Overview

URLalpharoofingmelbourne.com.au/
IP 43.250.142.122 (Australia)
ASN#45638 SYNERGY WHOLESALE PTY LTD
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-25 05:29:11 UTC
StatusLoading report..
IDS alerts0
Blocklist alert23
urlquery alerts No alerts detected
Tags None

Domain Summary (26)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-24 05:30:55 UTC 34.117.237.239
fonts.googleapis.com (2) 8877 2013-06-10 20:14:26 UTC 2022-11-24 11:11:51 UTC 142.250.74.10
www.gstatic.com (3) 0 2016-07-26 09:37:06 UTC 2022-11-24 11:10:32 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
b.clarity.ms (2) 3462 No data No data 20.75.32.255
r3.o.lencr.org (5) 344 No data No data 23.36.76.226
www.google.com (1) 7 2016-03-22 03:56:07 UTC 2022-11-24 08:13:00 UTC 142.250.74.164
ocsp.sectigo.com (1) 487 2019-11-29 11:50:24 UTC 2021-09-17 20:05:40 UTC 104.18.32.68
moderate6.cleantalk.org (1) 199246 2019-01-03 13:34:33 UTC 2022-11-24 10:49:45 UTC 143.244.187.11
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-11-24 08:35:27 UTC 142.250.74.168
region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-11-24 06:15:58 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-11-24 10:18:11 UTC 142.250.74.174
stats.g.doubleclick.net (1) 96 2013-06-10 20:21:11 UTC 2022-11-24 08:34:31 UTC 142.251.1.155
alpharoofingmelbourne.com.au (1) 0 No data No data 43.250.142.122 Unknown ranking
c.bing.com (1) 247 2012-05-22 10:26:32 UTC 2020-05-07 03:37:17 UTC 204.79.197.200
www.google.no (2) 25607 2016-04-05 19:50:59 UTC 2022-11-24 08:13:55 UTC 142.250.74.3
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-24 05:36:55 UTC 34.102.187.140
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 35.167.231.108
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
ocsp.pki.goog (20) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.3
www.alpharoofingmelbourne.com.au (49) 0 2021-03-19 09:42:38 UTC 2021-05-13 16:40:22 UTC 43.250.142.122 Unknown ranking
fonts.gstatic.com (6) 0 2014-09-09 00:40:21 UTC 2022-11-24 11:09:52 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
www.googleadservices.com (1) 107 2012-07-21 05:05:30 UTC 2022-11-24 11:13:54 UTC 142.250.74.98
www.clarity.ms (1) 1404 2018-08-22 07:41:57 UTC 2020-02-17 10:26:03 UTC 13.107.246.53
c.clarity.ms (2) 803 No data No data 20.234.93.27
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-25 2 alpharoofingmelbourne.com.au/ Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/ Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/cleantalk-spam-protect/ (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor/assets/css/fr (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/uploads/elementor/css/post-6.cs (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/uploads/elementor/css/global.cs (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/wp-hide-security-enhanc (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/uploads/elementor/css/post-224. (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor/assets/lib/fo (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor/assets/lib/fo (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor/assets/lib/fo (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-includes/js/jquery/jquery-migrate.min.j (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor-pro/assets/li (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor/assets/js/web (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor-pro/assets/js (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-includes/js/dist/i18n.min.js?ver=9e794f (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor/assets/lib/an (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor/assets/lib/wa (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor-pro/assets/js (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor-pro/assets/js (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-content/plugins/elementor/assets/js/fro (...) Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 Malware
2022-11-25 2 www.alpharoofingmelbourne.com.au/wp-includes/js/dist/vendor/wp-polyfill.min (...) Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 43.250.142.122
Date UQ / IDS / BL URL IP
2022-11-25 06:28:46 +0000 0 - 0 - 17 alpharoofingmelbourne.com.au/ 43.250.142.122
2022-11-25 05:29:11 +0000 0 - 0 - 23 alpharoofingmelbourne.com.au/ 43.250.142.122


Last 5 reports on ASN: SYNERGY WHOLESALE PTY LTD
Date UQ / IDS / BL URL IP
2023-02-07 03:02:47 +0000 0 - 2 - 1 evolveretail.com.au/wp-content/uploads/typehu (...) 103.42.110.3
2023-02-07 01:25:06 +0000 0 - 2 - 1 evolveretail.com.au/wp-content/uploads/typehu (...) 103.42.110.3
2023-02-07 01:23:46 +0000 0 - 3 - 1 evolveretail.com.au/wp-content/uploads/typehu (...) 103.42.110.3
2023-02-06 02:07:05 +0000 0 - 0 - 2 www.jlhuttelectrical.com.au/ 112.140.176.160
2023-02-05 04:25:14 +0000 0 - 3 - 1 vaughancivil.com.au/wp-content/uploads/syn06c (...) 43.250.142.50


Last 2 reports on domain: alpharoofingmelbourne.com.au
Date UQ / IDS / BL URL IP
2022-11-25 06:28:46 +0000 0 - 0 - 17 alpharoofingmelbourne.com.au/ 43.250.142.122
2022-11-25 05:29:11 +0000 0 - 0 - 23 alpharoofingmelbourne.com.au/ 43.250.142.122


Last 1 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-11-25 06:28:46 +0000 0 - 0 - 17 alpharoofingmelbourne.com.au/ 43.250.142.122

JavaScript

Executed Scripts (47)

