Edit tour

Windows Analysis Report
http://www.oshawamasons.com

Overview

General Information

Sample URL:	http://www.oshawamasons.com
Analysis ID:	1428770
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

Invalid T&C link found

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2144 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4820 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2644 --field-trial-handle=2484,i,4804793272607099222,16445352283661988341,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.oshawamasons.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: www.oshawamasons.com

Source: unknown

HTTP traffic detected: POST /events/v2?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ HTTP/1.1Host: events.mapbox.comConnection: keep-aliveContent-Length: 206sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: http://www.oshawamasons.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://www.oshawamasons.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: text/html;charset=utf-8content-length: 964vary: Accept-Encodingserver: DPS/2.0.0+sha-9385784x-version: 9385784x-siteid: us-east-1set-cookie: dps_site_id=us-east-1; path=/date: Fri, 19 Apr 2024 13:44:29 GMTkeep-alive: timeout=5Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 64 70 73 2f 63 73 73 2f 75 78 63 6f 72 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 64 70 73 2f 63 73 73 2f 63 75 73 74 6f 6d 65 72 2d 63 6f 6d 70 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 65 72 72 6f 72 2d 69 6d 67 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 64 70 73 2f 69 6d 61 67 65 73 2f 34 30 34 5f 62 61 63 6b 67 72 6f 75 6e 64 2e 6a 70 67 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 74 65 78 74 2d 63 65 6e 74 65 72 22 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 69 63 6f 6e 20 74 65 78 74 2d 77 61 72 6e 69 6e 67 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 75 78 69 63 6f 6e 20 75 78 69 63 6f 6e 2d 61 6c 65 72 74 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 20 28 34 30 34 20 65 72 72 6f 72 29 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 36 20 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6c 65 61 64 22 3e 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 77 68 61 74 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 73 68 6f 75 6c 64 20 62 65 20 68 65 72 65 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 69 74 65 20

Source: http://www.oshawamasons.com/contact-us.html	HTTP Parser: Invalid link: Privacy Policy
Source: http://www.oshawamasons.com/contact-us.html	HTTP Parser: Invalid link: Privacy Policy
Source: http://www.oshawamasons.com/contact-us.html	HTTP Parser: Invalid link: Privacy Policy

Source: http://www.oshawamasons.com/contact-us.html	HTTP Parser: No <meta name="author".. found
Source: http://www.oshawamasons.com/contact-us.html	HTTP Parser: No <meta name="author".. found
Source: http://www.oshawamasons.com/contact-us.html	HTTP Parser: No <meta name="author".. found

Source: http://www.oshawamasons.com/contact-us.html	HTTP Parser: No <meta name="copyright".. found
Source: http://www.oshawamasons.com/contact-us.html	HTTP Parser: No <meta name="copyright".. found
Source: http://www.oshawamasons.com/contact-us.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49970 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 19 Apr 2024 13:44:19 GMTServer: Apachex-cloud-request-id: GDNC980B4CDE2662220268B243FF8649x-cloud-bucket-key: c4bb0179c1a07cdb267fc4c1557cdf96x-cloud-bucket-name: resourcesx-cloud-object-key: e4162478efde6c00d21be51bfc1cc5bfx-cloud-object-name: resources/dd3da8ab-e9f3-4757-af3a-21f28fac476d-cropped-squarecomp.pngx-cloud-version: 9bca236f525b007365d9003c1eb9e7abx-cloud-acl: public-readx-cloud-meta: etag: 7b98cad8fdec01306b5062cb68a25a1clast-modified: Fri, 25 Aug 2017 02:53:17 GMTcreated-date: Fri, 25 Aug 2017 02:53:17 GMTaccess-control-allow-origin: x-cloud-public-bucket: []expires: Sun, 19 May 2024 13:44:19 GMTcache-control: max-age=2592000, must-revalidateVary: Accept-EncodingContent-Encoding: gzipContent-Length: 2212Keep-Alive: timeout=15, max=100Connection: Keep-AliveContent-Type: image/pngData Raw: 1f 8b 08 00 00 00 00 00 00 03 01 8d 08 72 f7 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 20 08 06 00 00 00 05 40 c8 7f 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 08 42 49 44 41 54 48 c7 b5 96 7b 50 53 e9 19 c6 9f 90 1c 2f 25 11 09 10 48 72 94 4b 29 97 c8 c2 20 2a 2a 16 a5 1d 74 20 d6 6a d5 0e 6e bc e2 05 2b b8 2c 76 45 97 ea 2a 3a 82 76 45 c7 59 c5 bb 9d 22 72 31 6e ad 44 f0 ca 4d 04 41 23 8e ce ae 23 68 95 88 e1 b6 42 42 12 24 82 27 6f ff 30 6e b7 d5 dd 81 d5 3e 7f 7d 33 e7 fd 9e df f9 be f7 fb 9e 73 78 18 84 24 12 09 3a 3a 3a 98 f5 eb d7 af 1a 35 6a d4 2a 22 b2 e9 74 ba 03 7b f6 ec f9 9b a3 a3 23 d7 d3 d3 33 60 2f fe 60 c0 69 69 69 f0 f7 f7 9f 1a 18 18 b8 5e af d7 1f b2 5a ad f7 bc bd bd 97 7b 78 78 dc 8b 8c 8c 7c 56 53 53 33 60 2f 87 c1 80 93 93 93 21 93 c9 c6 f7 f6 f6 7e 9b 91 91 71 6c fb f6 ed 87 5f be 7c f9 58 2e 97 8f 8d 8b 8b 1b 8c 15 04 83 29 ce cf cf 47 6b 6b eb f3 31 63 c6 8c 59 b0 60 41 38 c3 30 cc 90 21 43 14 7a bd be 54 ab d5 0e 0a cc 1b 68 a1 b3 b3 33 0c 06 83 43 66 66 e6 97 c1 c1 c1 eb 0c 06 c3 77 1c c7 39 c8 64 32 97 c7 8f 1f e7 27 24 24 c4 7b 7a 7a 5a 75 3a dd 80 fc 06 dc e3 d9 b3 67 43 26 93 29 56 ae 5c b9 3d 22 22 62 64 7b 7b 3b fa fb fb 79 4a Data Ascii: rPNGIHDR @bKGDBIDATH{PS/%HrK) t jn+,vE:vEY"r1nDMA##hBB$'o0n>}3sx$:::5j*"t{#3`/`iii^Z{xx\|VSS3`/!~ql_\|X.)Gkk1cY`A80!CzTh3Cffw9d2'$${zzZu:gC&)V\=""bd{{;yJ
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 19 Apr 2024 13:44:20 GMTServer: Apachex-cloud-request-id: GDNC3690936E29227BB79CA20C37A6A6x-cloud-bucket-key: c4bb0179c1a07cdb267fc4c1557cdf96x-cloud-bucket-name: resourcesx-cloud-object-key: e4162478efde6c00d21be51bfc1cc5bfx-cloud-object-name: resources/dd3da8ab-e9f3-4757-af3a-21f28fac476d-cropped-squarecomp.pngx-cloud-version: 9bca236f525b007365d9003c1eb9e7abx-cloud-acl: public-readx-cloud-meta: etag: 7b98cad8fdec01306b5062cb68a25a1clast-modified: Fri, 25 Aug 2017 02:53:17 GMTcreated-date: Fri, 25 Aug 2017 02:53:17 GMTaccess-control-allow-origin: x-cloud-public-bucket: []expires: Sun, 19 May 2024 13:44:20 GMTcache-control: max-age=2592000, must-revalidateVary: Accept-EncodingContent-Encoding: gzipContent-Length: 2212Keep-Alive: timeout=15, max=100Connection: Keep-AliveContent-Type: image/pngData Raw: 1f 8b 08 00 00 00 00 00 00 03 01 8d 08 72 f7 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 20 08 06 00 00 00 05 40 c8 7f 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 08 42 49 44 41 54 48 c7 b5 96 7b 50 53 e9 19 c6 9f 90 1c 2f 25 11 09 10 48 72 94 4b 29 97 c8 c2 20 2a 2a 16 a5 1d 74 20 d6 6a d5 0e 6e bc e2 05 2b b8 2c 76 45 97 ea 2a 3a 82 76 45 c7 59 c5 bb 9d 22 72 31 6e ad 44 f0 ca 4d 04 41 23 8e ce ae 23 68 95 88 e1 b6 42 42 12 24 82 27 6f ff 30 6e b7 d5 dd 81 d5 3e 7f 7d 33 e7 fd 9e df f9 be f7 fb 9e 73 78 18 84 24 12 09 3a 3a 3a 98 f5 eb d7 af 1a 35 6a d4 2a 22 b2 e9 74 ba 03 7b f6 ec f9 9b a3 a3 23 d7 d3 d3 33 60 2f fe 60 c0 69 69 69 f0 f7 f7 9f 1a 18 18 b8 5e af d7 1f b2 5a ad f7 bc bd bd 97 7b 78 78 dc 8b 8c 8c 7c 56 53 53 33 60 2f 87 c1 80 93 93 93 21 93 c9 c6 f7 f6 f6 7e 9b 91 91 71 6c fb f6 ed 87 5f be 7c f9 58 2e 97 8f 8d 8b 8b 1b 8c 15 04 83 29 ce cf cf 47 6b 6b eb f3 31 63 c6 8c 59 b0 60 41 38 c3 30 cc 90 21 43 14 7a bd be 54 ab d5 0e 0a cc 1b 68 a1 b3 b3 33 0c 06 83 43 66 66 e6 97 c1 c1 c1 eb 0c 06 c3 77 1c c7 39 c8 64 32 97 c7 8f 1f e7 27 24 24 c4 7b 7a 7a 5a 75 3a dd 80 fc 06 dc e3 d9 b3 67 43 26 93 29 56 ae 5c b9 3d 22 22 62 64 7b 7b 3b fa fb fb 79 4a Data Ascii: rPNGIHDR @bKGDBIDATH{PS/%HrK) t jn+,vE:vEY"r1nDMA##hBB$'o0n>}3sx$:::5j*"t{#3`/`iii^Z{xx\|VSS3`/!~ql_\|X.)Gkk1cY`A80!CzTh3Cffw9d2'$${zzZu:gC&)V\=""bd{{;yJ

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2644 --field-trial-handle=2484,i,4804793272607099222,16445352283661988341,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.oshawamasons.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2644 --field-trial-handle=2484,i,4804793272607099222,16445352283661988341,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Name	IP	Active	Malicious	Reputation
api.mapbox.com	18.165.83.107	true	false	high
events.mapbox.com	54.225.71.141	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
plus.l.google.com	142.250.9.138	true	false	high
oshawamasons.com	76.223.105.230	true	false	unknown
www.google.com	74.125.136.103	true	false	high
oshawamasonichall.ca	76.223.105.230	true	false	unknown
nebula.phx3.secureserver.net	216.69.141.2	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
calendar.google.com	64.233.177.139	true	false	high
img1.wsimg.com	unknown	unknown	false	high
events.api.secureserver.net	unknown	unknown	false	high
img2.wsimg.com	unknown	unknown	false	high
clients6.google.com	unknown	unknown	false	high
nebula.wsimg.com	unknown	unknown	false	high
csp.secureserver.net	unknown	unknown	false	high
img4.wsimg.com	unknown	unknown	false	high
www.oshawamasons.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	high
www.oshawamasonichall.ca	unknown	unknown	false	unknown

