 55 56 5a 70 38 63 57 74 2f 6b 6e 4f 6d 6f 57 47 41 6e 4b 61 64 6e 4a 5a 6d 61 36 4f 77 68 36 Data Ascii: 9r66tr83Oxdr87ui68r26+bzBxvvX1ebMDMjO39re8N/u7dfO79kZGgj0GhsU8w/08Cf6IeLi9C79KhHnGiki6wsPBBcMORcQBiwuFzc7FTBANxw8BwQpQjdQHT4RQzNKJxQgVVMZTUsbWRpOMl5SHTNCKD1rN0I4SW0iSytJQW5RZ1NBenc1M056bjlOfmBShV99W2ZTPmdHZV2KbYNvXZaTWE9qlopUVZp8cWt/knOmoWGAnKadnJZma6Owh6
2025-03-20 13:57:46 UTC	1369	IN	Data Raw: 37 74 54 76 7a 39 66 56 75 65 48 42 33 2b 41 47 34 4f 50 37 30 39 33 69 36 4d 62 6f 35 38 66 79 36 4d 72 73 30 4e 44 6b 44 41 7a 59 35 66 72 6d 38 64 62 36 38 76 4c 61 37 76 49 44 39 42 33 31 33 51 72 33 49 67 6e 6d 35 79 6b 46 39 43 67 6c 4c 42 49 54 2b 66 63 54 47 54 48 38 46 6b 50 35 2f 42 77 52 4e 68 41 6d 46 54 34 55 4a 53 6f 62 44 79 67 64 54 52 4d 73 49 55 6f 30 4c 6c 74 4a 47 7a 55 35 53 52 6b 32 59 32 45 69 4f 30 4d 2f 49 6b 46 46 53 79 68 44 4f 56 34 35 53 45 31 74 4c 6c 4a 43 51 7a 56 50 56 6b 68 45 55 33 39 78 50 56 59 36 57 30 42 63 59 58 5a 51 59 57 57 46 52 32 56 71 57 30 70 75 58 58 4e 54 62 48 47 42 56 57 36 62 55 6c 70 30 61 6d 68 38 64 70 52 72 59 6e 74 78 6f 57 56 2b 71 34 74 6c 67 34 75 48 61 6f 65 6a 6b 33 4f 4b 62 58 39 30 6a 34 61 Data Ascii: 7tTvz9fVueHB3+AG4OP7093i6Mbo58fy6Mrs0NDkDAzY5frm8db68vLa7vID9B313Qr3Ignm5ykF9CglLBIT+fcTGTH8FkP5/BwRNhAmFT4UJSobDygdTRMsIUo0LltJGzU5SRk2Y2EiO0M/IkFFSyhDOV45SE1tLlJCQzVPVkhEU39xPVY6W0BcYXZQYWWFR2VqW0puXXNTbHGBVW6bUlp0amh8dpRrYntxoWV+q4tlg4uHaoejk3OKbX90j4a

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:47 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/800791795:1742476688:_zzlGi28I8UOuUWpUsti_Jb59zKUHDX1aoPZ0i-MkRg/9235b8533bd15e71/RfaGlC5EfKG6mQLRkPH6RRxHB1olWw7a6INf8t90Kqc-1742479061-1.1.1.1-Ekj8CxjVdg.WjyoCaKx5KGtoqkYzCLF2I6USpqOg4HHEVx2KowOUkDtXMuhfAsLt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:47 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 20 Mar 2025 13:57:47 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: D2Gx62lC97hflktkyEH3JoPAPnigvRVhuaRhkcztv8pn/q08B7XBbB1XexFSfs8P/GsK4zeUnKPuYsRtse8N9A==$ECnPgbFqeWLfBpoVm4RLKA== Server: cloudflare CF-RAY: 9235b87c79cea4c6-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 