Executed Evals (5)
#1 JavaScript::Eval (size: 15159) - SHA256: f6174162d555ce0567bbf352982d319944f909d6c3bb6f046a439eb205f4b150
(function() {
    var h = function(M, B, U, l, Y, D, e, K, C, G, Q, L, P, m) {
            if ((D = S(430, B), D) >= B.H) throw [Z, 31];
            for (C = (P = (L = B.Dv.length, M), Y = D, 0); 0 < P;) G = Y % 8, l = Y >> 3, e = 8 - (G | 0), e = e < P ? e : P, Q = B.T[l], U && (K = B, K.i != Y >> 6 && (K.i = Y >> 6, m = S(319, K), K.h = ie(K.s, [0, 0, m[1], m[2]], K.i)), Q ^= B.h[l & L]), C |= (Q >> 8 - (G | 0) - (e | 0) & (1 << e) - 1) << (P | 0) - (e | 0), P -= e, Y += e;
            return (U = C, y)(430, B, (D | 0) + (M | 0)), U
        },
        ME = function(M, B, U, l) {
            try {
                l = M[((B | 0) + 2) % 3], M[B] = (M[B] | 0) - (M[((B | 0) + 1) % 3] | 0) - (l | 0) ^ (1 == B ? l << U : l >>> U)
            } catch (Y) {
                throw Y;
            }
        },
        w = function(M, B, U, l, Y, D) {
            if (B.N.length) {
                B.A = (B.A && 0(), B.Nx = M, true);
                try {
                    l = B.u(), B.R = 0, B.O = l, B.v = l, Y = U$(M, B), D = B.u() - B.O, B.P += D, D < (U ? 0 : 10) || 0 >= B.V-- || (D = Math.floor(D), B.B.push(254 >= D ? D : 254))
                } finally {
                    B.A = false
                }
                return Y
            }
        },
        D0 = function(M, B) {
            return M[B] << 24 | M[(B | 0) + 1] << 16 | M[(B | 0) + 2] << 8 | M[(B | 0) + 3]
        },
        I = this || self,
        BG = function(M, B, U, l, Y) {
            for (B = (l = (U = (M = M.replace(/\r\n/g, "\n"), 0), []), 0); U < M.length; U++) Y = M.charCodeAt(U), 128 > Y ? l[B++] = Y : (2048 > Y ? l[B++] = Y >> 6 | 192 : (55296 == (Y & 64512) && U + 1 < M.length && 56320 == (M.charCodeAt(U + 1) & 64512) ? (Y = 65536 + ((Y & 1023) << 10) + (M.charCodeAt(++U) & 1023), l[B++] = Y >> 18 | 240, l[B++] = Y >> 12 & 63 | 128) : l[B++] = Y >> 12 | 224, l[B++] = Y >> 6 & 63 | 128), l[B++] = Y & 63 | 128);
            return l
        },
        eH = function(M, B, U, l, Y, D) {
            function e() {
                if (M.J == M) {
                    if (M.L) {
                        var K = [a, l, U, void 0, Y, D, arguments];
                        if (2 == B) var C = w(false, M, !(z(M, K), 1));
                        else if (1 == B) {
                            var G = !M.N.length;
                            z(M, K), G && w(false, M, false)
                        } else C = le(K, M);
                        return C
                    }
                    Y && D && Y.removeEventListener(D, e, E)
                }
            }
            return e
        },
        Co = function(M, B, U, l, Y, D) {
            for (Y = (D = (l = ((B = d((U = M[Ko] || {}, M)), U).KP = d(M), U.D = [], M.J == M ? (n(M) | 0) - 1 : 1), d)(M), 0); Y < l; Y++) U.D.push(d(M));
            for (; l--;) U.D[l] = S(U.D[l], M);
            return (U.o = S(B, M), U).LP = S(D, M), U
        },
        c = function(M, B, U, l) {
            for (l = (M | 0) - 1, U = []; 0 <= l; l--) U[(M | 0) - 1 - (l | 0)] = B >> 8 * l & 255;
            return U
        },
        y = function(M, B, U) {
            if (430 == M || 310 == M) B.L[M] ? B.L[M].concat(U) : B.L[M] = Y2(B, U);
            else {
                if (B.W && 319 != M) return;
                304 == M || 480 == M || 239 == M || 347 == M || 109 == M ? B.L[M] || (B.L[M] = SH(M, 126, U, B)) : B.L[M] = SH(M, 81, U, B)
            }
            319 == M && (B.s = h(32, B, false), B.i = void 0)
        },
        z = function(M, B) {
            M.N.splice(0, 0, B)
        },
        Qo = function(M, B, U, l) {
            return (l = p[M.substring(0, 3) + "_"]) ? l(M.substring(3), B, U) : G1(B, M)
        },
        PG = function(M, B, U, l, Y, D) {
            if (!M.K) {
                M.Y++;
                try {
                    for (U = (D = (l = M.H, 0), void 0); --B;) try {
                        if (Y = void 0, M.F) U = yo(M, M.F);
                        else {
                            if (D = S(430, M), D >= l) break;
                            U = S((Y = (y(310, M, D), d(M)), Y), M)
                        }
                        N(false, (U && U[ht] & 2048 ? U(M, B) : f(M, 0, [Z, 21, Y]), false), M, B)
                    } catch (e) {
                        S(73, M) ? f(M, 22, e) : y(73, M, e)
                    }
                    if (!B) {
                        if (M.HT) {
                            PG(M, (M.Y--, 123828116580));
                            return
                        }
                        f(M, 0, [Z, 33])
                    }
                } catch (e) {
                    try {
                        f(M, 22, e)
                    } catch (K) {
                        H(M, K)
                    }
                }
                M.Y--
            }
        },
        n = function(M) {
            return M.F ? yo(M, M.j) : h(8, M, true)
        },
        G1 = function(M, B) {
            return [(M(function(U) {
                U(B)
            }), function() {
                return B
            })]
        },
        V = function(M, B) {
            for (B = []; M--;) B.push(255 * Math.random() | 0);
            return B
        },
        yo = function(M, B) {
            return (B = B.create().shift(), M.F).create().length || M.j.create().length || (M.j = void 0, M.F = void 0), B
        },
        Lo = function(M, B, U) {
            return M.I(function(l) {
                U = l
            }, false, B), U
        },
        U$ = function(M, B, U, l) {
            for (; B.N.length;) {
                l = (B.G = null, B).N.pop();
                try {
                    U = le(l, B)
                } catch (Y) {
                    H(B, Y)
                }
                if (M && B.G) {
                    M = B.G, M(function() {
                        w(true, B, true)
                    });
                    break
                }
            }
            return U
        },
        mq = function(M, B, U, l, Y) {
            U = S((l = (U = (Y = B & 3, B &= 4, d)(M), d(M)), U), M), B && (U = BG("" + U)), Y && W(l, M, c(2, U.length)), W(l, M, U)
        },
        u, f = function(M, B, U, l, Y, D) {
            if (!M.W) {
                if (U = S(87, (B = (0 == (l = S(347, ((D = void 0, U) && U[0] === Z && (D = U[2], B = U[1], U = void 0), M)), l.length) && (Y = S(310, M) >> 3, l.push(B, Y >> 8 & 255, Y & 255), void 0 != D && l.push(D & 255)), ""), U && (U.message && (B += U.message), U.stack && (B += ":" + U.stack)), M)), 3 < U) {
                    D = (B = (B = B.slice(0, (U | 0) - 3), U -= (B.length | 0) + 3, BG)(B), M.J), M.J = M;
                    try {
                        W(480, M, c(2, B.length).concat(B), 9)
                    } finally {
                        M.J = D
                    }
                }
                y(87, M, U)
            }
        },
        Y2 = function(M, B, U) {
            return (U = x[M.Z](M.sD), U[M.Z] = function() {
                return B
            }, U).concat = function(l) {
                B = l
            }, U
        },
        SH = function(M, B, U, l, Y, D, e, K) {
            return (D = x[(Y = (U = [-22, -87, -38, 98, -65, 36, U, 74, -63, 18], K = B & 7, ws), l).Z](l.J4), D[l.Z] = function(C) {
                K += 6 + (e = C, 7 * B), K &= 7
            }, D).concat = function(C) {
                return (C = (C = (C = M % 16 + 1, -204 * M * M * e - C * e + U[K + 35 & 7] * M * C + K + 4 * M * M * C + (Y() | 0) * C - 3978 * e - -4437 * M * e) + 51 * e * e, e = void 0, U)[C], U)[(K + 69 & 7) + (B & 2)] = C, U[K + (B & 2)] = -87, C
            }, D
        },
        aq = function(M, B) {
            if ((B = (M = null, I).trustedTypes, !B) || !B.createPolicy) return M;
            try {
                M = B.createPolicy("bg", {
                    createHTML: Iq,
                    createScript: Iq,
                    createScriptURL: Iq
                })
            } catch (U) {
                I.console && I.console.error(U.message)
            }
            return M
        },
        z1 = function(M, B, U) {
            if ((B = typeof M, "object") == B)
                if (M) {
                    if (M instanceof Array) return "array";
                    if (M instanceof Object) return B;
                    if (U = Object.prototype.toString.call(M), "[object Window]" == U) return "object";
                    if ("[object Array]" == U || "number" == typeof M.length && "undefined" != typeof M.splice && "undefined" != typeof M.propertyIsEnumerable && !M.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == U || "undefined" != typeof M.call && "undefined" != typeof M.propertyIsEnumerable && !M.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == B && "undefined" == typeof M.call) return "object";
            return B
        },
        W = function(M, B, U, l, Y, D) {
            if (B.J == B)
                for (D = S(M, B), 480 == M ? (M = function(e, K, C, G, Q) {
                        if (C = (G = D.length, (G | 0) - 4 >> 3), D.iC != C) {
                            D.iC = (K = (C << (Q = [0, 0, Y[1], Y[2]], 3)) - 4, C);
                            try {
                                D.uC = ie(D0(D, K), Q, D0(D, (K | 0) + 4))
                            } catch (L) {
                                throw L;
                            }
                        }
                        D.push(D.uC[G & 7] ^ e)
                    }, Y = S(109, B)) : M = function(e) {
                        D.push(e)
                    }, l && M(l & 255), B = 0, l = U.length; B < l; B++) M(U[B])
        },
        g = function(M, B, U) {
            M[y(B, U, M), qE] = 2796
        },
        N = function(M, B, U, l, Y, D, e, K, C) {
            if (U.J = (((C = (D = (Y = (K = (M || U.R++, 0 < U.X) && U.A && U.Nx && 1 >= U.Y && !U.F && !U.G && (!M || 1 < U.S - l) && 0 == document.hidden, e = 4 == U.R) || K ? U.u() : U.v, Y - U.v), D >> 14), U).s && (U.s ^= C * (D << 2)), U).l += C, C) || U.J, e || K) U.v = Y, U.R = 0;
            if (!K || Y - U.O < U.X - (B ? 255 : M ? 5 : 2)) return false;
            return !(((y(430, U, (B = S((U.S = l, M ? 310 : 430), U), U).H), U).N.push([E$, B, M ? l + 1 : l]), U).G = T, 0)
        },
        Iq = function(M) {
            return M
        },
        oq = function(M, B) {
            return B = n(M), B & 128 && (B = B & 127 | n(M) << 7), B
        },
        H = function(M, B) {
            M.K = ((M.K ? M.K + "~" : "E:") + B.message + ":" + B.stack).slice(0, 2048)
        },
        X = function(M, B, U) {
            U = this;
            try {
                ds(B, M, this)
            } catch (l) {
                H(this, l), B(function(Y) {
                    Y(U.K)
                })
            }
        },
        le = function(M, B, U, l, Y) {
            if (l = M[0], l == r) B.V = 25, B.U(M);
            else if (l == O) {
                Y = M[1];
                try {
                    U = B.K || B.U(M)
                } catch (D) {
                    H(B, D), U = B.K
                }
                Y(U)
            } else if (l == E$) B.U(M);
            else if (l == F) B.U(M);
            else if (l == no) {
                try {
                    for (U = 0; U < B.C.length; U++) try {
                        Y = B.C[U], Y[0][Y[1]](Y[2])
                    } catch (D) {}
                } catch (D) {}(0, M[1])(function(D, e) {
                    B.I(D, true, e)
                }, (B.C = [], function(D) {
                    (z(B, (D = !B.N.length, [ht])), D) && w(true, B, false)
                }))
            } else {
                if (l == a) return U = M[2], y(331, B, M[6]), y(503, B, U), B.U(M);
                l == ht ? (B.T = [], B.B = [], B.L = null) : l == qE && "loading" === I.document.readyState && (B.G = function(D, e) {
                    function K() {
                        e || (e = true, D())
                    }(I.document.addEventListener("DOMContentLoaded", (e = false, K), E), I).addEventListener("load", K, E)
                })
            }
        },
        E = {
            passive: true,
            capture: true
        },
        At = function(M, B, U, l) {
            for (l = (U = d(B), 0); 0 < M; M--) l = l << 8 | n(B);
            y(U, B, l)
        },
        ie = function(M, B, U, l, Y) {
            for (B = (l = B[2] | 0, Y = 0, B[3]) | 0; 15 > Y; Y++) U = U >>> 8 | U << 24, U += M | 0, M = M << 3 | M >>> 29, B = B >>> 8 | B << 24, B += l | 0, B ^= Y + 3814, U ^= l + 3814, l = l << 3 | l >>> 29, l ^= B, M ^= U;
            return [M >>> 24 & 255, M >>> 16 & 255, M >>> 8 & 255, M >>> 0 & 255, U >>> 24 & 255, U >>> 16 & 255, U >>> 8 & 255, U >>> 0 & 255]
        },
        be = function(M, B, U, l) {
            function Y() {}
            return l = Qo(M, (U = void 0, function(D) {
                Y && (B && T(B), U = D, Y(), Y = void 0)
            }), !!B)[0], {
                invoke: function(D, e, K, C) {
                    function G() {
                        U(function(Q) {
                            T(function() {
                                D(Q)
                            })
                        }, K)
                    }
                    if (!e) return e = l(K), D && D(e), e;
                    U ? G() : (C = Y, Y = function() {
                        T((C(), G))
                    })
                }
            }
        },
        S = function(M, B) {
            if ((B = B.L[M], void 0) === B) throw [Z, 30, M];
            if (B.value) return B.create();
            return (B.create(4 * M * M + -87 * M + 78), B).prototype
        },
        d = function(M, B) {
            if (M.F) return yo(M, M.j);
            return (B = h(8, M, true), B & 128) && (B ^= 128, M = h(2, M, true), B = (B << 2) + (M | 0)), B
        },
        T = I.requestIdleCallback ? function(M) {
            requestIdleCallback(function() {
                M()
            }, {
                timeout: 4
            })
        } : I.setImmediate ? function(M) {
            setImmediate(M)
        } : function(M) {
            setTimeout(M, 0)
        },
        tt = function(M, B) {
            return x[B](x.prototype, {
                replace: M,
                length: M,
                console: M,
                document: M,
                call: M,
                splice: M,
                parent: M,
                prototype: M,
                floor: M,
                propertyIsEnumerable: M,
                stack: M,
                pop: M