Name	Source	Malicious	Reputation
http://scripts.sil.org/OFLSeaweedScript-RegularVersion	chromecache_331.2.dr, chromecache_204.2.dr	false	high
https://apis.google.com/js/client.js	chromecache_404.2.dr	false	high
https://drive-thirdparty.googleusercontent.com/32/type/application/pdf	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://github.com/googlefonts/OswaldFont)	chromecache_252.2.dr, chromecache_312.2.dr	false	high
https://www.google.com/calendar/event?eid=MjRrb2dyZGxhMjZoYm4ybmM1dTg4anFyZ28gMDNiNmRjMzhlZjMxMDdjND	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_404.2.dr	false	high
https://github.com/googlefonts/AmaticSC)	chromecache_355.2.dr, chromecache_346.2.dr	false	high
https://www.google.com/calendar/event?eid=NTBza240aTExYnF1cWk3cGJidGJlOGFzbDZfMjAyNDA1MDNUMTIwMDAwWi	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://github.com/NDISCOVER/Cinzel)	chromecache_337.2.dr, chromecache_415.2.dr	false	high
https://www.google.com/calendar/event?eid=MnVjdTZpYXQ5ZWhzOXNmb2lpbmtqMWtmcGMgMDNiNmRjMzhlZjMxMDdjND	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_404.2.dr, chromecache_378.2.dr	false	high
https://scripts.sil.org/OFLOswald-RegularVersion	chromecache_252.2.dr, chromecache_312.2.dr	false	high
https://www.google.com/calendar/event?eid=NjdubzJjdTQyOHBta2tnMGFpMmg0NHVzajVfMjAyNDA0MTZUMjMzMDAwWi	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://drive.google.com/open?id=1ie5v-ghkoOfcxq0Ksisy0l6Cv5bp9-8d&authuser=2	chromecache_283.2.dr, chromecache_411.2.dr	false	high
http://scripts.sil.org/OFLOvertheRainbowVersion	chromecache_172.2.dr, chromecache_216.2.dr	false	high
https://drive.google.com/open?id=1eiY2rFRpxFVVDzA2nJKQy21pjNvt5gwC&authuser=1	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://github.com/googlefonts/arizonia)	chromecache_264.2.dr, chromecache_239.2.dr	false	high
https://github.com/EbenSorkin/Merriweather)	chromecache_414.2.dr, chromecache_246.2.dr	false	high
https://pay.google.com/gp/v/widget/save	chromecache_404.2.dr	false	high
https://www.google.com/calendar/event?eid=MDhlZGZiNmdxZXVsb2xmMXRjNzlhb3RqaHZfMjAyNDA0MDlUMjMzMDAwWi	chromecache_283.2.dr, chromecache_411.2.dr	false	high
http://scripts.sil.org/OFLMerriweather-RegularVersion	chromecache_414.2.dr, chromecache_246.2.dr	false	high
https://drive.google.com/open?id=1TTemOIGvRkCBLUVDCH2Od58vwc3bjTXx&authuser=1	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://www.google.com/calendar/event?eid=MWg3MzU1ZXFxcGw1Ym9laWdwbTgwb290YTRfMjAyNDA0MTdUMjMzMDAwWi	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://www.google.com/calendar/event?eid=MDQ5NTVodHNsYmNkMXVrdWwxN3IzZTJmYjBfMjAyNDA0MDhUMjMzMDAwWi	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_404.2.dr	false	high
http://scripts.sil.org/OFLFrancoisOne-RegularVersion	chromecache_233.2.dr, chromecache_306.2.dr	false	high
https://developers.google.com/	chromecache_378.2.dr	false	high
https://www.google.com/calendar/event?eid=NTBza240aTExYnF1cWk3cGJidGJlOGFzbDZfMjAyNDA0MDVUMTIwMDAwWi	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_378.2.dr	false	high
https://drive.google.com/open?id=1gnSCa53f_31SJzFdP_oXRfa1Z3Fhr0vv&authuser=1	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://github.com/googlefonts/josefinslab/)	chromecache_392.2.dr, chromecache_193.2.dr	false	high
https://github.com/googlefonts/opensans)	chromecache_349.2.dr, chromecache_419.2.dr	false	high
http://www.apache.org/licenses/LICENSE-2.0.html	chromecache_380.2.dr, chromecache_187.2.dr	false	high
https://www.google.com/calendar/event?eid=NG9jOGV2cmpkdWdlcjliYm4xa3R0dDM5cmEgMDNiNmRjMzhlZjMxMDdjND	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_404.2.dr	false	high
https://www.google.com/calendar/event?eid=NHRjM2hkajhzZGdkamFoMzNna2g4aWllanNfMjAyNDA0MTJUMTIwMDAwWi	chromecache_283.2.dr, chromecache_411.2.dr	false	high
http://scripts.sil.org/OFLKaushanScript-RegularVersion	chromecache_290.2.dr, chromecache_343.2.dr	false	high
https://www.google.com/calendar/event?eid=MHQ5YTRlcWF1Z3QybWltNmUyNms1ZWRudGRfMjAyNDA0MTFUMjMzMDAwWi	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://www.google.com/calendar/event?eid=MXJycDA0NjNrZ2lrYzg5NzIyMHVzOTFqbmNfMjAyNDA0MDJUMjMzMDAwWi	chromecache_283.2.dr, chromecache_411.2.dr	false	high
https://plus.google.com	chromecache_378.2.dr	false	high

IP	Domain	Country	ASN	ASN Name	Malicious
54.225.71.141	events.mapbox.com	United States	14618	AMAZON-AESUS	false
76.223.105.230	oshawamasons.com	United States	16509	AMAZON-02US	false
64.233.177.139	calendar.google.com	United States	15169	GOOGLEUS	false
74.125.136.103	www.google.com	United States	15169	GOOGLEUS	false
18.165.83.107	api.mapbox.com	United States	3	MIT-GATEWAYSUS	false
142.250.9.138	plus.l.google.com	United States	15169	GOOGLEUS	false
3.161.193.44	unknown	United States	16509	AMAZON-02US	false
216.69.141.2	nebula.phx3.secureserver.net	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
108.177.122.101	unknown	United States	15169	GOOGLEUS	false

IP
192.168.2.17
192.168.2.4

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428770
Start date and time:	2024-04-19 15:43:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.oshawamasons.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@31/440@72/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://www.oshawamasons.com/about-us.html Browse: http://www.oshawamasonichall.ca/home.html Browse: http://www.oshawamasons.com/become-a-mason.html Browse: http://www.oshawamasons.com/home.html Browse: http://www.oshawamasons.com/about-masonry.html Browse: http://www.oshawamasons.com/trestleboard.html Browse: http://www.oshawamasons.com/contact-us.html Browse: http://www.oshawamasons.com/about-us.html Browse: http://www.oshawamasonichall.ca/home.html Browse: http://www.oshawamasons.com/become-a-mason.html Browse: http://www.oshawamasons.com/home.html Browse: http://www.oshawamasons.com/about-masonry.html Browse: http://www.oshawamasons.com/trestleboard.html Browse: http://www.oshawamasons.com/contact-us.html

Name	Malicious	Reputation
https://calendar.google.com/googlecalendar/images/icon_print.gif	false	high
https://apis.google.com/js/client.js?onload=clientLibraryLoaded	false	high
https://api.mapbox.com/v4/mapbox.mapbox-streets-v8,mapbox.mapbox-terrain-v2/16/18411/23856.vector.pbf?sku=101z28QCj5HqZ&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
https://api.mapbox.com/v4/mapbox.mapbox-streets-v8,mapbox.mapbox-terrain-v2/16/18410/23856.vector.pbf?sku=101z28QCj5HqZ&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
https://api.mapbox.com/v4/mapbox.mapbox-streets-v8,mapbox.mapbox-terrain-v2/16/18411/23857.vector.pbf?sku=101f8jK3pcozT&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
https://api.mapbox.com/v4/mapbox.mapbox-streets-v8,mapbox.mapbox-terrain-v2/16/18410/23857.vector.pbf?sku=101f8jK3pcozT&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
http://www.oshawamasons.com/about-masonry.html	false	unknown
https://api.mapbox.com/fonts/v1/mapbox/DIN%20Offc%20Pro%20Italic,Arial%20Unicode%20MS%20Regular/0-255.pbf?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
https://api.mapbox.com/mapbox-gl-js/v2.7.1/mapbox-gl.js	false	high
https://api.mapbox.com/fonts/v1/mapbox/DIN%20Offc%20Pro%20Medium,Arial%20Unicode%20MS%20Regular/0-255.pbf?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
https://calendar.google.com/calendar/_/web/calendar-static/_/ss/k=calendar-web.embed.YnXjO0wW19U.L.W.O/am=wA/d=0/rs=ABFko38UoH-5tl5ofVBYwngmVDtsx_5cmQ	false	high
https://calendar.google.com/googlecalendar/images/blank.gif	false	high
https://api.mapbox.com/map-sessions/v1?sku=101f8jK3pcozT&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
http://www.oshawamasons.com/site.css?v=	false	unknown
http://www.oshawamasonichall.ca/home.html	false	unknown
http://www.oshawamasons.com/	false	unknown
https://calendar.google.com/googlecalendar/images/combined_v22.png	false	high
https://api.mapbox.com/v4/mapbox.mapbox-streets-v8,mapbox.mapbox-terrain-v2/16/18410/23856.vector.pbf?sku=101f8jK3pcozT&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
https://api.mapbox.com/styles/v1/mapbox/streets-v11?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
https://api.mapbox.com/fonts/v1/mapbox/DIN%20Offc%20Pro%20Regular,Arial%20Unicode%20MS%20Regular/0-255.pbf?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
https://api.mapbox.com/v4/mapbox.mapbox-streets-v8,mapbox.mapbox-terrain-v2/16/18411/23857.vector.pbf?sku=101z28QCj5HqZ&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
http://www.oshawamasons.com/become-a-mason.html	false	unknown
http://www.oshawamasons.com/trestleboard.html	false	unknown
https://calendar.google.com/calendar/_/web/calendar-static/_/js/k=calendar-web.embed.en.qRD766014q0.2020.O/am=wA/d=1/rs=ABFko39-Tt5y1g8ZgtLgcbD2LzFtpNEndg/m=embed	false	high
https://calendar.google.com/googlecalendar/images/logo-plus.png	false	high
https://api.mapbox.com/map-sessions/v1?sku=101z28QCj5HqZ&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
https://calendar.google.com/googlecalendar/images/menu_arrow_open.gif	false	high
https://api.mapbox.com/styles/v1/mapbox/streets-v11/sprite.png?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high
https://api.mapbox.com/v4/mapbox.mapbox-streets-v8,mapbox.mapbox-terrain-v2.json?secure&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	high

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 19576
Category:	downloaded
Size (bytes):	10978
Entropy (8bit):	7.9792792438648155
Encrypted:	false
SSDEEP:	192:3uCtCz8VI3+NC4/TzhBQ6fak+JU7+Jpk3NO8TRxFgBaKmoHC5c5:3u+5VLou1BQQ+JU7+Jp+48Cim
MD5:	0C1363B33D638BEC036FB38BEAB745E0
SHA1:	52E8A98387AB95DDC130BC5B8A414289311E1919
SHA-256:	BB31E238EACCDD446487053B9CB5DA1EB21CD3FFD3B47A9AB70B166F95BE0C19
SHA-512:	97E244FCB5B96DFB40DFBBFE8D95839EDD545F7998B077560F9C5DFB282CB03242F3C6B1128D4BF13E30C8F6444BCA1A35FC939F65F91139969513458CA36861
Malicious:	false
Reputation:	low
URL:	"https://api.mapbox.com/v4/mapbox.mapbox-streets-v8,mapbox.mapbox-terrain-v2/16/18410/23857.vector.pbf?sku=101z28QCj5HqZ&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ"
Preview:	.............x...?...$...M;...%..i..RJ!..............%$.4eQ4CA@.. ;.e_.D@.... n(.....D....$.`.....C3.\|.s..n.=g"nyl.b..u.g..5..sl....I=ad.....I...T(.."..TU6...A...&OV...n...,...........M?JC..`e....0......{...(.0...`?....$...'$6F....~......Q.._.....Db..Q.H. .J6.z.....xk....G,..AO....J.,.^`..tBK9..^1..+.I}.....^.db<...A.6L.o_..K.E.}.as#<..$1F.!...q+.p...W..IBF.!..\.Ik[4.h>.r.k$.NB..._}....8.;.....?N.....o....N...Q=...z...3.`..m[wP"..:..'.Uf$.........e8.....&.'..-}...g.Fc..1&.Cn..f.?...M..e_-.Sz.)...L........E..ar..xFN.Y!.RZRpl....J9....i..H..L.T.M.F.d=G..D.>u.......k..^YM.M.Xo..'..qr.[n.mzL.....'s.....<i..:`.s.S.}A`T..%/}..0..\..d..S.......W.K.\|..!.#..rj~178..]K$..\|....q./6\|....kprwG~R79.~.......@K..-....H...hx......;....~..$..7S...\|.w..rF{.+.FZbSlAlt.v.k'o...'U..r.o}..g..}{......P..b..s.\|e..r..o.;.g.~}..Q8.Our...LT[.NE.'...g<..(.-r.} U...t..S.AY.g.!....%/...m..:.9.z9._.]...^.l.@..._........=1...o..@8..07~....A +...]

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 15:44:09.097002029 CEST	53	52978	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:09.109472990 CEST	53	63738	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:09.715568066 CEST	53	63829	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:10.719053030 CEST	57305	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:10.719368935 CEST	59454	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:10.871161938 CEST	53	59454	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:10.891583920 CEST	53	57305	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:11.233706951 CEST	53871	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:11.233874083 CEST	52769	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:11.246793985 CEST	63063	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:11.247062922 CEST	53204	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:11.247479916 CEST	63410	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:11.247730970 CEST	61940	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:11.326313972 CEST	53	61752	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:11.328352928 CEST	53	61318	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:11.329904079 CEST	50003	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:11.330126047 CEST	60999	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:11.343138933 CEST	51229	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:11.343275070 CEST	60649	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:11.356034994 CEST	58098	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:11.356848955 CEST	50030	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:12.823231936 CEST	59813	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:12.823441982 CEST	53492	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:12.927881002 CEST	53	53492	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:12.928601980 CEST	53	59813	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:13.688987017 CEST	55779	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:13.688987017 CEST	54810	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:19.495033026 CEST	61866	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:19.495392084 CEST	63938	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:19.502309084 CEST	52766	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:19.502902985 CEST	51524	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:19.620362997 CEST	53	52766	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:19.623258114 CEST	53	51524	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:19.763730049 CEST	56113	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:19.764162064 CEST	59056	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:20.099457979 CEST	55114	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:20.099643946 CEST	51392	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:20.219851971 CEST	53	51392	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:20.267077923 CEST	53	55114	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:20.433572054 CEST	50591	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:20.433710098 CEST	54766	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:22.373907089 CEST	138	138	192.168.2.4	192.168.2.255
Apr 19, 2024 15:44:25.955322981 CEST	56432	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:25.956342936 CEST	58946	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:26.118231058 CEST	53	56432	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:26.121846914 CEST	53	58946	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:26.458623886 CEST	58059	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:26.458857059 CEST	57191	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:26.477066994 CEST	56055	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:26.477377892 CEST	65150	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:26.478132010 CEST	55687	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:26.478533983 CEST	61476	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:26.562483072 CEST	53	54212	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:26.562895060 CEST	53	59764	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:26.665524006 CEST	52039	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:26.665798903 CEST	60788	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:26.666085005 CEST	53580	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:26.666385889 CEST	57070	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:29.060585022 CEST	53	56384	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:40.100024939 CEST	56974	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:40.101063013 CEST	61374	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:40.204763889 CEST	53	56974	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:40.205698013 CEST	53	61374	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:41.253211021 CEST	55060	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:41.253576040 CEST	56626	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:41.358052015 CEST	53	55060	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:41.358072996 CEST	53	56626	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:41.627053022 CEST	54256	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:41.627404928 CEST	65087	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:43.344619036 CEST	50880	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:43.345623970 CEST	59560	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:43.409487963 CEST	53	55545	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:43.450290918 CEST	53	59560	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:43.896199942 CEST	52318	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:43.896378040 CEST	58974	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:44.001521111 CEST	53	52318	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:44.001540899 CEST	53	58974	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:44.159480095 CEST	53	55194	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:45.031205893 CEST	62766	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:45.031536102 CEST	52003	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:45.137554884 CEST	53	52003	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:45.536535978 CEST	65218	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:45.536690950 CEST	61833	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:45.641035080 CEST	53	61833	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:45.641921997 CEST	53	65218	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:47.020637035 CEST	53	63052	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:47.697140932 CEST	61416	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:47.697278976 CEST	54510	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:48.461031914 CEST	53	52657	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:52.203490019 CEST	49638	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:52.203807116 CEST	60948	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:52.308235884 CEST	53	60948	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:52.308420897 CEST	53	49638	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:52.409305096 CEST	54994	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:52.410216093 CEST	63916	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:44:52.514904976 CEST	53	54994	1.1.1.1	192.168.2.4
Apr 19, 2024 15:44:52.515264034 CEST	53	63916	1.1.1.1	192.168.2.4
Apr 19, 2024 15:45:08.600575924 CEST	53	63506	1.1.1.1	192.168.2.4
Apr 19, 2024 15:45:11.502378941 CEST	61606	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:45:11.502605915 CEST	61987	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:45:11.580466986 CEST	53	49527	1.1.1.1	192.168.2.4
Apr 19, 2024 15:45:11.581271887 CEST	53	55955	1.1.1.1	192.168.2.4
Apr 19, 2024 15:45:11.583053112 CEST	55464	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:45:11.583194971 CEST	62788	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:45:11.584939003 CEST	65098	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:45:11.586829901 CEST	60876	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:45:11.609426022 CEST	52199	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:45:11.609426022 CEST	54379	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:45:11.693310976 CEST	55095	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:45:11.693574905 CEST	58490	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:45:12.786462069 CEST	53	50610	1.1.1.1	192.168.2.4
Apr 19, 2024 15:45:13.277818918 CEST	62534	53	192.168.2.4	1.1.1.1
Apr 19, 2024 15:45:13.279015064 CEST	57627	53	192.168.2.4	1.1.1.1