13:57:47 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:51 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/800791795:1742476688:_zzlGi28I8UOuUWpUsti_Jb59zKUHDX1aoPZ0i-MkRg/9235b8533bd15e71/RfaGlC5EfKG6mQLRkPH6RRxHB1olWw7a6INf8t90Kqc-1742479061-1.1.1.1-Ekj8CxjVdg.WjyoCaKx5KGtoqkYzCLF2I6USpqOg4HHEVx2KowOUkDtXMuhfAsLt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 41511 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: RfaGlC5EfKG6mQLRkPH6RRxHB1olWw7a6INf8t90Kqc-1742479061-1.1.1.1-Ekj8CxjVdg.WjyoCaKx5KGtoqkYzCLF2I6USpqOg4HHEVx2KowOUkDtXMuhfAsLt cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/kw61j/0x4AAAAAABAp6-kXqH26cSAg/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 13:57:51 UTC	16384	OUT	Data Raw: 57 71 45 32 72 4d 4f 6c 77 75 45 47 4e 74 50 4f 6a 41 2b 39 45 58 42 4f 2b 41 37 32 47 61 4f 50 4f 31 41 4a 61 4d 78 64 41 24 41 57 43 65 41 6c 64 65 41 70 58 41 2d 32 74 64 4f 34 47 41 74 5a 58 72 65 41 31 57 42 32 4d 34 41 78 65 58 44 63 47 41 6b 78 41 2d 32 47 50 41 52 32 47 78 62 6e 74 4a 54 39 6a 41 77 32 41 4e 77 4e 41 75 43 6e 56 4f 41 4d 67 4d 41 2b 32 4d 4e 77 41 31 72 71 4f 49 75 41 47 79 41 6d 32 61 59 61 61 5a 7a 41 58 4a 45 41 33 6f 52 32 58 62 41 4d 71 41 48 72 39 39 52 63 54 6f 4c 54 39 39 41 4d 49 69 50 38 74 75 41 4f 54 6f 6f 62 48 69 47 33 39 73 76 75 69 34 4f 41 41 4a 64 24 61 41 5a 62 6b 6f 36 6c 77 41 31 77 70 73 71 77 53 52 46 4a 78 47 4f 74 36 53 51 34 75 42 33 73 68 51 69 73 37 6f 77 31 78 2d 4e 6e 74 6d 78 36 33 72 52 77 54 6f 72 Data Ascii: WqE2rMOlwuEGNtPOjA+9EXBO+A72GaOPO1AJaMxdA$AWCeAldeApXA-2tdO4GAtZXreA1WB2M4AxeXDcGAkxA-2GPAR2GxbntJT9jAw2ANwNAuCnVOAMgMA+2MNwA1rqOIuAGyAm2aYaaZzAXJEA3oR2XbAMqAHr99RcToLT99AMIiP8tuAOToobHiG39svui4OAAJd$aAZbko6lwA1wpsqwSRFJxGOt6SQ4uB3shQis7ow1x-Nntmx63rRwTor