            })
        },
        ds = function(M, B, U, l, Y) {
            for (Y = (U.J4 = tt({get: function() {
                        return this.concat()
                    }
                }, (U.Dv = (U.kX = cG, U.YX = k2, U)[O], U.Z)), U.sD = x[U.Z](U.J4, {
                    value: {
                        value: {}
                    }
                }), []), l = 0; 295 > l; l++) Y[l] = String.fromCharCode(l);
            w(true, (z(U, (z((z(U, (y(304, U, [160, 0, (g(function(D, e, K, C, G, Q) {
                N(true, false, D, e) || (G = Co(D.J), e = G.o, C = G.D, Q = G.LP, G = G.KP, K = C.length, e = 0 == K ? new Q[e] : 1 == K ? new Q[e](C[0]) : 2 == K ? new Q[e](C[0], C[1]) : 3 == K ? new Q[e](C[0], C[1], C[2]) : 4 == K ? new Q[e](C[0], C[1], C[2], C[3]) : 2(), y(G, D, e))
            }, 415, (g(function(D, e, K, C, G, Q, L) {
                for (L = (e = (G = S((C = (Q = (K = d(D), oq)(D), ""), 405), D), G).length, 0); Q--;) L = ((L | 0) + (oq(D) | 0)) % e, C += Y[G[L]];
                y(K, D, C)
            }, 282, (y(120, U, (y(379, (y(217, U, (g(function(D, e, K, C, G) {
                y((K = S((e = (K = (C = (e = d((G = d(D), D)), d(D)), d(D)), S)(e, D), C = S(C, D), K), D), G), D, eH(D, K, C, e))
            }, 219, (g((y(109, (g(function(D) {
                mq(D, 3)
            }, 47, (U.OD = (g(function(D) {
                fo(1, D)
            }, 187, (y(239, (g(function(D, e, K, C) {
                (C = S((K = (e = (C = (K = d(D), d(D)), d(D)), S)(K, D), C), D), y)(e, D, +(K == C))
            }, 381, (g(function(D, e, K, C) {
                K = d((C = n((e = d(D), D)), D)), y(K, D, S(e, D) >>> C)
            }, (g((g(function(D, e, K) {
                y((e = (K = d(D), d(D)), e), D, "" + S(K, D))
            }, 414, (g(function(D, e, K, C) {
                K = S((C = S((e = d((K = (C = d(D), d(D)), D)), C), D), K), D), y(e, D, C[K])
            }, (g((g(function(D, e, K) {
                (K = (K = (e = d(D), d(D)), e = 0 != S(e, D), S(K, D)), e) && y(430, D, K)
            }, (g(function(D, e, K, C, G) {
                e = S((K = S((G = (K = (C = d((e = (G = d(D), d)(D), D)), d(D)), C = S(C, D), S(G, D.J)), K), D), e), D), 0 !== G && (C = eH(D, 1, K, C, G, e), G.addEventListener(e, C, E), y(379, D, [G, e, C]))
            }, 238, (y((U.lC = (y((g(function(D) {
                At(4, D)
            }, (g(function(D, e, K) {
                y((K = z1((K = (e = (K = d(D), d(D)), S)(K, D), K)), e), D, K)
            }, 209, (g(function(D, e, K, C, G, Q) {
                if (!N(true, true, D, e)) {
                    if ("object" == (D = (C = (e = S((C = (e = d((Q = d(D), K = d(D), D)), d(D)), e), D), S(C, D)), Q = S(Q, D), S(K, D)), z1(Q))) {
                        for (G in K = [], Q) K.push(G);
                        Q = K
                    }
                    for (K = (e = 0 < (G = Q.length, e) ? e : 1, 0); K < G; K += e) D(Q.slice(K, (K | 0) + (e | 0)), C)
                }
            }, (g(function(D) {
                mq(D, 4)
            }, 119, (y(503, U, (g(function(D, e, K, C) {
                y((e = d((K = d(D), D)), C = d(D), C), D, S(K, D) || S(e, D))
            }, (g((g(function(D, e, K, C) {
                K = (e = S((e = (K = d(D), d(D)), C = d(D), e), D), S)(K, D), y(C, D, K in e | 0)
            }, (g(function(D) {
                fo(4, D)
            }, 114, (g(function(D, e, K, C, G, Q, L, P, m, A, b, t) {
                function v(q, k) {
                    for (; Q < q;) G |= n(D) << Q, Q += 8;
                    return G >>= (k = G & (1 << (Q -= q, q)) - 1, q), k
                }
                for (t = (P = (A = (m = (e = d(D), G = Q = 0, v(3) | 0) + 1, v(5)), K = 0), []); K < A; K++) C = v(1), t.push(C), P += C ? 0 : 1;
                for (P = (K = ((P | 0) - 1).toString(2).length, 0), b = []; P < A; P++) t[P] || (b[P] = v(K));
                for (K = 0; K < A; K++) t[K] && (b[K] = d(D));
                for (L = []; m--;) L.push(S(d(D), D));
                g(function(q, k, R, Z0, J) {
                    for (J = (Z0 = [], 0), R = []; J < A; J++) {
                        if (!t[k = b[J], J]) {
                            for (; k >= R.length;) R.push(d(q));
                            k = R[k]
                        }
                        Z0.push(k)
                    }
                    q.j = Y2(q, (q.F = Y2(q, L.slice()), Z0))
                }, e, D)
            }, 285, (g(function(D, e, K) {
                N(true, false, D, e) || (e = d(D), K = d(D), y(K, D, function(C) {
                    return eval(C)
                }(s$(S(e, D.J)))))
            }, 463, (y(480, ((g(function(D, e, K, C) {
                if (C = D.t4.pop()) {
                    for (e = n(D); 0 < e; e--) K = d(D), C[K] = D.L[K];
                    D.L = (C[87] = (C[347] = D.L[347], D).L[87], C)
                } else y(430, D, D.H)
            }, 447, (y(2, (y(87, U, (g(function(D, e) {
                e = S(d(D), D), po(D.J, e)
            }, (y(310, (y(430, U, (U.Gx = (U.v = 0, U.A4 = (U.s = (U.F = void 0, U.i = void 0, U.t4 = (U.A = false, U.S = (U.V = 25, 8001), U.Nx = (U.h = void 0, false), []), ((((U.N = [], U).B = [], U.L = [], U).C = [], U.T = (U.H = 0, U.X = 0, []), U).Y = (l = ((U.W = false, U).l = 1, window).performance || {}, U.Zv = function(D) {
                this.J = D
            }, U.R = void 0, U.G = null, U.J = U, U.O = 0, 0), U).P = (U.K = void 0, 0), U.j = void 0, void 0), 0), l.timeOrigin) || (l.timing || {}).navigationStart || 0, 0)), U), 0), 138), U), 2048)), U), 0), U)), g)(function(D, e, K, C, G) {
                for (G = (C = (e = d(D), oq)(D), 0), K = []; G < C; G++) K.push(n(D));
                y(e, D, K)
            }, 452, U), U), V(4)), U)), U)), U)), 457), U), g(function() {}, 117, U), function(D, e, K, C, G) {
                (G = (K = (e = d(D), d(D)), d(D)), D.J) == D && (C = S(e, D), G = S(G, D), K = S(K, D), C[K] = G, 319 == e && (D.i = void 0, 2 == K && (D.s = h(32, D, false), D.i = void 0)))
            }), 506, U), 356), U), {})), U)), 198), U), U)), 233), U), 347), U, []), 0), 73), U, 503), U)), 91), U), function(D, e) {
                (D = (e = d(D), S)(e, D.J), D[0]).removeEventListener(D[1], D[2], E)
            }), 333, U), 14), U), U)), function(D, e, K, C) {
                y((C = S((K = S((C = d(D), e = d(D), e), D), C), D), e), D, K + C)
            }), 163, U), 289), U), U)), U), []), U)), 0), U)), U), [0, 0, 0]), function(D, e, K, C) {
                !N(true, false, D, e) && (e = Co(D), K = e.o, C = e.LP, D.J == D || K == D.Zv && C == D) && (y(e.KP, D, K.apply(C, e.D)), D.v = D.u())
            }), 155, U), U.CP = 0, U)), I)), U), 0), U)), U)), U)), 0)]), [qE])), U), [F, B]), [no, M])), U), true)
        },
        vG = function(M, B) {
            (B.push(M[0] << 24 | M[1] << 16 | M[2] << 8 | M[3]), B.push(M[4] << 24 | M[5] << 16 | M[6] << 8 | M[7]), B).push(M[8] << 24 | M[9] << 16 | M[10] << 8 | M[11])
        },
        fo = function(M, B, U, l) {
            U = (l = d(B), d)(B), W(U, B, c(M, S(l, B)))
        },
        NE = function(M, B, U) {
            if (3 == M.length) {
                for (U = 0; 3 > U; U++) B[U] += M[U];
                for (U = (M = [13, 8, 13, 12, 16, 5, 3, 10, 15], 0); 9 > U; U++) B[3](B, U % 3, M[U])
            }
        },
        HG = function(M, B, U, l) {
            return S((y(430, (PG(M, ((l = S(430, M), M).T && l < M.H ? (y(430, M, M.H), po(M, B)) : y(430, M, B), U)), M), l), 503), M)
        },
        po = function(M, B) {
            y(430, M, (M.t4.push(M.L.slice()), M.L[430] = void 0, B))
        },
        p, Ko = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        r = [],
        F = ((X.prototype.PT = void 0, X).prototype.HT = false, []),
        a = [],
        E$ = [],
        qE = [],
        O = (X.prototype.pP = void 0, X.prototype.g = "toString", []),
        no = [],
        Z = {},
        ht = [],
        x = ((((((u = ((vG, function() {})(V), ME, NE, X).prototype, u).Rf = function(M, B, U, l, Y, D) {
            for (U = (l = 0, []), D = 0; l < M.length; l++)
                for (D += B, Y = Y << B | M[l]; 7 < D;) D -= 8, U.push(Y >> D & 255);
            return U
        }, u.vT = function(M, B, U, l, Y) {
            for (l = Y = 0; Y < M.length; Y++) l += M.charCodeAt(Y), l += l << 10, l ^= l >> 6;
            return Y = new(M = (l += l << 3, l ^= l >> 11, l + (l << 15)) >>> 0, Number)(M & (1 << B) - 1), Y[0] = (M >>> B) % U, Y
        }, u).xX = function() {
            return Math.floor(this.P + (this.u() - this.O))
        }, X).prototype.Z = "create", u.jD = function(M, B, U) {
            return (B ^= B << 13, B ^= B >> 17, (B = (B ^ B << 5) & U) || (B = 1), M) ^ B
        }, u).I = function(M, B, U, l, Y) {
            if (U = "array" === z1(U) ? U : [U], this.K) M(this.K);
            else try {
                Y = [], l = !this.N.length, z(this, [r, Y, U]), z(this, [O, M, Y]), B && !l || w(B, this, true)
            } catch (D) {
                H(this, D), M(this.K)
            }
        }, u.Tx = function() {
            return Math.floor(this.u())
        }, u).u = (window.performance || {}).now ? function() {
            return this.Gx + window.performance.now()
        } : function() {
            return +new Date
        }, Z).constructor,
        ws = void 0,
        cG = (((X.prototype.U = function(M, B) {
            return ws = (M = (B = {}, {}), function() {
                    return M == B ? 78 : 38
                }),
                function(U, l, Y, D, e, K, C, G, Q, L, P, m, A, b, t) {
                    A = M, M = B;
                    try {
                        if (G = U[0], G == F) {
                            Q = U[1];
                            try {
                                for (l = atob(Q), P = Y = 0, m = []; P < l.length; P++) e = l.charCodeAt(P), 255 < e && (m[Y++] = e & 255, e >>= 8), m[Y++] = e;
                                y(319, this, (this.H = (this.T = m, this).T.length << 3, [0, 0, 0]))
                            } catch (v) {
                                f(this, 17, v);
                                return
                            }
                            PG(this, 8001)
                        } else if (G == r) U[1].push(S(304, this).length, S(480, this).length, S(87, this), S(239, this).length), y(503, this, U[2]), this.L[449] && HG(this, S(449, this), 8001);
                        else {
                            if (G == O) {
                                this.J = (t = (b = c(2, (S(304, (P = U[2], this)).length | 0) + 2), this.J), this);
                                try {
                                    K = S(347, this), 0 < K.length && W(304, this, c(2, K.length).concat(K), 10), W(304, this, c(1, this.l), 109), W(304, this, c(1, this[O].length)), l = 0, D = S(480, this), l += S(2, this) & 2047, l -= (S(304, this).length | 0) + 5, 4 < D.length && (l -= (D.length | 0) + 3), 0 < l && W(304, this, c(2, l).concat(V(l)), 15), 4 < D.length && W(304, this, c(2, D.length).concat(D), 156)
                                } finally {
                                    this.J = t
                                }
                                if ((m = V(2).concat(S(304, this)), m)[1] = m[0] ^ 6, m[3] = m[1] ^ b[0], m[4] = m[1] ^ b[1], L = this.Fj(m)) L = "!" + L;
                                else
                                    for (L = "", l = 0; l < m.length; l++) C = m[l][this.g](16), 1 == C.length && (C = "0" + C), L += C;
                                return S(239, (y(87, (S(480, (Y = L, S(304, this).length = P.shift(), this)).length = P.shift(), this), P.shift()), this)).length = P.shift(), Y
                            }
                            if (G == E$) HG(this, U[1], U[2]);
                            else if (G == a) return HG(this, U[1], 8001)
                        }
                    } finally {
                        M = A
                    }
                }
        }(), X).prototype.bC = 0, X.prototype).eD = 0, X.prototype.Fj = function(M, B, U, l) {
            if (l = window.btoa) {
                for (U = (B = "", 0); U < M.length; U += 8192) B += String.fromCharCode.apply(null, M.slice(U, U + 8192));
                M = l(B).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
            } else M = void 0;
            return M
        }, /./),
        k2, Vo = F.pop.bind(X.prototype[X.prototype[no] = [0, 0, 1, 1, 0, 1, 1], r]),
        s$ = function(M, B) {
            return (B = aq()) && 1 === M.eval(B.createScript("1")) ? function(U) {
                return B.createScript(U)
            } : function(U) {
                return "" + U
            }
        }(((k2 = tt({get: Vo
        }, (cG[X.prototype.g] = Vo, X.prototype.Z)), X.prototype).UD = void 0, I));
    (40 < (p = I.botguard || (I.botguard = {}), p).m || (p.m = 41, p.bg = be, p.a = Qo), p).VDE_ = function(M, B, U) {
        return [(U = new X(M, B), function(l) {
            return Lo(U, l)
        })]
    };
}).call(this);
#2 JavaScript::Eval (size: 22) - SHA256: 9a59a5996e97787517461e94a97db2fd87d3b87673260e51d90fc5c34abae76a
0,
function(D) {
    At(1, D)
}
#3 JavaScript::Eval (size: 64) - SHA256: c84e63d0f689c632c70a6400c432ed9ee7f128d71d93e9b8a17fff8c76d104cb
0,
function(D, e, K) {
    (e = (K = d((e = d(D), D)), D.L[e] && S(e, D)), y)(K, D, e)
}
#4 JavaScript::Eval (size: 15579) - SHA256: 56f8ab3483cd2d0525bc2d386b78f0877a75566bfe10a406d93fd6b729be9d3e
/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var B = this || self,
        l = function(M) {
            return M
        },
        e = function(M, U) {
            if (M = (U = null, B.trustedTypes), !M || !M.createPolicy) return U;
            try {
                U = M.createPolicy("bg", {
                    createHTML: l,
                    createScript: l,
                    createScriptURL: l
                })
            } catch (D) {
                B.console && B.console.error(D.message)
            }
            return U
        };
    (0, eval)(function(M, U) {
        return (U = e()) && 1 === M.eval(U.createScript("1")) ? function(D) {
            return U.createScript(D)
        } : function(D) {
            return "" + D
        }