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 15:44:10.996938944 CEST	435	OUT	GET / HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 19, 2024 15:44:11.214020967 CEST	1200	IN	HTTP/1.1 200 OK link: <http://www.oshawamasons.com/site.css?v=>; rel=preload; as=style,<https://img1.wsimg.com/gfonts/s/allura/v21/9oRPNYsQpS4zjuA_iwgT.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/amaticsc/v26/TUZyzwprpvBS1izr_vOECuSa.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/arizonia/v21/neIIzCemt4A5qa7mv5WBFqk.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/averiasanslibre/v19/ga6XaxZG_G5OvCf_rt7FH3B6BHLMEdVOEoc.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/cabinsketch/v21/QGYpz_kZZAGCONcK2A4bGOj8mNhI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/francoisone/v21/_Xmr-H4zszafZw3A-KPSZut9wQiU.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/frederickathegreat/v21/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--SjxbI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/jacquesfrancoisshadow/v25/KR1FBtOz8PKTMk-kqdkLVrvR0ECFrB6Pin-2_p8Sun8.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinslab/v26/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Lw.ttf>; rel=preload; as=font; crossorigin,<http Data Raw: Data Ascii:
Apr 19, 2024 15:44:11.214044094 CEST	248	IN	Data Raw: 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 67 66 6f 6e 74 73 2f 73 2f 6b 61 75 73 68 61 6e 73 63 72 69 70 74 2f 76 31 36 2f 76 6d 38 76 64 52 66 76 58 46 4c 47 33 4f 4c 6e 73 4f 31 35 57 59 53 35 44 47 37 34 77 4e 63 2e 74 74 66 3e 3b Data Ascii: ://img1.wsimg.com/gfonts/s/kaushanscript/v16/vm8vdRfvXFLG3OLnsO15WYS5DG74wNc.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/loveyalikeasister/v20/R70EjzUBlOqPeouhFDfR80-0FhOqJubN-BeL9XxY.ttf>; rel=preload; as=font; cr
Apr 19, 2024 15:44:11.214056015 CEST	1200	IN	Data Raw: 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 67 66 6f 6e 74 73 2f 73 2f 6d 65 72 72 69 77 65 61 74 68 65 72 2f 76 33 30 2f 75 2d 34 34 30 71 79 72 69 51 77 6c 4f 72 68 53 76 6f 77 4b 5f 6c 35 2d 66 43 5a Data Ascii: igin,<https://img1.wsimg.com/gfonts/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZJ.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/offside/v24/HI_KiYMWKa9QrAykc5boQg.ttf>; rel=preload; as=font; crossorigin,<https://im
Apr 19, 2024 15:44:11.214067936 CEST	248	IN	Data Raw: 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 67 66 6f 6e 74 73 2f 73 2f 61 72 69 6d 6f 2f 76 32 39 2f 50 35 73 66 7a 5a 43 44 66 39 5f 54 5f 33 63 56 37 4e 43 55 45 43 79 6f 78 4e 6b 33 37 63 Data Ascii: ssorigin,<https://img1.wsimg.com/gfonts/s/arimo/v29/P5sfzZCDf9_T_3cV7NCUECyoxNk37cxcABrHdwcoaaQw.woff>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/patuaone/v20/ZXuke1cDvLCKLDcimxB44_luFgxbuQ.woff2>; rel=preload; as=font
Apr 19, 2024 15:44:11.214081049 CEST	1200	IN	Data Raw: 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 Data Ascii: ssorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://img2.wsimg.com>; rel=preconnect; crossorigin,<https://
Apr 19, 2024 15:44:11.214092970 CEST	1200	IN	Data Raw: bb 55 11 f5 6b e3 24 ad 8d ec da d9 71 d3 ee bc ef 10 44 0c 4c 30 ed 60 0b 19 9d b3 e3 26 c4 2e a1 46 87 5a c8 ae 8d 48 65 1d 24 97 7e b8 01 2a 6c 30 a8 ac 83 41 ac 82 88 c9 0d 80 d6 41 ac 85 11 ab 0d f0 1d 5c 7c 1b aa f8 fa 99 70 d6 02 9f 27 b5 Data Ascii: Uk$qDL0`&.FZHe$~l0AA\\|p'd["YK48"UeTDGamZvkT.H\FT?LnLT/&l vIbWj#R5Nz>0=c]\|\|&>{r,e~o5*:oE#
Apr 19, 2024 15:44:11.214106083 CEST	1200	IN	Data Raw: 79 63 d3 f1 c7 d5 8d e1 5e 34 52 e0 2b 03 7b fe a5 02 0d 70 ec 27 a9 8a 5f 8a ad 20 1a a9 6b 16 f8 97 8a 25 19 a2 da 88 a0 da 91 8d 76 2f 6e 4e 9b c1 c1 b7 43 15 0d 7b ed 1d ef c8 41 10 b5 7b 07 df de 0f f9 47 d8 54 7b ee 97 ab af 2b f3 b8 af e2 Data Ascii: yc^4R+{p'_ k%v/nNC{A{GT{++_@!}O N`Bu~eN</(_Z{0y:fo'}<Oj6WMx::_s9\|~}ppSi78GMeWoa
Apr 19, 2024 15:44:11.214118004 CEST	744	IN	Data Raw: 2c a4 0c fd 30 54 f1 f7 67 80 01 a4 3f fa 3e f6 65 da db 70 1d 4d 73 2f d7 2d 03 cd 31 10 2b ad c2 23 b5 a9 e7 4d bc 20 1a 6f f4 7c 29 55 b8 02 05 7e bf fb fd 9e 60 ee c0 11 92 23 4f 72 c8 25 51 90 ba 9c 42 8e 4c 17 3a 5c 28 4b 72 4a b9 51 c8 db Data Ascii: ,0Tg?>epMs/-1+#M o\|)U~`#Or%QBL:\(KrJQ6'LP<PM<7(%+,L,Va9`Ra7ne7I%,yZ 0&1]3$c6B2k:i0#0KriYt:&"ZH1K2
Apr 19, 2024 15:44:11.214129925 CEST	1200	IN	Data Raw: a1 e5 b1 3c e0 5d 10 73 d6 00 b8 f7 9c 4f d3 32 15 47 52 5b 15 05 a9 b0 1d c8 4c c2 a1 87 1c 65 78 96 44 c8 41 77 3b 3b 03 3d d1 d9 d1 e5 71 ac da d9 99 c4 66 42 d8 06 b4 90 cc 3a 7d 17 32 c2 30 f4 6c 5b 12 61 d8 98 7a ac 30 bd 53 d1 13 7b b1 a2 Data Ascii: <]sO2GR[LexDAw;;=qfB:}20l[az0S{8f-85)C0"+P)J(0Cu1fn+VpI]Mp-=G\|2,nI*yt\|.aV\sF{s(P8K8Lbe
Apr 19, 2024 15:44:11.214140892 CEST	248	IN	Data Raw: 8a 24 d8 57 21 68 aa 34 55 f1 56 ad 87 4b 90 59 26 a4 fb 1c ba 35 11 b6 fe ac 68 20 13 cb 5e a9 6f e9 2a 00 3a 09 67 bb 32 cd b9 d1 eb e1 83 28 de ae fc e4 65 ff 2a 8f d5 1a c8 46 f3 20 83 9c d9 43 9d 22 b3 01 86 83 81 8a 05 4b b4 fd 3a d1 fa 1a Data Ascii: $W!h4UVKY&5h ^o:g2(eF C"K:(XN4!2a_J#?\E:e"J'5,O}M//,d%lx4L0I@W[S?F*(VSQ22,v~T_uE=tb:dULx[d<WLj
Apr 19, 2024 15:44:11.214153051 CEST	1200	IN	Data Raw: 22 9f 8d 45 dc 6a 4c ee d5 65 41 89 a9 73 99 85 25 36 41 9e dc 04 b3 e1 58 96 dc 94 a7 39 fd 64 11 c1 95 b9 39 ff 76 a4 d7 99 a5 d7 1b 00 6f 7a 7e 90 aa 78 03 b0 60 d0 63 6b c5 03 ed 57 57 4a 48 a2 4c 08 fb 0f a3 7d 48 0a 5b 49 8b 70 e5 09 2a 4d Data Ascii: "EjLeAs%6AX9d9voz~x`ckWWJHL}H[IpM(lYGAL$AgA2^YUt)\|]=_Ys%,Q{voRGG_Gj\|l4h8V%xe/L(-p[=Uf)txg
Apr 19, 2024 15:44:11.243513107 CEST	369	OUT	GET /site.css?v= HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.oshawamasons.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
Apr 19, 2024 15:44:11.413037062 CEST	1200	IN	HTTP/1.1 200 OK link: <http://www.oshawamasons.com/site.css?v=>; rel=preload; as=style,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://img2.wsimg.com>; rel=preconnect; crossorigin,<https://img4.wsimg.com>; rel=preconnect; crossorigin,<http://img4.wsimg.com>; rel=preconnect; crossorigin,<http://nebula.wsimg.com>; rel=preconnect; crossorigin cache-control: public, max-age=60, s-maxage=300 content-security-policy: frame-ancestors 'self' content-type: text/css vary: Accept-Encoding server: DPS/2.0.0+sha-9385784 x-version: 9385784 x-siteid: us-east-1 set-cookie: dps_site_id=us-east-1; path=/ etag: a639900744ca915be7592194781e53e1 content-encoding: gzip date: Fri, 19 Apr 2024 13:44:11 GMT keep-alive: timeout=5 transfer-encoding: chunked Data Raw: 41 0d 0a 1f 8b 08 00 00 00 00 00 00 03 0d 0a 31 45 33 44 0d 0a ed 3d 0d 73 db 36 b2 7f 85 e7 4c 26 71 8f 94 29 4a b2 6c 69 9a 77 76 3e 95 ab db 34 ee 39 89 fb 72 1e 90 04 25 c4 fc 2a 09 c9 76 34 fe 1b 6f de 6f b9 79 bf e6 7e c9 9b 05 f8 01 90 20 45 b9 6e af 77 e3 aa 19 59 00 16 58 2c 16 0b ec 62 b1 e8 5d a5 b6 e1 a0 70 85 d2 f5 15 71 e9 62 d2 37 cd c7 d3 05 26 f3 05 e5 7f c7 51 4a 28 89 c2 09 b2 d3 c8 5f 52 3c 8d 56 38 f1 fc e8 ca b8 9e a0 25 8d ca df 37 93 d4 49 22 df 9f da c8 b9 9c 27 d1 32 74 0d 27 f2 a3 64 f2 c8 1b c3 47 cc 48 70 8c 11 9d f0 af db 5e 89 88 c1 2b 41 b6 8f 45 9c ea 78 7c 35 48 e8 e2 eb 89 39 a5 51 3c 31 a7 3e f6 e8 c4 94 aa 8a d1 1c 1b 4e 14 52 44 42 9c 08 d5 dd fe ec f8 28 4d ff fe ed 0e 71 a2 d0 d8 f9 ac f3 84 6f be dd d1 b2 94 b5 4b d2 d8 47 37 13 12 fa 24 c4 86 ed 47 ce e5 34 ab 62 18 5f 17 54 82 bf 03 94 cc 49 68 00 22 56 7c 3d fd 26 fb 9d b0 12 bd 01 0e a6 ac 0e 11 64 85 13 4a 1c e4 1b c8 27 Data Ascii: A1E3D=s6L&q)Jliwv>49r%*v4ooy~ EnwYX,b]pqb7&QJ(_R<V8%7I"'2t'dGHp^+AEx\|5H9Q<1>NRDB(MqoKG7$G4b_TIh"V\|=&dJ'