2025-03-20 13:57:51 UTC	16384	OUT	Data Raw: 45 4d 6b 7a 34 41 35 38 51 62 58 64 61 34 30 57 4c 4c 64 61 35 41 34 30 65 4c 61 35 4e 6c 61 6b 47 77 65 41 4f 65 4f 61 41 51 30 34 41 44 59 6d 6c 6e 75 48 58 35 5a 37 30 2d 30 79 30 6d 75 45 39 71 58 46 61 78 36 35 59 41 2d 41 56 2b 4a 7a 4d 6b 6d 38 36 41 37 32 2d 41 61 41 5a 41 6b 6e 32 32 32 44 69 41 42 79 50 6a 35 64 41 24 52 4b 30 53 30 7a 59 6d 2d 30 38 38 7a 53 68 58 30 4d 65 74 35 6d 6d 41 64 30 65 63 52 71 32 39 30 46 76 52 49 30 48 41 6b 63 6d 6b 30 6c 61 74 38 52 45 32 53 41 45 30 52 63 30 6b 30 43 30 52 41 41 46 61 4d 41 4d 73 41 50 41 75 76 52 45 41 51 2d 62 32 58 4e 41 5a 41 35 77 4d 66 41 66 50 47 78 4f 5a 41 6d 41 39 6b 6d 4d 66 69 7a 4c 62 32 6b 61 78 45 41 41 4f 4a 47 71 7a 6b 6d 4b 47 6c 45 48 67 46 7a 45 37 61 35 66 41 58 41 42 66 4f Data Ascii: EMkz4A58QbXda40WLLda5A40eLa5NlakGweAOeOaAQ04ADYmlnuHX5Z70-0y0muE9qXFax65YA-AV+JzMkm86A72-AaAZAkn222DiAByPj5dA$RK0S0zYm-088zShX0Met5mmAd0ecRq290FvRI0HAkcmk0lat8RE2SAE0Rc0k0C0RAAFaMAMsAPAuvREAQ-b2XNAZA5wMfAfPGxOZAmA9kmMfizLb2kaxEAAOJGqzkmKGlEHgFzE7a5fAXABfO
2025-03-20 13:57:51 UTC	8743	OUT	Data Raw: 42 42 62 66 41 62 76 38 65 4f 66 6a 65 41 52 50 43 6a 30 75 36 42 67 66 45 76 6e 42 6e 6c 42 31 69 56 6b 77 7a 68 43 75 64 59 72 32 73 50 41 32 43 32 54 5a 35 38 46 41 38 6d 75 44 61 4e 33 35 2b 6f 6c 36 24 39 32 33 5a 4e 6a 67 70 65 33 79 52 50 5a 54 32 43 30 72 75 4d 63 5a 58 52 39 30 47 44 77 67 6e 61 6d 6f 42 36 58 5a 39 30 71 7a 4c 58 36 39 6d 78 35 2d 44 2d 39 56 79 44 50 67 66 61 36 7a 63 53 39 63 39 76 75 47 4d 67 77 6a 71 50 44 46 2d 6e 65 71 6a 42 32 50 68 6b 54 76 69 6a 32 58 34 48 42 41 51 72 6a 61 51 70 44 6f 75 4d 38 39 24 46 58 72 71 71 6d 44 35 6f 50 6d 6e 52 68 39 71 48 42 43 57 6c 43 30 39 61 33 35 6a 41 36 57 63 43 57 79 7a 6f 61 44 32 6d 6c 42 62 58 72 7a 36 2d 59 58 57 6d 59 2d 59 70 63 2d 24 59 31 49 31 5a 64 32 35 2d 58 7a 78 79 51 Data Ascii: BBbfAbv8eOfjeARPCj0u6BgfEvnBnlB1iVkwzhCudYr2sPA2C2TZ58FA8muDaN35+ol6$923ZNjgpe3yRPZT2C0ruMcZXR90GDwgnamoB6XZ90qzLX69mx5-D-9VyDPgfa6zcS9c9vuGMgwjqPDF-neqjB2PhkTvij2X4HBAQrjaQpDouM89$FXrqqmD5oPmnRh9qHBCWlC09a35jA6WcCWyzoaD2mlBbXrz6-YXWmY-Ypc-$Y1I1Zd25-XzxyQ
2025-03-20 13:57:52 UTC	282	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 5232 Connection: close cf-chl-out: PND+HBmYsIhhHNMwPX4ZqWvOOb5cjasbABrGfHNUxPLLGPdxr8OGhNxI7I5VE2sZK4pKQEhMqUQCBh5V4okXXsnNMY29DZFzkA6O60uUdMU=$4BLEVhcfsB52g74Pup6bbg==