    }(B)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var h=function(M,B,U,l,Y,D,e,K,C,G,Q,L,P,m){if((D=S(430,B),D)>=B.H)throw[Z,31];for(C=(P=(L=B.Dv.length,M),Y=D,0);0<P;)G=Y%8,l=Y>>3,e=8-(G|0),e=e<P?e:P,Q=B.T[l],U&&(K=B,K.i!=Y>>6&&(K.i=Y>>6,m=S(319,K),K.h=ie(K.s,[0,0,m[1],m[2]],K.i)),Q^=B.h[l&L]),C|=(Q>>8-(G|0)-(e|0)&(1<<e)-1)<<(P|0)-(e|0),P-=e,Y+=e;return(U=C,y)(430,B,(D|0)+(M|0)),U},ME=function(M,B,U,l){try{l=M[((B|0)+2)%3],M[B]=(M[B]|0)-(M[((B|0)+1)%3]|0)-(l|0)^(1==B?l<<U:l>>>U)}catch(Y){throw Y;}},w=function(M,B,U,l,Y,D){if(B.N.length){B.A=(B.A&&0(),B.Nx=M,true);try{l=B.u(),B.R=0,B.O=l,B.v=l,Y=U$(M,B),D=B.u()-B.O,B.P+=D,D<(U?0:10)||0>=B.V--||(D=Math.floor(D),B.B.push(254>=D?D:254))}finally{B.A=false}return Y}},D0=function(M,B){return M[B]<<24|M[(B|0)+1]<<16|M[(B|0)+2]<<8|M[(B|0)+3]},I=this||self,BG=function(M,B,U,l,Y){for(B=(l=(U=(M=M.replace(/\\r\\n/g,"\\n"),0),[]),0);U<M.length;U++)Y=M.charCodeAt(U),128>Y?l[B++]=Y:(2048>Y?l[B++]=Y>>6|192:(55296==(Y&64512)&&U+1<M.length&&56320==(M.charCodeAt(U+1)&64512)?(Y=65536+((Y&1023)<<10)+(M.charCodeAt(++U)&1023),l[B++]=Y>>18|240,l[B++]=Y>>12&63|128):l[B++]=Y>>12|224,l[B++]=Y>>6&63|128),l[B++]=Y&63|128);return l},eH=function(M,B,U,l,Y,D){function e(){if(M.J==M){if(M.L){var K=[a,l,U,void 0,Y,D,arguments];if(2==B)var C=w(false,M,!(z(M,K),1));else if(1==B){var G=!M.N.length;z(M,K),G&&w(false,M,false)}else C=le(K,M);return C}Y&&D&&Y.removeEventListener(D,e,E)}}return e},Co=function(M,B,U,l,Y,D){for(Y=(D=(l=((B=d((U=M[Ko]||{},M)),U).KP=d(M),U.D=[],M.J==M?(n(M)|0)-1:1),d)(M),0);Y<l;Y++)U.D.push(d(M));for(;l--;)U.D[l]=S(U.D[l],M);return(U.o=S(B,M),U).LP=S(D,M),U},c=function(M,B,U,l){for(l=(M|0)-1,U=[];0<=l;l--)U[(M|0)-1-(l|0)]=B>>8*l&255;return U},y=function(M,B,U){if(430==M||310==M)B.L[M]?B.L[M].concat(U):B.L[M]=Y2(B,U);else{if(B.W&&319!=M)return;304==M||480==M||239==M||347==M||109==M?B.L[M]||(B.L[M]=SH(M,126,U,B)):B.L[M]=SH(M,81,U,B)}319==M&&(B.s=h(32,B,false),B.i=void 0)},z=function(M,B){M.N.splice(0,0,B)},Qo=function(M,B,U,l){return(l=p[M.substring(0,3)+"_"])?l(M.substring(3),B,U):G1(B,M)},PG=function(M,B,U,l,Y,D){if(!M.K){M.Y++;try{for(U=(D=(l=M.H,0),void 0);--B;)try{if(Y=void 0,M.F)U=yo(M,M.F);else{if(D=S(430,M),D>=l)break;U=S((Y=(y(310,M,D),d(M)),Y),M)}N(false,(U&&U[ht]&2048?U(M,B):f(M,0,[Z,21,Y]),false),M,B)}catch(e){S(73,M)?f(M,22,e):y(73,M,e)}if(!B){if(M.HT){PG(M,(M.Y--,123828116580));return}f(M,0,[Z,33])}}catch(e){try{f(M,22,e)}catch(K){H(M,K)}}M.Y--}},n=function(M){return M.F?yo(M,M.j):h(8,M,true)},G1=function(M,B){return[(M(function(U){U(B)}),function(){return B})]},V=function(M,B){for(B=[];M--;)B.push(255*Math.random()|0);return B},yo=function(M,B){return(B=B.create().shift(),M.F).create().length||M.j.create().length||(M.j=void 0,M.F=void 0),B},Lo=function(M,B,U){return M.I(function(l){U=l},false,B),U},U$=function(M,B,U,l){for(;B.N.length;){l=(B.G=null,B).N.pop();try{U=le(l,B)}catch(Y){H(B,Y)}if(M&&B.G){M=B.G,M(function(){w(true,B,true)});break}}return U},mq=function(M,B,U,l,Y){U=S((l=(U=(Y=B&3,B&=4,d)(M),d(M)),U),M),B&&(U=BG(""+U)),Y&&W(l,M,c(2,U.length)),W(l,M,U)},u,f=function(M,B,U,l,Y,D){if(!M.W){if(U=S(87,(B=(0==(l=S(347,((D=void 0,U)&&U[0]===Z&&(D=U[2],B=U[1],U=void 0),M)),l.length)&&(Y=S(310,M)>>3,l.push(B,Y>>8&255,Y&255),void 0!=D&&l.push(D&255)),""),U&&(U.message&&(B+=U.message),U.stack&&(B+=":"+U.stack)),M)),3<U){D=(B=(B=B.slice(0,(U|0)-3),U-=(B.length|0)+3,BG)(B),M.J),M.J=M;try{W(480,M,c(2,B.length).concat(B),9)}finally{M.J=D}}y(87,M,U)}},Y2=function(M,B,U){return(U=x[M.Z](M.sD),U[M.Z]=function(){return B},U).concat=function(l){B=l},U},SH=function(M,B,U,l,Y,D,e,K){return(D=x[(Y=(U=[-22,-87,-38,98,-65,36,U,74,-63,18],K=B&7,ws),l).Z](l.J4),D[l.Z]=function(C){K+=6+(e=C,7*B),K&=7},D).concat=function(C){return(C=(C=(C=M%16+1,-204*M*M*e-C*e+U[K+35&7]*M*C+K+4*M*M*C+(Y()|0)*C-3978*e- -4437*M*e)+51*e*e,e=void 0,U)[C],U)[(K+69&7)+(B&2)]=C,U[K+(B&2)]=-87,C},D},aq=function(M,B){if((B=(M=null,I).trustedTypes,!B)||!B.createPolicy)return M;try{M=B.createPolicy("bg",{createHTML:Iq,createScript:Iq,createScriptURL:Iq})}catch(U){I.console&&I.console.error(U.message)}return M},z1=function(M,B,U){if((B=typeof M,"object")==B)if(M){if(M instanceof Array)return"array";if(M instanceof Object)return B;if(U=Object.prototype.toString.call(M),"[object Window]"==U)return"object";if("[object Array]"==U||"number"==typeof M.length&&"undefined"!=typeof M.splice&&"undefined"!=typeof M.propertyIsEnumerable&&!M.propertyIsEnumerable("splice"))return"array";if("[object Function]"==U||"undefined"!=typeof M.call&&"undefined"!=typeof M.propertyIsEnumerable&&!M.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==B&&"undefined"==typeof M.call)return"object";return B},W=function(M,B,U,l,Y,D){if(B.J==B)for(D=S(M,B),480==M?(M=function(e,K,C,G,Q){if(C=(G=D.length,(G|0)-4>>3),D.iC!=C){D.iC=(K=(C<<(Q=[0,0,Y[1],Y[2]],3))-4,C);try{D.uC=ie(D0(D,K),Q,D0(D,(K|0)+4))}catch(L){throw L;}}D.push(D.uC[G&7]^e)},Y=S(109,B)):M=function(e){D.push(e)},l&&M(l&255),B=0,l=U.length;B<l;B++)M(U[B])},g=function(M,B,U){M[y(B,U,M),qE]=2796},N=function(M,B,U,l,Y,D,e,K,C){if(U.J=(((C=(D=(Y=(K=(M||U.R++,0<U.X)&&U.A&&U.Nx&&1>=U.Y&&!U.F&&!U.G&&(!M||1<U.S-l)&&0==document.hidden,e=4==U.R)||K?U.u():U.v,Y-U.v),D>>14),U).s&&(U.s^=C*(D<<2)),U).l+=C,C)||U.J,e||K)U.v=Y,U.R=0;if(!K||Y-U.O<U.X-(B?255:M?5:2))return false;return!(((y(430,U,(B=S((U.S=l,M?310:430),U),U).H),U).N.push([E$,B,M?l+1:l]),U).G=T,0)},Iq=function(M){return M},oq=function(M,B){return B=n(M),B&128&&(B=B&127|n(M)<<7),B},H=function(M,B){M.K=((M.K?M.K+"~":"E:")+B.message+":"+B.stack).slice(0,2048)},X=function(M,B,U){U=this;try{ds(B,M,this)}catch(l){H(this,l),B(function(Y){Y(U.K)})}},le=function(M,B,U,l,Y){if(l=M[0],l==r)B.V=25,B.U(M);else if(l==O){Y=M[1];try{U=B.K||B.U(M)}catch(D){H(B,D),U=B.K}Y(U)}else if(l==E$)B.U(M);else if(l==F)B.U(M);else if(l==no){try{for(U=0;U<B.C.length;U++)try{Y=B.C[U],Y[0][Y[1]](Y[2])}catch(D){}}catch(D){}(0,M[1])(function(D,e){B.I(D,true,e)},(B.C=[],function(D){(z(B,(D=!B.N.length,[ht])),D)&&w(true,B,false)}))}else{if(l==a)return U=M[2],y(331,B,M[6]),y(503,B,U),B.U(M);l==ht?(B.T=[],B.B=[],B.L=null):l==qE&&"loading"===I.document.readyState&&(B.G=function(D,e){function K(){e||(e=true,D())}(I.document.addEventListener("DOMContentLoaded",(e=false,K),E),I).addEventListener("load",K,E)})}},E={passive:true,capture:true},At=function(M,B,U,l){for(l=(U=d(B),0);0<M;M--)l=l<<8|n(B);y(U,B,l)},ie=function(M,B,U,l,Y){for(B=(l=B[2]|0,Y=0,B[3])|0;15>Y;Y++)U=U>>>8|U<<24,U+=M|0,M=M<<3|M>>>29,B=B>>>8|B<<24,B+=l|0,B^=Y+3814,U^=l+3814,l=l<<3|l>>>29,l^=B,M^=U;return[M>>>24&255,M>>>16&255,M>>>8&255,M>>>0&255,U>>>24&255,U>>>16&255,U>>>8&255,U>>>0&255]},be=function(M,B,U,l){function Y(){}return l=Qo(M,(U=void 0,function(D){Y&&(B&&T(B),U=D,Y(),Y=void 0)}),!!B)[0],{invoke:function(D,e,K,C){function G(){U(function(Q){T(function(){D(Q)})},K)}if(!e)return e=l(K),D&&D(e),e;U?G():(C=Y,Y=function(){T((C(),G))})}}},S=function(M,B){if((B=B.L[M],void 0)===B)throw[Z,30,M];if(B.value)return B.create();return(B.create(4*M*M+-87*M+78),B).prototype},d=function(M,B){if(M.F)return yo(M,M.j);return(B=h(8,M,true),B&128)&&(B^=128,M=h(2,M,true),B=(B<<2)+(M|0)),B},T=I.requestIdleCallback?function(M){requestIdleCallback(function(){M()},{timeout:4})}:I.setImmediate?function(M){setImmediate(M)}:function(M){setTimeout(M,0)},tt=function(M,B){return x[B](x.prototype,{replace:M,length:M,console:M,document:M,call:M,splice:M,parent:M,prototype:M,floor:M,propertyIsEnumerable:M,stack:M,pop:M})},ds=function(M,B,U,l,Y){for(Y=(U.J4=tt({get:function(){return this.concat()}},(U.Dv=(U.kX=cG,U.YX=k2,U)[O],U.Z)),U.sD=x[U.Z](U.J4,{value:{value:{}}}),[]),l=0;295>l;l++)Y[l]=String.fromCharCode(l);w(true,(z(U,(z((z(U,(y(304,U,[160,0,(g(function(D,e,K,C,G,Q){N(true,false,D,e)||(G=Co(D.J),e=G.o,C=G.D,Q=G.LP,G=G.KP,K=C.length,e=0==K?new Q[e]:1==K?new Q[e](C[0]):2==K?new Q[e](C[0],C[1]):3==K?new Q[e](C[0],C[1],C[2]):4==K?new Q[e](C[0],C[1],C[2],C[3]):2(),y(G,D,e))},415,(g(function(D,e,K,C,G,Q,L){for(L=(e=(G=S((C=(Q=(K=d(D),oq)(D),""),405),D),G).length,0);Q--;)L=((L|0)+(oq(D)|0))%e,C+=Y[G[L]];y(K,D,C)},282,(y(120,U,(y(379,(y(217,U,(g(function(D,e,K,C,G){y((K=S((e=(K=(C=(e=d((G=d(D),D)),d(D)),d(D)),S)(e,D),C=S(C,D),K),D),G),D,eH(D,K,C,e))},219,(g((y(109,(g(function(D){mq(D,3)},47,(U.OD=(g(function(D){fo(1,D)},187,(y(239,(g(function(D,e,K,C){(C=S((K=(e=(C=(K=d(D),d(D)),d(D)),S)(K,D),C),D),y)(e,D,+(K==C))},381,(g(function(D,e,K,C){K=d((C=n((e=d(D),D)),D)),y(K,D,S(e,D)>>>C)},(g((g(function(D,e,K){y((e=(K=d(D),d(D)),e),D,""+S(K,D))},414,(g(function(D,e,K,C){K=S((C=S((e=d((K=(C=d(D),d(D)),D)),C),D),K),D),y(e,D,C[K])},(g((g(function(D,e,K){(K=(K=(e=d(D),d(D)),e=0!=S(e,D),S(K,D)),e)&&y(430,D,K)},(g(function(D,e,K,C,G){e=S((K=S((G=(K=(C=d((e=(G=d(D),d)(D),D)),d(D)),C=S(C,D),S(G,D.J)),K),D),e),D),0!==G&&(C=eH(D,1,K,C,G,e),G.addEventListener(e,C,E),y(379,D,[G,e,C]))},238,(y((U.lC=(y((g(function(D){At(4,D)},(g(function(D,e,K){y((K=z1((K=(e=(K=d(D),d(D)),S)(K,D),K)),e),D,K)},209,(g(function(D,e,K,C,G,Q){if(!N(true,true,D,e)){if("object"==(D=(C=(e=S((C=(e=d((Q=d(D),K=d(D),D)),d(D)),e),D),S(C,D)),Q=S(Q,D),S(K,D)),z1(Q))){for(G in K=[],Q)K.push(G);Q=K}for(K=(e=0<(G=Q.length,e)?e:1,0);K<G;K+=e)D(Q.slice(K,(K|0)+(e|0)),C)}},(g(function(D){mq(D,4)},119,(y(503,U,(g(function(D,e,K,C){y((e=d((K=d(D),D)),C=d(D),C),D,S(K,D)||S(e,D))},(g((g(function(D,e,K,C){K=(e=S((e=(K=d(D),d(D)),C=d(D),e),D),S)(K,D),y(C,D,K in e|0)},(g(function(D){fo(4,D)},114,(g(function(D,e,K,C,G,Q,L,P,m,A,b,t){function v(q,k){for(;Q<q;)G|=n(D)<<Q,Q+=8;return G>>=(k=G&(1<<(Q-=q,q))-1,q),k}for(t=(P=(A=(m=(e=d(D),G=Q=0,v(3)|0)+1,v(5)),K=0),[]);K<A;K++)C=v(1),t.push(C),P+=C?0:1;for(P=(K=((P|0)-1).toString(2).length,0),b=[];P<A;P++)t[P]||(b[P]=v(K));for(K=0;K<A;K++)t[K]&&(b[K]=d(D));for(L=[];m--;)L.push(S(d(D),D));g(function(q,k,R,Z0,J){for(J=(Z0=[],0),R=[];J<A;J++){if(!t[k=b[J],J]){for(;k>=R.length;)R.push(d(q));k=R[k]}Z0.push(k)}q.j=Y2(q,(q.F=Y2(q,L.slice()),Z0))},e,D)},285,(g(function(D,e,K){N(true,false,D,e)||(e=d(D),K=d(D),y(K,D,function(C){return eval(C)}(s$(S(e,D.J)))))},463,(y(480,((g(function(D,e,K,C){if(C=D.t4.pop()){for(e=n(D);0<e;e--)K=d(D),C[K]=D.L[K];D.L=(C[87]=(C[347]=D.L[347],D).L[87],C)}else y(430,D,D.H)},447,(y(2,(y(87,U,(g(function(D,e){e=S(d(D),D),po(D.J,e)},(y(310,(y(430,U,(U.Gx=(U.v=0,U.A4=(U.s=(U.F=void 0,U.i=void 0,U.t4=(U.A=false,U.S=(U.V=25,8001),U.Nx=(U.h=void 0,false),[]),((((U.N=[],U).B=[],U.L=[],U).C=[],U.T=(U.H=0,U.X=0,[]),U).Y=(l=((U.W=false,U).l=1,window).performance||{},U.Zv=function(D){this.J=D},U.R=void 0,U.G=null,U.J=U,U.O=0,0),U).P=(U.K=void 0,0),U.j=void 0,void 0),0),l.timeOrigin)||(l.timing||{}).navigationStart||0,0)),U),0),138),U),2048)),U),0),U)),g)(function(D,e,K,C,G){for(G=(C=(e=d(D),oq)(D),0),K=[];G<C;G++)K.push(n(D));y(e,D,K)},452,U),U),V(4)),U)),U)),U)),457),U),g(function(){},117,U),function(D,e,K,C,G){(G=(K=(e=d(D),d(D)),d(D)),D.J)==D&&(C=S(e,D),G=S(G,D),K=S(K,D),C[K]=G,319==e&&(D.i=void 0,2==K&&(D.s=h(32,D,false),D.i=void 0)))}),506,U),356),U),{})),U)),198),U),U)),233),U),347),U,[]),0),73),U,503),U)),91),U),function(D,e){(D=(e=d(D),S)(e,D.J),D[0]).removeEventListener(D[1],D[2],E)}),333,U),14),U),U)),function(D,e,K,C){y((C=S((K=S((C=d(D),e=d(D),e),D),C),D),e),D,K+C)}),163,U),289),U),U)),U),[]),U)),0),U)),U),[0,0,0]),function(D,e,K,C){!N(true,false,D,e)&&(e=Co(D),K=e.o,C=e.LP,D.J==D||K==D.Zv&&C==D)&&(y(e.KP,D,K.apply(C,e.D)),D.v=D.u())}),155,U),U.CP=0,U)),I)),U),0),U)),U)),U)),0)]),[qE])),U),[F,B]),[no,M])),U),true)},vG=function(M,B){(B.push(M[0]<<24|M[1]<<16|M[2]<<8|M[3]),B.push(M[4]<<24|M[5]<<16|M[6]<<8|M[7]),B).push(M[8]<<24|M[9]<<16|M[10]<<8|M[11])},fo=function(M,B,U,l){U=(l=d(B),d)(B),W(U,B,c(M,S(l,B)))},NE=function(M,B,U){if(3==M.length){for(U=0;3>U;U++)B[U]+=M[U];for(U=(M=[13,8,13,12,16,5,3,10,15],0);9>U;U++)B[3](B,U%3,M[U])}},HG=function(M,B,U,l){return S((y(430,(PG(M,((l=S(430,M),M).T&&l<M.H?(y(430,M,M.H),po(M,B)):y(430,M,B),U)),M),l),503),M)},po=function(M,B){y(430,M,(M.t4.push(M.L.slice()),M.L[430]=void 0,B))},p,Ko=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),r=[],F=((X.prototype.PT=void 0,X).prototype.HT=false,[]),a=[],E$=[],qE=[],O=(X.prototype.pP=void 0,X.prototype.g="toString",[]),no=[],Z={},ht=[],x=((((((u=((vG,function(){})(V),ME,NE,X).prototype,u).Rf=function(M,B,U,l,Y,D){for(U=(l=0,[]),D=0;l<M.length;l++)for(D+=B,Y=Y<<B|M[l];7<D;)D-=8,U.push(Y>>D&255);return U},u.vT=function(M,B,U,l,Y){for(l=Y=0;Y<M.length;Y++)l+=M.charCodeAt(Y),l+=l<<10,l^=l>>6;return Y=new (M=(l+=l<<3,l^=l>>11,l+(l<<15))>>>0,Number)(M&(1<<B)-1),Y[0]=(M>>>B)%U,Y},u).xX=function(){return Math.floor(this.P+(this.u()-this.O))},X).prototype.Z="create",u.jD=function(M,B,U){return(B^=B<<13,B^=B>>17,(B=(B^B<<5)&U)||(B=1),M)^B},u).I=function(M,B,U,l,Y){if(U="array"===z1(U)?U:[U],this.K)M(this.K);else try{Y=[],l=!this.N.length,z(this,[r,Y,U]),z(this,[O,M,Y]),B&&!l||w(B,this,true)}catch(D){H(this,D),M(this.K)}},u.Tx=function(){return Math.floor(this.u())},u).u=(window.performance||{}).now?function(){return this.Gx+window.performance.now()}:function(){return+new Date},Z).constructor,ws=void 0,cG=(((X.prototype.U=function(M,B){return ws=(M=(B={},{}),function(){return M==B?78:38}),function(U,l,Y,D,e,K,C,G,Q,L,P,m,A,b,t){A=M,M=B;try{if(G=U[0],G==F){Q=U[1];try{for(l=atob(Q),P=Y=0,m=[];P<l.length;P++)e=l.charCodeAt(P),255<e&&(m[Y++]=e&255,e>>=8),m[Y++]=e;y(319,this,(this.H=(this.T=m,this).T.length<<3,[0,0,0]))}catch(v){f(this,17,v);return}PG(this,8001)}else if(G==r)U[1].push(S(304,this).length,S(480,this).length,S(87,this),S(239,this).length),y(503,this,U[2]),this.L[449]&&HG(this,S(449,this),8001);else{if(G==O){this.J=(t=(b=c(2,(S(304,(P=U[2],this)).length|0)+2),this.J),this);try{K=S(347,this),0<K.length&&W(304,this,c(2,K.length).concat(K),10),W(304,this,c(1,this.l),109),W(304,this,c(1,this[O].length)),l=0,D=S(480,this),l+=S(2,this)&2047,l-=(S(304,this).length|0)+5,4<D.length&&(l-=(D.length|0)+3),0<l&&W(304,this,c(2,l).concat(V(l)),15),4<D.length&&W(304,this,c(2,D.length).concat(D),156)}finally{this.J=t}if((m=V(2).concat(S(304,this)),m)[1]=m[0]^6,m[3]=m[1]^b[0],m[4]=m[1]^b[1],L=this.Fj(m))L="!"+L;else for(L="",l=0;l<m.length;l++)C=m[l][this.g](16),1==C.length&&(C="0"+C),L+=C;return S(239,(y(87,(S(480,(Y=L,S(304,this).length=P.shift(),this)).length=P.shift(),this),P.shift()),this)).length=P.shift(),Y}if(G==E$)HG(this,U[1],U[2]);else if(G==a)return HG(this,U[1],8001)}}finally{M=A}}}(),X).prototype.bC=0,X.prototype).eD=0,X.prototype.Fj=function(M,B,U,l){if(l=window.btoa){for(U=(B="",0);U<M.length;U+=8192)B+=String.fromCharCode.apply(null,M.slice(U,U+8192));M=l(B).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else M=void 0;return M},/./),k2,Vo=F.pop.bind(X.prototype[X.prototype[no]=[0,0,1,1,0,1,1],r]),s$=function(M,B){return(B=aq())&&1===M.eval(B.createScript("1"))?function(U){return B.createScript(U)}:function(U){return""+U}}(((k2=tt({get:Vo},(cG[X.prototype.g]=Vo,X.prototype.Z)),X.prototype).UD=void 0,I));(40<(p=I.botguard||(I.botguard={}),p).m||(p.m=41,p.bg=be,p.a=Qo),p).VDE_=function(M,B,U){return[(U=new X(M,B),function(l){return Lo(U,l)})]};}).call(this);'));
}).call(this);
#5 JavaScript::Eval (size: 22) - SHA256: bf709695269c7d2008ddb1b47f1f5e95c217b6be1296b2207443147c55d84bf6
0,
function(D) {
    At(2, D)
}