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 15:44:19.834126949 CEST	474	OUT	GET /e4162478efde6c00d21be51bfc1cc5bf?AccessKeyId=1205F7EA56B857D02EC5&disposition=0&alloworigin=1 HTTP/1.1 Host: nebula.phx3.secureserver.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.oshawamasons.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 19, 2024 15:44:20.038840055 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:44:19 GMT Server: Apache x-cloud-request-id: GDNC980B4CDE2662220268B243FF8649 x-cloud-bucket-key: c4bb0179c1a07cdb267fc4c1557cdf96 x-cloud-bucket-name: resources x-cloud-object-key: e4162478efde6c00d21be51bfc1cc5bf x-cloud-object-name: resources/dd3da8ab-e9f3-4757-af3a-21f28fac476d-cropped-squarecomp.png x-cloud-version: 9bca236f525b007365d9003c1eb9e7ab x-cloud-acl: public-read x-cloud-meta: etag: 7b98cad8fdec01306b5062cb68a25a1c last-modified: Fri, 25 Aug 2017 02:53:17 GMT created-date: Fri, 25 Aug 2017 02:53:17 GMT access-control-allow-origin: * x-cloud-public-bucket: [] expires: Sun, 19 May 2024 13:44:19 GMT cache-control: max-age=2592000, must-revalidate Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2212 Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: image/png Data Raw: 1f 8b 08 00 00 00 00 00 00 03 01 8d 08 72 f7 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 20 08 06 00 00 00 05 40 c8 7f 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 08 42 49 44 41 54 48 c7 b5 96 7b 50 53 e9 19 c6 9f 90 1c 2f 25 11 09 10 48 72 94 4b 29 97 c8 c2 20 2a 2a 16 a5 1d 74 20 d6 6a d5 0e 6e bc e2 05 2b b8 2c 76 45 97 ea 2a 3a 82 76 45 c7 59 c5 bb 9d 22 72 31 6e ad 44 f0 ca 4d 04 41 23 8e ce ae 23 68 95 88 e1 b6 42 42 12 24 82 27 6f ff 30 6e b7 d5 dd 81 d5 3e 7f 7d 33 e7 fd 9e df f9 be f7 fb 9e 73 78 18 84 24 12 09 3a 3a 3a 98 f5 eb d7 af 1a 35 6a d4 2a 22 b2 e9 74 ba 03 7b f6 ec f9 9b a3 a3 23 d7 d3 d3 33 60 2f fe 60 c0 69 69 69 f0 f7 f7 9f 1a 18 18 b8 5e af d7 1f b2 5a ad f7 bc bd bd 97 7b 78 78 dc 8b 8c 8c 7c 56 53 53 33 60 2f 87 c1 80 93 93 93 21 93 c9 c6 f7 f6 f6 7e 9b 91 91 71 6c fb f6 ed 87 5f be 7c f9 58 2e 97 8f 8d 8b 8b 1b 8c 15 04 83 29 ce cf cf 47 6b 6b eb f3 31 63 c6 8c 59 b0 60 41 38 c3 30 cc 90 21 43 14 7a bd be 54 ab d5 0e 0a cc 1b 68 a1 b3 b3 33 0c 06 83 43 66 66 e6 97 c1 c1 c1 eb 0c 06 c3 77 1c c7 39 c8 64 32 97 c7 8f 1f e7 27 24 24 c4 7b 7a 7a 5a 75 3a dd 80 fc 06 dc e3 d9 b3 67 43 26 93 29 56 ae 5c b9 3d 22 22 62 64 7b 7b 3b fa fb fb 79 4a Data Ascii: rPNGIHDR @bKGDBIDATH{PS/%HrK) *t jn+,vE:vEY"r1nDMA##hBB$'o0n>}3sx$:::5j*"t{#3`/`iii^Z{xx\|VSS3`/!~ql_\|X.)Gkk1cY`A80!CzTh3Cffw9d2'$${zzZu:gC&)V\=""bd{{;yJ
Apr 19, 2024 15:44:20.038873911 CEST	1289	IN	Data Raw: a5 72 a8 48 24 92 9b cd e6 ea a8 a8 28 5d 65 65 e5 a0 56 fe 93 62 18 06 00 b0 77 ef de ed dd dd dd d4 d3 d3 43 d9 d9 d9 07 b6 6d db b6 b5 b3 b3 93 b3 5a ad 74 e2 c4 89 e3 00 18 91 48 f4 e1 c0 4a a5 12 53 a6 4c f1 ad a9 a9 69 20 22 aa ad ad 7d 34 Data Ascii: rH$(]eeVbwCmZtHJSLi "}4cB]r&{a\|>D\FFF"!55uIsss/C_K$GGG#44ttee]H;jM??U*!K,y?(a=rJgx
Apr 19, 2024 15:44:20.038892031 CEST	515	IN	Data Raw: b8 70 e1 ad 14 63 a6 4d 9b b6 39 29 29 e9 33 00 c3 97 2f 5f be a2 ac ac ac 53 ab d5 d2 ab 57 af c8 6c 36 d3 e9 d3 a7 cf 4f 9e 3c 79 74 66 66 26 00 0c 01 30 8c 88 10 1e 1e ce 16 14 14 fc d3 6c 36 53 5f 5f 1f d5 d5 d5 51 45 45 c5 f3 f8 f8 f8 78 00 Data Ascii: pcM9))3/_SWl6O<ytff&0l6S__QEExLbbb\|LLL>b@0ov~\\\BuuuWkk+f((^h5L6FmmmTUU9NNNpww1dmtQ PT--5PGGf?7vX688XvM&z=]\|

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 15:44:20.431665897 CEST	374	OUT	GET /e4162478efde6c00d21be51bfc1cc5bf?AccessKeyId=1205F7EA56B857D02EC5&disposition=0&alloworigin=1 HTTP/1.1 Host: nebula.phx3.secureserver.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 19, 2024 15:44:20.660315037 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:44:20 GMT Server: Apache x-cloud-request-id: GDNC3690936E29227BB79CA20C37A6A6 x-cloud-bucket-key: c4bb0179c1a07cdb267fc4c1557cdf96 x-cloud-bucket-name: resources x-cloud-object-key: e4162478efde6c00d21be51bfc1cc5bf x-cloud-object-name: resources/dd3da8ab-e9f3-4757-af3a-21f28fac476d-cropped-squarecomp.png x-cloud-version: 9bca236f525b007365d9003c1eb9e7ab x-cloud-acl: public-read x-cloud-meta: etag: 7b98cad8fdec01306b5062cb68a25a1c last-modified: Fri, 25 Aug 2017 02:53:17 GMT created-date: Fri, 25 Aug 2017 02:53:17 GMT access-control-allow-origin: * x-cloud-public-bucket: [] expires: Sun, 19 May 2024 13:44:20 GMT cache-control: max-age=2592000, must-revalidate Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2212 Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: image/png Data Raw: 1f 8b 08 00 00 00 00 00 00 03 01 8d 08 72 f7 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 20 08 06 00 00 00 05 40 c8 7f 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 08 42 49 44 41 54 48 c7 b5 96 7b 50 53 e9 19 c6 9f 90 1c 2f 25 11 09 10 48 72 94 4b 29 97 c8 c2 20 2a 2a 16 a5 1d 74 20 d6 6a d5 0e 6e bc e2 05 2b b8 2c 76 45 97 ea 2a 3a 82 76 45 c7 59 c5 bb 9d 22 72 31 6e ad 44 f0 ca 4d 04 41 23 8e ce ae 23 68 95 88 e1 b6 42 42 12 24 82 27 6f ff 30 6e b7 d5 dd 81 d5 3e 7f 7d 33 e7 fd 9e df f9 be f7 fb 9e 73 78 18 84 24 12 09 3a 3a 3a 98 f5 eb d7 af 1a 35 6a d4 2a 22 b2 e9 74 ba 03 7b f6 ec f9 9b a3 a3 23 d7 d3 d3 33 60 2f fe 60 c0 69 69 69 f0 f7 f7 9f 1a 18 18 b8 5e af d7 1f b2 5a ad f7 bc bd bd 97 7b 78 78 dc 8b 8c 8c 7c 56 53 53 33 60 2f 87 c1 80 93 93 93 21 93 c9 c6 f7 f6 f6 7e 9b 91 91 71 6c fb f6 ed 87 5f be 7c f9 58 2e 97 8f 8d 8b 8b 1b 8c 15 04 83 29 ce cf cf 47 6b 6b eb f3 31 63 c6 8c 59 b0 60 41 38 c3 30 cc 90 21 43 14 7a bd be 54 ab d5 0e 0a cc 1b 68 a1 b3 b3 33 0c 06 83 43 66 66 e6 97 c1 c1 c1 eb 0c 06 c3 77 1c c7 39 c8 64 32 97 c7 8f 1f e7 27 24 24 c4 7b 7a 7a 5a 75 3a dd 80 fc 06 dc e3 d9 b3 67 43 26 93 29 56 ae 5c b9 3d 22 22 62 64 7b 7b 3b fa fb fb 79 4a Data Ascii: rPNGIHDR @bKGDBIDATH{PS/%HrK) *t jn+,vE:vEY"r1nDMA##hBB$'o0n>}3sx$:::5j*"t{#3`/`iii^Z{xx\|VSS3`/!~ql_\|X.)Gkk1cY`A80!CzTh3Cffw9d2'$${zzZu:gC&)V\=""bd{{;yJ
Apr 19, 2024 15:44:20.663144112 CEST	1289	IN	Data Raw: a5 72 a8 48 24 92 9b cd e6 ea a8 a8 28 5d 65 65 e5 a0 56 fe 93 62 18 06 00 b0 77 ef de ed dd dd dd d4 d3 d3 43 d9 d9 d9 07 b6 6d db b6 b5 b3 b3 93 b3 5a ad 74 e2 c4 89 e3 00 18 91 48 f4 e1 c0 4a a5 12 53 a6 4c f1 ad a9 a9 69 20 22 aa ad ad 7d 34 Data Ascii: rH$(]eeVbwCmZtHJSLi "}4cB]r&{a\|>D\FFF"!55uIsss/C_K$GGG#44ttee]H;jM??U*!K,y?(a=rJgx
Apr 19, 2024 15:44:20.663176060 CEST	515	IN	Data Raw: b8 70 e1 ad 14 63 a6 4d 9b b6 39 29 29 e9 33 00 c3 97 2f 5f be a2 ac ac ac 53 ab d5 d2 ab 57 af c8 6c 36 d3 e9 d3 a7 cf 4f 9e 3c 79 74 66 66 26 00 0c 01 30 8c 88 10 1e 1e ce 16 14 14 fc d3 6c 36 53 5f 5f 1f d5 d5 d5 51 45 45 c5 f3 f8 f8 f8 78 00 Data Ascii: pcM9))3/_SWl6O<ytff&0l6S__QEExLbbb\|LLL>b@0ov~\\\BuuuWkk+f((^h5L6FmmmTUU9NNNpww1dmtQ PT--5PGGf?7vX688XvM&z=]\|