2025-03-20 13:57:52 UTC	1319	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 30 77 30 62 51 57 31 6b 47 6c 56 37 69 57 71 57 50 54 59 4a 54 65 50 4b 2f 4a 4e 61 61 4b 49 4e 54 36 66 39 58 69 79 62 78 62 6b 61 39 63 41 33 61 69 42 33 32 6a 75 4b 54 32 32 4e 53 7a 72 76 74 51 30 52 37 77 53 51 67 61 50 6a 73 43 66 41 64 48 2f 65 4d 55 56 31 6a 32 41 35 4e 44 34 63 75 46 6b 4e 72 4a 77 76 33 65 58 64 70 45 56 75 30 6b 79 68 35 73 7a 4e 6f 6c 44 2b 4c 6b 56 7a 59 34 37 7a 72 6b 42 4f 2b 6e 63 76 36 78 6f 68 49 34 4d 78 70 51 74 51 41 64 4e 6d 6b 67 73 33 45 58 44 62 72 45 4b 4b 59 71 36 7a 49 46 6e 65 52 67 41 4c 64 38 43 61 48 67 36 54 48 68 64 57 35 4f 53 4b 6b 6f 70 55 45 37 37 50 42 34 42 32 78 34 52 41 43 4f 37 73 74 4e 6e 51 64 4a 49 43 34 6e 64 2f 78 37 56 31 57 7a 65 2b 6d 46 55 61 34 Data Ascii: cf-chl-out-s: 0w0bQW1kGlV7iWqWPTYJTePK/JNaaKINT6f9Xiybxbka9cA3aiB32juKT22NSzrvtQ0R7wSQgaPjsCfAdH/eMUV1j2A5ND4cuFkNrJwv3eXdpEVu0kyh5szNolD+LkVzY47zrkBO+ncv6xohI4MxpQtQAdNmkgs3EXDbrEKKYq6zIFneRgALd8CaHg6THhdW5OSKkopUE77PB4B2x4RACO7stNnQdJIC4nd/x7V1Wze+mFUa4
2025-03-20 13:57:52 UTC	1137	IN	Data Raw: 75 62 50 49 74 71 4b 45 78 36 57 2f 78 4d 2b 72 76 59 54 55 6b 70 43 69 77 70 58 4c 6c 72 57 72 31 73 66 4d 32 70 50 65 72 4c 50 52 74 74 71 68 32 73 75 38 71 36 75 32 76 74 37 4e 36 73 6e 44 35 65 37 4e 78 2b 76 4c 31 65 33 76 75 4f 36 2f 76 38 72 4f 38 75 4c 6c 42 4f 48 36 32 67 6a 68 2b 75 48 64 35 4d 2f 70 79 51 50 75 30 42 51 58 44 4f 6b 45 48 68 72 30 49 64 4c 63 37 68 50 6a 47 4f 48 5a 2f 52 77 6e 4b 76 6a 6f 2b 68 76 71 4a 4f 7a 72 37 53 58 78 38 54 4d 43 37 41 55 59 4b 66 6e 33 41 44 63 55 45 69 49 33 4b 42 30 4a 4e 79 46 4b 46 77 6b 63 49 51 78 45 44 54 38 55 55 54 63 51 45 30 55 57 55 44 42 50 4e 30 42 54 56 31 31 43 55 6d 42 43 48 79 52 6a 4e 69 49 33 54 46 34 75 62 55 4d 70 55 69 30 32 62 31 42 6c 55 31 78 38 54 46 35 54 61 6f 4a 57 63 6e 35 Data Ascii: ubPItqKEx6W/xM+rvYTUkpCiwpXLlrWr1sfM2pPerLPRttqh2su8q6u2vt7N6snD5e7Nx+vL1e3vuO6/v8rO8uLlBOH62gjh+uHd5M/pyQPu0BQXDOkEHhr0IdLc7hPjGOHZ/RwnKvjo+hvqJOzr7SXx8TMC7AUYKfn3ADcUEiI3KB0JNyFKFwkcIQxEDT8UUTcQE0UWUDBPN0BTV11CUmBCHyRjNiI3TF4ubUMpUi02b1BlU1x8TF5TaoJWcn5