Executed Writes (0)


HTTP Transactions (115)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11567
Expires: Fri, 25 Nov 2022 08:41:46 GMT
Date: Fri, 25 Nov 2022 05:28:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4934
Expires: Fri, 25 Nov 2022 06:51:13 GMT
Date: Fri, 25 Nov 2022 05:28:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4792
Cache-Control: max-age=109324
Date: Fri, 25 Nov 2022 05:28:59 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 11:51:03 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: YmTpL7VdAS5SKdaxB2eJ/NbSZCxm3DghkEBV10S2tIh9XWl8KdWMAD/9Lwe6wtIR4WvTykCeqxk=
x-amz-request-id: 8936M1FAS60KGENJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 04:40:40 GMT
age: 2899
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 05:19:03 GMT
cache-control: public,max-age=3600
age: 596
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    d130218d0e2841f39c99610fe1a2ab90
Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945
Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 25 Nov 2022 05:28:59 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 05:08:53 GMT
cache-control: public,max-age=3600
age: 1207
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         43.250.142.122
HTTP/1.1 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.4.33
set-cookie: apbct_timestamp=1669354140; path=/; SameSite=Lax apbct_site_landing_ts=1669354140; path=/; HttpOnly; SameSite=Lax apbct_page_hits=1; path=/; HttpOnly; SameSite=Lax apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252259a326403197e4477b3135fb0f09b522%2522%257D; path=/; HttpOnly; SameSite=Lax apbct_urls=%7B%22alpharoofingmelbourne.com.au%2F%22%3A%5B1669354140%5D%7D; expires=Mon, 28-Nov-2022 05:29:00 GMT; Max-Age=259200; path=/; domain=www.alpharoofingmelbourne.com.au; HttpOnly; SameSite=Lax apbct_site_referer=UNKNOWN; expires=Mon, 28-Nov-2022 05:29:00 GMT; Max-Age=259200; path=/; domain=www.alpharoofingmelbourne.com.au; HttpOnly; SameSite=Lax ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470; expires=Sun, 25-Dec-2022 05:29:00 GMT; Max-Age=2592000; path=/; SameSite=Lax
x-pingback: http://www.alpharoofingmelbourne.com.au/xmlrpc.php
x-redirect-by: WordPress
location: https://www.alpharoofingmelbourne.com.au/
content-length: 0
date: Fri, 25 Nov 2022 05:29:00 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3346
Cache-Control: max-age=102815
Date: Fri, 25 Nov 2022 05:29:00 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:02:35 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CLojLVix9lGWu5bDrH1fVg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.167.231.108
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fBcfh/L/RM8x9EJNjelrfJmIC/Q=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14392
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 05:29:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14392
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 05:29:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14392
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 05:29:02 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4f6042-6f6f-4572-b535-71b1a4b587e8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6049
x-amzn-requestid: 96e5c00c-1565-4e9f-aa5b-6da99785a03b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brsokHSgoAMF_RQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748e36-547f241a67f3703958f2eade;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:16:06 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KDIu_SbDdEi4ynoXJsXclQJmaAse8FTkyZdGCzmv0Pvgj3C0bus8XQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 02:55:18 GMT
age: 9224
etag: "29edd439b6e7894bc4771fc655a50d926f349a08"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6049
Md5:    73f65dfa986cf95e8fb459778b945c59
Sha1:   29edd439b6e7894bc4771fc655a50d926f349a08
Sha256: c6182797d5fce1a086580a338929e851a73ccb75e6432b12969aae6f0952fa27
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:14:07 GMT
age: 80095
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4309
Md5:    841a4b110022a99ddea6f7bf66df0fa1
Sha1:   126771b86638108050cf57c0d12faa27f80f0edb
Sha256: 240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 02:07:28 GMT
age: 12094
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3955
Md5:    4006a9037ab5f28dca62b0aa7a704c41
Sha1:   74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
Sha256: 556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F216636c8-4200-4f0d-83d2-8579be32f1ac.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4270
x-amzn-requestid: 7327f8fb-804b-4d09-83dc-628e35ffa74b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8xFwXoAMFkqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-33f83cea2c585279140f4f59;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: NLXTbS53l_c-lByM8Ym4_tfOlgP2lB-F1dYxOSfdeEfBSM41X0Cpug==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:01 GMT
etag: "6217a262002244ef3f2e8034076a735cafd9888a"
age: 28441
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4270
Md5:    648677a7e7bab1896a190d2e5fb7243c
Sha1:   6217a262002244ef3f2e8034076a735cafd9888a
Sha256: 72f2913f7c0770ebab0f2683bdc1ec5a5db8872e8f2c62a8fd5c9178b95dbb06
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10679
x-amzn-requestid: aec8d040-d4e6-4185-b71e-7c049617ebc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b4J3VEM5IAMFtcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637989c8-42b520ea3af2a2086ad416ad;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 01:58:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GkCprkFbPK6I-bo5k-rs37xaRDpqgUYbOydu2fd5-fTwqQ-d5lWlWw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 05:12:48 GMT
age: 974
etag: "2ec124224738807229328a3ade6ca493ccf4b287"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10679
Md5:    e2580ebded0a32ceecc3083ae1db2b37
Sha1:   2ec124224738807229328a3ade6ca493ccf4b287
Sha256: 010eeda33c923e2166851da1e131dcc21419d1f4f28995617ca93332ce4be08c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e6e0ab1-c4cf-40e6-973b-bb3db1a860e8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11586
x-amzn-requestid: df9d2675-0615-4993-83ab-87cdac30c05f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8JyoGElIAMFh-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b2343-315ac9210f212c9134ffa103;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:05:39 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: snfgherDVfBenP9XouMzFtaWfXLh4TeiwDmEb0hQh5L9Ww57Hkxl3g==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 548adcda884eed02304ba5d6a1d7f514.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:30:43 GMT
age: 25099
etag: "46ee95ebee3d60f64d2b7f568673b13ea27a42a3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11586
Md5:    c6b9b5ebc32235ed8f3e15df013963f0
Sha1:   46ee95ebee3d60f64d2b7f568673b13ea27a42a3
Sha256: 4fdf6f239f6931442d93a00acd8af1f5192f77143885945c27e137ef3683338e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js?render=explicit&ver=3.7.5 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Fri, 25 Nov 2022 05:29:03 GMT
date: Fri, 25 Nov 2022 05:29:03 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 554
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (852), with no line terminators
Size:   554
Md5:    0a628b8a14a877262721824930709597
Sha1:   31bbb380c04a4229a099a1fb6dea09cf717bcb5f
Sha256: 6c63432c24b1f8eed67f792c68214710fd6444ede5c28f56202e966770d20121
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
x-powered-by: PHP/7.4.33
set-cookie: apbct_timestamp=1669354141; path=/; secure; SameSite=Lax apbct_site_landing_ts=1669354141; path=/; secure; HttpOnly; SameSite=Lax apbct_page_hits=1; path=/; secure; HttpOnly; SameSite=Lax apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; path=/; secure; HttpOnly; SameSite=Lax apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; expires=Mon, 28-Nov-2022 05:29:01 GMT; Max-Age=259200; path=/; domain=www.alpharoofingmelbourne.com.au; secure; HttpOnly; SameSite=Lax apbct_site_referer=UNKNOWN; expires=Mon, 28-Nov-2022 05:29:01 GMT; Max-Age=259200; path=/; domain=www.alpharoofingmelbourne.com.au; secure; HttpOnly; SameSite=Lax ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470; expires=Sun, 25-Dec-2022 05:29:01 GMT; Max-Age=2592000; path=/; secure; SameSite=Lax
x-pingback: https://www.alpharoofingmelbourne.com.au/xmlrpc.php
link: <https://www.alpharoofingmelbourne.com.au/wp-json/>; rel="https://api.w.org/", <https://www.alpharoofingmelbourne.com.au/wp-json/wp/v2/pages/10>; rel="alternate"; type="application/json", <https://www.alpharoofingmelbourne.com.au/>; rel=shortlink
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 05:29:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (9381), with CRLF, LF line terminators
Size:   32663
Md5:    1b5e9fd00212b999d8b6529d7ddfc0d4
Sha1:   9afb71df879994600980284819ae8cf5d1408f7b
Sha256: c24e31716219b81aa46f31eb06ad3dca8826b7afb18aa33bde2904fe010a420a