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 15:44:21.137470961 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Apr 19, 2024 15:44:23.269108057 CEST	479	OUT	GET /about-us.html HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 15:44:21.238384962 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Apr 19, 2024 15:44:23.269956112 CEST	479	OUT	GET /about-us.html HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 15:44:23.374577045 CEST	479	OUT	GET /about-us.html HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
Apr 19, 2024 15:44:23.570292950 CEST	1200	IN	HTTP/1.1 200 OK link: <http://www.oshawamasons.com/site.css?v=>; rel=preload; as=style,<https://img1.wsimg.com/gfonts/s/allura/v21/9oRPNYsQpS4zjuA_iwgT.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/amaticsc/v26/TUZyzwprpvBS1izr_vOECuSa.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/arizonia/v21/neIIzCemt4A5qa7mv5WBFqk.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/averiasanslibre/v19/ga6XaxZG_G5OvCf_rt7FH3B6BHLMEdVOEoc.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/cabinsketch/v21/QGYpz_kZZAGCONcK2A4bGOj8mNhI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/francoisone/v21/_Xmr-H4zszafZw3A-KPSZut9wQiU.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/frederickathegreat/v21/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--SjxbI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/jacquesfrancoisshadow/v25/KR1FBtOz8PKTMk-kqdkLVrvR0ECFrB6Pin-2_p8Sun8.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinslab/v26/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Lw.ttf>; rel=preload; as=font; crossorigin,<http Data Raw: Data Ascii:
Apr 19, 2024 15:44:23.570328951 CEST	1200	IN	Data Raw: 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 67 66 6f 6e 74 73 2f 73 2f 6b 61 75 73 68 61 6e 73 63 72 69 70 74 2f 76 31 36 2f 76 6d 38 76 64 52 66 76 58 46 4c 47 33 4f 4c 6e 73 4f 31 35 57 59 53 35 44 47 37 34 77 4e 63 2e 74 74 66 3e 3b Data Ascii: ://img1.wsimg.com/gfonts/s/kaushanscript/v16/vm8vdRfvXFLG3OLnsO15WYS5DG74wNc.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/loveyalikeasister/v20/R70EjzUBlOqPeouhFDfR80-0FhOqJubN-BeL9XxY.ttf>; rel=preload; as=font; cr
Apr 19, 2024 15:44:23.570353985 CEST	496	IN	Data Raw: 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 67 66 6f 6e 74 73 2f 73 2f 73 65 61 77 65 65 64 73 63 72 69 70 74 2f 76 31 35 2f 62 78 36 63 4e 78 36 54 6e 65 32 70 78 4f 41 54 59 45 Data Ascii: crossorigin,<https://img1.wsimg.com/gfonts/s/seaweedscript/v15/bx6cNx6Tne2pxOATYE8C_Rsoe3WO8qM.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/specialelite/v18/XLYgIZbkc4JPUL5CVArUVL0ntnAOTQ.ttf>; rel=preload; as=font
Apr 19, 2024 15:44:23.571304083 CEST	1200	IN	Data Raw: 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 Data Ascii: ssorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://img2.wsimg.com>; rel=preconnect; crossorigin,<https://
Apr 19, 2024 15:44:23.571325064 CEST	496	IN	Data Raw: b5 c2 64 2c a6 2c 94 97 82 a5 05 a3 d6 98 a0 d6 89 8d f6 2f ae 3f 75 c3 e3 ef ef 45 92 0f fb 7b c1 89 83 20 ea 0f 8f bf bf c9 bd 77 b0 2b 0e dd 2f 57 5f d7 d6 f1 48 28 25 27 42 57 f8 67 53 2d aa f1 68 8d 0d d4 ca 21 a5 e8 fb 54 c9 0f 93 f0 58 0d Data Ascii: d,,/?uE{ w+/W_H(%'BWgS-h!TXOyhAgsII5&[-s?^a#W9nIyi$b["~e)&6v?_wA?~si^\|C]:`aYA56W:/'
Apr 19, 2024 15:44:23.571342945 CEST	1200	IN	Data Raw: 10 bb 84 1a e7 d4 42 76 6b 4c 1a 9b 20 bd 94 f1 16 68 b0 d1 a8 b1 09 46 4a 84 09 f3 b7 00 da 04 4a 83 a1 c4 16 f8 01 2e be e7 42 4d 7f 12 cf 56 28 bd b4 55 92 6c 5d 7c 6f 5e a4 9a 31 cb 86 a9 66 d5 98 a4 1e 4f 94 68 6c 81 06 4f a2 28 89 5b 93 d4 Data Ascii: BvkL hFJJ.BMV(Ul]\|o^1fOhlO([k6A2NegvAgva~o`U!\!s6@niT Et4Sn^gwe\|x>>#I?{heIn(~_oQ&g27"]JdA~{=F#
Apr 19, 2024 15:44:23.571369886 CEST	1200	IN	Data Raw: 0e bf 0e 5e 7f f3 2e 39 7d f3 fe d3 a1 d9 fb dc 51 9f 3e 1f a2 38 8b 3b c7 1f 3f 3c a6 cc 5f 5a ff 09 f8 54 c9 30 94 1c 8a ab 0c fc 67 eb c9 4e 79 f4 6c f6 c6 34 f1 d6 98 b8 ad f7 66 1a 5c 7f eb ed 05 ee f9 c7 73 83 7f b6 df f5 3e ed f7 a6 c9 d5 Data Ascii: ^.9}Q>8;?<_ZT0gNyl4f\s>KW\|D'<ad$AMG'>$MpAG'{oA/rt,`rD>kjY@v@x!/NNt (!.T.F~Ea#,(
Apr 19, 2024 15:44:23.571387053 CEST	1200	IN	Data Raw: 32 89 cd 38 b7 0d 68 21 9f 41 ea 52 17 32 c2 30 0c 6c db 27 dc b0 31 0d ca aa 84 11 9d 5b 97 fd 44 48 e4 ae ce a3 1e 12 51 6c d6 4c 01 dd ae fd 81 cb 7d 6c 0a 13 7a 8e 89 b5 27 14 90 11 c3 80 c8 65 d4 31 1c cb a5 66 50 3a 2f d7 5c b2 42 38 74 75 Data Ascii: 28h!AR20l'1[DHQlL}lz'e1fP:/\B8tuu-w81CxA6p`$1F{,#su.OqWc^vFKTc8yR!vlzvT5huu;!Q"=L@KR1-J,*,CqWgRgYqus
Apr 19, 2024 15:44:23.571403980 CEST	496	IN	Data Raw: 67 3d 1a bf 24 cc f5 81 fb b9 46 55 68 50 8e e0 df 84 28 7a 46 12 2c dc f3 12 e5 0b 55 46 8f 64 74 05 d2 24 94 3e f8 c5 0c 7c 1e e0 ed 44 2f 3e cf a6 5b 00 6f 07 32 cc 84 da 02 2c 1c 0d d9 46 75 43 87 66 8d 25 70 58 66 18 ff 5e 1c 8a 71 d7 25 81 Data Ascii: g=$FUhP(zF,UFdt$>\|D/>[o2,FuCf%pXf^q%(\oB:K{ReND0F>v)\tw&?I,ej~BxiTV\1$V6XoAyVUL\|HOwA P) Op{']PPn5@
Apr 19, 2024 15:44:23.571419954 CEST	1200	IN	Data Raw: 50 c6 e9 1d aa b7 e0 d8 93 aa a9 3b 9e bd e5 8d fa 9d ee 5e f6 58 34 f2 44 18 3e 82 c9 71 9e 2d 20 ad 7d 3a 28 88 ee 36 7e 09 8a bf 46 fb 73 73 46 76 4f 28 71 09 8e 53 2f 51 b1 d8 69 e9 dc 77 61 16 5c 89 8c a9 e9 8d b0 f7 f6 cc 67 54 c1 99 88 7d Data Ascii: P;^X4D>q- }:(6~FssFvO(qS/Qiwa\gT}COI6kg`YNtB#DfOshl\|j052uWRW2%Y^tQJ'LLD.m2fqEznI&$-L>W~QR0Iv
Apr 19, 2024 15:44:23.571436882 CEST	837	IN	Data Raw: 6b 1c c0 8f bb d1 d3 5f e7 31 e0 f6 dd 2b b5 75 94 79 78 ab 96 3e 22 58 24 e2 1c 14 2f 26 b8 55 fd b1 d5 b4 6a 7f f6 7f 34 74 c7 b1 ea e4 25 91 28 4f fc 9e f7 df 66 7e 45 1f 52 be db 78 95 44 33 b7 ae 5b 35 5d 81 51 f5 07 ef f9 40 c8 44 96 8d 48 Data Ascii: k_1+uyx>"X$/&Uj4t%(Of~ERxD3[5]Q@DHH:VGGEZuKvfp(P#.d.'lpm/_IYasGusLRNkX`2%,^ko3b{RW0 6pnZW.vx',Gu
Apr 19, 2024 15:44:31.594310045 CEST	485	OUT	GET /become-a-mason.html HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
Apr 19, 2024 15:44:31.774858952 CEST	1200	IN	HTTP/1.1 200 OK link: <http://www.oshawamasons.com/site.css?v=>; rel=preload; as=style,<https://img1.wsimg.com/gfonts/s/allura/v21/9oRPNYsQpS4zjuA_iwgT.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/amaticsc/v26/TUZyzwprpvBS1izr_vOECuSa.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/arizonia/v21/neIIzCemt4A5qa7mv5WBFqk.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/averiasanslibre/v19/ga6XaxZG_G5OvCf_rt7FH3B6BHLMEdVOEoc.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/cabinsketch/v21/QGYpz_kZZAGCONcK2A4bGOj8mNhI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/francoisone/v21/_Xmr-H4zszafZw3A-KPSZut9wQiU.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/frederickathegreat/v21/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--SjxbI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/jacquesfrancoisshadow/v25/KR1FBtOz8PKTMk-kqdkLVrvR0ECFrB6Pin-2_p8Sun8.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinslab/v26/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Lw.ttf>; rel=preload; as=font; crossorigin,<http Data Raw: Data Ascii:
Apr 19, 2024 15:44:33.262919903 CEST	475	OUT	GET /home.html HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
Apr 19, 2024 15:44:33.390650988 CEST	1200	IN	HTTP/1.1 200 OK link: <http://www.oshawamasons.com/site.css?v=>; rel=preload; as=style,<https://img1.wsimg.com/gfonts/s/allura/v21/9oRPNYsQpS4zjuA_iwgT.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/amaticsc/v26/TUZyzwprpvBS1izr_vOECuSa.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/arizonia/v21/neIIzCemt4A5qa7mv5WBFqk.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/averiasanslibre/v19/ga6XaxZG_G5OvCf_rt7FH3B6BHLMEdVOEoc.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/cabinsketch/v21/QGYpz_kZZAGCONcK2A4bGOj8mNhI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/francoisone/v21/_Xmr-H4zszafZw3A-KPSZut9wQiU.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/frederickathegreat/v21/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--SjxbI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/jacquesfrancoisshadow/v25/KR1FBtOz8PKTMk-kqdkLVrvR0ECFrB6Pin-2_p8Sun8.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinslab/v26/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Lw.ttf>; rel=preload; as=font; crossorigin,<http Data Raw: Data Ascii:
Apr 19, 2024 15:44:35.347527027 CEST	484	OUT	GET /about-masonry.html HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
Apr 19, 2024 15:44:35.527731895 CEST	1200	IN	HTTP/1.1 200 OK link: <http://www.oshawamasons.com/site.css?v=>; rel=preload; as=style,<https://img1.wsimg.com/gfonts/s/allura/v21/9oRPNYsQpS4zjuA_iwgT.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/amaticsc/v26/TUZyzwprpvBS1izr_vOECuSa.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/arizonia/v21/neIIzCemt4A5qa7mv5WBFqk.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/averiasanslibre/v19/ga6XaxZG_G5OvCf_rt7FH3B6BHLMEdVOEoc.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/cabinsketch/v21/QGYpz_kZZAGCONcK2A4bGOj8mNhI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/francoisone/v21/_Xmr-H4zszafZw3A-KPSZut9wQiU.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/frederickathegreat/v21/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--SjxbI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/jacquesfrancoisshadow/v25/KR1FBtOz8PKTMk-kqdkLVrvR0ECFrB6Pin-2_p8Sun8.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinslab/v26/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Lw.ttf>; rel=preload; as=font; crossorigin,<http Data Raw: Data Ascii:
Apr 19, 2024 15:44:39.380073071 CEST	483	OUT	GET /trestleboard.html HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
Apr 19, 2024 15:44:39.536679983 CEST	1200	IN	HTTP/1.1 200 OK link: <http://www.oshawamasons.com/site.css?v=>; rel=preload; as=style,<https://img1.wsimg.com/gfonts/s/allura/v21/9oRPNYsQpS4zjuA_iwgT.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/amaticsc/v26/TUZyzwprpvBS1izr_vOECuSa.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/arizonia/v21/neIIzCemt4A5qa7mv5WBFqk.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/averiasanslibre/v19/ga6XaxZG_G5OvCf_rt7FH3B6BHLMEdVOEoc.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/cabinsketch/v21/QGYpz_kZZAGCONcK2A4bGOj8mNhI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/francoisone/v21/_Xmr-H4zszafZw3A-KPSZut9wQiU.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/frederickathegreat/v21/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--SjxbI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/jacquesfrancoisshadow/v25/KR1FBtOz8PKTMk-kqdkLVrvR0ECFrB6Pin-2_p8Sun8.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinslab/v26/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Lw.ttf>; rel=preload; as=font; crossorigin,<http Data Raw: Data Ascii:
Apr 19, 2024 15:44:45.270987988 CEST	481	OUT	GET /contact-us.html HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
Apr 19, 2024 15:44:45.456144094 CEST	1200	IN	HTTP/1.1 200 OK link: <http://www.oshawamasons.com/site.css?v=>; rel=preload; as=style,<https://img1.wsimg.com/gfonts/s/allura/v21/9oRPNYsQpS4zjuA_iwgT.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/amaticsc/v26/TUZyzwprpvBS1izr_vOECuSa.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/arizonia/v21/neIIzCemt4A5qa7mv5WBFqk.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/averiasanslibre/v19/ga6XaxZG_G5OvCf_rt7FH3B6BHLMEdVOEoc.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/cabinsketch/v21/QGYpz_kZZAGCONcK2A4bGOj8mNhI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/francoisone/v21/_Xmr-H4zszafZw3A-KPSZut9wQiU.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/frederickathegreat/v21/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--SjxbI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/jacquesfrancoisshadow/v25/KR1FBtOz8PKTMk-kqdkLVrvR0ECFrB6Pin-2_p8Sun8.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinslab/v26/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Lw.ttf>; rel=preload; as=font; crossorigin,<http Data Raw: Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 15:44:26.228388071 CEST	448	OUT	GET /home.html HTTP/1.1 Host: www.oshawamasonichall.ca Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 19, 2024 15:44:26.414927006 CEST	1200	IN	HTTP/1.1 200 OK link: <http://www.oshawamasonichall.ca/site.css?v=>; rel=preload; as=style,<https://img1.wsimg.com/gfonts/s/allura/v21/9oRPNYsQpS4zjuA_iwgT.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/amaticsc/v26/TUZyzwprpvBS1izr_vOECuSa.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/arizonia/v21/neIIzCemt4A5qa7mv5WBFqk.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/averiasanslibre/v19/ga6XaxZG_G5OvCf_rt7FH3B6BHLMEdVOEoc.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/cabinsketch/v21/QGYpz_kZZAGCONcK2A4bGOj8mNhI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/francoisone/v21/_Xmr-H4zszafZw3A-KPSZut9wQiU.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/frederickathegreat/v21/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--SjxbI.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/jacquesfrancoisshadow/v25/KR1FBtOz8PKTMk-kqdkLVrvR0ECFrB6Pin-2_p8Sun8.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinslab/v26/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Lw.ttf>; rel=preload; as=font; crossorigin,< Data Raw: Data Ascii:
Apr 19, 2024 15:44:26.414949894 CEST	248	IN	Data Raw: 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 67 66 6f 6e 74 73 2f 73 2f 6b 61 75 73 68 61 6e 73 63 72 69 70 74 2f 76 31 36 2f 76 6d 38 76 64 52 66 76 58 46 4c 47 33 4f 4c 6e 73 4f 31 35 57 59 53 35 44 47 37 34 77 4e 63 2e 74 Data Ascii: ttps://img1.wsimg.com/gfonts/s/kaushanscript/v16/vm8vdRfvXFLG3OLnsO15WYS5DG74wNc.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/loveyalikeasister/v20/R70EjzUBlOqPeouhFDfR80-0FhOqJubN-BeL9XxY.ttf>; rel=preload; as=font
Apr 19, 2024 15:44:26.414957047 CEST	1200	IN	Data Raw: 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 67 66 6f 6e 74 73 2f 73 2f 6d 65 72 72 69 77 65 61 74 68 65 72 2f 76 33 30 2f 75 2d 34 34 30 71 79 72 69 51 77 6c 4f 72 68 53 76 6f 77 4b 5f 6c 35 Data Ascii: ssorigin,<https://img1.wsimg.com/gfonts/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZJ.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/offside/v24/HI_KiYMWKa9QrAykc5boQg.ttf>; rel=preload; as=font; crossorigin,<https:
Apr 19, 2024 15:44:26.414966106 CEST	248	IN	Data Raw: 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 67 66 6f 6e 74 73 2f 73 2f 63 69 6e 7a 65 6c 2f 76 32 33 2f 38 76 49 55 37 77 77 36 33 6d 56 75 37 67 74 52 2d 6b 77 4b 78 4e 76 6b 4e Data Ascii: crossorigin,<https://img1.wsimg.com/gfonts/s/cinzel/v23/8vIU7ww63mVu7gtR-kwKxNvkNOjw-tbnfY3lCA.ttf>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/cinzel/v23/8vIU7ww63mVu7gtR-kwKxNvkNOjw-jHgfY3lCA.ttf>; rel=preload; as=fo
Apr 19, 2024 15:44:26.416130066 CEST	1200	IN	Data Raw: 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 66 6f Data Ascii: rossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://img2.wsimg.com>; rel=preconnect; crossorigin,<https:
Apr 19, 2024 15:44:26.416146040 CEST	248	IN	Data Raw: 3a f8 06 6e ef 46 28 bb ff 4b 38 4a 11 76 a9 54 12 94 6e ef 6a b7 94 b3 85 6c 40 39 23 61 4c 5d 8f 64 48 a8 03 c1 23 71 4c 12 69 4c 5d a9 78 b4 09 84 61 42 bc 21 19 31 fe ba a0 33 7d f0 f8 41 00 7f f2 df 06 f8 13 6c 49 95 76 2b 2d 03 ec 37 05 7f Data Ascii: :nF(K8JvTnjl@9#aL]dH#qLiL]xaB!13}AlIv+-7"k/fF/VRU\|?`bmI;JvW=rt\|[Z)&Ok(&z!67GJ0M=8x%'QmV>V\|
Apr 19, 2024 15:44:26.416157961 CEST	1200	IN	Data Raw: 11 0f 72 3c 33 3e 30 20 31 aa 71 4f 9a ba 4e 02 63 d4 14 42 94 a0 0c 32 92 cd 34 ed 4d a5 04 67 c8 1b 24 24 22 21 46 b4 01 f6 08 f8 04 7d ff 1e 5c 22 97 fb 04 d8 1e e1 c8 47 19 b0 6a 72 cd d0 0c 79 4a 3a cd 48 8a 32 76 df 14 48 58 7f e6 d1 e3 b2 Data Ascii: r<3>0 1qONcB24Mg$$"!F}\"GjryJ:H2vHXMypiC9>`qcHI=,UKiRtE5J/T6G0\![7TP[#Oq4h{Mmw[6vVuw;~1MMwEdL2b/AEs*DI.[[E
Apr 19, 2024 15:44:26.416173935 CEST	1200	IN	Data Raw: 5f bb d7 56 3f eb 7f b6 e2 de 95 aa 5d 7f 59 1a 7f 0f 7a 19 e4 6b 28 2b 13 80 3e 72 90 72 c5 90 dc d1 ce 43 4a cc d0 f3 6f ef e5 1d 7c 73 bc 7d be a7 77 e4 40 5c 7e 00 f5 10 1c 23 e4 af 38 21 a0 25 97 c7 84 c0 90 dc 89 e9 9d 4c cc b3 04 a9 e9 a4 Data Ascii: _V?]Yzk(+>rrCJo\|s}w@\~#8!%L>;SJv'E0[DCK&rwvv~q$',iw'wj=<heU^A]UMsk<6bdT''{;ZY~}LkErcK*M-/c(B+EYhu
Apr 19, 2024 15:44:26.416179895 CEST	1200	IN	Data Raw: 36 52 98 a1 84 bd 3a 31 01 e1 7d 98 2f 67 c0 57 74 21 b4 c0 1c 91 8f 14 b6 73 3a 98 76 e4 c5 f8 f4 c4 5f 51 9d 57 2f a6 8c aa 2e 6c c2 38 fe 74 0a 8d 77 13 61 84 c3 47 db 72 5b d0 14 26 d3 1e c8 c7 8c 64 fd 88 84 44 68 3d 3b d1 b3 25 f1 96 ad 2d Data Ascii: 6R:1}/gWt!s:v_QW/.l8twaGr[&dDh=;%-)]vP24%f%b@WGjWuU')Cpzn`68##_i*#x{jUu.oZP2'aT+E)#3.$$#
Apr 19, 2024 15:44:26.416184902 CEST	13	IN	Data Raw: 2f 3e 9e 3b 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: />;0
Apr 19, 2024 15:44:26.420979023 CEST	13	IN	Data Raw: 2f 3e 9e 3b 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: />;0
Apr 19, 2024 15:44:26.464482069 CEST	386	OUT	GET /site.css?v= HTTP/1.1 Host: www.oshawamasonichall.ca Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.oshawamasonichall.ca/home.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
Apr 19, 2024 15:44:26.618371964 CEST	1200	IN	HTTP/1.1 200 OK link: <http://www.oshawamasonichall.ca/site.css?v=>; rel=preload; as=style,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://img2.wsimg.com>; rel=preconnect; crossorigin,<https://img4.wsimg.com>; rel=preconnect; crossorigin,<http://img4.wsimg.com>; rel=preconnect; crossorigin,<http://nebula.wsimg.com>; rel=preconnect; crossorigin cache-control: max-age=30 content-security-policy: frame-ancestors 'self' content-type: text/css vary: Accept-Encoding server: DPS/2.0.0+sha-9385784 x-version: 9385784 x-siteid: us-east-1 set-cookie: dps_site_id=us-east-1; path=/ etag: 93e8243e0a4f24e6f0a85c527d652c2b content-encoding: gzip date: Fri, 19 Apr 2024 13:44:26 GMT keep-alive: timeout=5 transfer-encoding: chunked Data Raw: 41 0d 0a 1f 8b 08 00 00 00 00 00 00 03 0d 0a 31 43 43 35 0d 0a ed 3d 8b 72 db 38 92 bf c2 b3 2b 95 78 96 94 29 4a b2 65 a9 92 5b 27 99 49 94 1d cf 66 e2 d9 3c 3c 97 75 81 24 24 21 06 09 0e 09 c9 92 55 fa 8d ab fb 96 ad fb 9a fd 92 2b 3c 48 02 24 a8 87 c7 33 3b b7 95 51 a6 64 81 40 a3 d1 68 34 ba 1b dd 60 eb 36 f3 9d 00 c4 73 90 ad 6e 51 48 a7 83 b6 eb 3e 1a 4e 21 9a 4c a9 f8 3b 21 19 a2 88 c4 03 e0 67 04 cf 28 1c 92 39 4c c7 98 dc 3a 8b 01 98 51 52 fe 5e 0e b2 20 25 18 0f 7d 10 dc 4c 52 32 8b 43 27 20 98 a4 83 c3 f1 29 fb a8 0f 52 98 40 40 07 e2 6b dd 2a 11 71 04 10 e0 63 a8 e2 54 c7 e3 ce 41 71 08 17 03 77 48 49 32 70 87 18 8e e9 c0 d5 40 25 60 02 9d 80 c4 14 a0 18 a6 0a b8 f5 cf 01 06 59 f6 f7 a7 07 28 20 b1 73 f0 d9 16 05 df 3c 3d b0 64 c9 2a 44 59 82 c1 72 80 62 8c 62 e8 f8 98 04 37 43 09 a2 9b 2c 0a 2a b1 bf 23 90 4e 50 ec 30 44 bc 64 31 fc 46 fe 4e 79 8d 56 07 46 43 0e 43 6d 32 87 29 45 01 c0 0e c0 68 12 0f 28 5c 50 d6 5e a5 51 31 66 d6 c0 e2 ad ea 14 8c 89 93 13 Data Ascii: A1CC5=r8+x)Je['If<<u$$!U+<H$3;Qd@h4`6snQH>N!L;!g(9L:QR^ %}LR2C' )R@@kqcTAqwHI2p@%`Y( s<=dDYrbb7C,*#NP0Dd1FNyVFCCm2)Eh(\P^Q1f
Apr 19, 2024 15:44:29.804814100 CEST	432	OUT	GET /favicon.ico HTTP/1.1 Host: www.oshawamasonichall.ca Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.oshawamasonichall.ca/home.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
Apr 19, 2024 15:44:29.928783894 CEST	1200	IN	HTTP/1.1 404 Not Found content-type: text/html;charset=utf-8 content-length: 964 vary: Accept-Encoding server: DPS/2.0.0+sha-9385784 x-version: 9385784 x-siteid: us-east-1 set-cookie: dps_site_id=us-east-1; path=/ date: Fri, 19 Apr 2024 13:44:29 GMT keep-alive: timeout=5 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 64 70 73 2f 63 73 73 2f 75 78 63 6f 72 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 64 70 73 2f 63 73 73 2f 63 75 73 74 6f 6d 65 72 2d 63 6f 6d 70 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 65 72 72 6f 72 2d 69 6d 67 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 64 70 73 2f 69 6d 61 67 65 73 2f 34 30 34 5f 62 61 63 6b 67 72 6f 75 6e 64 2e 6a 70 67 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 74 65 78 74 2d 63 65 6e 74 65 72 22 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 69 63 6f 6e 20 74 65 78 74 2d 77 61 72 6e 69 6e 67 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 75 78 69 63 6f 6e 20 75 78 69 63 6f 6e 2d 61 6c 65 72 74 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 20 28 34 30 34 20 65 72 72 6f 72 29 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 36 20 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6c 65 61 64 22 3e 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 77 68 61 74 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 73 68 6f 75 6c 64 20 62 65 20 68 65 72 65 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 69 74 65 20 6f 77 6e 65 72 2e 3c 2f 70 3e 0a 20 20 Data Ascii: <!DOCTYPE html><html><head> <title>404 Not Found</title> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link href="//img1.wsimg.com/dps/css/uxcore.css" rel="stylesheet"> <link href="//img1.wsimg.com/dps/css/customer-comp.css" rel="stylesheet"></head><body><div id="error-img"><img src="//img1.wsimg.com/dps/images/404_background.jpg"></div><div class="container text-center" id="error"> <div class="row"> <div class="col-md-12"> <div class="main-icon text-warning"><span class="uxicon uxicon-alert"></span></div> <h1>File not found (404 error)</h1> </div> </div> <div class="row"> <div class="col-md-6 col-md-push-3"> <p class="lead">If you think what you're looking for should be here, please contact the site owner.</p>