2025-03-20 13:57:52 UTC	1369	IN	Data Raw: 52 38 4a 32 75 6b 68 48 66 72 57 46 76 6f 6a 2b 41 4c 70 4b 67 51 49 39 69 37 2b 2f 43 6e 79 35 6a 59 4c 49 67 30 55 41 7a 77 4b 50 54 6e 34 47 51 6f 6a 2f 68 41 51 52 68 41 55 45 79 64 44 48 42 6b 69 44 43 67 74 53 56 45 69 52 30 59 68 4a 45 64 63 46 53 30 6f 56 55 6b 58 55 7a 34 69 4f 68 77 65 58 7a 39 71 4e 7a 55 2b 58 6c 67 71 52 54 31 50 56 55 70 6e 50 32 41 72 55 32 6c 5a 4d 31 5a 73 50 46 4e 77 59 31 49 33 63 7a 35 51 55 6f 70 47 68 47 47 4e 59 34 74 6c 62 48 4e 6e 59 5a 4e 4f 67 57 52 7a 5a 6c 56 71 6e 59 31 37 64 6e 31 37 6f 33 43 6b 6c 47 46 2b 67 71 47 45 64 71 35 6d 69 33 75 4b 6b 34 4b 44 6b 6f 4f 76 6b 4a 47 31 70 49 32 47 74 62 79 4c 73 6f 74 39 6c 4b 47 6e 6b 4a 2b 53 68 59 65 62 70 72 6d 2f 6e 39 47 6e 31 61 69 66 70 38 2b 75 32 4e 57 35 Data Ascii: R8J2ukhHfrWFvoj+ALpKgQI9i7+/Cny5jYLIg0UAzwKPTn4GQoj/hAQRhAUEydDHBkiDCgtSVEiR0YhJEdcFS0oVUkXUz4iOhweXz9qNzU+XlgqRT1PVUpnP2ArU2lZM1ZsPFNwY1I3cz5QUopGhGGNY4tlbHNnYZNOgWRzZlVqnY17dn17o3CklGF+gqGEdq5mi3uKk4KDkoOvkJG1pI2GtbyLsot9lKGnkJ+ShYebprm/n9Gn1aifp8+u2NW5
2025-03-20 13:57:52 UTC	1369	IN	Data Raw: 7a 35 4a 79 58 68 41 41 49 64 41 51 55 4a 44 2b 67 49 2f 44 48 79 43 69 63 70 38 52 41 46 38 66 63 53 4c 7a 58 37 47 41 30 31 41 68 73 68 4f 52 77 55 46 68 4d 49 4a 53 6c 4a 44 69 63 74 52 53 49 72 4d 55 45 74 49 7a 56 54 44 6c 52 54 4e 78 63 35 56 56 31 54 50 44 5a 57 56 6d 6f 32 4b 44 39 4b 5a 79 78 61 51 55 59 78 53 30 4a 75 52 32 52 53 55 79 31 34 56 46 6b 35 62 6e 64 42 56 47 31 56 59 59 64 59 67 59 74 71 57 6e 31 47 64 30 4b 47 62 46 35 71 6c 6c 53 58 61 59 5a 78 65 33 78 2b 69 49 65 41 57 35 53 4c 68 46 39 64 6a 34 68 6b 63 6e 74 36 66 58 69 58 6b 47 79 4f 63 32 35 2b 72 61 64 78 69 62 69 6d 73 62 4a 33 71 59 36 2b 65 36 32 56 77 6e 2b 78 6d 4d 61 44 74 5a 2b 65 6e 62 65 6b 77 72 71 53 30 64 4b 2f 6a 73 79 51 71 63 50 4f 72 4e 43 39 79 74 47 77 72 Data Ascii: z5JyXhAAIdAQUJD+gI/DHyCicp8RAF8fcSLzX7GA01AhshORwUFhMIJSlJDictRSIrMUEtIzVTDlRTNxc5VV1TPDZWVmo2KD9KZyxaQUYxS0JuR2RSUy14VFk5bndBVG1VYYdYgYtqWn1Gd0KGbF5qllSXaYZxe3x+iIeAW5SLhF9dj4hkcnt6fXiXkGyOc25+radxibimsbJ3qY6+e62Vwn+xmMaDtZ+enbekwrqS0dK/jsyQqcPOrNC9ytGwr