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 05:20:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 144
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   144
Md5:    fcbd239f30d9a6dd1f3637f291143d37
Sha1:   2871bf7d98af3f43e42f7fa32808048e7134fabf
Sha256: c2f98e9d71f782b7a3266cd337c61ae6c8dcbb7203669c07852aa2ab65ab6144
                                        
                                            GET /wp-content/plugins/cleantalk-spam-protect/css/cleantalk-public.min.css?ver=5.189.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 264
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (591), with no line terminators
Size:   264
Md5:    cd702aa3e95261e039288cc6a731e931
Sha1:   7ef085bd9b9db17484d1b256c156ff21f6077e26
Sha256: 6336416c29aed6657e9be7abfee887cb25f4ea909381ef699c7b1c90238c3d84

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/hello-elementor/style.min.css?ver=2.6.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Mon, 22 Aug 2022 09:15:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1711
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6051), with no line terminators
Size:   1711
Md5:    cfe4870b943b2ade39a643e3a3d6d809
Sha1:   f1f4e04c908b19fa0a5a5b09de5b6b1dfc113f05
Sha256: 00f239a7fb673f1d8ab2db67b74e0bae64d103e520ee209c18e21b5bff3fb509
                                        
                                            GET /wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Mon, 22 Aug 2022 09:15:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2418
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15672), with no line terminators
Size:   2418
Md5:    0c53a727a9801d2d872125ab96be97df
Sha1:   40616b12b4a9f2e4533f9adc6f965ca2b44581e0
Sha256: 8a69f47fdb908591cba1faa64f3807cbb3b82e12f0fe099c6bcbd31213f3bea9
                                        
                                            GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.8.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12400
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65497)
Size:   12400
Md5:    eae4534b9e0b15aaf7ad9f3111688549
Sha1:   4bde4256711207e4a95c1376f0b453cd660a63d8
Sha256: b9adb98eaf24ecee30ef9b280527781e217f6e3829b8e22e5a42f7f14819cfec

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/uploads/elementor/css/post-6.css?ver=1662445999 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Tue, 06 Sep 2022 06:33:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 347
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1227), with no line terminators
Size:   347
Md5:    b2548905760fec4110cc64a04fe10a99
Sha1:   fa681c069d874980bb942654789a72af90b6ed33
Sha256: af9e2ce5a25f979e04f1ebf90b5260d048da519a7a8e8190d451008d4f82d3ea

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3629
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19233)
Size:   3629
Md5:    af3bdf44d09914e8adb51fec560d8816
Sha1:   84bb225e096bab405868dd504e62133ba75cf1c1
Sha256: 4325dab21d3eb9efb8e285a0926be743f27e46446ccf5f9be65bb4b60c024152
                                        
                                            GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.7.5 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Mon, 05 Sep 2022 01:25:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1533
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11487)
Size:   1533
Md5:    f46bf4b37c916ff3c3b4fe30de12500b
Sha1:   d1d94d65e494933d4d751be5f0c85ec49f955874
Sha256: 8ab5bb9e5f2270b365b7010b56307f005b86fedd43d11b7dd831898074552274
                                        
                                            GET /wp-content/uploads/elementor/css/global.css?ver=1662445999 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Tue, 06 Sep 2022 06:33:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2637
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (14692)
Size:   2637
Md5:    e6ae8a0de08641949a3f16a5699c6f40
Sha1:   5b74889d158c3982bd99a30065a9155866b54198
Sha256: b1c42719ac11e1abb881e6448ea37de5a557f6791b7a5b06e9f25009da7bf839

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/uploads/elementor/css/post-10.css?ver=1662445999 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Tue, 06 Sep 2022 06:33:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2593
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (27282), with CRLF, LF line terminators
Size:   2593
Md5:    03da0c9c94d037a185bdd9ea813ef67d
Sha1:   cc26ab6b6ad9de3f5bdddb6f383281c1c269d41b
Sha256: d7737bee4b3df82d0e6c78683714233c27758dce6815e2ecd84c3c4c3f23c499
                                        