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.oshawamasons.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Windows Analysis Report
http://www.oshawamasons.com

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 15:44:36.369400978 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Apr 19, 2024 15:45:03.879582882 CEST	528	OUT	GET /home.html HTTP/1.1 Host: www.oshawamasonichall.ca Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1 If-None-Match: 4c3e8870a1eee4f1f4bbd632579c7095

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 15:44:41.775108099 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Apr 19, 2024 15:45:11.343719006 CEST	427	OUT	GET /site.css?v= HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.oshawamasons.com/home.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1 If-None-Match: a639900744ca915be7592194781e53e1

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 15:45:03.895726919 CEST	528	OUT	GET /home.html HTTP/1.1 Host: www.oshawamasonichall.ca Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1 If-None-Match: 4c3e8870a1eee4f1f4bbd632579c7095
Apr 19, 2024 15:45:04.050626040 CEST	267	IN	HTTP/1.1 304 Not Modified vary: Accept-Encoding server: DPS/2.0.0+sha-9385784 x-version: 9385784 x-siteid: us-east-1 set-cookie: dps_site_id=us-east-1; path=/ etag: 4c3e8870a1eee4f1f4bbd632579c7095 date: Fri, 19 Apr 2024 13:45:03 GMT keep-alive: timeout=5
Apr 19, 2024 15:45:04.107943058 CEST	435	OUT	GET /site.css?v= HTTP/1.1 Host: www.oshawamasonichall.ca Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.oshawamasonichall.ca/home.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1 If-None-Match: 93e8243e0a4f24e6f0a85c527d652c2b
Apr 19, 2024 15:45:04.231268883 CEST	267	IN	HTTP/1.1 304 Not Modified vary: Accept-Encoding server: DPS/2.0.0+sha-9385784 x-version: 9385784 x-siteid: us-east-1 set-cookie: dps_site_id=us-east-1; path=/ etag: 93e8243e0a4f24e6f0a85c527d652c2b date: Fri, 19 Apr 2024 13:45:04 GMT keep-alive: timeout=5