2025-03-20 13:57:52 UTC	1357	IN	Data Raw: 32 42 76 6e 32 4c 4f 6a 37 43 79 55 44 41 77 41 70 44 41 50 76 47 79 55 4a 46 6a 58 34 46 76 67 50 2f 68 51 33 48 7a 50 2b 46 53 6f 49 47 69 67 76 4d 52 6b 72 52 52 45 69 48 6b 6b 54 4a 54 4e 59 47 69 64 4f 4e 68 38 30 4b 7a 63 79 4f 31 63 37 50 54 34 30 4a 6d 6b 6a 53 43 30 71 4a 7a 74 68 54 55 46 6e 61 55 64 47 61 54 4a 4b 55 6c 65 41 4d 6b 35 4c 63 54 39 61 58 32 4e 7a 50 33 64 48 61 56 6c 6e 62 33 70 6a 66 33 4e 4d 61 34 56 53 5a 32 69 4c 68 56 52 6f 6a 34 32 41 64 56 70 2f 6b 6d 2b 6c 65 33 6c 7a 71 4a 32 43 66 59 69 68 61 33 75 4c 67 6e 52 31 70 62 47 41 68 6f 57 34 64 59 32 38 76 5a 2b 58 6d 37 48 42 6a 62 4f 78 73 61 47 33 79 61 61 69 7a 37 6d 6c 6e 73 4f 72 72 71 69 4d 6a 71 79 6a 32 39 6e 48 73 64 2f 5a 72 36 79 36 6f 72 57 36 72 36 4b 37 76 75 Data Ascii: 2Bvn2LOj7CyUDAwApDAPvGyUJFjX4FvgP/hQ3HzP+FSoIGigvMRkrRREiHkkTJTNYGidONh80KzcyO1c7PT40JmkjSC0qJzthTUFnaUdGaTJKUleAMk5LcT9aX2NzP3dHaVlnb3pjf3NMa4VSZ2iLhVRoj42AdVp/km+le3lzqJ2CfYiha3uLgnR1pbGAhoW4dY28vZ+Xm7HBjbOxsaG3yaaiz7mlnsOrrqiMjqyj29nHsd/Zr6y6orW6r6K7vu

Timestamp	Bytes transferred	Direction	Data
2025-03-20 13:57:52 UTC	1968	OUT	GET /?cf-turnstile-response=0.mnZ9ZcYLYtN8lWlhDNi-CqjjxIp5uXZjd7QMd1XFz7UZ3iQB8D70mlZFJvhKxPwAtLhjy1MdB519HiHrPBSFQP0yGyfVhy6PCKghz_6tv3o5JYx_vWW6qX9CVDgQkcTPuupVTfh7Le0yorRRRbQzjki9Vk7Agr7BgNbuDnp0rI3m3Ok6C7c5cyzr0qklwXCDQi_dp_DDlaakC2qI1w7dWRcClynvB22tVAgNnQ3lZGGn330cWkv_EYkH5XHP64w_TIXNSW28b0dD8dmATNq56KR09etrXFWzLw3uA7YyBBsHMQ2HVqPmucqFbbquxcJFOoEIBgnuWehrSPoMLIkcrMfhcEoabbQ9A4wVXfJfX2U2x0epQcYWoODnA3gmB6VjdyU_IpXEn1xjaBJjEIarf2Dfj5Vo_AmIVGrrRG5nYVInlWreQcPAdgrWif2390ZLUtMqmBQyQ6la0iWwf_tDob6OeLJKuJstPin1cRUbMTzlP0MmUuz-iRTArM6ZcZ3Mj0PO-XgoagajYA0aiurWxl7r_dS1PKysW9tn33eRLnKudg4UO7cekaLZg3LW71M2tLswkmoJmLffb3qqIHBWlY950m54VO2TiC4GmAcPvxKh5AG3y9LiGD6vFerg4cDtKlNy2FJLoj2qTrCYKxaKCE8fr5YAgQvpEcGyh-bDrp6bkpDd-qwccPUfQOzJ4mznVzlXqtN1LTLySNJtegexCTXFc84uA6X456fC3hFcgHrf9sfUvQhz_z2nvg10o8AvN53DGo5nshEnxkIkV1N-TEaIoyVqH5VSroi-4YhfCLsSidb2_QRGWij5V5FUVI-0547H1NFcFozvkffsZ9qvadUZ9mFixuYxBf8SHLg9bCPb-fJbEq450a8uGs4oVRfKr-z2kxT9ry4WzAQR_9QOIlyqCMJPQlf2W5qjiwdmlWOHvKyZB52ta6WCE0mNNeLZ.uO_a8nSYcnTG0_8sZx9WTQ.bc9da0623f [TRUNCATED] Host: log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://log839jhfg4yvub4b7ybef748f984rhf98hfubrfbrufih4783980hd398.apexroofingandbuildings.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=j7u9mr36f6gcl04foin66g2b6k