                                            GET /wp-content/uploads/elementor/css/post-62.css?ver=1662445999 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Tue, 06 Sep 2022 06:33:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1754
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10299), with CRLF, LF line terminators
Size:   1754
Md5:    9e9b0dbc06105e493f30665ee3e71780
Sha1:   917be67409758d6733e4a349ec3fa2b157b5bb9a
Sha256: d51061451abaa119289a080c5da7e82551b70a62112b08541ae2ffc7ef69711a
                                        
                                            GET /wp-content/plugins/wp-hide-security-enhancer/assets/js/devtools-detect.js?ver=6.1.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 483
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   483
Md5:    ed9db6bad07e5efe6d72ce95a6969da6
Sha1:   35c157f40d8444d4ef29bed4c55c3ae2dc8a15dc
Sha256: 1a92d7a6754a6e24e8aa0fd66a146605f97ab85e48c395e4da5f23b8ff387125

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 284
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (489)
Size:   284
Md5:    dc279c928e2924b07a4a7575f8070ee8
Sha1:   0196756cacdb61ef40483af7ea982b699b0933de
Sha256: 80b6d9e3f0304f4199350c6015fd96084646c2a0121332bcb5a46d3956b7df5c
                                        
                                            GET /wp-content/uploads/elementor/css/post-224.css?ver=1662445999 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Tue, 06 Sep 2022 06:33:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1006
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11509), with no line terminators
Size:   1006
Md5:    5ff5448c47224504ace74738584b37fc
Sha1:   9634dad27034b3cc0cbfdd289e37a39e4c16cb63
Sha256: a578bba4bd9d289ad3f74312b7009da2e785acc70f05101a1f1702835157eadc

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 283
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (491)
Size:   283
Md5:    453a93dc816be89f942ebb253ff199fb
Sha1:   01563d6019803e3ff2a94c5397e7e771ee6f440d
Sha256: 36beebcd3778e04c8973faa581d07c7e7dc0bac2a77f637379e7d110383ab5d7

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 286
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (483)
Size:   286
Md5:    8828fa3c5bdcfa66615714a2b8c9d807
Sha1:   4f556d0b005ac7754af607418df445f8cf98e8b1
Sha256: 16950dcce60bc3ee2613b60439c99e7ed74d10245f59fe6f68346b7e72dd95e7

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/uploads/elementor/css/post-81.css?ver=1662445999 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Tue, 06 Sep 2022 06:33:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 731
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4534), with CRLF line terminators
Size:   731
Md5:    29d6d54caf3f4a9c7d3c7d32c76cdc0f
Sha1:   be2419dd4fae356232ae491ce4853f1de4130d80
Sha256: 463712a2f30e5a02002b3125c3481a16c39bf1b8775f54180f99b686864c46db
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12133
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (57726)
Size:   12133
Md5:    f463afd8661ddc733305df1f0cbdaff2
Sha1:   77262f0209e75e340eb7014aba9cd8d69966032f
Sha256: c4b6541be58a0ca61549cd4562850315077880c459c019f01e835cf2d7b764de

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Mon, 05 Sep 2022 01:25:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3343
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (29357)
Size:   3343
Md5:    867294a27fe772ecb2a172eac0b52b58
Sha1:   269942fd15a57d663011c1974970e3923b2f18db
Sha256: 78687b10bb133dff1943e242750a3d1af7ca77b329cc627bb05ba4169909a64b
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 05:20:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3995
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   3995
Md5:    7e058b51f939eacfa31cdface14dded5
Sha1:   9d732e5afdeb42edef9e1b9631b7e95e054787cc
Sha256: 4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 906
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11736)
Size:   906
Md5:    dfa4e3add9f185eaf959509b12a3f2f2
Sha1:   e9fcec09acb8cb18203b3c9c4133ab808576df38
Sha256: 060ede880f21b0bfe96d2e2b5f36606cef794e7e8814d1baf877c4868eca8a43
                                        
                                            GET /wp-content/plugins/cleantalk-spam-protect/js/apbct-public-bundle.min.js?ver=5.189.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11858
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45529), with no line terminators
Size:   11858
Md5:    6e1ce875f74cf8162f3179000d824371
Sha1:   8e5ff12b86ca2e7a9d97aa4a26d915dc67641ecb
Sha256: 4696b4b4858247ab4f6e5402e3f7e0c9ad25f46ca53c62467f5a9f9cb0ddcaa4
                                        
                                            GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Mon, 22 Aug 2022 09:15:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 953
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3164), with no line terminators
Size:   953
Md5:    4a7d773f90facef221a9cfa11bdb2973
Sha1:   5ecb3100b641b2af7f7d56533a14b23fcaf15787
Sha256: 0fe42ed1de09f98dd0cc32f562d016a8d9cc13fcd0a0d407a11a66714c999fca
                                        
                                            GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 05:20:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2354
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6475), with no line terminators
Size:   2354
Md5:    4e773d7cec56bacab6d2db420be6f262
Sha1:   c95573d884c1caec0ec9c6f3e2a8c0fbf28d939a
Sha256: 5c8839d0b02f21e8d83d856bbf85a6b87fbedf9ba0b70711b11a1c378d5443e7
                                        
                                            GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Mon, 05 Sep 2022 01:25:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6935
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25115)
Size:   6935
Md5:    e8d8c6e4997a420abc51e5fa8c1caa8b
Sha1:   39ae930f057de725cff8549eed82f31f8d0816c1
Sha256: 730b8265b47a7f9bf014b64fb5c27f9f1cff1051dbf53e60ceb3cc16def732cc

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.8.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:29 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2044
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4918)
Size:   2044
Md5:    918938b0ee6977d6506f2e0fa248bd66
Sha1:   292ba27818bec580f76945b53fee4ff6cddcb2c2
Sha256: a1da723cfdb1f8ea57aa7278637d07a83f39ff410dfbba24d8205882a110444e

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.5 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Mon, 05 Sep 2022 01:25:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2188
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5141)
Size:   2188
Md5:    f7e0a37c94bffceac208735a7425094e
Sha1:   9e6d03e9ce6da26f4966c57e817bb0662347f752
Sha256: ef6316f8babaf5c952916e9e232257e298742d9d1c576fb28dcf83c5b3b85678

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 05:20:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3717
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   3717
Md5:    f7acc55c5b34188d3e66c5f2ecf3ba80
Sha1:   802270f7a221e406af63d622d364b119d912c15b
Sha256: 826c4e13764f5bf1bd0a17f2e693d943f8605df1024815f67f43694f4338b713

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:03 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 02:00:01 GMT
Expires: Thu, 01 Dec 2022 02:00:00 GMT
Etag: "b34c3dbeb3c99cfa332cd9a2a300942ea768b1a8"
Cache-Control: max-age=505256,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76f7fc03e87ab512-OSL

                                        
                                            GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.8.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10425
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (32907)
Size:   10425
Md5:    72fd7d7a61961996172a081cb3eed6cb
Sha1:   7f6d4dc14ef08153606c57d374fd50b685ba383d
Sha256: 757fe1355fa4c3eed3c286520c6af9d344ab9d15a78d8d54a17e7573f866b9be
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.8.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2442
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10019)
Size:   2442
Md5:    d2db71c82a8f672aea59a3e050cd8cd7
Sha1:   af626566f94b3164e4310288cfb142431e8349a6
Sha256: bcd2c9c2ba22a48a8fabf9fbe5e947deb6404367e4be24f48326e302aead1180

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2867
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12198), with no line terminators
Size:   2867
Md5:    869caa171b68cbec9fee5abbfb944ee8
Sha1:   f237e485e41f88b77384cfdb880f9d5a8f46eac8
Sha256: 25c2896e2790fb0e52f6b6ba1ce97bd87eb40463b4bb65ba16ad434c1d7a36dc

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 05:20:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1575
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4875)
Size:   1575
Md5:    06a8ac0e71976bc143cfa7861a31169d
Sha1:   def6031fe13259bf17752661832d815e37068bf2
Sha256: e6f42d97e7299522bbb002364128fdf72cd22263ca72c5edc41dcd8f4672cd33
                                        
                                            GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.7.5 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Mon, 05 Sep 2022 01:25:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5290
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (24339)
Size:   5290
Md5:    ad4102eb587a1b562b97db70b9778ffa
Sha1:   ecffe0ae6f62484b31dab0fe731eb8afe49189a6
Sha256: 168541f70291069f1f8ee5801d7bac11a5f7f6526eb1153e1aa66562c7c762ce

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.5 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Mon, 05 Sep 2022 01:25:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5506
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21374)
Size:   5506
Md5:    823eb1a5283dc1bddc0a093e835c5211
Sha1:   3411dc902cbc27d1293bf2fb3665c22fbab4f54d
Sha256: c7a08617843a7329b7f6bc0f360cc4acadceaf2e8c576952c08df5461a57bb0a

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.8.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 00:58:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11702
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (40474)
Size:   11702
Md5:    cf45d3e8044770ba8eabf3833e30fdbe
Sha1:   90f787b69fa2f83b87c28f3caa67985b04b333bd
Sha256: c83321c916d9ca392150cf727108c0927ce9394be70e9b08920cff666f823fb4

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.5 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Mon, 05 Sep 2022 01:25:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1477
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3703)
Size:   1477
Md5:    7a67ac94b6ebafd94c82dfa591065fdc
Sha1:   5190d1ef32403a4ad195ece088c0fba145562f13
Sha256: 2bd8dfe375603969948af382eb62f2957f2c51bfe8fd1db0c2f64af284cb0107
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 05:20:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30324
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30324
Md5:    3a1740685bd5c0bbd5f2b812e1eb7fb4
Sha1:   488e07695da787fed18361c50292aef35abb5e81
Sha256: 4a07aed2d8cf88afdec0b56b365b951c76d387db3459166b5a0d25e2e6cc95ef
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 05:20:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6800
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8189)
Size:   6800
Md5:    3d0ff0f6731d9cef860af9a5a0e3ce62
Sha1:   13aed444304d782039e261475c8b4450b83e743e
Sha256: e8d05db77732c71843ced6f386ea82eb32243ac36e7ca3e071cb7f53e2ffbce5

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 05:20:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6335
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Size:   6335
Md5:    fecbc00e8af71d8cfb678cd811c7cb2e
Sha1:   44e5dd77f62cb5c67271442b75cdff10d45f2f8d
Sha256: d6f03fb4728d0c23251451df8d66b5107d3c87458dc624aacfbad437e99d01f1

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Fri, 25 Nov 2022 05:20:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4619
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   4619
Md5:    0232689bd203f330529b36a437f41a68
Sha1:   9046583f7469ad38297969f10a9513eb895d5316
Sha256: feea9f30a6e454579bbeabf236b7abdb0c7de84dd2852422555ad67348c5e886
                                        
                                            GET /wp-content/uploads/2021/11/g8.png HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Thu, 09 Dec 2021 19:31:28 GMT
accept-ranges: bytes
content-length: 36534
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 253 x 208, 8-bit colormap, non-interlaced\012- data
Size:   36534
Md5:    f8c6d0429592647f0a948cdb725e7640
Sha1:   f8e31fde15fb74436c25e92b7cd53284a255771a
Sha256: 8025564406661068e8439d06617ede1b555f2c4a819667884c0664f8b4c57919
                                        
                                            GET /wp-content/uploads/2021/11/g4.png HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Thu, 09 Dec 2021 19:31:44 GMT
accept-ranges: bytes
content-length: 37702
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 253 x 208, 8-bit colormap, non-interlaced\012- data
Size:   37702
Md5:    789dd8327d0a5067324455f074f822c4
Sha1:   1e829641ff7bf6e47ecce6b23cb72b99aadbf1ec
Sha256: 4562ec97bda7cd6f86ac8c914ea21936cd07607bcf4bb53dc659665665a8f747
                                        
                                            GET /wp-content/uploads/2021/11/g6.png HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Thu, 09 Dec 2021 19:31:32 GMT
accept-ranges: bytes
content-length: 33624
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 253 x 208, 8-bit colormap, non-interlaced\012- data
Size:   33624
Md5:    1373f748d68d5d09745624d8a63de7b8
Sha1:   c0c3ccaed4cde7016d2d6639107e1f5eee03f553
Sha256: 5c9f163704a9be830f27c2c69649bbd855e447d5a5794ac270eec6a6f1f7411e
                                        