Timestamp	Bytes transferred	Direction	Data
Apr 19, 2024 15:45:11.346476078 CEST	427	OUT	GET /site.css?v= HTTP/1.1 Host: www.oshawamasons.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.oshawamasons.com/home.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1 If-None-Match: a639900744ca915be7592194781e53e1
Apr 19, 2024 15:45:11.472417116 CEST	267	IN	HTTP/1.1 304 Not Modified vary: Accept-Encoding server: DPS/2.0.0+sha-9385784 x-version: 9385784 x-siteid: us-east-1 set-cookie: dps_site_id=us-east-1; path=/ etag: a639900744ca915be7592194781e53e1 date: Fri, 19 Apr 2024 13:45:11 GMT keep-alive: timeout=5

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:44:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 13:44:14 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=148747 Date: Fri, 19 Apr 2024 13:44:14 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:44:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 13:44:15 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=148767 Date: Fri, 19 Apr 2024 13:44:15 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 13:44:15 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:44:19 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=tHYF+dnM+FaXUkB&MD=L8mZ9M9y HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-19 13:44:19 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 40ed13a3-ac83-486c-9373-dcebbcd0f4e4 MS-RequestId: 6e354d06-16bd-49e6-a4b6-090f9c8eec11 MS-CV: 3QIcVVyepk6+VB0O.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:44:18 GMT Connection: close Content-Length: 24490
2024-04-19 13:44:19 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-19 13:44:19 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:44:40 UTC	915	OUT	GET /calendar/embed?src=03b6dc38ef3107c486265d6864bb727165aee22592a00c284c54a822d6819671%40group.calendar.google.com&ctz=America%2FToronto HTTP/1.1 Host: calendar.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.oshawamasons.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:44:40 UTC	1958	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 13:44:40 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: require-trusted-types-for 'script';report-uri /calendar/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-jl0gjCEDn4cxRY1-xXnv9A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /calendar/cspreport Content-Security-Policy: require-trusted-types-for 'script';report-uri /calendar/cspreport Report-To: {"group":"calendar_coop_coep","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/calendar"}]} Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="calendar_coop_coep" Cross-Origin-Opener-Policy-Report-Only: same-origin-allow-popups; report-to="calendar_coop_coep" reporting-endpoints: default="/calendar/web-reports?context=eJzj-sCoobqcyRiIVwLxFiCuqljO1ArE96qXMz0DYskjy5lUgFhQ5DWTmdhrpnAgjgTiT_Kvma40vmYq53zDNAmIH17-xfQBiC_r_mN6BMTTLf8zbQJi7ZM2LG5A3F5ly3LuuR3LSyCWFHRgYRFyZBEG4ox1jizlQLz5tiPLOSA2vePIEgDEtu8dWSKAeI6rM8tqIH4l4cryHYhnznRjuXXBjeVujTvLny53FvFudxa1Re4snUCcyuzB0gDEE0W9WNYA8S-PBaycngtY30QtYH1Ssoj1MxAL8XCceNW5kU1gxbUHH5kAs4lhQA" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Set-Cookie: NID=513=APmEFa1P0z4AU0s_p2vsPCJaN2WRtm2E8jupLNv8d8dAw3d8Me2jp47hxhvSxqJnt8it6uEiyoRxPdgpfTvEpExCaeEr0Lh_DhjuvpRSVPn7WPzX3Ig6HLR0N1IZW4ooyO41nWeDcrTFeIq8nuxB6OJqGScDir9Vy5M5cr9fRng; expires=Sat, 19-Oct-2024 13:44:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:44:40 UTC	1958	IN	Data Raw: 65 37 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 4f 6e 74 61 Data Ascii: e7b<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Onta
2024-04-19 13:44:40 UTC	1756	IN	Data Raw: 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 54 6f 72 6f 6e 74 6f 22 2c 22 74 69 6d 65 7a 6f 6e 65 4c 6f 63 61 6c 69 7a 65 64 22 3a 22 45 61 73 74 65 72 6e 20 54 69 6d 65 20 2d 20 54 6f 72 6f 6e 74 6f 22 2c 22 74 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 4d 73 22 3a 2d 31 34 34 30 30 30 30 30 2c 22 6e 6f 77 4d 73 22 3a 22 31 37 31 33 35 33 34 32 38 30 37 36 39 22 2c 22 74 69 6d 65 7a 6f 6e 65 4e 65 78 74 54 72 61 6e 73 69 74 69 6f 6e 4d 73 22 3a 22 31 37 33 30 36 31 33 36 30 30 30 30 30 22 2c 22 74 69 6d 65 7a 6f 6e 65 4e 65 78 74 4f 66 66 73 65 74 4d 73 22 3a 2d 31 38 30 30 30 30 30 30 2c 22 73 68 6f 77 4e 61 76 69 67 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 73 68 6f 77 44 61 74 65 4d 61 72 6b 65 72 22 3a 74 72 75 65 2c 22 73 68 6f 77 54 61 62 73 22 3a 74 72 Data Ascii: zone":"America/Toronto","timezoneLocalized":"Eastern Time - Toronto","timezoneOffsetMs":-14400000,"nowMs":"1713534280769","timezoneNextTransitionMs":"1730613600000","timezoneNextOffsetMs":-18000000,"showNavigation":true,"showDateMarker":true,"showTabs":tr
2024-04-19 13:44:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:44:41 UTC	1078	OUT	GET /calendar/_/web/calendar-static/_/ss/k=calendar-web.embed.YnXjO0wW19U.L.W.O/am=wA/d=0/rs=ABFko38UoH-5tl5ofVBYwngmVDtsx_5cmQ HTTP/1.1 Host: calendar.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://calendar.google.com/calendar/embed?src=03b6dc38ef3107c486265d6864bb727165aee22592a00c284c54a822d6819671%40group.calendar.google.com&ctz=America%2FToronto Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=APmEFa1P0z4AU0s_p2vsPCJaN2WRtm2E8jupLNv8d8dAw3d8Me2jp47hxhvSxqJnt8it6uEiyoRxPdgpfTvEpExCaeEr0Lh_DhjuvpRSVPn7WPzX3Ig6HLR0N1IZW4ooyO41nWeDcrTFeIq8nuxB6OJqGScDir9Vy5M5cr9fRng
2024-04-19 13:44:41 UTC	763	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/calendar-dev Cross-Origin-Opener-Policy: same-origin; report-to="calendar-dev" Report-To: {"group":"calendar-dev","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/calendar-dev"}]} Content-Length: 21655 Date: Fri, 19 Apr 2024 13:44:41 GMT Expires: Sat, 19 Apr 2025 13:44:41 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 02 Aug 2023 09:00:56 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:44:41 UTC	492	IN	Data Raw: 2e 61 67 65 6e 64 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 7d 2e 61 67 65 6e 64 61 2d 70 61 64 64 69 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 70 78 3b 68 65 69 67 68 74 3a 36 70 78 7d 2e 61 67 65 6e 64 61 20 2e 73 63 72 6f 6c 6c 62 6f 78 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 20 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 20 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 62 63 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 70 78 7d 2e 61 Data Ascii: .agenda{background:white}.agenda-padding{font-size:1px;line-height:1px;height:6px}.agenda .scrollbox{overflow:auto;overflow-x:hidden;overflow-y:auto;border-top:0 none;border-left:0 none;border-bottom:1px solid #bcf;background-color:white;margin-top:6px}.a
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 72 61 70 7d 2e 61 67 65 6e 64 61 20 2e 65 76 65 6e 74 2d 64 65 74 61 69 6c 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 67 65 6e 64 61 20 2e 65 76 65 6e 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 77 72 61 70 7d 2e 61 67 65 6e 64 61 20 2e 65 76 65 6e 74 2d 64 65 74 61 69 6c 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 20 30 20 2e 33 65 6d 20 30 7d 2e 61 67 65 6e 64 61 20 2e 65 76 65 6e 74 2d 64 65 74 61 69 6c 73 2c 2e 61 67 65 6e 64 61 20 2e 65 76 65 6e 74 2d 73 75 6d 6d 61 72 79 2c 2e 61 67 65 6e 64 61 20 2e 65 76 65 6e 74 2d 73 75 6d 6d 61 72 79 2d 65 78 Data Ascii: rap}.agenda .event-details{display:block;float:none;clear:both;cursor:default;padding:0}.agenda .event-description{white-space:pre-wrap}.agenda .event-details-inner{padding:0 0 .3em 0}.agenda .event-details,.agenda .event-summary,.agenda .event-summary-ex
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 61 67 65 6e 64 61 2d 77 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 70 78 7d 2e 61 67 65 6e 64 61 2d 6d 6f 72 65 7b 63 6f 6c 6f 72 3a 23 32 30 63 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 61 67 65 6e 64 61 20 2e 75 6e 64 65 72 66 6c 6f 77 2d 62 6f 74 2c 2e 61 67 65 6e 64 61 20 2e 75 6e 64 65 72 66 6c 6f 77 2d 74 6f 70 7b 63 6f 6c 6f 72 3a 23 36 36 36 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 2e 61 67 65 6e 64 61 20 2e 65 76 65 6e 74 2d 6c 69 6e 6b 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 65 6d 7d 2e 62 75 62 62 6c 65 7b 70 6f 73 69 74 69 6f Data Ascii: cal-align:top}.agenda-wc{margin-bottom:-3px}.agenda-more{color:#20c;cursor:pointer;text-decoration:underline;white-space:nowrap}.agenda .underflow-bot,.agenda .underflow-top{color:#666;font-style:italic}.agenda .event-links{margin-left:7em}.bubble{positio
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 70 72 6f 6e 67 20 2e 62 75 62 62 6c 65 2d 73 70 72 69 74 65 7b 6c 65 66 74 3a 2d 35 32 70 78 3b 74 6f 70 3a 2d 32 34 70 78 7d 2e 62 75 62 62 6c 65 20 2e 65 76 65 6e 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 77 72 61 70 7d 2e 62 75 62 62 6c 65 2d 6c 69 67 68 74 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 36 36 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6f 70 61 63 69 74 79 3a 30 2e 35 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 35 30 29 7d 2e 63 61 6c 65 6e 64 61 72 2d 6c 69 73 74 20 69 6e 70 75 74 7b 64 69 73 70 6c 61 79 3a 69 Data Ascii: px;overflow:hidden}.prong .bubble-sprite{left:-52px;top:-24px}.bubble .event-description{white-space:pre-wrap}.bubble-lightbox{background:#666;position:fixed;left:0;top:0;right:0;bottom:0;opacity:0.5;filter:alpha(opacity=50)}.calendar-list input{display:i
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 61 63 69 74 79 3d 34 30 29 7d 2e 63 62 72 64 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 63 62 72 64 20 64 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 63 74 7b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 20 64 6f 74 74 65 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 32 70 78 20 32 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 63 62 31 2c 2e 63 62 32 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 63 62 31 7b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 30 20 31 Data Ascii: acity=40)}.cbrd{border:1px solid;-webkit-border-radius:3px}.cbrd dt{margin-top:0}.ct{height:0;overflow:hidden;border-style:solid dotted;border-width:0 2px 2px;border-color:transparent}.cb1,.cb2{border-style:solid;overflow:hidden}.cb1{height:1px;margin:0 1
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 38 70 78 20 2d 35 30 70 78 7d 2e 63 69 63 2d 6e 6f 70 72 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 36 70 78 20 2d 35 30 70 78 7d 2e 63 69 63 2d 74 6d 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 38 70 78 20 2d 35 37 70 78 7d 2e 63 69 63 2d 72 63 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 37 70 78 20 2d 35 30 70 78 7d 2e 63 69 63 2d 73 70 63 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 37 70 78 20 2d 35 37 70 78 7d 2e 63 69 63 2d 70 72 69 76 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 31 70 78 20 2d 36 34 70 78 7d 2e 63 69 63 2d 70 72 73 6e 2d 69 6e 76 7b 62 61 63 6b 67 72 6f 75 6e Data Ascii: d-position:-28px -50px}.cic-noprs{background-position:-46px -50px}.cic-tmr{background-position:-28px -57px}.cic-rcr{background-position:-37px -50px}.cic-spcl{background-position:-37px -57px}.cic-priv{background-position:-11px -64px}.cic-prsn-inv{backgroun
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 3a 31 30 30 25 7d 2e 63 6c 6f 63 7b 66 6f 6e 74 3a 38 30 25 2f 6e 6f 72 6d 61 6c 20 56 65 72 64 61 6e 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 63 61 6c 65 6e 64 61 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 76 69 65 77 2d 63 61 70 2c 2e 76 69 65 77 2d 63 6f 6e 74 61 69 6e 65 72 2d 62 6f 72 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 33 65 39 66 66 7d 2e 76 69 65 77 2d 63 6f 6e 74 61 69 6e 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 76 69 65 77 2d 63 Data Ascii: :100%}.cloc{font:80%/normal Verdana,sans-serif;line-height:1}.calendar-container{margin:0;padding:0;font-size-adjust:none;position:relative}.view-cap,.view-container-border{background-color:#e3e9ff}.view-container{overflow:hidden;position:relative}.view-c
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 72 61 74 6f 72 7b 68 65 69 67 68 74 3a 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 2e 62 75 62 62 6c 65 20 2e 65 76 65 6e 74 2d 77 68 65 72 65 2c 2e 62 75 62 62 6c 65 20 2e 65 76 65 6e 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 39 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 2a 20 68 74 6d 6c 20 2e 65 76 65 6e 74 2d 64 65 74 61 69 6c 2d 69 74 65 6d 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 33 70 78 7d 2a 20 68 74 6d 6c 20 2e 65 76 65 6e 74 2d 77 68 65 6e 2c 2a 20 68 74 6d Data Ascii: rator{height:1px;line-height:0px;font-size:0;width:100%;margin-top:10px;margin-bottom:5px}.bubble .event-where,.bubble .event-description{max-height:190px;overflow:auto;overflow-x:hidden}* html .event-detail-item{margin-right:-3px}* html .event-when,* htm
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 38 30 38 30 38 30 7d 2e 63 61 6c 65 6e 64 61 72 2d 6c 69 73 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 70 61 64 64 69 6e 67 3a 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 70 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 67 72 61 79 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 77 69 64 74 68 3a 31 34 65 6d 7d 2e 63 61 6c 65 6e 64 61 72 2d 6e 61 76 20 69 6d 67 7b 77 69 64 74 68 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 31 34 70 78 7d 2e 63 61 6c 65 6e 64 61 72 2d 6c 69 73 74 20 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 30 7d 2e 63 61 6c Data Ascii: ;border:1px solid #808080}.calendar-list{font-family:Arial,sans-serif;padding:2px;font-size:9pt;border:1px solid gray;background-color:white;width:14em}.calendar-nav img{width:15px;height:14px}.calendar-list .subscribeButton{width:100%;margin:2px 0 0}.cal
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 6f 67 6c 65 63 61 6c 65 6e 64 61 72 2f 69 6d 61 67 65 73 2f 63 6f 6d 62 69 6e 65 64 5f 76 32 32 2e 70 6e 67 29 7d 2e 6e 61 76 46 6f 72 77 61 72 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 31 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 63 61 6c 65 6e 64 61 72 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 6f 6f 67 6c 65 63 61 6c 65 6e 64 61 72 2f 69 6d 61 67 65 73 2f 63 6f 6d 62 69 6e 65 64 5f 76 32 32 2e 70 6e 67 29 7d 2e 72 74 6c 20 2e 6e 61 76 42 61 63 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 31 70 78 20 30 7d 2e 72 74 6c 20 2e 6e 61 76 46 6f 72 77 61 72 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 31 70 78 20 2d 31 37 70 78 7d Data Ascii: oglecalendar/images/combined_v22.png)}.navForward{background-position:-241px 0;background-image:url(//calendar.google.com/googlecalendar/images/combined_v22.png)}.rtl .navBack{background-position:-241px 0}.rtl .navForward{background-position:-241px -17px}