2025-03-20 13:57:53 UTC	434	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 13:57:52 GMT Server: Apache/2.4.52 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-20 13:57:53 UTC	7758	IN	Data Raw: 32 38 32 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 26 23 38 33 3b 26 23 31 30 31 3b 26 23 39 39 3b 26 23 31 31 37 3b 26 23 31 31 34 3b 26 23 31 30 31 3b 26 23 33 32 3b 26 23 38 39 3b 26 23 31 31 31 3b 26 23 31 31 37 3b 26 23 31 31 34 3b 26 23 33 32 3b 26 23 36 35 3b 26 23 39 39 3b 26 23 39 39 3b 26 23 31 30 31 3b 26 Data Ascii: 282d<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Secure Your Acce&
2025-03-20 13:57:53 UTC	2533	IN	Data Raw: 27 65 78 63 65 70 74 69 6f 6e 27 2c 27 5f 5f 70 72 6f 74 6f 5f 5f 27 2c 27 5c 78 35 63 2b 5c 78 35 63 2b 5c 78 32 30 2a 28 3f 3a 5b 61 2d 7a 41 2d 5a 5f 24 5d 5b 30 2d 39 61 2d 7a 41 2d 5a 5f 24 5d 2a 29 27 2c 27 39 34 35 32 33 34 77 42 73 6e 64 4a 27 2c 27 63 6f 75 6e 74 65 72 27 2c 27 68 61 73 68 27 2c 27 69 6e 69 74 27 2c 27 64 65 62 75 27 2c 27 31 35 35 30 37 38 69 72 46 4e 49 72 27 2c 27 38 42 41 69 68 53 44 27 2c 27 39 35 32 30 35 32 68 58 58 43 72 4d 27 2c 27 31 31 32 34 37 38 35 39 62 61 51 63 58 55 27 2c 27 34 51 70 51 65 4e 53 27 2c 27 35 30 36 35 31 30 34 6a 4b 49 68 45 6d 27 2c 27 65 72 72 6f 72 27 2c 27 61 70 70 6c 79 27 2c 27 6c 6f 67 27 2c 27 63 6f 6e 73 6f 6c 65 27 5d 3b 5f 30 78 35 63 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: 'exception','__proto__','\x5c+\x5c+\x20(?:[a-zA-Z_$][0-9a-zA-Z_$])','945234wBsndJ','counter','hash','init','debu','155078irFNIr','8BAihSD','952052hXXCrM','11247859baQcXU','4QpQeNS','5065104jKIhEm','error','apply','log','console'];_0x5cca=function(){retu
2025-03-20 13:57:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 13:57:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0