                                            GET /wp-content/uploads/2021/11/g7.png HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Thu, 09 Dec 2021 19:31:30 GMT
accept-ranges: bytes
content-length: 39846
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 253 x 208, 8-bit colormap, non-interlaced\012- data
Size:   39846
Md5:    32f5984abbcf13cea1585dc8221c01db
Sha1:   a021dbbe322ebfe7418e8faccf5dfee4aad9cd73
Sha256: bff36ffa9c336aa97eb34660e6d1476840bfda97e853aa9a15372f494c57c351
                                        
                                            GET /wp-content/uploads/2021/11/g3.png HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Thu, 09 Dec 2021 19:31:46 GMT
accept-ranges: bytes
content-length: 39935
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 253 x 208, 8-bit colormap, non-interlaced\012- data
Size:   39935
Md5:    a45e2fa7c5003aa49fec08cb4daf5e81
Sha1:   65845b8bc9e7387786444e210d4e6be8cb98b64c
Sha256: 3219159cadf0bc28eccdc44e46ca8bb8abddd68ae8f808f6eb1f1fda98238e1c
                                        
                                            GET /pixel/ad6e4c6327c203333221a538f6a05284.gif HTTP/1.1 
Host: moderate6.cleantalk.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.244.187.11
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 25 Nov 2022 05:29:04 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-53T26ZT HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 05:29:04 GMT
expires: Fri, 25 Nov 2022 05:29:04 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 66150
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8400)
Size:   66150
Md5:    3cce9f9aaaa4ba28473a9b61d8576f60
Sha1:   bb788bd40532382e7d5ff7f5a3d3769e0b81506f
Sha256: 55d4d7287cea5bd2a13866d93a334ea1bee168985e7de3da9b762fb67201cedd
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 122096
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET /wp-content/uploads/2021/11/g2.png HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Thu, 09 Dec 2021 19:31:52 GMT
accept-ranges: bytes
content-length: 43229
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 253 x 208, 8-bit colormap, non-interlaced\012- data
Size:   43229
Md5:    4f3354a0e908d48962ab1730b4780f50
Sha1:   28a8e61522ee55fcb8b601a5c88e865fb7281f6d
Sha256: 81086e7623ff4c390cce873e8d6b50d900347f58d254c877153be7b78837f422
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2021/11/g5.png HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Thu, 09 Dec 2021 19:31:36 GMT
accept-ranges: bytes
content-length: 36392
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 253 x 208, 8-bit colormap, non-interlaced\012- data
Size:   36392
Md5:    35649d9c7ee1e2f347bfc09d0d0a2256
Sha1:   04d00b0f054e43e8f5e88fe0542df349741f1347
Sha256: fb1f62f2dff6499d3e0606b10be54b1a9acebf32e9208020f197c604c91c7c17
                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 16:40:18 GMT
expires: Fri, 24 Nov 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 46126
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size:   30928
Md5:    ac0d2859ea5f8fd6bcb3c305c08ec184
Sha1:   7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
Sha256: ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:07:32 GMT
expires: Thu, 23 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 141692
last-modified: Wed, 11 May 2022 19:24:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Size:   15920
Md5:    3a44e06eb954b96aa043227f3534189d
Sha1:   23cef6993ddb2b2979e8e7647fc3763694e2ba7d
Sha256: b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 21:48:50 GMT
expires: Thu, 23 Nov 2023 21:48:50 GMT
cache-control: public, max-age=31536000
age: 114014
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Size:   7884
Md5:    9212f6f9860f9fc6c69b02fedf6db8c3
Sha1:   ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
Sha256: 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
                                        
                                            GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 08:32:10 GMT
expires: Thu, 23 Nov 2023 08:32:10 GMT
cache-control: public, max-age=31536000
age: 161814
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Size:   7748
Md5:    a09f2fccfee35b7247b08a1a266f0328
Sha1:   0da2d17e738f46d2a09e6fb7969da451719a9820
Sha256: cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 14:43:52 GMT
expires: Wed, 22 Nov 2023 14:43:52 GMT
cache-control: public, max-age=31536000
age: 225912
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Size:   8000
Md5:    72993dddf88a63e8f226656f7de88e57
Sha1:   179f97ec0275f09603a8db94d4380eb584d81cd5
Sha256: f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
                                        
                                            POST /g/collect?v=2&tid=G-6PNLCLK8D0&gtm=2oeb90&_p=1684176767&cid=237675741.1669354144&ul=en-us&sr=1280x1024&_s=1&sid=1669354144&sct=1&seg=0&dl=https%3A%2F%2Fwww.alpharoofingmelbourne.com.au%2F&dt=Best%20Gutter%20Company%20in%20Melbourne%20%7C%20Roofing%20Company%20in%20Melbourne&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://www.alpharoofingmelbourne.com.au
date: Fri, 25 Nov 2022 05:29:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /css?family=Poppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 25 Nov 2022 05:29:03 GMT
date: Fri, 25 Nov 2022 05:29:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5122
Md5:    78f738a7069bb72bf358e172b3aa2813
Sha1:   4d66bb5998ecc561c82832601455a716cd6fe286
Sha256: e31be31e336a6f0fc697cb1b935d8ca5b671c79380b14720ba1793b9a37fe41c
                                        
                                            GET /wcm/loader.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1339
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 05:00:33 GMT
expires: Fri, 25 Nov 2022 06:00:33 GMT
cache-control: public, max-age=3600
age: 1712
last-modified: Mon, 15 Mar 2021 16:45:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1123)
Size:   1339
Md5:    22300d54ba7faf32360c95915053014c
Sha1:   ea83f097bd99413f9d8fcb08d0312ba7ba1be99f
Sha256: 2c4c9c9d6af1ad12556ab11c8021eb5c254025ce04500bc885b69984dd562ce5
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 04:41:08 GMT
expires: Fri, 25 Nov 2022 06:41:08 GMT
cache-control: public, max-age=7200
age: 2877
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /call-tracking/call-tracking_7.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-telephony
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-telephony"
report-to: {"group":"ads-telephony","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-telephony"}]}
content-length: 21020
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 07:15:44 GMT
expires: Tue, 21 Nov 2023 07:15:44 GMT
cache-control: public, max-age=31536000
age: 339201
last-modified: Wed, 03 Feb 2021 22:45:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2828)
Size:   21020
Md5:    23db67cc80ab227aeab0967306bd9c1c
Sha1:   7ebb71850d2ebf5d58b26c085a4aa1bbfa11c6ba
Sha256: 58d50b1c5787d1c2d790f6cb3b8bd41378ef47599b0d3050feb9c9ebadf5068d
                                        
                                            GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 09:43:42 GMT
expires: Fri, 24 Nov 2023 09:43:42 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
age: 71123
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (730)
Size:   162976
Md5:    79d18cf4265108d7cecca1bf4ada6109
Sha1:   e51d0285a545381d4c39e9e0292a650ffeeecbb9
Sha256: 59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-85164066-79&cid=237675741.1669354144&jid=681318063&gjid=678507348&_gid=1106707120.1669354145&_u=YADAAEAAAAAAACAAI~&z=1739377214 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.251.1.155
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://www.alpharoofingmelbourne.com.au
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 05:29:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /pagead/conversion/367229854/wcm?cc=ZZ&dn=0391195399&cl=5aEfCO201KcDEJ73ja8B&ct_eid=2 HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.98
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://www.google.no/pagead/attribution/wcm?cc=ZZ&dn=0391195399&cl=5aEfCO201KcDEJ73ja8B
access-control-allow-origin: https://www.alpharoofingmelbourne.com.au
access-control-allow-credentials: true
x-content-type-options: nosniff
date: Fri, 25 Nov 2022 05:29:06 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/attribution/wcm?cc=ZZ&dn=0391195399&cl=5aEfCO201KcDEJ73ja8B HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://www.alpharoofingmelbourne.com.au/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: null
access-control-allow-credentials: true
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 25 Nov 2022 05:29:06 GMT
server: cafe
cache-control: private
content-length: 87
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   87
Md5:    36d9ec9a38ee63b6e93115603d96f7a1
Sha1:   efb8de49ffe231ec8a1266a8ca3a97901356a846
Sha256: 30f732c37c76fae3bcf6bcb7c39492d86abc6c3fbf53dadc4533f89df05c71b2
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-85164066-79&cid=237675741.1669354144&jid=681318063&_u=YADAAEAAAAAAACAAI~&z=38721678 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 05:29:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /tag/9rk4mddner?ref=gtm2 HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.107.246.53
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: no-cache, no-store
expires: -1
set-cookie: CLID=b18b476d422c4bc7a413d4add5cba8d1.20221125.20231125; expires=Sat, 25 Nov 2023 05:29:06 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:3d284f99-f285-495c-ac33-dedd7ecf1ac8
x-cache: CONFIG_NOCACHE
x-azure-ref: 0olKAYwAAAAAS0nwXgfbjSZ2YenZJIYZrQU1TMDRFREdFMTkxNwA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 25 Nov 2022 05:29:05 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (55029)
Size:   56801
Md5:    e7c5f7b4736a4f2e126af31d08f90c53
Sha1:   368865c85f9892e062333c8ce2e12a744a14742d
Sha256: 2d9baa377808c1fa5cf7df7e846a88fe408fc77efbc51e6b240565c764f784b0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 05:29:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /collect HTTP/1.1 
Host: b.clarity.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 690
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         20.75.32.255
HTTP/2 204 No Content
                                        
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.alpharoofingmelbourne.com.au
access-control-allow-credentials: true
date: Fri, 25 Nov 2022 05:29:06 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /c.gif HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         20.234.93.27
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=8965AD2C68264A06A04B8C975491A9BF&RedC=c.clarity.ms&MXFR=13E5811E1B6A666D356993791F6A6841
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure; MUID=13E5811E1B6A666D356993791F6A6841; domain=.clarity.ms; expires=Wed, 20-Dec-2023 05:29:07 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Fri, 25 Nov 2022 05:29:06 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /c.gif?CtsSyncId=8965AD2C68264A06A04B8C975491A9BF&RedC=c.clarity.ms&MXFR=13E5811E1B6A666D356993791F6A6841 HTTP/1.1 
Host: c.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.alpharoofingmelbourne.com.au/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         204.79.197.200
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=8965AD2C68264A06A04B8C975491A9BF&MUID=2420CEC1DF4B60311716DCA6DE1C61F8
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=2420CEC1DF4B60311716DCA6DE1C61F8; domain=c.bing.com; expires=Wed, 20-Dec-2023 05:29:07 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BE2D528219614ED58D8FD172A4AE72E0 Ref B: OSL30EDGE0317 Ref C: 2022-11-25T05:29:07Z
date: Fri, 25 Nov 2022 05:29:06 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /c.gif?CtsSyncId=8965AD2C68264A06A04B8C975491A9BF&MUID=2420CEC1DF4B60311716DCA6DE1C61F8 HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.alpharoofingmelbourne.com.au/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         20.234.93.27
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Fri, 25-Nov-2022 05:39:07 GMT; path=/; SameSite=None; Secure;
date: Fri, 25 Nov 2022 05:29:06 GMT
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    32023bb33cfb2a1990a4ef2d85b6ac16
Sha1:   23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
Sha256: 99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
                                        
                                            POST /collect HTTP/1.1 
Host: b.clarity.ms
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 128098
Origin: https://www.alpharoofingmelbourne.com.au
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         20.75.32.255
HTTP/2 204 No Content
                                        
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.alpharoofingmelbourne.com.au
access-control-allow-credentials: true
date: Fri, 25 Nov 2022 05:29:06 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMontserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 25 Nov 2022 05:29:03 GMT
date: Fri, 25 Nov 2022 05:29:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2021/11/g1.png HTTP/1.1 
Host: www.alpharoofingmelbourne.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpharoofingmelbourne.com.au/
Cookie: apbct_timestamp=1669354141; apbct_site_landing_ts=1669354141; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252234decd2768215a49eeb8c333892db131%2522%257D; apbct_urls=%7B%22www.alpharoofingmelbourne.com.au%2F%22%3A%5B1669354141%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=83dbda7d4cc235646d4fb8d934205c470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         43.250.142.122
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=604800
expires: Fri, 02 Dec 2022 05:29:03 GMT
last-modified: Thu, 09 Dec 2021 19:31:54 GMT
accept-ranges: bytes
content-length: 39555
date: Fri, 25 Nov 2022 05:29:03 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---