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:44:41 UTC	1076	OUT	GET /calendar/_/web/calendar-static/_/js/k=calendar-web.embed.en.qRD766014q0.2020.O/am=wA/d=1/rs=ABFko39-Tt5y1g8ZgtLgcbD2LzFtpNEndg/m=embed HTTP/1.1 Host: calendar.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://calendar.google.com/calendar/embed?src=03b6dc38ef3107c486265d6864bb727165aee22592a00c284c54a822d6819671%40group.calendar.google.com&ctz=America%2FToronto Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=APmEFa1P0z4AU0s_p2vsPCJaN2WRtm2E8jupLNv8d8dAw3d8Me2jp47hxhvSxqJnt8it6uEiyoRxPdgpfTvEpExCaeEr0Lh_DhjuvpRSVPn7WPzX3Ig6HLR0N1IZW4ooyO41nWeDcrTFeIq8nuxB6OJqGScDir9Vy5M5cr9fRng
2024-04-19 13:44:41 UTC	771	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/calendar-dev Cross-Origin-Opener-Policy: same-origin; report-to="calendar-dev" Report-To: {"group":"calendar-dev","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/calendar-dev"}]} Content-Length: 216962 Date: Fri, 19 Apr 2024 13:44:41 GMT Expires: Sat, 19 Apr 2025 13:44:41 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 08 Apr 2024 15:14:47 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:44:41 UTC	484	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 67 63 61 6c 3d 74 68 69 73 2e 67 63 61 6c 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 63 30 2c 20 5d 29 3b 0a 2f 2a 0a 0a 20 43 6f 70 79 Data Ascii: "use strict";this.gcal=this.gcal\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0xc0, ]);/* Copy
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 63 65 28 74 68 69 73 2c 62 61 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 2c 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 2c 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 63 61 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 2c 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6d 61 3f 6e 61 3f 6e Data Ascii: ce(this,ba);else{const c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)},ha=function(a){ca.setTimeout(()=>{throw a;},0)},ka=function(){var a=ca.navigator;return a&&(a=a.userAgent)?a:""},oa=function(a){return ma?na?n
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 7c 30 3b 61 2e 6c 65 6e 67 74 68 3d 65 2b 66 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 61 5b 65 2b 67 5d 3d 64 5b 67 5d 7d 65 6c 73 65 20 61 2e 70 75 73 68 28 64 29 7d 7d 2c 50 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 4f 61 3b 6c 65 74 20 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 2c 66 3b 66 6f 72 28 3b 64 3c 65 3b 29 7b 63 6f 6e 73 74 20 67 3d 64 2b 28 65 2d 64 3e 3e 3e 31 29 3b 6c 65 74 20 68 3b 68 3d 63 28 62 2c 61 5b 67 5d 29 3b 30 3c 68 3f 64 3d 67 2b 31 3a 28 65 3d 67 2c 66 3d 21 68 29 7d 72 65 74 75 72 6e 20 66 3f 0a 64 3a 2d 64 2d 31 7d 2c 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 6f 72 74 28 62 7c 7c 4f 61 29 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e Data Ascii: \|0;a.length=e+f;for(let g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}},Pa=function(a,b){var c=Oa;let d=0,e=a.length,f;for(;d<e;){const g=d+(e-d>>>1);let h;h=c(b,a[g]);0<h?d=g+1:(e=g,f=!h)}return f?d:-d-1},Qa=function(a,b){a.sort(b\|\|Oa)},Oa=function(a,b){return
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 28 61 2c 65 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 61 29 7d 7d 2c 6d 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6c 62 3d 62 3b 61 3d 6e 65 77 20 61 28 62 29 3b 6c 62 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 61 7d 2c 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 6c 62 29 3b 6c 62 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 3d 3d 61 29 7b 76 61 72 20 64 3d 39 36 3b 63 3f 28 61 3d 5b 63 5d 2c 64 7c 3d 35 31 32 29 3a 61 3d 5b 5d 3b 62 26 26 28 64 3d 64 26 2d 31 36 37 36 30 38 33 33 7c 28 62 26 31 30 32 33 29 3c 3c 31 34 29 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6c 22 29 3b 64 3d 61 5b 66 62 5d 7c 30 3b 69 66 28 64 26 Data Ascii: (a,e);return new b(a)}},mb=function(a,b){lb=b;a=new a(b);lb=void 0;return a},ob=function(a,b,c){null==a&&(a=lb);lb=void 0;if(null==a){var d=96;c?(a=[c],d\|=512):a=[];b&&(d=d&-16760833\|(b&1023)<<14)}else{if(!Array.isArray(a))throw Error("l");d=a[fb]\|0;if(d&
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 7c 30 29 26 32 3f 61 3a 76 62 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 3d 3d 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 65 62 28 61 29 29 7b 63 6f 6e 73 74 20 66 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 67 20 69 6e 20 61 29 66 5b 67 5d 3d 77 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 3d 66 7d 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 76 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 64 7c 7c 63 3f 61 5b 66 62 5d 7c 30 3a 30 3b 64 3d 64 3f 21 21 28 66 26 33 32 29 3a 76 6f 69 64 20 30 3b 61 3d 56 61 28 61 29 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 61 5b 67 5d 3d 0a 77 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 63 26 26 63 28 66 2c 61 Data Ascii: \|0)&2?a:vb(a,b,c,void 0!==d,e);else if(eb(a)){const f={};for(let g in a)f[g]=wb(a[g],b,c,d,e);a=f}else a=b(a,d);return a}},vb=function(a,b,c,d,e){const f=d\|\|c?a[fb]\|0:0;d=d?!!(f&32):void 0;a=Va(a);for(let g=0;g<a.length;g++)a[g]=wb(a[g],b,c,d,e);c&&c(f,a
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 3d 57 61 28 61 2c 32 2c 21 21 28 32 26 62 29 29 3b 61 3d 57 61 28 61 2c 33 32 2c 21 30 29 3b 72 65 74 75 72 6e 20 61 3d 57 61 28 61 2c 32 30 34 38 2c 21 31 29 7d 2c 47 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 21 31 3b 33 32 26 62 26 26 63 7c 7c 28 61 3d 57 61 28 61 2c 33 32 2c 21 31 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 48 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 62 7d 2c 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 50 62 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 62 65 3b 63 6f 6e 73 74 20 65 3d 28 63 3f 61 2e 50 3a 62 29 5b 66 62 5d 3b 61 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 62 3b 6c 65 Data Ascii: =Wa(a,2,!!(2&b));a=Wa(a,32,!0);return a=Wa(a,2048,!1)},Gb=function(a,b){var c=!1;32&b&&c\|\|(a=Wa(a,32,!1));return a},Hb=function(a,b){return null!=a?a:b},Qb=function(a,b,c){var d=Pb?void 0:a.constructor.be;const e=(c?a.P:b)[fb];a=b.length;if(!a)return b;le
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 69 66 28 31 3d 3d 62 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 72 65 74 75 72 6e 20 5a 62 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3b 63 6f 6e 73 74 20 63 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 61 72 67 75 6d 65 6e 74 73 5b 64 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 63 7d 2c 62 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 5b 5d 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 6c 65 74 20 65 3d 30 2c 66 3d 5b 5d 2c 67 2c 68 2c 6c 3d 30 3b 66 6f 72 28 3b 6c 3c 64 3b 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 30 3a 76 61 72 20 6d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3c 22 2c 0a 6c 29 3b 69 66 28 Data Ascii: .length;if(1==b&&Array.isArray(arguments[0]))return Zb.apply(null,arguments[0]);const c={};for(let d=0;d<b;d++)c[arguments[d]]=!0;return c},bc=function(a,b){const c=[],d=a.length;let e=0,f=[],g,h,l=0;for(;l<d;){switch(e){case 0:var m=a.indexOf("<",l);if(
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 0a 62 29 7b 62 3d 62 7c 7c 6f 63 28 29 3b 61 26 26 61 2e 67 3f 62 3d 61 2e 67 28 29 3a 28 62 3d 70 63 28 62 2e 68 2c 22 44 49 56 22 29 2c 61 3d 64 63 28 61 29 2c 63 63 28 62 2c 61 29 29 3b 72 65 74 75 72 6e 20 31 3d 3d 62 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 61 3d 62 2e 66 69 72 73 74 43 68 69 6c 64 2c 31 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 3f 61 3a 62 7d 2c 64 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 77 63 28 61 29 3f 61 2e 6d 63 26 26 28 61 3d 61 2e 6d 63 28 29 2c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 79 63 29 3f 61 3a 78 63 28 22 7a 53 6f 79 7a 22 29 3a 78 63 28 53 74 72 69 6e 67 28 61 29 29 7d 2c 50 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 62 3d 30 2c 63 Data Ascii: function(a,b){b=b\|\|oc();a&&a.g?b=a.g():(b=pc(b.h,"DIV"),a=dc(a),cc(b,a));return 1==b.childNodes.length&&(a=b.firstChild,1==a.nodeType)?a:b},dc=function(a){return wc(a)?a.mc&&(a=a.mc(),a instanceof yc)?a:xc("zSoyz"):xc(String(a))},Pc=function(a){let b=0,c
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 22 20 22 2b 62 29 29 7d 2c 6b 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 5b 61 2e 43 2c 69 64 28 61 2e 6d 6f 6e 74 68 29 2c 69 64 28 61 2e 76 29 5d 2e 6a 6f 69 6e 28 22 2d 22 29 3b 61 3d 5b 69 64 28 61 2e 68 6f 75 72 29 2c 69 64 28 61 2e 6d 69 6e 75 74 65 29 2c 69 64 28 61 2e 73 65 63 6f 6e 64 29 5d 2e 6a 6f 69 6e 28 22 3a 22 29 3b 76 61 72 20 64 3d 22 22 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 62 29 7b 69 66 28 30 3d 3d 62 29 62 3d 22 5a 22 3b 65 6c 73 65 20 69 66 28 64 3d 6a 64 5b 62 5d 29 62 3d 64 3b 65 6c 73 65 7b 30 3e 62 3f 28 64 3d 22 2d 22 2c 62 2a 3d 2d 31 29 3a 64 3d 22 2b 22 3b 76 61 72 20 65 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 62 2f 36 30 29 3b 31 30 3e 65 26 26 28 65 3d 60 30 24 7b 65 7d 60 29 3b 62 25 3d 36 30 3b Data Ascii: " "+b))},kd=function(a,b){const c=[a.C,id(a.month),id(a.v)].join("-");a=[id(a.hour),id(a.minute),id(a.second)].join(":");var d="";if(void 0!==b){if(0==b)b="Z";else if(d=jd[b])b=d;else{0>b?(d="-",b*=-1):d="+";var e=Math.floor(b/60);10>e&&(e=`0${e}`);b%=60;
2024-04-19 13:44:41 UTC	1255	IN	Data Raw: 65 6b 56 69 65 77 35 22 29 2c 61 3d 21 28 76 6f 69 64 20 30 21 3d 3d 61 26 26 22 74 72 75 65 22 3d 3d 3d 61 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 0a 48 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 4c 62 7c 7c 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 4c 62 3d 7b 7d 29 3b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 4c 62 5b 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 28 29 5d 3d 74 68 69 73 7d 2c 49 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 Data Ascii: ekView5"),a=!(void 0!==a&&"true"===a));return a},Hd=function(a,b){this.g=b;this.constructor.Lb\|\|(this.constructor.Lb={});this.constructor.Lb[this.toString()]=this},Id=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0